Analysis
-
max time kernel
1792s -
max time network
1719s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
22-03-2023 10:38
Static task
static1
Behavioral task
behavioral1
Sample
avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe
Resource
win10v2004-20230221-en
General
-
Target
avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe
-
Size
6.2MB
-
MD5
127cd4a0396ecfbf0471a58a70e6d6e2
-
SHA1
1bbd1ed6ef68a5ad51fcb5e14fb15c52a0f2978a
-
SHA256
20409aec3518613040544af55698c4557c176266d9adb0a46c53b581fcfc5f6b
-
SHA512
73c8f47208a21bddede88734d9a57653a254d57db50907e85ba1c3471d0647d67392b6661ceef661393d919916d2c8f6bb61d2f44a8349d9f8a7de724e9ecc3a
-
SSDEEP
49152:7bs0R1yvaOQ/b5HEYhOXXpDYALLRENU9Qd+bukinQhJRHxjCOdJdKcKrgDQMHLZv:PYQ/bpECOXWU9w6ZiQFHEdXhSPX
Malware Config
Signatures
-
Creates new service(s) 1 TTPs
-
Downloads MZ/PE file
-
Modifies Installed Components in the registry 2 TTPs 7 IoCs
Processes:
setup.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\111.0.1661.44\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" setup.exe -
Sets file execution options in registry 2 TTPs 4 IoCs
Processes:
MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe MicrosoftEdgeUpdate.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe\DisableExceptionChainValidation = "0" MicrosoftEdgeUpdate.exe -
Sets service image path in registry 2 TTPs 1 IoCs
Processes:
Avira.OptimizerHost.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\AviraOptimizerHost\ImagePath = "\"C:\\Program Files (x86)\\Avira\\Optimizer Host\\Avira.OptimizerHost.exe\"" Avira.OptimizerHost.exe -
Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
MicrosoftEdgeUpdate.exeavira_system_speedup.tmpdescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation avira_system_speedup.tmp -
Executes dropped EXE 48 IoCs
Processes:
Avira.Spotlight.Bootstrapper.exeACSSignedIC.exeMicrosoftEdgeWebView2RuntimeInstallerX64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeWebview_X64_111.0.1661.51.exesetup.exeMicrosoftEdgeUpdate.exeavira_spotlight_setup_wdp.exeavira_spotlight_setup_wdp.tmpavira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exeAvira.Spotlight.Bootstrapper.exeACSSignedIC.exeAvira.Spotlight.Bootstrapper.ReportingTool.exeavira_system_speedup.exeavira_system_speedup.tmpAvira.SystemSpeedup.Core.Common.Starter.exeAvira.SystemSpeedup.Maintenance.exeAvira.SystemSpeedup.Maintenance.exeAvira_Optimizer_Host.exeAvira_Optimizer_Host.tmpAvira.OptimizerHost.exeAvira.OptimizerHost.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateSetup_X86_1.3.173.51.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdge_X64_111.0.1661.44.exesetup.exesetup.exeMicrosoftEdgeUpdate.exepid process 2144 Avira.Spotlight.Bootstrapper.exe 3332 ACSSignedIC.exe 7284 MicrosoftEdgeWebView2RuntimeInstallerX64.exe 8048 MicrosoftEdgeUpdate.exe 6204 MicrosoftEdgeUpdate.exe 4536 MicrosoftEdgeUpdate.exe 4956 MicrosoftEdgeUpdateComRegisterShell64.exe 7016 MicrosoftEdgeUpdateComRegisterShell64.exe 6972 MicrosoftEdgeUpdateComRegisterShell64.exe 6248 MicrosoftEdgeUpdate.exe 3424 MicrosoftEdgeUpdate.exe 6176 MicrosoftEdgeUpdate.exe 4940 MicrosoftEdgeUpdate.exe 5232 MicrosoftEdgeWebview_X64_111.0.1661.51.exe 6708 setup.exe 7064 MicrosoftEdgeUpdate.exe 7752 avira_spotlight_setup_wdp.exe 2416 avira_spotlight_setup_wdp.tmp 6004 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe 6504 Avira.Spotlight.Bootstrapper.exe 2312 ACSSignedIC.exe 2516 Avira.Spotlight.Bootstrapper.ReportingTool.exe 6180 avira_system_speedup.exe 7588 avira_system_speedup.tmp 4648 Avira.SystemSpeedup.Core.Common.Starter.exe 3640 Avira.SystemSpeedup.Maintenance.exe 7048 Avira.SystemSpeedup.Maintenance.exe 3820 Avira_Optimizer_Host.exe 7708 Avira_Optimizer_Host.tmp 6784 Avira.OptimizerHost.exe 7448 Avira.OptimizerHost.exe 6680 MicrosoftEdgeUpdate.exe 8088 MicrosoftEdgeUpdate.exe 6208 MicrosoftEdgeUpdateSetup_X86_1.3.173.51.exe 4924 MicrosoftEdgeUpdate.exe 2484 MicrosoftEdgeUpdate.exe 7824 MicrosoftEdgeUpdate.exe 4340 MicrosoftEdgeUpdate.exe 1404 MicrosoftEdgeUpdateComRegisterShell64.exe 2432 MicrosoftEdgeUpdateComRegisterShell64.exe 456 MicrosoftEdgeUpdateComRegisterShell64.exe 5056 MicrosoftEdgeUpdate.exe 3452 MicrosoftEdgeUpdate.exe 4776 MicrosoftEdgeUpdate.exe 6272 MicrosoftEdge_X64_111.0.1661.44.exe 4540 setup.exe 7400 setup.exe 5460 MicrosoftEdgeUpdate.exe -
Loads dropped DLL 64 IoCs
Processes:
Avira.Spotlight.Bootstrapper.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeAvira.Spotlight.Bootstrapper.exepid process 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 8048 MicrosoftEdgeUpdate.exe 6204 MicrosoftEdgeUpdate.exe 4536 MicrosoftEdgeUpdate.exe 4956 MicrosoftEdgeUpdateComRegisterShell64.exe 4536 MicrosoftEdgeUpdate.exe 7016 MicrosoftEdgeUpdateComRegisterShell64.exe 4536 MicrosoftEdgeUpdate.exe 6972 MicrosoftEdgeUpdateComRegisterShell64.exe 4536 MicrosoftEdgeUpdate.exe 6248 MicrosoftEdgeUpdate.exe 3424 MicrosoftEdgeUpdate.exe 6176 MicrosoftEdgeUpdate.exe 6176 MicrosoftEdgeUpdate.exe 3424 MicrosoftEdgeUpdate.exe 4940 MicrosoftEdgeUpdate.exe 7064 MicrosoftEdgeUpdate.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe 6504 Avira.Spotlight.Bootstrapper.exe -
Registers COM server for autorun 1 TTPs 64 IoCs
Processes:
MicrosoftEdgeUpdateComRegisterShell64.exeRegAsm.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exesetup.exeMicrosoftEdgeUpdateComRegisterShell64.exedescription ioc process Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{14CB2BD0-2375-3D10-9B5D-5E18865C8959}\InprocServer32\ = "mscoree.dll" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{700866BB-C8E9-3E71-B359-ABB28BAED0E8}\InprocServer32\RuntimeVersion = "v4.0.30319" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\111.0.1661.44\\notification_helper.exe" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{700866BB-C8E9-3E71-B359-ABB28BAED0E8}\InprocServer32\Class = "Avira.SystemSpeedup.UI.ShellExtension.SystemSpeedupContextMenu+SystemSpeedupFoldersMenu" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{14CB2BD0-2375-3D10-9B5D-5E18865C8959}\InprocServer32\RuntimeVersion = "v4.0.30319" RegAsm.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{700866BB-C8E9-3E71-B359-ABB28BAED0E8}\InprocServer32\ThreadingModel = "Both" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0CAB5786-30E8-3185-9B3B-CCEFBF1B8AFE}\InprocServer32\1.0.0.0\RuntimeVersion = "v4.0.30319" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\INPROCSERVER32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{14CB2BD0-2375-3D10-9B5D-5E18865C8959}\InprocServer32\1.0.0.0\Class = "Avira.SystemSpeedup.UI.ShellExtension.SystemSpeedupContextMenu+SystemSpeedupFilesMenu" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{14CB2BD0-2375-3D10-9B5D-5E18865C8959}\InprocServer32\1.0.0.0\RuntimeVersion = "v4.0.30319" RegAsm.exe Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0CAB5786-30E8-3185-9B3B-CCEFBF1B8AFE}\InprocServer32\ = "mscoree.dll" RegAsm.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{700866BB-C8E9-3E71-B359-ABB28BAED0E8}\InprocServer32\1.0.0.0 RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{700866BB-C8E9-3E71-B359-ABB28BAED0E8}\InprocServer32\1.0.0.0\RuntimeVersion = "v4.0.30319" RegAsm.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\INPROCSERVER32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{14CB2BD0-2375-3D10-9B5D-5E18865C8959}\InprocServer32\CodeBase = "file:///C:/Program Files (x86)/Avira/System Speedup/Avira.SystemSpeedup.UI.ShellExtension.DLL" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B896F458-C5BF-43D0-8982-B94F7A11B9C7}\InProcServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\111.0.1661.44\\notification_helper.exe\"" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\InprocServer32\ThreadingModel = "Apartment" setup.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32 setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.49\\psmachine_64.dll" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0CAB5786-30E8-3185-9B3B-CCEFBF1B8AFE}\InprocServer32 RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32 MicrosoftEdgeUpdateComRegisterShell64.exe -
Adds Run key to start application 2 TTPs 2 IoCs
Processes:
setup.exesetup.exedescription ioc process Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce setup.exe -
Checks for any installed AV software in registry 1 TTPs 64 IoCs
Processes:
Avira.SystemSpeedup.Maintenance.exeavira_spotlight_setup_wdp.tmpavira_system_speedup.tmpAvira.SystemSpeedup.Maintenance.exeAvira.Spotlight.Bootstrapper.exeAvira_Optimizer_Host.tmpAvira.Spotlight.Bootstrapper.exedescription ioc process Set value (data) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Adress Avira.SystemSpeedup.Maintenance.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\UserInterface avira_spotlight_setup_wdp.tmp Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\JunkCleaner avira_system_speedup.tmp Set value (data) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Adress Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\LastScan Avira.SystemSpeedup.Maintenance.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Avira\Speedup\BootOptimizer Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallAntivirus Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "57" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\LicenseType = "std" avira_system_speedup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\OptimizerHost\Version = "1.3.0.21" Avira_Optimizer_Host.tmp Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Security\ConnectServices Avira.Spotlight.Bootstrapper.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\Features avira_spotlight_setup_wdp.tmp Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\Power Profiles avira_system_speedup.tmp Key created \REGISTRY\MACHINE\Software\WOW6432Node\Avira\OptimizerHost Avira_Optimizer_Host.tmp Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\General\ avira_system_speedup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\Features\IntegratedOpswatSdk = "true" Avira.Spotlight.Bootstrapper.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security avira_spotlight_setup_wdp.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "61" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "69" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\UserInterface\UiLanguage = "fr-fr" avira_spotlight_setup_wdp.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\DownloadSource = "wdp" avira_spotlight_setup_wdp.tmp Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\UpdateBridgeEnvironment Avira.Spotlight.Bootstrapper.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\SpotlightMode = "1" avira_system_speedup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "2" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "3" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "34" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "52" Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Name Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\BootOptimizer\StartDelay Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\LastScan Avira.SystemSpeedup.Maintenance.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Type = 5300110050005d00 Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\Expiration Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\UILanguage Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Value Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Type Avira.SystemSpeedup.Maintenance.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Check = 5700020004000c005400540001005a005c00090000005400550055005e00520008005000050057000d005a0053005b005c000400570006000000540001000700 Avira.SystemSpeedup.Maintenance.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "76" Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\UserInterface avira_system_speedup.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\OptimizerHost avira_system_speedup.tmp Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\RTO avira_system_speedup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\MixpanelCommonProperties = "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" Avira.Spotlight.Bootstrapper.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\OptimizerHost\Clients avira_system_speedup.tmp Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\TooltipShowDelay Avira.SystemSpeedup.Maintenance.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\Download = "wdp" avira_system_speedup.tmp Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\Uninstalled Avira.SystemSpeedup.Maintenance.exe Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\Power Profiles Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\BootOptimizer\CleanupDelayed Avira.SystemSpeedup.Maintenance.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\GeneralSettings avira_spotlight_setup_wdp.tmp Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security avira_spotlight_setup_wdp.tmp Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\Bundle = "aps10" avira_system_speedup.tmp Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\General Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Number Avira.SystemSpeedup.Maintenance.exe Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\RegistryCleaner Avira.SystemSpeedup.Maintenance.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\UpdateBridgeEnvironment Avira.Spotlight.Bootstrapper.exe Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\MyA avira_system_speedup.tmp Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Optimizer\General avira_system_speedup.tmp Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\General\LicenseType avira_system_speedup.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\Features\IntegratedBackendCommunication = "true" Avira.Spotlight.Bootstrapper.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Speedup\MyA\Product Avira.SystemSpeedup.Maintenance.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Bootstrapper\InstallProgress = "82" Avira.Spotlight.Bootstrapper.exe Key opened \REGISTRY\MACHINE\Software\WOW6432Node\Avira\Speedup\Telemetry Avira.SystemSpeedup.Maintenance.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Security\UseGlobalUninstaller = "1" Avira.Spotlight.Bootstrapper.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\OptimizerHost\InstallLocation = "C:\\Program Files (x86)\\Avira\\Optimizer Host" Avira_Optimizer_Host.tmp -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s) 1 IoCs
Processes:
Avira.SystemSpeedup.Core.Common.Starter.exedescription ioc process File opened for modification C:\Users\Admin\Desktop\desktop.ini Avira.SystemSpeedup.Core.Common.Starter.exe -
Installs/modifies Browser Helper Object 2 TTPs 8 IoCs
BHOs are DLL modules which act as plugins for Internet Explorer.
Processes:
setup.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ setup.exe -
Checks system information in the registry 2 TTPs 24 IoCs
System information is often read in order to detect sandboxing environments.
Processes:
MicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exedescription ioc process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer MicrosoftEdgeUpdate.exe -
Drops file in System32 directory 15 IoCs
Processes:
Avira.OptimizerHost.exesetup.exedescription ioc process File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\38D10539991D1B84467F968981C3969D_0DEE1342E46668773EFEEB5337A1D453 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_6E4F36431D86962EFD432400DF65AC90 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_6E4F36431D86962EFD432400DF65AC90 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\38D10539991D1B84467F968981C3969D_0DEE1342E46668773EFEEB5337A1D453 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_63FFD9ACA3CC5EA7EBDA5A9ACC91E079 Avira.OptimizerHost.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_63FFD9ACA3CC5EA7EBDA5A9ACC91E079 Avira.OptimizerHost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk setup.exe File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData Avira.OptimizerHost.exe -
Drops file in Program Files directory 64 IoCs
Processes:
avira_spotlight_setup_wdp.tmpavira_system_speedup.tmpsetup.exesetup.exeMicrosoftEdgeUpdateSetup_X86_1.3.173.51.exeMicrosoftEdgeWebView2RuntimeInstallerX64.exeMicrosoftEdgeUpdate.exesetup.exedescription ioc process File created C:\Program Files (x86)\Avira\Security\is-2DOEJ.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\System Speedup\tr-TR\is-H0F4N.tmp avira_system_speedup.tmp File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\111.0.1661.44\Locales\or.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.51\Locales\de.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\nacl_irt_x86_64.nexe setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\fil.pak setup.exe File created C:\Program Files (x86)\Avira\Security\is-PFL15.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\System Speedup\is-B9J2U.tmp avira_system_speedup.tmp File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\111.0.1661.44\Notifications\SoftLandingAssetLight.gif setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Locales\lb.pak setup.exe File created C:\Program Files (x86)\Avira\Security\fr-FR\is-Q4S6D.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\Security\Gifs\Antivirus\is-ALT7P.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Locales\hr.pak setup.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Locales\mk.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\learning_tools.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\VisualElements\LogoBeta.png setup.exe File created C:\Program Files (x86)\Avira\Security\is-3C8C5.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\mip_protection_sdk.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.51\d3dcompiler_47.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\111.0.1661.44\Locales\ka.pak setup.exe File created C:\Program Files (x86)\Avira\Security\is-0RFGJ.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Microsoft\Temp\EU7983.tmp\msedgeupdateres_bs.dll MicrosoftEdgeUpdateSetup_X86_1.3.173.51.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Locales\en-US.pak setup.exe File created C:\Program Files (x86)\Microsoft\Temp\EUF712.tmp\msedgeupdateres_et.dll MicrosoftEdgeWebView2RuntimeInstallerX64.exe File created C:\Program Files (x86)\Avira\Security\zh-TW\is-GFAMF.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\System Speedup\is-PUVS8.tmp avira_system_speedup.tmp File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Locales\fi.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\msedge_200_percent.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\111.0.1661.44\identity_proxy\win10\identity_helper.Sparse.Internal.msix setup.exe File created C:\Program Files (x86)\Microsoft\Temp\EUF712.tmp\msedgeupdateres_pt-BR.dll MicrosoftEdgeWebView2RuntimeInstallerX64.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\af.pak setup.exe File created C:\Program Files (x86)\Avira\Security\is-P1QLH.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\elevation_service.exe setup.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\VisualElements\SmallLogoDev.png setup.exe File created C:\Program Files (x86)\Avira\Security\is-CQ5LK.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\Security\is-A2RT3.tmp avira_spotlight_setup_wdp.tmp File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\msedge_pwa_launcher.exe setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\111.0.1661.44\Locales\hr.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\bs.pak setup.exe File created C:\Program Files (x86)\Avira\Security\is-P1N9I.tmp avira_spotlight_setup_wdp.tmp File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\v8_context_snapshot.bin setup.exe File created C:\Program Files (x86)\Avira\Security\is-J6RGH.tmp avira_spotlight_setup_wdp.tmp File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Trust Protection Lists\Mu\Social setup.exe File created C:\Program Files (x86)\Microsoft\Temp\EU7983.tmp\msedgeupdateres_eu.dll MicrosoftEdgeUpdateSetup_X86_1.3.173.51.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\111.0.1661.44\MicrosoftEdge_X64_111.0.1661.44.exe MicrosoftEdgeUpdate.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.51\Trust Protection Lists\Sigma\Content setup.exe File created C:\Program Files (x86)\Avira\Security\is-N22F3.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Trust Protection Lists\Mu\Content setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\111.0.1661.44\Trust Protection Lists\Mu\Entities setup.exe File created C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\is-LATIC.tmp avira_spotlight_setup_wdp.tmp File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Locales\lt.pak setup.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\9aed92a1-4432-44ae-8ebb-c891e0ef9588.tmp setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\ar.pak setup.exe File created C:\Program Files (x86)\Avira\Security\is-CB3Q3.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\Security\is-DK2DH.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Avira\Security\ru-RU\is-I1OOM.tmp avira_spotlight_setup_wdp.tmp File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\edge_feedback\camera_mf_trace.wprp setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.51\Locales\cs.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\ro.pak setup.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\VisualElements\LogoCanary.png setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Trust Protection Lists\Sigma\Other setup.exe File created C:\Program Files (x86)\Microsoft\Temp\EUF712.tmp\msedgeupdateres_fil.dll MicrosoftEdgeWebView2RuntimeInstallerX64.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\as.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.51\Locales\hi.pak setup.exe -
Drops file in Windows directory 1 IoCs
Processes:
avira_system_speedup.tmpdescription ioc process File created C:\Windows\Fonts\is-TFV2D.tmp avira_system_speedup.tmp -
Launches sc.exe 2 IoCs
Sc.exe is a Windows utlilty to control services on the system.
Processes:
sc.exesc.exepid process 5012 sc.exe 6780 sc.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
NSIS installer 2 IoCs
Processes:
resource yara_rule C:\Users\Admin\AppData\Local\Temp\.CR.13598\ea7739be-e115-4213-b23b-dd0c717c316c\VpnInstaller.exe nsis_installer_1 C:\Users\Admin\AppData\Local\Temp\.CR.13598\ea7739be-e115-4213-b23b-dd0c717c316c\VpnInstaller.exe nsis_installer_2 -
Creates scheduled task(s) 1 TTPs 6 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
Processes:
schtasks.exeschtasks.exeschtasks.exeschtasks.exeschtasks.exeschtasks.exepid process 6172 schtasks.exe 6440 schtasks.exe 6104 schtasks.exe 7132 schtasks.exe 1180 schtasks.exe 2032 schtasks.exe -
Enumerates system info in registry 2 TTPs 3 IoCs
Processes:
msedge.exedescription ioc process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Processes:
setup.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge setup.exe Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" setup.exe Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\111.0.1661.44\\BHO" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\111.0.1661.44\\BHO" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} setup.exe -
Modifies data under HKEY_USERS 64 IoCs
Processes:
Avira.OptimizerHost.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exesetup.exedescription ioc process Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge setup.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs Avira.OptimizerHost.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates MicrosoftEdgeUpdate.exe Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA Avira.OptimizerHost.exe -
Modifies registry class 64 IoCs
Processes:
MicrosoftEdgeUpdateComRegisterShell64.exeRegAsm.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exesetup.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdateComRegisterShell64.exeMicrosoftEdgeUpdateComRegisterShell64.exeRegAsm.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{177CAE89-4AD6-42F4-A458-00EC3389E3FE}\NumMethods\ = "24" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0CAB5786-30E8-3185-9B3B-CCEFBF1B8AFE}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29} RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService\CurVer\ = "MicrosoftEdgeUpdate.Update3COMClassService.1.0" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{08D832B9-D2FD-481F-98CF-904D00DF63CC}\LocalServer32\ = "\"C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\MicrosoftEdgeUpdateOnDemand.exe\"" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F7B3738C-9BCA-4B14-90B7-89D0F3A3E497}\ = "IPolicyStatus4" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D}\ProxyStubClsid32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0CAB5786-30E8-3185-9B3B-CCEFBF1B8AFE}\InprocServer32\1.0.0.0\Assembly = "Avira.SystemSpeedup.UI.ShellExtension, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null" RegAsm.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E4518371-7326-4865-87F8-D9D3F3B287A3}\ProxyStubClsid32\ = "{B896F458-C5BF-43D0-8982-B94F7A11B9C7}" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A}\NumMethods\ = "11" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32\ = "{29E55439-0D40-4CA6-979E-606EA7A46AED}" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ProxyStubClsid32 MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ProxyStubClsid32\ = "{29E55439-0D40-4CA6-979E-606EA7A46AED}" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\AppID = "{6d2b5079-2f0b-48dd-ab7f-97cec514d30b}" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService\CurVer\ = "MicrosoftEdgeUpdate.Update3COMClassService.1.0" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9A6B447A-35E2-4F6B-A87B-5DEEBBFDAD17}\ProxyStubClsid32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.ProcessLauncher.1.0\CLSID\ = "{08D832B9-D2FD-481F-98CF-904D00DF63CC}" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\VersionIndependentProgID\ = "MicrosoftEdgeUpdate.OnDemandCOMClassSvc" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2EC826CB-5478-4533-9015-7580B3B5E03A} MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26}\InprocServer32 MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FF419FF9-90BE-4D9F-B410-A789F90E5A7C}\ProgID\ = "MicrosoftEdgeUpdate.OnDemandCOMClassMachineFallback.1.0" MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT\DefaultIcon setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2F5CB38-265F-4A02-9D1E-F25B664968AB}\InprocServer32\ThreadingModel = "Both" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{D9AA3288-4EA7-4E67-AE60-D18EADCB923D} MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\VersionIndependentProgID MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2603C88B-F971-4167-9DE1-871EE4A3DC84}\ = "ICredentialDialog" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\ = "IAppBundle" MicrosoftEdgeUpdateComRegisterShell64.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2E1DD7EF-C12D-4F8E-8AD8-CF8CC265BAD0}\PROGID MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{1B9063E4-3882-485E-8797-F28A0240782F}\ = "IGoogleUpdate3WebSecurity" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ = "IProcessLauncher2" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{29E55439-0D40-4CA6-979E-606EA7A46AED}\InProcServer32 MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{60355531-5BFD-45AB-942C-7912628752C7}\ProxyStubClsid32\ = "{29E55439-0D40-4CA6-979E-606EA7A46AED}" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{B5977F34-9264-4AC3-9B31-1224827FF6E8} MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods\ = "5" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\ = "IProcessLauncher2" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MicrosoftEdgeUpdate.Update3COMClassService\CLSID\ = "{CECDDD22-2E72-4832-9606-A9B0E5E344B2}" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A6556DFF-AB15-4DC3-A890-AB54120BEAEC}\NumMethods\ = "7" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3E102DC6-1EDB-46A1-8488-61F71B35ED5F}\ProxyStubClsid32\ = "{29E55439-0D40-4CA6-979E-606EA7A46AED}" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C853632E-36CA-4999-B992-EC0D408CF5AB}\ProxyStubClsid32\ = "{B896F458-C5BF-43D0-8982-B94F7A11B9C7}" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C06EE550-7248-488E-971E-B60C0AB3A6E4} MicrosoftEdgeUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\LOCALSERVER32 MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{77857D02-7A25-4B67-9266-3E122A8F39E4}\LocalizedString = "@C:\\Program Files (x86)\\Microsoft\\EdgeUpdate\\1.3.173.51\\msedgeupdate.dll,-3000" MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{CECDDD22-2E72-4832-9606-A9B0E5E344B2}\LocalService = "edgeupdate" MicrosoftEdgeUpdate.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9F3F5F5D-721A-4B19-9B5D-69F664C1A591} MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{79E0C401-B7BC-4DE5-8104-71350F3A9B67}\NumMethods MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{99F8E195-1042-4F89-A28C-89CDB74A14AE}\ = "IJobObserver" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT\shell setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{450CF5FF-95C4-4679-BECA-22680389ECB9}\ProxyStubClsid32\ = "{B896F458-C5BF-43D0-8982-B94F7A11B9C7}" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7584D24A-E056-4EB1-8E7B-632F2B0ADC69}\NumMethods\ = "12" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DDD4B5D4-FD54-497C-8789-0830F29A60EE}\ = "IGoogleUpdate3" MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\shell\runas\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --do-not-de-elevate --single-argument %1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.xhtml\OpenWithProgIds\MSEdgeHTM setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9E8F1B36-249F-4FC3-9994-974AFAA07B26} MicrosoftEdgeUpdateComRegisterShell64.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0CAB5786-30E8-3185-9B3B-CCEFBF1B8AFE}\InprocServer32\1.0.0.0\RuntimeVersion = "v4.0.30319" RegAsm.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A6B716CB-028B-404D-B72C-50E153DD68DA}\PROGID MicrosoftEdgeUpdate.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AB4F4A7E-977C-4E23-AD8F-626A491715DF}\NumMethods MicrosoftEdgeUpdate.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{195A2EB3-21EE-43CA-9F23-93C2C9934E2E}\ = "IApp" MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FCE48F77-C677-4012-8A1A-54D2E2BC07BD}\ProxyStubClsid32 MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AB4EE1FC-0A81-4F56-B0E2-248FB78051AF} MicrosoftEdgeUpdateComRegisterShell64.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT setup.exe -
Processes:
Avira.Spotlight.Bootstrapper.exedescription ioc process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 5c00000001000000040000000008000019000000010000001000000091fad483f14848a8a69b18b805cdbb3a0f0000000100000014000000327fc447408de9bf596f83d4b2fa4b8e3e7097d8030000000100000014000000503006091d97d4f5ae39f7cbe7927d7d652d343114000000010000001400000055e481d11180bed889b908a331f9a1240916b970040000000100000010000000ee2931bc327e9ae6e8b5f751b434719020000000010000002e0400003082042a30820312a00302010202043863def8300d06092a864886f70d01010505003081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f7269747920283230343829301e170d3939313232343137353035315a170d3239303732343134313531325a3081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f726974792028323034382930820122300d06092a864886f70d01010105000382010f003082010a0282010100ad4d4ba91286b2eaa320071516642a2b4bd1bf0b4a4d8eed8076a567b77840c07342c868c0db532bdd5eb8769835938b1a9d7c133a0e1f5bb71ecfe524141eb181a98d7db8cc6b4b03f1020cdcaba54024007f7494a19d0829b3880bf587779d55cde4c37ed76a64ab851486955b9732506f3dc8ba660ce3fcbdb849c176894919fdc0a8bd89a3672fc69fbc711960b82de92cc99076667b94e2af78d665535d3cd69cb2cf2903f92fa450b2d448ce0532558afdb2644c0ee4980775db7fdfb9085560853029f97b48a46986e3353f1e865d7a7a15bdef008e1522541700902693bc0e496891bff847d39d9542c10e4ddf6f26cfc3182162664370d6d5c007e10203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041455e481d11180bed889b908a331f9a1240916b970300d06092a864886f70d010105050003820101003b9b8f569b30e753997c7a79a74d97d7199590fb061fca337c46638f966624fa401b2127cae67273f24ffe3199fdc80c4c6853c680821398fab6adda5d3df1ce6ef6151194820cee3f95af11ab0fd72fde1f038f572c1ec9bb9a1a4495eb184fa61fcd7d57102f9b04095a84b56ed81d3ae1d69ed16c795e791c14c5e3d04c933b653ceddf3dbea6e5951ac3b519c3bd5e5bbbff23ef6819cb1293275c032d6f30d01eb61aacde5af7d1aaa827a6fe7981c479993357ba12b0a9e0426c93ca56defe6d840b088b7e8dead79821c6f3e73c792f5e9cd14c158de1ec2237cc9a430b97dc80908db3679b6f48081556cfbff12b7c5e9a76e95990c57c8335116551 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 0f000000010000003000000041ce925678dfe0ccaa8089263c242b897ca582089d14e5eb685fca967f36dbd334e97e81fd0e64815f851f914ade1a1e0b00000001000000800000004d006900630072006f0073006f006600740020004900640065006e007400690074007900200056006500720069006600690063006100740069006f006e00200052006f006f007400200043006500720074006900660069006300610074006500200041007500740068006f0072006900740079002000320030003200300000006200000001000000200000005367f20c7ade0e2bca790915056d086b720c33c1fa2a2661acf787e3292e1270090000000100000016000000301406082b0601050507030306082b06010505070308140000000100000014000000c87ed26a852a1bca1998040727cf50104f68a8a21d0000000100000010000000e78921f81cea4d4105d2b5f4afae0c78030000000100000014000000f40042e2e5f7e8ef8189fed15519aece42c3bfa22000000001000000d0050000308205cc308203b4a00302010202105498d2d1d45b1995481379c811c08799300d06092a864886f70d01010c05003077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f726974792032303230301e170d3230303431363138333631365a170d3435303431363138343434305a3077310b3009060355040613025553311e301c060355040a13154d6963726f736f667420436f72706f726174696f6e314830460603550403133f4d6963726f736f6674204964656e7469747920566572696669636174696f6e20526f6f7420436572746966696361746520417574686f72697479203230323030820222300d06092a864886f70d01010105000382020f003082020a0282020100b3912a07830667fd9e9de0c7c0b7a4e642047f0fa6db5ffbd55ad745a0fb770bf080f3a66d5a4d7953d8a08684574520c7a254fbc7a2bf8ac76e35f3a215c42f4ee34a8596490dffbe99d814f6bc2707ee429b2bf50b9206e4fd691365a89172f29884eb833d0ee4d771124821cb0dedf64749b79bf9c9c717b6844fffb8ac9ad773674985e386bd3740d02586d4deb5c26d626ad5a978bc2d6f49f9e56c1414fd14c7d3651637decb6ebc5e298dfd629b152cd605e6b9893233a362c7d7d6526708c42ef4562b9e0b87cceca7b4a6aaeb05cd1957a53a0b04271c91679e2d622d2f1ebedac020cb0419ca33fb89be98e272a07235be79e19c836fe46d176f90f33d008675388ed0e0499abbdbd3f830cad55788684d72d3bf6d7f71d8fdbd0dae926448b75b6f7926b5cd9b952184d1ef0f323d7b578cf345074c7ce05e180e35768b6d9ecb3674ab05f8e0735d3256946797250ac6353d9497e7c1448b80fdc1f8f47419e530f606fb21573e061c8b6b158627497b8293ca59e87547e83f38f4c75379a0b6b4e25c51efbd5f38c113e6780c955a2ec5405928cc0f24c0ecba0977239938a6b61cdac7ba20b6d737d87f37af08e33b71db6e731b7d9972b0e486335974b516007b506dc68613dafdc439823d24009a60daba94c005512c34ac50991387bbb30580b24d30025cb826835db46373efae23954f6028be37d55ba50203010001a3543052300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414c87ed26a852a1bca1998040727cf50104f68a8a2301006092b06010401823715010403020100300d06092a864886f70d01010c05000382020100af6adde619e72d9443194ecbe9509564a50391028be236803b15a252c21619b66a5a5d744330f49bff607409b1211e90166dc5248f5c668863f44fcc7df2124c40108b019fdaa9c8aef2951bcf9d05eb493e74a0685be5562c651c827e53da56d94617799245c4103608522917cb2fa6f27ed469248a1e8fb0730dcc1c4aabb2aaeda79163016422a832b87e3228b367732d91b4dc31010bf7470aa6f1d74aed5660c42c08a37b40b0bc74275287d6be88dd378a896e67881df5c95da0feb6ab3a80d71a973c173622411eac4dd583e63c38bd4f30e954a9d3b604c3327661bbb018c52b18b3c080d5b795b05e514d22fcec58aae8d894b4a52eed92dee7187c2157dd5563f7bf6dcd1fd2a6772870c7e25b3a5b08d25b4ec80096b3e18336af860a655c74f6eaec7a6a74a0f04beeef94a3ac50f287edd73a3083c9fb7d57bee5e3f841cae564aeb3a3ec58ec859accefb9eaf35618b95c739aafc577178359db371a187254a541d2b62375a3439ae5777c9679b7418dbfecdc80a09fd17775585f3513e0251a670b7dce25fa070ae46121d8d41ce507c63699f496d0c615fe4ecdd7ae8b9ddb16fd04c692bdd488e6a9a3aabbf764383b5fcc0cd035be741903a6c5aa4ca26136823e1df32bbc975ddb4b783b2df53bef6023e8f5ec0b233695af9866bf53d37bb8694a2a966669c494c6f45f6eac98788880065ca2b2eda2 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0281400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad0f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f2000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f0f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad1400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc2000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\02FAF3E291435468607857694DF5E45B68851868\Blob = 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 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 1400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad0f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab2000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 040000000100000010000000ee2931bc327e9ae6e8b5f751b434719014000000010000001400000055e481d11180bed889b908a331f9a1240916b970030000000100000014000000503006091d97d4f5ae39f7cbe7927d7d652d34310f0000000100000014000000327fc447408de9bf596f83d4b2fa4b8e3e7097d819000000010000001000000091fad483f14848a8a69b18b805cdbb3a20000000010000002e0400003082042a30820312a00302010202043863def8300d06092a864886f70d01010505003081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f7269747920283230343829301e170d3939313232343137353035315a170d3239303732343134313531325a3081b431143012060355040a130b456e74727573742e6e65743140303e060355040b14377777772e656e74727573742e6e65742f4350535f3230343820696e636f72702e206279207265662e20286c696d697473206c6961622e2931253023060355040b131c286329203139393920456e74727573742e6e6574204c696d69746564313330310603550403132a456e74727573742e6e65742043657274696669636174696f6e20417574686f726974792028323034382930820122300d06092a864886f70d01010105000382010f003082010a0282010100ad4d4ba91286b2eaa320071516642a2b4bd1bf0b4a4d8eed8076a567b77840c07342c868c0db532bdd5eb8769835938b1a9d7c133a0e1f5bb71ecfe524141eb181a98d7db8cc6b4b03f1020cdcaba54024007f7494a19d0829b3880bf587779d55cde4c37ed76a64ab851486955b9732506f3dc8ba660ce3fcbdb849c176894919fdc0a8bd89a3672fc69fbc711960b82de92cc99076667b94e2af78d665535d3cd69cb2cf2903f92fa450b2d448ce0532558afdb2644c0ee4980775db7fdfb9085560853029f97b48a46986e3353f1e865d7a7a15bdef008e1522541700902693bc0e496891bff847d39d9542c10e4ddf6f26cfc3182162664370d6d5c007e10203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041455e481d11180bed889b908a331f9a1240916b970300d06092a864886f70d010105050003820101003b9b8f569b30e753997c7a79a74d97d7199590fb061fca337c46638f966624fa401b2127cae67273f24ffe3199fdc80c4c6853c680821398fab6adda5d3df1ce6ef6151194820cee3f95af11ab0fd72fde1f038f572c1ec9bb9a1a4495eb184fa61fcd7d57102f9b04095a84b56ed81d3ae1d69ed16c795e791c14c5e3d04c933b653ceddf3dbea6e5951ac3b519c3bd5e5bbbff23ef6819cb1293275c032d6f30d01eb61aacde5af7d1aaa827a6fe7981c479993357ba12b0a9e0426c93ca56defe6d840b088b7e8dead79821c6f3e73c792f5e9cd14c158de1ec2237cc9a430b97dc80908db3679b6f48081556cfbff12b7c5e9a76e95990c57c8335116551 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 5c000000010000000400000000080000190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f0f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad1400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0282000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\DDFB16CD4931C973A2037D3FC83A4D7D775D05E4\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 Avira.Spotlight.Bootstrapper.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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 Avira.Spotlight.Bootstrapper.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E\Blob = 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 Avira.Spotlight.Bootstrapper.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
Avira.Spotlight.Bootstrapper.exemsedge.exemsedge.exeidentity_helper.exeMicrosoftEdgeUpdate.exemsedge.exeavira_spotlight_setup_wdp.tmppid process 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 868 msedge.exe 868 msedge.exe 4060 msedge.exe 4060 msedge.exe 6000 identity_helper.exe 6000 identity_helper.exe 8048 MicrosoftEdgeUpdate.exe 8048 MicrosoftEdgeUpdate.exe 5620 msedge.exe 5620 msedge.exe 5620 msedge.exe 5620 msedge.exe 8048 MicrosoftEdgeUpdate.exe 8048 MicrosoftEdgeUpdate.exe 8048 MicrosoftEdgeUpdate.exe 8048 MicrosoftEdgeUpdate.exe 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp 2416 avira_spotlight_setup_wdp.tmp -
Suspicious behavior: LoadsDriver 10 IoCs
Processes:
pid 4 4 4 4 4 664 4 4 4 4 -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs
Processes:
msedge.exepid process 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes:
Avira.Spotlight.Bootstrapper.exeAUDIODG.EXEMicrosoftEdgeUpdate.exeAvira.Spotlight.Bootstrapper.exeAvira.Spotlight.Bootstrapper.ReportingTool.exeRegAsm.exeRegAsm.exeAvira.SystemSpeedup.Maintenance.exeAvira.SystemSpeedup.Maintenance.exeAvira.SystemSpeedup.Core.Common.Starter.exeAvira.OptimizerHost.exeAvira.OptimizerHost.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exeMicrosoftEdgeUpdate.exesetup.exeMicrosoftEdgeUpdate.exedescription pid process Token: SeDebugPrivilege 2144 Avira.Spotlight.Bootstrapper.exe Token: 33 5016 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 5016 AUDIODG.EXE Token: SeDebugPrivilege 8048 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 8048 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 6504 Avira.Spotlight.Bootstrapper.exe Token: SeDebugPrivilege 2516 Avira.Spotlight.Bootstrapper.ReportingTool.exe Token: SeDebugPrivilege 660 RegAsm.exe Token: SeDebugPrivilege 7876 RegAsm.exe Token: SeDebugPrivilege 3640 Avira.SystemSpeedup.Maintenance.exe Token: SeDebugPrivilege 7048 Avira.SystemSpeedup.Maintenance.exe Token: SeDebugPrivilege 4648 Avira.SystemSpeedup.Core.Common.Starter.exe Token: 33 6784 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 6784 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: SeDebugPrivilege 6680 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 8088 MicrosoftEdgeUpdate.exe Token: SeDebugPrivilege 2484 MicrosoftEdgeUpdate.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: SeDebugPrivilege 3452 MicrosoftEdgeUpdate.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 4540 setup.exe Token: SeIncBasePriorityPrivilege 4540 setup.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: SeDebugPrivilege 4776 MicrosoftEdgeUpdate.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe Token: SeIncBasePriorityPrivilege 7448 Avira.OptimizerHost.exe Token: 33 7448 Avira.OptimizerHost.exe -
Suspicious use of FindShellTrayWindow 9 IoCs
Processes:
Avira.Spotlight.Bootstrapper.exemsedge.exeavira_spotlight_setup_wdp.tmpavira_system_speedup.tmpAvira_Optimizer_Host.tmppid process 2144 Avira.Spotlight.Bootstrapper.exe 2144 Avira.Spotlight.Bootstrapper.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 4060 msedge.exe 2416 avira_spotlight_setup_wdp.tmp 7588 avira_system_speedup.tmp 7708 Avira_Optimizer_Host.tmp -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exeAvira.Spotlight.Bootstrapper.exemsedge.exedescription pid process target process PID 2260 wrote to memory of 2032 2260 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe schtasks.exe PID 2260 wrote to memory of 2032 2260 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe schtasks.exe PID 2260 wrote to memory of 2032 2260 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe schtasks.exe PID 2260 wrote to memory of 2144 2260 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe Avira.Spotlight.Bootstrapper.exe PID 2260 wrote to memory of 2144 2260 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe Avira.Spotlight.Bootstrapper.exe PID 2260 wrote to memory of 2144 2260 avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe Avira.Spotlight.Bootstrapper.exe PID 2144 wrote to memory of 3332 2144 Avira.Spotlight.Bootstrapper.exe ACSSignedIC.exe PID 2144 wrote to memory of 3332 2144 Avira.Spotlight.Bootstrapper.exe ACSSignedIC.exe PID 2144 wrote to memory of 3332 2144 Avira.Spotlight.Bootstrapper.exe ACSSignedIC.exe PID 4060 wrote to memory of 3900 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 3900 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 4736 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 868 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 868 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe PID 4060 wrote to memory of 1332 4060 msedge.exe msedge.exe -
System policy modification 1 TTPs 4 IoCs
Processes:
setup.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" setup.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe"C:\Users\Admin\AppData\Local\Temp\avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\Avira.Spotlight.Bootstrapper.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\Avira.Spotlight.Bootstrapper.exe" "C:\Users\Admin\AppData\Local\Temp\.CR.13598\Avira.Spotlight.Bootstrapper.exe" OriginalFileName=avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\ACSSignedIC.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\ACSSignedIC.exe"3⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\abcb9db0-ab23-40c1-a941-dc312390f15c\MicrosoftEdgeWebView2RuntimeInstallerX64.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\abcb9db0-ab23-40c1-a941-dc312390f15c\MicrosoftEdgeWebView2RuntimeInstallerX64.exe" /silent /install3⤵
- Executes dropped EXE
- Drops file in Program Files directory
-
C:\Program Files (x86)\Microsoft\Temp\EUF712.tmp\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\Temp\EUF712.tmp\MicrosoftEdgeUpdate.exe" /silent /install "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20WebView2%20Runtime&needsadmin=Prefers"4⤵
- Sets file execution options in registry
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.49\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.49\MicrosoftEdgeUpdateComRegisterShell64.exe"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.49\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.49\MicrosoftEdgeUpdateComRegisterShell64.exe"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.49\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.49\MicrosoftEdgeUpdateComRegisterShell64.exe"6⤵
- Executes dropped EXE
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzMuNDkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzMuNDkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MzVBMkQ2OUEtMTJFMi00RDM4LTg4OUMtODUwQTc2RkQ2MjBEfSIgdXNlcmlkPSJ7QUYxMDVFMUItMUZFOS00NjVGLTgxQUQtRkU0RDE4Mzg1NjQ0fSIgaW5zdGFsbHNvdXJjZT0ib3RoZXJpbnN0YWxsY21kIiByZXF1ZXN0aWQ9IntEQkE3RDg1MC1ERjdCLTQ5NzktODBFMi1FQkZERTBEODYxRDZ9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iNCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3FXSlN6V3dQZmRjTFIrWEdJdjZ4clpmaVlPeGhQVTJzMU5XbWpXY2FGUGc9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzMuNDUiIG5leHR2ZXJzaW9uPSIxLjMuMTczLjQ5IiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NDkyODk5NTUwIiBpbnN0YWxsX3RpbWVfbXM9IjIzOTgiLz48L2FwcD48L3JlcXVlc3Q-5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /handoff "appguid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}&appname=Microsoft%20Edge%20WebView2%20Runtime&needsadmin=Prefers" /installsource offline /sessionid "{35A2D69A-12E2-4D38-889C-850A76FD620D}" /silent /offlinedir "{558D84C9-A77B-4557-BDD7-B81F7B5ED171}"5⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\d8f6ccae-8b60-46f4-9702-b7f566d028ba\avira_spotlight_setup_wdp.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\d8f6ccae-8b60-46f4-9702-b7f566d028ba\avira_spotlight_setup_wdp.exe" /LOG="C:\Users\Admin\AppData\Local\Temp\avira_spotlight_setup_20230322114230701.log" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP /LANGUAGE=fr-fr /SYSTRAYAUTOSTARTENABLED=true /WITHSERVICESTOPPED=true /SKIPSERVICEREGISTRATION=true /CERTIFICATESVERSION=V43⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\is-M4A5Q.tmp\avira_spotlight_setup_wdp.tmp"C:\Users\Admin\AppData\Local\Temp\is-M4A5Q.tmp\avira_spotlight_setup_wdp.tmp" /SL5="$30258,35584894,924160,C:\Users\Admin\AppData\Local\Temp\.CR.13598\d8f6ccae-8b60-46f4-9702-b7f566d028ba\avira_spotlight_setup_wdp.exe" /LOG="C:\Users\Admin\AppData\Local\Temp\avira_spotlight_setup_20230322114230701.log" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP /LANGUAGE=fr-fr /SYSTRAYAUTOSTARTENABLED=true /WITHSERVICESTOPPED=true /SKIPSERVICEREGISTRATION=true /CERTIFICATESVERSION=V44⤵
- Executes dropped EXE
- Checks for any installed AV software in registry
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
-
C:\Windows\SysWOW64\sc.exe"C:\Windows\system32\sc.exe" create AviraSecurityUpdater DisplayName= "Avira Security Updater" binPath= "\"C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe\"" start= delayed-auto5⤵
- Launches sc.exe
-
C:\Windows\SysWOW64\sc.exe"C:\Windows\system32\sc.exe" description AviraSecurityUpdater "Avira Security Updater"5⤵
- Launches sc.exe
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Update /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-NSCVQ.tmp\UpdateFallbackTask.xml"5⤵
- Creates scheduled task(s)
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Service_SCM_Watchdog /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-NSCVQ.tmp\WatchdogServiceControlManagerTimeout.xml"5⤵
- Creates scheduled task(s)
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Systray /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-NSCVQ.tmp\SystrayAutostart.xml"5⤵
- Creates scheduled task(s)
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Maintenance /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-NSCVQ.tmp\MaintenanceTask.xml"5⤵
- Creates scheduled task(s)
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe" Action=RegisterFallbackUpdater AllowMultipleInstances=true UnpackInCurrentDirectory=true3⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\Avira.Spotlight.Bootstrapper.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\Avira.Spotlight.Bootstrapper.exe" "C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\Avira.Spotlight.Bootstrapper.exe" OriginalFileName=avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exe Action=RegisterFallbackUpdater AllowMultipleInstances=true4⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks for any installed AV software in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\ACSSignedIC.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\ACSSignedIC.exe"5⤵
- Executes dropped EXE
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\system32\schtasks.exe" /Delete /F /TN "Avira_Security_Installation"4⤵
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\Avira.Spotlight.Bootstrapper.ReportingTool.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\.CR.6158\Avira.Spotlight.Bootstrapper.ReportingTool.exe" /TrackUnsentEvents4⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\3312733f-a5f3-4904-9167-1e4b28241898\avira_system_speedup.exe"C:\Users\Admin\AppData\Local\Temp\.CR.13598\3312733f-a5f3-4904-9167-1e4b28241898\avira_system_speedup.exe" /install /OTC= /EMAIL= /LOG="C:\Users\Admin\AppData\Local\Temp\avira_system_speedup_setup_20230322114244744.log" /VERYSILENT /SUPPRESSMSGBOXES /LANGUAGE=fr-fr /NOSTART /NORESTART /bundle=aps10 /download=wdp /Spotlight3⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\is-9784M.tmp\avira_system_speedup.tmp"C:\Users\Admin\AppData\Local\Temp\is-9784M.tmp\avira_system_speedup.tmp" /SL5="$50258,34278155,916480,C:\Users\Admin\AppData\Local\Temp\.CR.13598\3312733f-a5f3-4904-9167-1e4b28241898\avira_system_speedup.exe" /install /OTC= /EMAIL= /LOG="C:\Users\Admin\AppData\Local\Temp\avira_system_speedup_setup_20230322114244744.log" /VERYSILENT /SUPPRESSMSGBOXES /LANGUAGE=fr-fr /NOSTART /NORESTART /bundle=aps10 /download=wdp /Spotlight4⤵
- Checks computer location settings
- Executes dropped EXE
- Checks for any installed AV software in registry
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of FindShellTrayWindow
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\System32\schtasks.exe" /Delete /F /TN AviraSystemSpeedupRemoval5⤵
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exeC:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.dll" /codebase /silent /nologo5⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exeC:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exe "C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.dll" /codebase /silent /nologo5⤵
- Registers COM server for autorun
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe"C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe" -umh5⤵
- Executes dropped EXE
- Drops desktop.ini file(s)
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\cmd.exe"C:\Windows\system32\cmd.exe" /C copy "C:\Users\Admin\AppData\Local\Temp\.CR.13598\3312733f-a5f3-4904-9167-1e4b28241898\avira_system_speedup.exe" "C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe"5⤵
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\System32\schtasks.exe" /Create /F /RU System /SC WEEKLY /TN AviraSystemSpeedupVerify /TR "\"C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe\" /VERIFY /VERYSILENT /NOSTART /NODOTNET /NORESTART" /RL HIGHEST5⤵
- Creates scheduled task(s)
-
C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Maintenance.exe"C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Maintenance.exe" -validatelicense5⤵
- Executes dropped EXE
- Checks for any installed AV software in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Maintenance.exe"C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Maintenance.exe" -initbootoptimizer5⤵
- Executes dropped EXE
- Checks for any installed AV software in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\is-E96FK.tmp\Avira_Optimizer_Host.exe"C:\Users\Admin\AppData\Local\Temp\is-E96FK.tmp\Avira_Optimizer_Host.exe" /VERYSILENT5⤵
- Executes dropped EXE
-
C:\Users\Admin\AppData\Local\Temp\is-R2MSB.tmp\Avira_Optimizer_Host.tmp"C:\Users\Admin\AppData\Local\Temp\is-R2MSB.tmp\Avira_Optimizer_Host.tmp" /SL5="$402D6,1525703,780800,C:\Users\Admin\AppData\Local\Temp\is-E96FK.tmp\Avira_Optimizer_Host.exe" /VERYSILENT6⤵
- Executes dropped EXE
- Checks for any installed AV software in registry
- Suspicious use of FindShellTrayWindow
-
C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe"C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe" /Install /Silent7⤵
- Sets service image path in registry
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\schtasks.exe"C:\Windows\system32\schtasks.exe" /Create /Xml "C:\Users\Admin\AppData\Local\Temp\.CR.26685\Avira_Security_Installation.xml" /F /TN "Avira_Security_Installation"2⤵
- Creates scheduled task(s)
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xf8,0x108,0x7fff914146f8,0x7fff91414708,0x7fff914147182⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1508 /prefetch:22⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3664 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3656 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5108 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3852 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings2⤵
- Drops file in Program Files directory
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff770b65460,0x7ff770b65470,0x7ff770b654803⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3852 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5192 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3104 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5180 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4068 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5672 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6048 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6060 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6056 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6524 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5872 /prefetch:82⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2660 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:12⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,18303490116488332409,16700020884709802971,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3212 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x33c 0x3381⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGV4cCBldGFnPSImcXVvdDtxV0pTeld3UGZkY0xSK1hHSXY2eHJaZmlZT3hoUFUyczFOV21qV2NhRlBnPSZxdW90OyIvPjxhcHAgYXBwaWQ9Ins4QTY5RDM0NS1ENTY0LTQ2M2MtQUZGMS1BNjlEOUU1MzBGOTZ9IiB2ZXJzaW9uPSIxMDYuMC41MjQ5LjExOSIgbmV4dHZlcnNpb249IjEwNi4wLjUyNDkuMTE5IiBsYW5nPSJlbiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIzMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iNSIgc3lzdGVtX3VwdGltZV90aWNrcz0iNTUwOTYzOTYwNyIvPjwvYXBwPjwvcmVxdWVzdD42⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{06393818-92DB-4EEF-9730-0003FA70268F}\MicrosoftEdgeWebview_X64_111.0.1661.51.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{06393818-92DB-4EEF-9730-0003FA70268F}\MicrosoftEdgeWebview_X64_111.0.1661.51.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level2⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{06393818-92DB-4EEF-9730-0003FA70268F}\EDGEMITMP_0CD89.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{06393818-92DB-4EEF-9730-0003FA70268F}\EDGEMITMP_0CD89.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{06393818-92DB-4EEF-9730-0003FA70268F}\MicrosoftEdgeWebview_X64_111.0.1661.51.exe" --msedgewebview --verbose-logging --do-not-launch-msedge --system-level3⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops file in Program Files directory
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzMuNDkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzMuNDkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MzVBMkQ2OUEtMTJFMi00RDM4LTg4OUMtODUwQTc2RkQ2MjBEfSIgdXNlcmlkPSJ7QUYxMDVFMUItMUZFOS00NjVGLTgxQUQtRkU0RDE4Mzg1NjQ0fSIgaW5zdGFsbHNvdXJjZT0ib2ZmbGluZSIgcmVxdWVzdGlkPSJ7MzlDNDk2RjctOTIyMC00MkI5LThFRUUtQzRCMDAxODU4NDI4fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjQiIHBoeXNtZW1vcnk9IjgiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiIHByb2R1Y3RfdHlwZT0iNDgiIGlzX3dpcD0iMCIvPjxvZW0gcHJvZHVjdF9tYW51ZmFjdHVyZXI9IkRBRFkiIHByb2R1Y3RfbmFtZT0iU3RhbmRhcmQgUEMgKFEzNSArIElDSDksIDIwMDkpIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzV9IiB2ZXJzaW9uPSIiIG5leHR2ZXJzaW9uPSIxMTEuMC4xNjYxLjUxIiBsYW5nPSIiIGJyYW5kPSIiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI1NTE4MzIwMTA4IiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI2MjQ2NjM2NjQyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMyIgZG93bmxvYWRlZD0iMTQxNzEyODU2IiB0b3RhbD0iMTQxNzEyODU2IiBwYWNrYWdlX2NhY2hlX3Jlc3VsdD0iMSIgaW5zdGFsbF90aW1lX21zPSI2ODczNCIvPjwvYXBwPjwvcmVxdWVzdD42⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
-
C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe"C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler1⤵
- Executes dropped EXE
- Checks system information in the registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc1⤵
- Executes dropped EXE
- Checks system information in the registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{217B68CA-B35E-4A0A-9A3F-151C1CB9DDBC}\MicrosoftEdgeUpdateSetup_X86_1.3.173.51.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{217B68CA-B35E-4A0A-9A3F-151C1CB9DDBC}\MicrosoftEdgeUpdateSetup_X86_1.3.173.51.exe" /update /sessionid "{C2DB10BD-AEFF-40B1-B1E4-D67233CBCC59}"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
-
C:\Program Files (x86)\Microsoft\Temp\EU7983.tmp\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\Temp\EU7983.tmp\MicrosoftEdgeUpdate.exe" /update /sessionid "{C2DB10BD-AEFF-40B1-B1E4-D67233CBCC59}"3⤵
- Sets file execution options in registry
- Executes dropped EXE
- Checks system information in the registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regsvc4⤵
- Executes dropped EXE
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /regserver4⤵
- Executes dropped EXE
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.51\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.51\MicrosoftEdgeUpdateComRegisterShell64.exe"5⤵
- Executes dropped EXE
- Registers COM server for autorun
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.51\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.51\MicrosoftEdgeUpdateComRegisterShell64.exe"5⤵
- Executes dropped EXE
- Registers COM server for autorun
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.51\MicrosoftEdgeUpdateComRegisterShell64.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\1.3.173.51\MicrosoftEdgeUpdateComRegisterShell64.exe"5⤵
- Executes dropped EXE
- Registers COM server for autorun
- Modifies registry class
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping 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-PGV4cCBldGFnPSImcXVvdDtxV0pTeld3UGZkY0xSK1hHSXY2eHJaZmlZT3hoUFUyczFOV21qV2NhRlBnPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTczLjQ5IiBuZXh0dmVyc2lvbj0iMS4zLjE3My41MSIgbGFuZz0iIiBicmFuZD0iSU5CWCIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjAiIGluc3RhbGxkYXRldGltZT0iMTY3OTQ4NTI3NSI-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTMwMjkxNTcxNCIvPjwvYXBwPjwvcmVxdWVzdD44⤵
- Executes dropped EXE
- Checks system information in the registry
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzMuNDkiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzMuNDkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QzJEQjEwQkQtQUVGRi00MEIxLUIxRTQtRDY3MjMzQ0JDQzU5fSIgdXNlcmlkPSJ7QUYxMDVFMUItMUZFOS00NjVGLTgxQUQtRkU0RDE4Mzg1NjQ0fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9Ins4MDE4NEExMy04Q0E5LTQzRTMtODcyMi0xOEREMzI3M0RGMTl9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iNCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3FXSlN6V3dQZmRjTFIrWEdJdjZ4clpmaVlPeGhQVTJzMU5XbWpXY2FGUGc9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzMuNDkiIG5leHR2ZXJzaW9uPSIxLjMuMTczLjUxIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgZXhwZXJpbWVudHM9IlByb2R1Y3RzVG9SZWdpc3Rlcj0lN0JGMzAxNzIyNi1GRTJBLTQyOTUtOEJERi0wMEMzQTlBN0U0QzUlN0QiIGluc3RhbGxhZ2U9IjAiPjx1cGRhdGVjaGVjay8-PGV2ZW50IGV2ZW50dHlwZT0iMTIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9Ijg3MDUwODg5NTMiIGRvbmVfYmVmb3JlX29vYmVfY29tcGxldGU9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIxMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iODcwNTI0MzY5NyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMjE0NzAyMzgzOCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iOTI2NTU3MjIxOCIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgZG93bmxvYWRlcj0iZG8iIHVybD0iaHR0cDovL21zZWRnZS5iLnRsdS5kbC5kZWxpdmVyeS5tcC5taWNyb3NvZnQuY29tL2ZpbGVzdHJlYW1pbmdzZXJ2aWNlL2ZpbGVzLzAxMWU1OGVkLWM4YTYtNDcwOS1hYzVmLTQ4OWFkNTg4MWVjOD9QMT0xNjgwMDg2Nzk4JmFtcDtQMj00MDQmYW1wO1AzPTImYW1wO1A0PW1wODVOSVVHMmdmJTJiN3VOOUlxZGFLU1NRSEVwZkg4bUJSaW9nd2tad2hqZTZsaWlvVFZCVXViTm9oMXdTaSUyYlRNdmxsVkRnTFgzNkRLaHA5QTlINkNBQSUzZCUzZCIgc2VydmVyX2lwX2hpbnQ9IiIgY2RuX2NpZD0iLTEiIGNkbl9jY2M9IiIgY2RuX21zZWRnZV9yZWY9IiIgY2RuX2F6dXJlX3JlZl9vcmlnaW5fc2hpZWxkPSIiIGNkbl9jYWNoZT0iIiBjZG5fcDNwPSIiIGRvd25sb2FkZWQ9IjAiIHRvdGFsPSIwIiBkb3dubG9hZF90aW1lX21zPSIxNSIvPjxldmVudCBldmVudHR5cGU9IjE0IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI5MjY1NTcyMjE4IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIiBkb3dubG9hZGVyPSJiaXRzIiB1cmw9Imh0dHA6Ly9tc2VkZ2UuYi50bHUuZGwuZGVsaXZlcnkubXAubWljcm9zb2Z0LmNvbS9maWxlc3RyZWFtaW5nc2VydmljZS9maWxlcy8wMTFlNThlZC1jOGE2LTQ3MDktYWM1Zi00ODlhZDU4ODFlYzg_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-PHBpbmcgcj0iMjkiIHJkPSI1ODk1IiBwaW5nX2ZyZXNobmVzcz0ie0Q1QjE0NTRDLUM4QTAtNDI0NS04Qjc0LTE3Q0EyODZDMEUxM30iLz48L2FwcD48YXBwIGFwcGlkPSJ7NTZFQjE4RjgtQjAwOC00Q0JELUI2RDItOEM5N0ZFN0U5MDYyfSIgdmVyc2lvbj0iOTIuMC45MDIuNjciIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaXNfcGlubmVkX3N5c3RlbT0idHJ1ZSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzIzOTU4NzU3NDE0Nzc3MCI-PHVwZGF0ZWNoZWNrLz48cGluZyBhY3RpdmU9IjEiIGE9Ii0xIiByPSIyOSIgYWQ9Ii0xIiByZD0iNTg5NSIgcGluZ19mcmVzaG5lc3M9IntBNzZFMTQ3Mi04NDE3LTQ5OUYtODdEQS00MUMwNjk3N0YyRDl9Ii8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjExMS4wLjE2NjEuNTEiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIj48dXBkYXRlY2hlY2svPjxwaW5nIHI9Ii0xIiByZD0iLTEiIHBpbmdfZnJlc2huZXNzPSJ7NjJDNTg4NDUtMjlFQS00NjVELTkzNTEtQTZBQzg5Mjk1QTY3fSIvPjwvYXBwPjwvcmVxdWVzdD42⤵
- Executes dropped EXE
- Checks system information in the registry
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc1⤵
- Executes dropped EXE
- Checks system information in the registry
- Drops file in Program Files directory
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\MicrosoftEdge_X64_111.0.1661.44.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\MicrosoftEdge_X64_111.0.1661.44.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable2⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\EDGEMITMP_F8348.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\EDGEMITMP_F8348.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\MicrosoftEdge_X64_111.0.1661.44.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable3⤵
- Modifies Installed Components in the registry
- Executes dropped EXE
- Registers COM server for autorun
- Adds Run key to start application
- Installs/modifies Browser Helper Object
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- System policy modification
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\EDGEMITMP_F8348.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{8C5B7C22-4B56-46B1-9C4E-07EC8A8AD222}\EDGEMITMP_F8348.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=14⤵
- Executes dropped EXE
- Drops file in System32 directory
- Modifies data under HKEY_USERS
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xNzMuNTEiIHNoZWxsX3ZlcnNpb249IjEuMy4xNzMuNDkiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7QkI1MEVDMTctREUwOC00REM4LThDNjktMTBERTc5RTMyQjMyfSIgdXNlcmlkPSJ7QUYxMDVFMUItMUZFOS00NjVGLTgxQUQtRkU0RDE4Mzg1NjQ0fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9IntDN0FCRjg2Qy01MzE5LTRDRDYtQjhGQi0xMjc3Mjg2MkM0NDN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iNCIgcGh5c21lbW9yeT0iOCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjE5MDQxLjEyODgiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iREFEWSIgcHJvZHVjdF9uYW1lPSJTdGFuZGFyZCBQQyAoUTM1ICsgSUNIOSwgMjAwOSkiLz48ZXhwIGV0YWc9IiZxdW90O3FXSlN6V3dQZmRjTFIrWEdJdjZ4clpmaVlPeGhQVTJzMU5XbWpXY2FGUGc9JnF1b3Q7Ii8-PGFwcCBhcHBpZD0ie0YzQzRGRTAwLUVGRDUtNDAzQi05NTY5LTM5OEEyMEYxQkE0QX0iIHZlcnNpb249IjEuMy4xNzMuNTEiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iUHJvZHVjdHNUb1JlZ2lzdGVyPSU3QkYzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNSU3RCIgaW5zdGFsbGFnZT0iMCIgY29ob3J0PSJycmZAMC45MCI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNTkyNCIgcGluZ19mcmVzaG5lc3M9IntGNTJCMUIzOS0xRTlGLTQ4NzEtQjEyOC0zMDYxRjMyMTNBNDR9Ii8-PC9hcHA-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_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-PGV2ZW50IGV2ZW50dHlwZT0iMTQiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDEyMzE3NTE5IiBzb3VyY2VfdXJsX2luZGV4PSIwIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMTUiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHN5c3RlbV91cHRpbWVfdGlja3M9IjEzMDI3OTY4MDMyIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMyIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzU3IiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSIxMzczMTc0NzE2NiIgc291cmNlX3VybF9pbmRleD0iMCIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjI1MzEiIGRvd25sb2FkX3RpbWVfbXM9IjU4OTI1IiBkb3dubG9hZGVkPSIxNDE2MzYwMTYiIHRvdGFsPSIxNDE2MzYwMTYiIHBhY2thZ2VfY2FjaGVfcmVzdWx0PSIwIiBpbnN0YWxsX3RpbWVfbXM9IjcwMzM4Ii8-PHBpbmcgYWN0aXZlPSIwIiByZD0iNTkyNCIgcGluZ19mcmVzaG5lc3M9Ins3OUQ2RUE3MS02NTk2LTRFQjItOTUzMy03MTc2RTA0OTlDNEV9Ii8-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjExMS4wLjE2NjEuNTEiIG5leHR2ZXJzaW9uPSIiIGxhbmc9IiIgYnJhbmQ9IkdHTFMiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSIwIiBpbnN0YWxsZGF0ZT0iNTkyMiIgY29ob3J0PSJycmZAMC45OSI-PHVwZGF0ZWNoZWNrLz48cGluZyByZD0iNTkyNCIgcGluZ19mcmVzaG5lc3M9Ins2MjdGMzQ0My1FODJGLTQ1RDEtOUFFQi1CMzNEQ0E1MjdGOUR9Ii8-PC9hcHA-PC9yZXF1ZXN0Pg2⤵
- Executes dropped EXE
- Checks system information in the registry
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.dllFilesize
169KB
MD540cb6587ac218d4922c761227dc8f972
SHA164d4f97366861ea451eb4aa3903570892e7595b8
SHA2565402e61284f5f98de37304e3aca64ec2ba9cd9435d9f9e1e75abb2b17f49282d
SHA5124eef26ffc1bc115cb0deb12167279e9ed15e831f78fbbf0d1631ecdf2bfeec8d2a8b1f26afe96c1dc022475a64dab9f795dba08a7f969d708710c821c33703b7
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\SharpShell.dllFilesize
454KB
MD5452fad368bf55ea5e1fa45e32db4a87b
SHA1b67db072351f0449ca9a7347360ff9e7cf9703fc
SHA2566b2bc807ef84ffa0cb3692ad3c5bbdc5b90c1036c80a532158e2adae40cf77c2
SHA5123ff780e415f2a05ee155c9d1f4ac3b6094aa3bb07aeaa8e71d08e2ebb8c97c7651c19a2047947aec1d5d5c6dcf602e67ca04fc1a4126d85c4bd9f5c9f83d42b1
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\System.Runtime.CompilerServices.Unsafe.dllFilesize
17KB
MD5fbbb19944f39023cdf0661ca0042d833
SHA141be426bca09584c095f588f2ade0d392c2bb6f1
SHA256b513b13eed8bde84ef89b7752ef611f8c1e6d7da0f5bd6edd469f45d75527d61
SHA512c435d3f24143df56c27b81ea440c38ee81a68e1058c9879591ef85652c57e2521630912d7a37df43ada2152d9ae74d2b0a34c9adf96d55667fd24aabdfb6fc84
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Update\System.Threading.Tasks.Extensions.dllFilesize
26KB
MD59dd8f8cc351c9c1da15eb77f79de89af
SHA1303930dd0d7cd8c09a3e3fdbd0dfb4f91e69c89b
SHA256851c15c84c2ff0ff6179afc8c17d6d0f6413ad950c659f4ba932e8359dc0f827
SHA512fb5148f76c0171dc506f53e74cf1a5637ae0f54fada194f450381b4a8c6c3c35df0c2a655b2a4924cf41c2d8abd810dbfd8fd04524605192c7e13eeb73dca13f
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\de-DE\Antivirus.ContextMenu.resources.dllFilesize
15KB
MD5676aa1f740b1f90e3bf6e2c39cb38544
SHA1046f605e8627257e35f3224684070368916b0c79
SHA256f8d973cc453b9afdd9ea63cb7288cf999436aa0af745bbbd04945b284f761282
SHA5123b1628dbc5a1da7c4eba2f3fde6335ba64ef6ae6293c5975ddc4afa847576d74f0e58cc7bf6d25e11617de0c9ea51950a629c782c70c45aadfd7cdadc82fc55a
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\en-US\Antivirus.ContextMenu.resources.dllFilesize
14KB
MD51e5a99cfe6ff99826ceb8bc6fb88c968
SHA1f4db4886a104962730366adc9f134dd0b1460105
SHA2566eb7b87c2850240a2a2d99191d3d9ffdcc9fe3c715db7901831684b18e290756
SHA512236eea6cb604dfd4f04a4d804de2114c027ccc9f8f60a45515d5ddbbab073eeb5cf8b712b896958f9cbcd25d55ace6bb3a4b4a27cf9097e4b3551ee855e57649
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\es-ES\Antivirus.ContextMenu.resources.dllFilesize
15KB
MD50673b2cba779a0fe1419f94680f981ef
SHA1d8ca6e32bd318ba01e1adfa68de1a1d8894a81c5
SHA256b6c7257a3c81a20afae9df9472ba50cc2ead433e887f71940a70c0e97e8108ec
SHA512a114219b974f25b6677e7065ceba2f5566da84c649151b9f9f060cd6d9b374bfcde068c3c86fc7c1a91c9384ee8e13ab37ee8e77ead2316e31aa397da553e652
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\fr-FR\Antivirus.ContextMenu.resources.dllFilesize
14KB
MD54e346cd655042d6c42681db6a14f9163
SHA127bbc72f91a72e11665e5365028edb8958c668b6
SHA2560b599ba05d700e048699d6d5ce99227ea335057c67653190acb9b2fa21e12223
SHA5121591a896f998000314b479ed98ce6964fbca18b959005f28ffe5683133d831f513be7018c7c45bc00a1bf2f927108ae4b4c69ff631e3a9a6f13ece8a4fe8022f
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\it-IT\Antivirus.ContextMenu.resources.dllFilesize
15KB
MD586df886745c9594ef3128ce3e75e60c6
SHA13553b9c239b81dc195895be4928e92e99a0d22a8
SHA2564f2a3cf0ac79a8063f8b65138bfba531fbf33effd42b2098f7d442074acbc0fe
SHA512938cc5d390f133485e89547cbeacb76ff859dae76c57a84cc7b0d22f9607370c204fecbdf53f49f91e3f38cf8d1d7151afae0edd516fc5a066e4f9d177137c88
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\ja-JP\Antivirus.ContextMenu.resources.dllFilesize
15KB
MD52eb839cedfda06016de5885869514192
SHA1e04acb1fe27ebf3c4fbddb0a6c5a2a4c2bc7e805
SHA256f4523b76e97a4548c01bb7328a64aefffde2284ce50772ee33ad2659da220e24
SHA51289beb6a82f643bb170600b487b12dd1e35dfd2dae9ddf6a3baf73772b70f17e8e9408d6f8c23b13a2caa53033af3d825f41fee51ab923b3bdd47015e8a114c55
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\nl-NL\Antivirus.ContextMenu.resources.dllFilesize
14KB
MD5c9648f876c0154ef327ed564637c3110
SHA1e7ce495f745a2f0c56c2ac1526bc17cf2557fae7
SHA256d7d410f81aa1a3b6f39dfb27e8296931f0c5c08728d5219d87f21085774ca7e6
SHA5123b3c906ede411dc0e063305421d571c16a836bf20ce43b08520e67f15ba77fd48b58704d688f54b1f74ee2c3e9f38a2054a4a429622e593d1ea3f05ae648be09
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\pt-BR\Antivirus.ContextMenu.resources.dllFilesize
14KB
MD54076c9597fbc38c3eb992ec5b139eea9
SHA11631c0802df5155bc6393c69376c7436f2b6f77b
SHA25651b74f09c10af7b0a82687a32f7e5ca82098472ce748adc99c9025cfb2656ba2
SHA512942b9d5f2420e55cdb28df4d58b69023dc13cec5472356f0483a22e6583cfbd2be970a694ce3525eaf00cc970d2921db30fe5898a69785eaa107ea991bc6c4b5
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\ru-RU\Antivirus.ContextMenu.resources.dllFilesize
14KB
MD5fc1310f3c3e1b4ce2fa4cd9dac8e0518
SHA16846b647ae77e103a4bd325c4742060bd27cf3d6
SHA256f8e190c295f6b46e34b9279f16588f3a8cf3e3bb3b98ff4b9b99e5b82789b329
SHA51216dc19be0be945864f9709cd518af04a0a8f4b7364db9f5dbdb6527c2b0a2a821647e88d60e81a7441254ffa2b2b19ed2dad98f0f7273a2d26a17d77738e1013
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\tr-TR\Antivirus.ContextMenu.resources.dllFilesize
15KB
MD51b52efa826f468eac7eab4d189e4cf82
SHA15aa6eb0c6caad1b0f6448f94b0fe431559ddc1c4
SHA256ac21131f9a08d555803f262c6af604b8e2644cc8f5562cc025dda8dc8c876e2a
SHA512d888419c99af68ce4be5a961e6e0252cf64292fadf68af1f45d59d07648f4178bbab3a029e8b7671df659e4a86e7a51848895ca3f7c29369984c99d3e4bad6c8
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\zh-CN\Antivirus.ContextMenu.resources.dllFilesize
14KB
MD5fba79f8aebb2cad21217f303528f39a5
SHA1d6143e7540273da56d653ea4352f77102e035d27
SHA256231a61b4f91f4e64c705a3d9865102d9eb94c84ed48b18bfa1ba0e8b0c330062
SHA51225fed33298217b624d3bb1ef0d834708ef78909208bb2819ee2ba386f30784fb13656f3056a93b813d9e6612269cfa5b363ee6cf00580d5048deeec02a75f249
-
C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\zh-TW\Antivirus.ContextMenu.resources.dllFilesize
15KB
MD5f45ec9345a198b698d1d7c4de022e1a9
SHA1c17f2e4789fd1b7dfa0d31aa5f12a64c32f967a6
SHA2566eab1b4db2116d85289f1d5828d587be8b5c3c2c6362a12d4452a2a594c5c04d
SHA51230a3b44b0a9ccfa17c8a0a135b2af71eb2d8da5c9fb89570c0c81500b82cb5d2c436fb799b84f2f289c686efd2bdcb68998126f6a01846efa3a06f5bb1c63339
-
C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exeFilesize
224KB
MD5c0a308511b60d7d4659175e910ad328b
SHA1dfb975072cca55a5ed14b130011127b8bfddbd30
SHA2569a31f2d7f67e0a84625b3f5557853adfe25d603dcfb024d0b171ef919b9f7bca
SHA51290945aa063b00bc6b5f1bd12bbc451ea3af7c98419a8c6bb3d73c704babc6e3bee63415d6f515d0ba6129d9d5bf43a6e2c504d009f7dbf7d35a022d5e8d5e70a
-
C:\Program Files (x86)\Avira\Security\is-STFPE.tmpFilesize
56KB
MD55bb04f33c82a5266fdad128e6f4db942
SHA16ec53834c8ae8319631c3baa1cbf7d92e2f1e084
SHA2562f399f6165b131820e8c151876f974bfaf2ac09ff0bf014891a16f0ce21cd2c7
SHA5129449a059401e2e27552b8de95d8d9bb27429ad0e472a3a9cbfcd69418abc900272c87e5d51aac625c7db23571ae497b496242fdb032cf6ab696716b7ad7cec88
-
C:\Program Files (x86)\Avira\System Speedup\Avira.OptimizerHostClientLibrary.dllFilesize
1.1MB
MD54511bd184dcf6b45b42d8c0594a7786d
SHA1436e3e4303d01edc2a133a5b39920af00e74793c
SHA256cc0ac96096347ea4e04747a45ed5f8d532838196c786a20b8ea9d25d83328934
SHA51295cabf4334328eea0d4aa72afd8526360eaa3cce6036561c01c98546c77d4431a26dd7f61af963a3a657b4eb82738dccb4ea0da8b1ca752db117011ef6c807d7
-
C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exeFilesize
326KB
MD56f67cedbe5bbe86d6dd76fbf6a19d84e
SHA10de6efe7bf416724084d379224e7560a5d0be9cf
SHA2565a2969e76845af4423b732d1baeb88e392fa6ccae4e74381114bca7d23d673b5
SHA512c6dd8ad867ae75638053b6cffc80c5db15d7eddc825b0d8f2a4f5b58e5c722a97c22b08844a671c7f1fea8a688f4e439fb2662908b93934bcc4f1778204ad5a8
-
C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Maintenance.exeFilesize
352KB
MD52242d31d6f0c91adf643dbe3bae6a20a
SHA1a53f165efc55f547cbd434b429460e70c5dc8a35
SHA256078c82d7c156ab493cb52fd2b43060a78ab9202a00ef04f821a31b3b65b0171e
SHA512c83343142186011ee794b22a2feb85d2c95d8961c5be826105b71e87e0760518111d984bc55747a4f0c98e225662eded2ae1ce33591915d6e4d493831e40900f
-
C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.44\Installer\setup.exeFilesize
3.8MB
MD50748382653938cdef66004b682be9b3d
SHA1654f082db40744aa454dc9d408eccd6f532b6fbf
SHA256d0dc45a21b3370d60a0ac9f774f878497ed86f800f20f0b64593c13fa779b63d
SHA5127be1615cd2102120c4b5be034407f7e88638760ea414c6590e58a77bb0415adae8200c1b79d5e279766ecfc589169be8dccd7f65e1d38c1bc35a4b84f4981316
-
C:\Program Files (x86)\Microsoft\EdgeCore\111.0.1661.51\Installer\setup.exeFilesize
3.8MB
MD5c6630a0475f693d45d64f074b0f013ad
SHA194171ca4bbfb866a69c61e70d328792d0f9f8680
SHA256e47b0135af442c2fd7083c9b5f7973bedb5edaabb5a98ae4fb7139dd91f1820b
SHA5124194fe524738e330455b494dbd0a2989106b7a3108728c40b7d441be91aff6fa03e431640abc933d1e3960e739098b353735347c880d10c488b82e7afca02932
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}\111.0.1661.44\MicrosoftEdge_X64_111.0.1661.44.exeFilesize
135.1MB
MD51c39fe7f16ff60f850605cfa9d133c4a
SHA1eda7740f78383bb4ff24d14090deefaca3d6fff5
SHA256a090bab1a3a4bf310f6c33e0c2dd40c37e31aaa8f6e24b0533bb60f3e9750990
SHA512ac79f130217d4ebc243ef0fb779ad043594d99a8aef93f02791ba7a54723baa90afff782aba1310853a8f7fa8a7900d82f789e6baee738f9ea27571f5ff84a69
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Download\{F3C4FE00-EFD5-403B-9569-398A20F1BA4A}\1.3.173.51\MicrosoftEdgeUpdateSetup_X86_1.3.173.51.exeFilesize
1.5MB
MD549d855de2949446e9f3fff2b153fe96d
SHA1c9cee37d144670a0cda00cccbdcce8c27db5908e
SHA25670ff541d6a289d389a36f0b30ceae04e1e064302378982cf2c2b9d28f572ebb3
SHA51231a14a00efe3563f5e5d5e5cb42b1adafae34b6981a1f26368111010b04d2add275878222e6a7d2b21a63ed2916191cc64b24b83023c6b87c795035d7eb5da28
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exeFilesize
201KB
MD59789883e5166929441ea640b8809910e
SHA1bc4d75ad286238eda2414f8da3dbaf7b727d0061
SHA256737a36758795995066093c92c079501cea125c253a58b6062199607129a85f51
SHA512ce73c9a473ad94d9eca8ef4c1e587190fe7cbfef100371984612f4f9144390c5eca9ba9ff976ddd457894df9b06048105673d580a0f2222ba76573b432885e13
-
C:\ProgramData\Microsoft\EdgeUpdate\Log\MicrosoftEdgeUpdate.logFilesize
118KB
MD5b1f07aca55af0b99267dfd4f9a18fc50
SHA12eb8c19b2f24a0ec76c6a83dc95826e7d984665e
SHA256b079192cf56666fb0f84a30b20d81046c1be4c07b1f17c5a6e405420d9f7e172
SHA512661ec52ba5d6c4bc9dd018229a19cc903be66c507d9be3e34115bfb8f24bba45fa3d327f9847543f318676cb7ceebe86dc99e500af0f34e8111c14bddc126916
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD55a10efe23009825eadc90c37a38d9401
SHA1fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0
SHA25605e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5
SHA51289416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.datFilesize
152B
MD5c1a3c45dc07f766430f7feaa3000fb18
SHA1698a0485bcf0ab2a9283d4ebd31ade980b0661d1
SHA256adaba08026551b1b8f6c120143686da79f916d02adbef4a8d1c184e32a19fd48
SHA5129fc93f01ab4b14f555791d757ffe881787cc697102547c61847552e597e206e70c6d35fedff559c72a0a67d1b95e769095ecb0a8a7d4f07cf58a7a0d57d3e9f4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002Filesize
66KB
MD51e1893db97136870e8c6cb54e855524d
SHA1dad67c5eab8bda24910b60d4f32cb3962bbe0bea
SHA256eae958938cfac214a279052123bbe4821e9a8c8e560062f648c873c9e01815ae
SHA51258fc4cb6943b102879de7c183d27d6b79050ccb91ee49ba8f52a50e47d5c7cd86426da2b3fcd2c9393b1c2e56a1e7405e4a5af845cecfe64c9289443c87497c9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003Filesize
62KB
MD5c75e16ebee81303c7d361cff076c69a7
SHA1ed658ee2e5f92380ec1cddb47d9294d26980ce69
SHA256da5719acdf85d2d237fa2afe4cee6fb0c81e42dd8f4d5e85d674932d79a23e00
SHA512dcde0b218d0288af970d1a2a84ea3f4d203a7148fcb328ce0b6b72fdf49e7f39bfa61242e4a5ebe884daec18387be8582f59157b985265e4ba3fca78721ca381
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004Filesize
38KB
MD5e4c780a544249a7967b82f07268ef432
SHA164b38d103f06b8de4241c62835f67b28a96d286c
SHA2564d2dc675ba41d56f2aa6cc1286f3f127590c9748f7b4e0bf4c79b0b4bd620a9a
SHA51274b9135f09dffd7a081889235d2f4c7a343291a4c4458ac69754cdd5790b455b9b98a128561d516202549e83671de13cc4e4b9cfb3ff195dc3d23b42885edf49
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
48B
MD5be0dd572c9e08d6d5fab84c15c54a16d
SHA188255fa1eb6a27c5f61214a86b07d802e49040c7
SHA256a7a452889fe0a31dfccd1d175e7e5380eb3b4d3597503cb49fad175ea3e400dd
SHA512ac3b9373cb610c522b648ee4963458f6d9d664e3e81e538742f03df7825cd1a3971b932520184bdb38cb43b83614b613b18b29824b3db669feb40c9c082bdc23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-indexFilesize
1KB
MD587fc6638b6e15c89cb3c9fd7b7399c54
SHA1ad331c25434a7e84e377e0020f3d170926d53539
SHA2566d7e8074bac27cd3d48a9144902b1f2342594405a0792e17eb0b00e6ed086a35
SHA5129161a609e291b49c72f15bc444d215e37576bb38f235fa4db459e5be78f1bd71fe71de24f745c3ec50de916a4eb080f6d9f7eae1cc4a01ffe9cc8136574ddd9e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.icoFilesize
70KB
MD5e5e3377341056643b0494b6842c0b544
SHA1d53fd8e256ec9d5cef8ef5387872e544a2df9108
SHA256e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25
SHA51283f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\de\messages.jsonFilesize
235B
MD5768369121f39ce9e9473cfe0b983ad69
SHA1f600379a1ce1e2daec7f16af08bb23046f2a07d1
SHA256c0288cdb437e7c1bdad92b320cf32c6298c0b1e89011921d636e40cfe21ce9e6
SHA512a221210341bf30c082890ce9dd8ca059980603bf166f361252c4d52343f2935db4305424261823c9ef167da4a47d5b6ae67ff746751e22670a2d502b0e3fe9cc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\es\messages.jsonFilesize
236B
MD5acd2d1ac6478ebc6f3d2f7f166412e7d
SHA11efd577ccf46fb0472e68c0aabcc247c0f176cab
SHA256333b347d71442b11441ec55e050ba9edad9d4bb6cb45f0172c0de9d61ce38351
SHA512159652667b5b05001831d56fe9230fd2fa6c458f14bdfc8f1b8221fd16c276e24e06cacb50169547cb119b26b62b65e934a8e33efad809bb5b5b5008b0a239ee
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\fr\messages.jsonFilesize
239B
MD5b7e4a95b829941608b828b6c7dc8cab4
SHA10af5cd453d2c74800b952026302a4689209d2405
SHA2564f246339bafe69d6473b6bcc942189fd883cf17d1d9ae0cd61fa7f342271b069
SHA512cbb6290bd0cc8e51687e9f369eddfdd9fd52ebc97135db6ba9b9be6c495613c35b3fbf5e9aa568ad0f9327193403b7a8718480ceed0c83109001feba49f1800b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\it\messages.jsonFilesize
235B
MD51ac3794f94c3edfc69b586825b61fc24
SHA124f3e1d0e2132c1ddd62335ebcc73da7e5c5cf69
SHA256f55e4ed4292e7d995d340627f8a38cfb6c3f9ea4fb8e5f71fe00a2a84237831f
SHA51255be5d984a456ddcffa74176be51cb6cc76bd48695e948e532aaf9e9bdfe26cbb17edca0644d4ef0198051eaa7fe521e0d73051ca19f99b1306da1a11e0f9bbd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\ja\messages.jsonFilesize
261B
MD524ab2f16eca45188d6462f8b4592becc
SHA10602d1f2437bb220a202f57132d41911b3654802
SHA256443f86a79a9592cde1947f341176f3d92704b2b3ab1af8047cb1765549bb1685
SHA51209fb65d58ddd6d3d8b672641831a78cf3b634c71c698da80eec22b41a81ade06d72255a85cb8b537da8a8f0392b7be4b8f604d590b7698e980d9341a771d8557
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\nl\messages.jsonFilesize
235B
MD5b2c3f903c5a400a968f4a954e3b4cc13
SHA1009e302331853488d8a64990eca0c815d50a89ea
SHA256887eec981fa27ffb3a07a0ac9043a8518bd8e12dda99bf5dba50b4d3a9d6a42c
SHA51223c40629184944491efd9f929d93d25ca449ff3196ca63cc09e3f4c21c107cde5f756f9a8bdc7d745015356d3df4bd9225438dd3b9d203597c2c47a9cd42ae84
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\pt_BR\messages.jsonFilesize
236B
MD5eb765b13ee1b5de1e8badf8adc24367f
SHA19e9039a6efa71b0742e9b77a1a2da96c5fefc145
SHA256e1addaa5cb17e403e6c7a339a9a8bee205004c6bc7388d5baa9356c7e9cfe858
SHA5129e2767cdf38387e3a1cdd173573c20236e43029362aaa56d2dfaee01227b98b0559f789d1b7f342ce77f5b262715690df8d31f1b84edfb9efb43447f8e42c49a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\ru\messages.jsonFilesize
281B
MD5da5861bc863584ae7669d140630342e7
SHA1846e3c381bee1a96bc310dc869ba10eefc2d88b1
SHA256079ac944d60018ea0ec88616abf1f615e71cfad83174816f27d72d0c02f4dabb
SHA512c4d8b47e1a340b556c0b18f281f5d3b65bae975924318374fc927d70e0ad126c84f5d4197a4bef1c8a125d0499b93397933554e8064b394431e82a13c823f810
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\tr\messages.jsonFilesize
240B
MD5afaff63933a028c193227fd69133c395
SHA172c6158a9a77da70a611d54ecb461f62d9cb5539
SHA2569325255feb4645167259ec59fa9a8266280fd49a186878e8167dbd0c168d3b1a
SHA5126e5ab9bf77003fdfcf8ffb993d27a1b1cb9c1505b03e852ed60164cd3021c300f3210c318d3b8060259bcf7e9bef971551ae2ec83e546aec716b76893ac13e20
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\zh_CN\messages.jsonFilesize
231B
MD59431ff93b0022eb853f6464d15bd1d92
SHA15f040f4d34fcc90287b8be565f0c41eefd48a917
SHA2567f827b1ada8499437aa79f429f581a9f6f0f5f50e90607c50517c6b4fa8e84d6
SHA51238885e2c37eb0cf9bcceccc9955fe4edd85924c6e552fcc5ebf775852b04268ad8ec7929405dd0fa5e9527a4d678b6e0e2632e7ae4a53cd6268b3fccc6bec802
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_locales\zh_TW\messages.jsonFilesize
228B
MD54305706c833e2f09eaffde9e21f6e487
SHA1be46012c07c323b847f17792495b69d373cc3dea
SHA2562d1957cfd7c2cd4216221d27b26de74978e682de207947abedaba6f2fcc34699
SHA512be35190cf91797acaa0a8e1231dbe0c540ede607d1ac3fe3820d5a0aaecb73c1ec9dafddde1d36e515294c5c78ff4d9ec49a90bad76e15cc8fac2bbe1b88e161
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\_metadata\verified_contents.jsonFilesize
17KB
MD5d5de46f9808c0b6655bd7f5bbee70ce1
SHA1ca2f3592e68934d7142918a5b8f1f629c8ceb6a8
SHA256fa686f6565a5a277f1c244c04d4db34eb681bdbef6871fb75486535cca2121a4
SHA5123ef8a17994839e490f9d710b7a395d18a046ee39fbdf5f6ac261acf5723a5dba83c290d8b65a7a834168169c507b01a60d250dc3ae52ec0f8fe4e60359828290
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\adguard\adguard-api.jsFilesize
1.2MB
MD57710357fdbda37e7198b22171a5923f0
SHA1688f20729d4f08165d98e916dc47191f6395171a
SHA256dd68d572adfde2bd5dcb25da06696b1fb86cbf78a97c4253338ae5a8c98022ca
SHA5124cf396dc02192a71d6c73075b9316ec3835d9d4255ca0980696387a7db464b03f290c2116a7eacd1d0ae0280d535acd3c55d82dc2a8626edaa399ef211086572
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\adguard\adguard-assistant.jsFilesize
9KB
MD5179aa237df539cf8209f05b042a6348a
SHA118409da7dd08d3822b555c3819e0fc7a89057e1d
SHA256e2077bbf36602a43735d574dc84a91475bd1f02bc13b71907f661ab119dd277c
SHA5121fd8b90d1678a51405965eea6f4cbb5a9623d349a782ca88be4acacf434f6d4a38c8179c58a09621853db4ce03b6e749ddfc5dafcc23007f3e64e522118ef52f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\adguard\filters.jsonFilesize
50KB
MD55fbbb1eff53ff9ab11c9cca6669d0aef
SHA1ec9bb17e2d87f5b1dd0a1e60490afdf2bf43a69d
SHA25682fc71eb962b234562ba7c19ec7c5a694908678a876a66a5f0c7cc1e5d388d65
SHA512c51652ba1090edd580981f4d637eae94716b9edd86efb96c4860f0814ee0a0832223a1f275ea0dc13d1358e363507b96c4b130fcf35857ae35d6d12bcdca35ce
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\adguard\filters_i18n.jsonFilesize
437KB
MD5bed667ea66007f8e69db252844e406eb
SHA15291764d69c35fbde4bc97902c7753a11b415bb8
SHA256fa8990401281d12b5e5706f92495b20cc78a23208e36c283e4f05264caaab2eb
SHA5123be7b8a8db01458ed4bf9557ce5dbe29de75575b61eb0247e49b6eea8f0a368aa0bc664a1252900f1b3b28366f256bb29d96e49f7a262d1124a42b87d6946647
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\adguard\redirects.ymlFilesize
63KB
MD5cba3c373893a8ec71edd2922a433f85a
SHA1259554a2b327f93a6896e63b61c47e7e823c2360
SHA25674898ace1f0b1175e27bfef0f7c0b68aea8fc035408f2658823046d364991869
SHA512184d2998663f369eccfef0bc03bf988379fe6f14f7fca11b9e4e82d083626fc8f09d2858036a5ca34e54c8e640064e43ef866f0ad176e42cea6f4bd82d618033
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\abs-page.cssFilesize
12KB
MD5278f720401936303f75525e8066e6268
SHA10d27ddbfc05053fa1822864f12ea57976f391fd9
SHA2564811ddabeab4cabfae7bbef0aae995cbd697a6ab5390454d13051b66fe2f1b4d
SHA512ab5ad7f037c1ca692934861ca46482b263eb818e8c8f281e8b6e72bb509a3b3510ad6c7440a704595bdcf34e2fcaf717e49e16deea928a13703586fe42ac0bc0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\app.cssFilesize
35KB
MD5cdda1f06d04b256418ebea89af3e1563
SHA187dcc3c48cbc71f4799f5bd66bae2fa6702e6d53
SHA256f4cccfafcb7ec914b6952d581c4a543104ae03665229ed60a886df0828ee6002
SHA5122c4585e1f326fb195a01d7050eebd9e64a731cd0ca92d907599255915f01f6cc70b0e5c86e3112db15b381d709e8f1049953803d87997abd8882737f4b13950e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\blockedIFrame.cssFilesize
2KB
MD500ada3be5477feec7856fbea07b673f6
SHA1a14641685fe48af82ae4d51ef2342e29a9fa181e
SHA2564182e6a2069509bc20848d95dcae49413a811848587f5dcc3377b503ecebc9b3
SHA512dc378ee98524ea5cea8f28a6df793e6eb2f8cabb01f4b51c44515aec9e0910bc17a9feff1403d8aa348f00b6b30ad96af6a72ef5870c1140d500e70af566793a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\external.cssFilesize
3KB
MD50e17c269f64b863d1502ba449e6b4f48
SHA1158bffee84ccb892288ec5a2f6048eb580dbc1b3
SHA256cb3fc2ff2a457d26c6139ecb68d2d9e414dd3337d0a126e518dd067f5d78dbc2
SHA5120af53de74de76d02bda0497c3daee515dda867e6ef1bb64df0374197947e6bc33a35d383c957488176f27529743f4adcd5de65aae668e907baa432306180386f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\KievitWebPro-Bold.woffFilesize
55KB
MD58652745947b62f03147b76cd5db508fb
SHA13fc62cd4eb74c4fd350bc559897ffeb576a88ffe
SHA25616b555282ea8c779478cb1d8674dae40f689dcdeb4664cd762cbdfe47c476d8b
SHA5124c518beadd3179daff850af3a3e95293c050a86dba3483426bd11c44aeed2dd737f031eb8a28da40ec1492f343918d474fe2fec11101ea8b1d36a84ddc3cc515
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\KievitWebPro-Light.woffFilesize
54KB
MD5a8a9d6aaf9f3940badc66e2a2aa21047
SHA18d2cd2f4fd9fd36f19033c01272dc3fe43bccdb7
SHA256a791aba3842d3766494ad0aa2a1b9cdbd2bb8aa8b2235aedea82e993c851a1ab
SHA51246561f0b8f178e4e4cc836a4561d12f6a0670543ac5567bcede9cb193bfdb4bf654e3f01372210f158ae3de58643e4c963c1e1cb788f497ee817877a019fcfd4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\KievitWebPro.woffFilesize
53KB
MD5cb0b064a6f71ca79ea66c595c22211cc
SHA1681567e2764d6e5c7f3d851e77063b9b47ece64d
SHA25601fba482f08656e11cbf03333b07048a33b574dc7024d5651f94b0b3cff89c3a
SHA512ec1517a4c564a4baf1c353143ada7db4fc8d0933d1757e239b67e5aeed5748c2c905ef90b1124deddc0a3316c0acdc136938032660e5489640c85f0345889984
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\OpenSans-Regular.woffFilesize
58KB
MD56fde2eb6728eb97fd914dcd0641d332b
SHA1fdd99dcf9469dcb61a4faf9d42237f75acbe6a64
SHA2564f5c5dfcbbb7f9a09d7e27232c922994a6a82227e11e4299e922e4c6d9f2119c
SHA5128576a69b6d85f93b3f12372665a1709a7738d716ff83ffc2bd767fa36302aa27bb3628e3094c9977e164e734d29d3dcd938e384a8f4a2524d65000198f5f5d39
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\OpenSans-Regular.woff2Filesize
43KB
MD55d5735e57127db2f7a2ad879fc6056b8
SHA11e55dbe4e381353b147bf963e97bb60a43b0f28c
SHA256408fe165dff48eb2f8cb3a2fcbc1dd92b94d56b4ab11813be55c776871c691cf
SHA5122b777359ef42e42554688227d03de7b0d571d17e59808fa5389bb51a86ace9ac4821e2d741c6625fdb0a81ba80d5d6d91acb47119403763f4070cf605e687245
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\OpenSans-SemiBold.woffFilesize
60KB
MD5fe241c6c4f5a190e821b7c03e337d756
SHA134cb39f498daea83e4575b41d54c0536c2496714
SHA256029855f6870fb95f6331f9d8510e4b36cba265a694ebd643824bcc48a219f170
SHA5128f73787ba84e8f441ee4a836ca90c351afc4766ba29b4c45ab58b5b24d73c522c44429f076c69df2b3fe6ff844c6874faad0122fb1b6b01167e5c85004c2c111
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\fonts\OpenSans-SemiBold.woff2Filesize
45KB
MD57106bb83a0e767e12659de9cfba3926d
SHA1b869c145806c2b7ab5e0603db32c6d48b19faf79
SHA2567a32484e166e1337fbb0cf4f4262bb385ed9081f1ac20f9efe39e8e50490367a
SHA51227a983d80c7f0553b60b047adbc1a22ecc9f48cba76fee8170512287fc7544d15ed038aa6679ae01559406aa74ccbcc16a51fd2128811bcc794a6bc4dcc994f4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\loading.cssFilesize
605B
MD5141647baae089ae82d48cbe41fe05587
SHA1520ef2e9b384c7951c65c7457b358de07c3533e2
SHA256a75340fb208ed7435f8398e400118e4ae6df8550eae19615dbf1ee79ca990af2
SHA5126b04e63c43eb384a2365aa684e26b50f45f880cddbdf4fc2ff16e65b3fe500c98d4289844ca4275d236d82575926c398f1b96b0666593fcb5ba1c5cba8e0fefc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\popup.cssFilesize
28KB
MD53ffb8bc021134070b11492ee9f4c96b7
SHA1bd975bea946bae402ebdc835422c0c375fe60b64
SHA256f639dd60238a462058e9f788c77f908fae9d783d1c2edc0bab5594b72cc93baf
SHA512e3034f34d616b5b05f5078e1abd24769d1d897749419d90aade7d6222628d32c1468174acebcf6ab9d677e4bcf3644e835616f8631ceb282047261660a2e2074
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\css\vertical.cssFilesize
3KB
MD5bafce6027ea2815a98c23a78c461dd40
SHA1282655940842946f1588d7ddbe1f46cd4c2e12e6
SHA25662969c5cf436234078b317b83ade2cef84da6ff864857c8bff6b4d86352219ae
SHA512cf03e251c0174f85ff6de7d6be1af353b8de538477c29c99c1a9a3c6f0b01c3e1ba854b44d2cb3c2e1d328604881d3fa86ce37bbbbd7ce62afdc0d96b6340382
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\ExtPermNotification.htmlFilesize
609B
MD59302990e04ea201a8674bfd300b585d4
SHA1e03756903189b92a429af87937d8d4db8ad6f4d5
SHA2563d56f32de79184fe57c3f821134135d3d8d73b2e63dc4159926f73e4141fb129
SHA5126ca8c817fd9af12791328ea8f8d4bb4c69c99c49dcd2fb7d92807e5f153bd1ec243f169ca57391c67c151b284c16dd930cdf73d5db917add12290a89db64d5d1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\about.htmlFilesize
955B
MD5a7d9407fd276bfc656a6977b5a957fcc
SHA185d1307784f35937b14422647a578819d7b00524
SHA256693c2c387a95641d5b326f9c622cc737d0c5b8413d4f9d67739c67fddbf5ec24
SHA512a63a83c7001173743cfb3b97cd56bb29d21fd383c88842adcbf289b0a2c90b7f9811b068425aa35d268685d5bb0930f7bf4d5056e96fb966f38896d444decfe5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\absLog.htmlFilesize
1KB
MD57e6076798609bea02deb6fd42561fd7a
SHA1042a8538fb16d9311c930dcbd9a22f52b77d5d01
SHA256505d536d6ad2b17081b0733cd46be87e05aa593caa110e6ff21b95774cd133e7
SHA512fab49aacaf3e1af696cc1d424118d39517a6ced74c518a7c97a1df75954933a620b945d6cdb92a029963266325cd8f7a82ca9b7a4e9717d7cc863f4f41e364e1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\blocked.htmlFilesize
320B
MD57b82d8e14f98c0133d4e5b43cf93213b
SHA1196f6d5ce425f46b9a37be119f7fe2d53939ea21
SHA256837f56c30fbf15f104d35552163ceffcc26bb1ca0196341f213a6b9b46774df3
SHA512b468054f45b94f085b699c76d7a3035fd3714b2179739f556708118701f11245bacd00472779e76bc8e9859fb315f3c87c5458c0dbefaa6e514e0b9ea0101d2e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\blockedIFrame.htmlFilesize
361B
MD5c5f80f2511dcd4d85d6a4121226bd669
SHA11da1a6397cd2fe7af31b74d75ec834078441f0b4
SHA2561594d272506b1a93c8100488c44bc64436407dc58c9f9d5b64cc9eb6c2ea0fc5
SHA51238679cbd0045f1d3a4f3cd116da390d249c6c22f7cefc949b4f61d6c2d855dc533017de6aad9ef7f017a851df597b2eefb6f8ffa631856ca2f8c881bec30fa8b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\card.htmlFilesize
592B
MD51d94cf3e6574c0d8eb19bd0fbd95ff87
SHA15b61b920306e1255284458a574e8a460dd1add53
SHA25667e778413af1b332c6cffee9942ca68838b805dfa6a6529231c691db5564d595
SHA512a9e1eb8396a3d39d9ecb2f9978039e15e42d4e649db37e5516c48d6e9650a40f6bc4610334cd0f1c212faba69605533a20459712111e0eb4e6543ffbcb9a98fe
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\external.htmlFilesize
597B
MD551bac360495415690f3ee5a3bda5356b
SHA1c6ed0ddf194ccd6e97e0c60fde645c6a6d2b75f3
SHA2566ddb5c8e2c6ccbce556f28f854881ece3efb3562c3d8b3e190f0a77b97f5ea21
SHA5129368c2fb0b73e247c4a5dde9e752f564bba06f11dcad8e12ae5e969bf170178f5d1ddc9ecab618bfd7a27dd5e978bf88b877b80e5af490ca3ad243cbae5416a4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\loading.htmlFilesize
424B
MD540c22d754b3ba1c0abf88a74a94de82e
SHA119963348e09e1749b132853c490ec849611bca62
SHA25670994d24863e27a8ebd783771d447a56119d0d6e6162aed1ff85323a656d8767
SHA5128f161f199b322c4edc6e08f893ecd558b08ebb97ab4694c4f28306804edae06394694e20a61c3bf9865ec36c825f55ab463189512b3dfc7f0a83e203e533946d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\popup.htmlFilesize
772B
MD5575715b2babbe58af5055fd214118ba1
SHA14018d09168e46e575f98ae149e27d461c899d4e2
SHA2560cf5d796ef3e9843f65fcf1558ff57afb90d252c5aa4640bc2a06d01e3f13dce
SHA512fc0a3f21ba317be88bcb0ff15358ce6c38f3f97c9a37679263a183eb528486914b7cd8790dec4c019a147a5284639766695a0eaa7b066ee4d91a9bcd71a83123
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\top.htmlFilesize
577B
MD543b8ef104c1b05bcf16e939c20b251d5
SHA1ddf0931e5626d3c0f2f3ddf46c50c5d50d2bc619
SHA2569000981a015ef6373cffb830a76480db05e9bc2bcb2870b1fcabe9c12bd491a8
SHA5126fd8c2d9404fc8c31608df8ca2fb832bdfc589b26a075a9f5528cd36b8377c334049daad2ae489ce5b2b4e03ea34123c65514ca94234a15bc5f5705fc27481c6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\html\trackerNotification.htmlFilesize
608B
MD5f837b03fe465f18daefac626b3a498d8
SHA13f362f1f82e9173b03b3725f71ea97a7fc4f1895
SHA256643a1f7a63657a6fce9a2e117f3d990a65682e1ca58a922314f3b106a9dc6e63
SHA51256f7b59f4169be37ad04dbc918e33e46b8f7adc6a49b04f9fe039826b33fba0d313b3c73e8f8596955030cab4ee1391bbf3949f37e6b094dcfb7669399ebff97
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-ads-blocked.svgFilesize
2KB
MD5edce6db6043a46545f1db7f76e8569ff
SHA161ac052b05585b8c1052af0750467ef97ea3977e
SHA256e336dd768b43b8998613c3b0aa21b9df68e444b55b936d78cdde057d3328ca90
SHA51282b10ab3f7b555d32fac57de50dde4094382f877cb92a91d50b730817bf9420d7edf52388dfb07cff0400996ade86cb4208f662801f8eaf5ebdb24230eaa3b88
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-attention-small-yellow.pngFilesize
322B
MD5096a1defdb6d121457a984a638656b16
SHA1761cca1118ed7c56ab09f2899c77b0fba2998aa3
SHA256d2c167d2dcd520cc2c3e811b38dd2a6910f20ea2a8941f022531cecc2344fee6
SHA5126761225e948b8f2fc0aa641ed882a7a538e10e093f4f16ddc825f63de247f6fa80708d615579e6c7fad002dcb37b480cf863669c87ada2cfbc80c205325c3712
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-attention.pngFilesize
3KB
MD538b66ec6515e30ec167041661a4a996d
SHA11cc89ebf5cc4558bc5f9886a90f4240ae2dc885f
SHA256c729663d6b86abef0640f1c636102c3c22672c39867b0aa4b8b850386e9eeb72
SHA512d5e8ebae653609891cf98219a94f865b7f914b9188332c7f1373e6f3bb8a67516ee382695a2af2436227dc1867a4cba37bc95a017e7aa3f8b59e625b7ef945a5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-check-small.pngFilesize
450B
MD5028d7264fed3ae88326227f4e63c5339
SHA179414c0431561214ccd3fe96be8267b1518a4df4
SHA256b25c550ccf4551386baf8e9d7f0bd3a7f5164af0ff27ced82e213f788ea8ef43
SHA512d2bac76ce970537947496b11e6d2eca44461ec4899c72aa53dff577e08b1b734dc7c7009df2a376aa2ccdc49832fbfc9acdd8546b15fdb22e3cbcf42d4ec102c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-check.pngFilesize
3KB
MD59f83bc5aa81337291609ba57f3e7e431
SHA19f71519e4fbceb28d29a503de71d8fec0d5fe54e
SHA2561c30bc9cee8956c1e53b6068ae489414b7b7be764ebe54430f0568eb71ef2788
SHA512e5b1ac7353c5bdb049575e0914f392d3c16070b772f03b89422208cfc6b5e403debe06b090e60f6bc3374622a3fe91bd2ba998eaa08a833c72e0af6231ed233b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-checkbox.pngFilesize
542B
MD579e61d16ab8bd2093f6d71b9f2126eda
SHA107befc0649f56879910a2c05833f757296c50eea
SHA256731cc89589e63418b6e4c2b1d5fb29ee90496ed1ee7a48a7d180288251cacad4
SHA512ad83ccd30f46ce73a9f47627b948d459abc157e769603885f1c2c1bbd65d19d7844891ffec386061f6a92ca0463e39ed4ee246af439e3aeb62778c84f50ae2f6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-close.svgFilesize
704B
MD5efef07118c3f6b6714a51e1f9a0a52ef
SHA1eceff182e43d106460dc2a0a7f0c9595ff199ade
SHA256d245b82012e36af73493b6a19ff75d413a99a94ef4000258f927c2c933d3fc2a
SHA512c23ba695045f2ef54e0cc228e9dc1ad589224a89dad2aec5ef59cc4f4b20d453f4f8891b002240d7f5f37ebd36c2cf27220c1b39b0f8bd3875787d7d3872057d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-danger.svgFilesize
5KB
MD51d0c23d3a3df0450a824d6b6125a5da8
SHA1c2e8579370fd9f9c045fc674b36aa89c76980702
SHA256a14331e5319102332854b7733def47b904f432b2da3108332d1c6089f2bd61f1
SHA5126b07977e6933db42313f16c06306faccf169ae5ac52289afab31b7cb05395f0ec53867ee636b3ac59a02e42dc538472f740cdb81b29538c1fc2306a119b22de4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-info-badge.svgFilesize
1KB
MD5b853fdb03fae71ac1078ef067e1382ed
SHA1bc471366eec8ebc82b2a3e1ce5f57b01cf3b1e5d
SHA25622ffd29dbb44509ddc46b0a07935169999f39e2c36c4f861df4ec1ebe36e5cc5
SHA5122ed4a572451bbcf446886a8415f17d6c121fda69cd72206e5449d7c6bbef6e93fc7cc48d8b74881a5333a0578f9d45b71de0d4446b582c7f82da4d1204b9ebb5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-menu-close.pngFilesize
232B
MD57c0d1689c3fe745687cfd01ac024d1c7
SHA178f42cd6678a38bc3fd7828e16c24ccd57dae12d
SHA25681955385b42701de114434ade08e7a734805461a8599608f1d424eee493b571c
SHA5127b603a486ce463bc6cd22089900c5c6ac8a1c1cf4822761a44c9d6ff27c587fb324f29e01915941419355a9e4273fe47849dd14e732a42a498f145c22f34f9c5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-menu-help.pngFilesize
230B
MD57d9bdccfbb5224dd023623178b461ec1
SHA13152b0a349266d84659bc0af705bdc9964f4e104
SHA256e8e9a356841705900ffb68a0e3e0a5779fb91e1d57d99e76321d582e90212885
SHA512d80b63e3f7f111de4cb5500bbd47bd8ef4543fd4825e25a79d386e0f40c80ca55b07e17351c68d97c0e4919d4c57255b953f5374341e51d68d8663efea787ad3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-menu-settings.pngFilesize
379B
MD59ef6962f93b27eaf94ca003757eeb4f7
SHA14a19af7efb0fbde69004d6b7b6e6e291e648cbdb
SHA25667bbb5c10a75aef381a30df66d2084d2f188e08d2a109358cd1567425ecd8d4d
SHA512fd3740f6a4fae3d3057c81cc251b64b3cd8c02bec1f91abc58bb5a3c5d2089a7f9078020dbe4929a3d11d50ecded4402fa49a3b0a3d6d2fe11885ca8cff0cc59
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs-trackers-blocked.svgFilesize
11KB
MD5b140200e56df096f16857c6e4d3c203a
SHA1e7930ee1cd0deed8acccff3c32e8bdccfafad6d4
SHA25665ba0bb6492f913720037f9305a6b548b94bee7c8a83014f6d105422852e8f94
SHA512ffa7a276b7fcf7ea8d8e834b060b11b07d035f3458f42f2c1c638e43d153d751c191cb70869003c3af0a369340899ac2645dd2e4fa600e090bb895d4cb020d11
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\abs_logo_small.pngFilesize
1KB
MD582516d2af5768d8bbc28e22612e62387
SHA17fce1dcf46d820aff313169b93992108c80dd17d
SHA2568bf36ea0ab8264f7c610cfef27d7d6f02640fb63d020a0d1d47df9fbefc8c071
SHA512251f04083683104697b9044f0a84c3cd6fb29ce2c6aa0230ec4c6b08d5eea240087950e29888d5130b18521928f8ceaaeeeb14a92429af48272dbf086f519980
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\absb-checks.pngFilesize
972B
MD58e54aa861a9bfeca5abc9a0473e01e7e
SHA11b0f0b2cd84b2ef6fff296853ed00ddead75d01f
SHA256255e63f5a3d6fad430830b7d45e998681f11151bddf2ec984ed6753fc5fe24fc
SHA512a50c6df4aee05ef50acaa9478613cb24bd9ebbab28346b0a2d301a76f6deaf23ea8274dd93b02f99648bcb28c01a0a69e9373e073d1bb67c8483e5e091597531
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira-app-icon.svgFilesize
27KB
MD59a763eb5f14d0b7437b02be35e2d328e
SHA17d75e52cf966a2679bc9e4b96660330fca6a29b2
SHA2568a7c8542da69184612838cf0efeb813ff0efa8162d835ca72746331dc408e44a
SHA5125ecc6dbc105117be2c35d83ab4a00a57f6086e5d177f956d577edecb718891d4de07976cd8ed223aae0a11ea3b7edbc04740ec35bbe1c80b6fabcb074ff3f2fc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon128.pngFilesize
3KB
MD53101317f028ea2740884f0aa55f9781c
SHA17d1b34e1aedf419b70e0d46b6ebe9cf028dae645
SHA25647ee5af903d69612254f523890fd8b656f778d4b80677ed277b02ece84982098
SHA51263026fe7263ce2fd756c4babb23183ca9db832f2a2b93efa992be44ef626a0baa2dcb316981aad1cc35c1a5ec47bef2435bb0175d02574e76681aaff8be261bb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon16.pngFilesize
508B
MD5104f27c287c0f1bb046688829b8f00fd
SHA17fcf07b8eb37ca5d628548b2eb4dc09040455bbf
SHA256c02b11f4c6d5926f754ef3bebc80f233c963aa09da1d785c25a46320d60fdbee
SHA5123348a372b8fe9ff0216cae6dec75bfb2ba18f8a2396c05fc109d87c092946f58dbcc9749e0af2fe3305c9874b8b9e68c218d236fbe204026c87d20498b94ad77
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon19.pngFilesize
573B
MD586f836b6f293fee135bb57744114eca8
SHA107b0c19fc641c0f5a15f907067f300990fa28421
SHA2569d457f30e2acd76f4579a3ccf66b7beff2f7d827f6bae10abcfa3b1ce4e8bd2c
SHA512846aa90b4997c034aaa2d64a8bad1456b8277c01be914462d20810ea13658f6293ef3f163d50e962a2c303e939a87047475cb4fe4be0667885f6f18dffcec32d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon24.pngFilesize
822B
MD53aeb9edeec50c029b01a41025e09f595
SHA140a640d7a106ac3877e3a753de91b9b9fd02b6ec
SHA2567ab25fa2cffccc5535417758f0d4a2b69313cd06d80ce542b414e9f63a03b007
SHA5121c8de0178ea99144f752bb6d5bc4bbe2ea06dcf680ad4b202d72f5572e90014db3fb5a56dd81e54e079ea642fde2da0f9da6123462694887638edf0e05cebdda
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon32.pngFilesize
1KB
MD5bbeb9470bf3bc1e3bae38f51e349623f
SHA11778963beb82522f90f12b3651714282d7ac00eb
SHA2567f8bfdddf9d85030f6d03c843e67096cf5cd5e9739cfdf7e1e93b9e6033113c6
SHA512f36975d2c092a2eeefaeb788b359accee4ee7eff8aa7a47a82826d95711f76e4d24ed2db5f7900cff0469713279c3fc6af60026334c6670610023af45fb634f0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon38.pngFilesize
1KB
MD5ab679669b9da45447253f8062a3d4432
SHA122c87db70ee3673b7bb46ea2548eac1f4f22ff34
SHA256865c80e73b32aca16252fbc7fe763f71e54b234426982aa2f66e34a855b0527b
SHA512ed795644d4bdd49f35999c6365d6af6c7901e8e4e2c9a06796a51cfc08671b8c83ace3dcdc78ca8ee6c07b75252b971aac81258549a5f3afcd242a1d4b8ef4eb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon48.pngFilesize
1KB
MD5f8000bc39ec098931f7cb34e8ab4e75c
SHA1af109a664b578c12f79448f300d70822c6d0564b
SHA2560df8862dddc9535b3ca7bcfc154703912ddcb4f36e1c717a965e2e009dbfc654
SHA51210fdc380dab3c39eb059fd33079f940a72cc6de09b7bdd18290c30d8d7e30f21672489bbdaa543a91a4ba1e17d2f92c69efe2aa39501805703c45b76515f219f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled128.pngFilesize
5KB
MD5a481d57ddf210931c690b6b3dcb4ee38
SHA1c1c08f1b9cff3aa6d592ea5a515277e66ddadd08
SHA2566297323de5a389eb073dd96fe03a6c05a0f68e1deecf8eafdc6543a1500cd0d0
SHA5128f476b7df7f2c0fa2dab3be104adfc63ea35c557cd14bad6a8c80395adae67dc8b0531acdaaa7e5a1bba7e4cda737714254a9ebb369e09469d28ce747a467a5d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled16.pngFilesize
1KB
MD591f6bb1edf4571e2bbdf4490a9e85d22
SHA162364368eb79a958539fb3f9d5101fa9e33f5ec7
SHA256e4dbf87ef2db4cb0f8cc806023392e7ca2d5e7c2ba608dcbc1b8295490f050a4
SHA512612039a7c53626b6b1d6c4060e221cf328e47826bd53c44d8008b1f5d903fa7c8608201150e8441ae94a8e5da617fe213103b539940b9dc104a610195480b002
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled19.pngFilesize
1KB
MD5c3cd627d48f5f5381c90659f440543a7
SHA19e92748315b338b75d934290c5b1907253069ec9
SHA256ca5f081a0bb06588edcd13af2456d0177152c845ea13a0dd72552dbf83286f0f
SHA512e079193af5dac587e1c57d9045ae59caef2a7d90801a8ee9d9f8950e99115271f686fc7b39e14b72fcf882c39d4b7f4bc2f3585848007cff6ee71ab12e1a4cad
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled24.pngFilesize
1KB
MD5be4904a5b37ff6e6ffe7b271e4bc20cd
SHA1dcb0dfce2330c1d2081ab647877c0b2a560572ab
SHA2565cf30354fde8ddd8b7f7b47b71b18ba5b4ea82d5a2d1042f7bc17aeb400781d6
SHA512c50255aea9d69cf0e595a2dca98aa2e8009984d481b2267849ce1428c9befd14fd649963b94c8eb7a0a7af34e80c392dfa862a99981c524a2e084589ca3421a5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled32.pngFilesize
2KB
MD594a738417631064593c41c2e440ffc01
SHA1e68aecde30fd8596ab0fd14f008309807d7f88cd
SHA2568e9dca75124746521e8b9f67346a9170594fa7e6384797568de0b660826e186c
SHA512ff46df7250445199316b8eb293770dd2197822814e0d1dd800511af9e33241d00a2f5e1c53b11dc0345a211077f198f6983115063058dce4247e91af64623bdc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled38.pngFilesize
2KB
MD5b1f6d89a1e590f900a95e07dc4d24ba0
SHA1e85ba2880de4d778af803913302e3488bd19b071
SHA256f7987bfc8d4f2bf2444667e6a8d03efac3251ade9f43db65a2b247b68ab6403e
SHA51291ab7a44f96be6c61355610cae14761dcf1310d3796a0d0cdb68ab83fabe04b80555a76c365bff313c45c63ccd4f0f07eea5671a53805691b34d50997d3984e2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_disabled48.pngFilesize
2KB
MD5deb9fa07c2e7652d4badd63d254738e4
SHA1f55fd50d9f1fc0d4d924261eddbdc8b4f16e0229
SHA256d7138b944859201614ef45adb012def08f4a14b8eb978b368424059f58a0f455
SHA512148ec8b6d1aec173b78a224623740b64bc577843186f93bf64bb4e0f1ced89a0f43b0adad036496213afd40d18644976828aa421d33d14a4f570533df06bf96e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning128.pngFilesize
6KB
MD5764cd5156f5a3c5f1b34ff234eb7d0b4
SHA1c3d481fb25e5935fdbc1f3b231e5f8c006daf97c
SHA256f19d08278a8ffab999c351e49e0619d98f1e6c45bad265443e98c3ab131d5c0b
SHA512f51d5b9214f2caab087dd9694284ea4301d745176fe15e3aa6024f9ee42b868f8f85eb2b44b0ffd53feee93e883b0444fb6548dd1f600b7398aebf483278cfd6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning16.pngFilesize
1KB
MD5d1b3ee92b38f022783e6e600f1821001
SHA1ff65d7a57ccec845014ea0fa243192851d94aef4
SHA256ef1b7e0adea468b4d14b4943f4c2d18b4bae21d27e0fd80b43e1aa1c684caf8c
SHA512137f7ea7a45473c2ccfe4045b883edd4bbecd09ea1f97da6fd629d4f99dedd88ed96ec4516d417ac7d30bba87814a617e0300f09a0897a4eb7a4e9004d2934dc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning19.pngFilesize
1KB
MD5df468472e9708cec59993e2782ac0f48
SHA1012ad2428c84287b06f18b83ba998ac80dd6f6e4
SHA256adb4565b71e75d722d97f9807a24be11efc506dedc832e899cf8390d88ef92f3
SHA512191f14fc74c8861c0f4cd040b82279896074b174d4f8589153b0504d416e67c958519ae68941156a42c66ac5d6295aee32088d5645779de6a04cfbd23b495ebb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning24.pngFilesize
1KB
MD562e4b3c25f6706ba7a4e5ceb3416b3fd
SHA12fa250c68829716524729e4545bcf250aa6b8b48
SHA25621eb246086e164401033e380fe63ed12b5aec676d1ec666a9bb03aa47dbab46e
SHA51280ed2ef22e222eb0a3ea169435274aa9cfe2e895295fc99058a2491b7d868bb1cc341cb3db8b42fe21ff719c4f620408d719528efc88633a7b283b28c0cdf952
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning32.pngFilesize
2KB
MD5123dc55bce032f7a6a78d25839176505
SHA105b6f572395749ec1bb22d12c45e909809743c03
SHA2565c785d1bd5a3283027248bba70ed3f51d787416b2a89d73b271c9c3acfc41a78
SHA5122299ab1c70b6c9851444880a49e0dd7fcf063aed5322ab16193106ca2f48a84fb9ec0a273f82f1643ba90ba951787318ac680f9624185430d9b223941db5a256
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning38.pngFilesize
2KB
MD5ccfac542db190600e7f2e81fae2ef5a3
SHA1ce2356e85dd94ebc912f56008a3e6bad719be9a5
SHA256b4c961b5f5ec23901def2de93bfa7dbcb859211278daf7057285f420f97d789d
SHA512b8e3536bd2aab3f0f15ef8889489bbe15f529cbeb789b7db9543a59cac5e015571d5a028195234d5bdb5360d0deee4929c451673a60141cf5d21d1e5c8ce92ca
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_icon_warning48.pngFilesize
2KB
MD50e7f35907ce8dc52fbcd7d18122200aa
SHA1cf2319f359cbd3b476208cb5409b04e0984857b9
SHA25679e6c321e672379984652c073858c79d5538b059145b97e5b2a6da1295e19ce0
SHA512abae9874b72a25b70a6129d0a26a9b3795dd175c0d396c6346242d0760a8dbebf77800a12cdb986a439249864243618b567a0d8a3d8edd8cc3464092a5158446
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\avira_logo.pngFilesize
1KB
MD5a1f8933d968d1d436c137a502f032b88
SHA1e696db4d2dd296c26ab6c22ed804295cdc3076e4
SHA256ed5d230d1873f584e3db681a5ec9de20de041471f185c19030ce12b28f76c565
SHA512ddb6efc80adc6aebf233406d2f74b105349261854e3d5b15346d3ff73568ceeff5c02b2a42c66ce4d437408977cb5fb18e6c7f41145757546c43f5d5f4f6b541
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\classification_safe_lg.svgFilesize
1KB
MD5a3e7de968c143166132af3b92ec4d1bf
SHA1ae05c5d16aae3f2e299e58b344f774b9a3fafe92
SHA2567e21228879ce8134bc996752e4787addd4d86eb436ea7ca3e82af8fbe8118e13
SHA5125068fc9d0c99e402e9758c0ae35bdab3cc7103b44926ee3af14f715d370cf384f2ab51402d26e2642e5f9d0d3186bf4da9882939be6d45f46655d18329a44524
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\classification_unsafe_lg.svgFilesize
3KB
MD5eef8ec3bd25b2fc8c82b44e4342956a7
SHA1f2b435d0195a25db0fec7d91416a21422da37ed6
SHA256b0a49a28ac0d9c6af6474398914a53b100bdc74ff0eb8d095b7ea374891d492d
SHA51255dc03a815c036ec97c169695793f4280a911f1affd0919ab7abf5f7c21c57680beb4c749ede53ddaa39c6449496e9f9733b884dc0a1143701fea2b352aaf14a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\close-offers-bar.svgFilesize
1KB
MD5289d573a8b113aacd2813ce1dee22e8a
SHA11922e429d6884f684573f19ec15bcc7c56eb61ff
SHA25622c2c102f04eb02727aed25210803b9e71df6a2b5d2852c0f78bca4ea2faa54f
SHA51259adb1898d8edaa90ecf615604fb8861701aa6581c04a026f36b7f80294ed500a51de2bc8d869aa8ecab9a629c32ab4401c898a3191885a9e5b138485949fd77
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\close.svgFilesize
1KB
MD543274fe45f06f51c23b0a83acae3dc27
SHA13587339e055509e48224e00a48cff97eb925990a
SHA2568cd490aa33cfb692920b422d275aacc2481c23ac28d39dfc8644334a7a24d230
SHA512d9a8a2c7ebaaa261155751ef1b5fbd33002d37ae4712ed2ff147a8d00183546aac4bf3a8822e020beff0e7329e6ec8caaf2895dd390f55b459684a073035b240
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\ico_tick.pngFilesize
4KB
MD5990387175950ee6e7205ca69ba54b22a
SHA181cc157667213486281e09e343a492d464360321
SHA2563597d9c7edb983c73dc7a49352a3781f8822b405338df08bc77931346a7ea877
SHA51222753fc1cacfe1e8ad1887635b7e776f1ffdcb68cdf626b03451eb89ce08d3e11c055cdf85eaf0c618e067c10d07126cd2d136b8b0565d74cb3af984eba15dbd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\icon-facebook.pngFilesize
348B
MD5dfc9fd42d5b37321918b52ed3b4f468c
SHA18f78b140774e96c1ee255d2f5d03c49b3613781a
SHA2564929d0b2ff33e77e2ce83907667157000726ef6463c9c798d6faa6ffadf6662e
SHA5121e1bc48ba6d240517624b43a1a7732893315775d6d8202eac5c30a92819835d6ae762383857a73e94ad3a16436a13d78ee0c180a28b8698eb1553969d529f0d8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\icon-facebook.svgFilesize
1KB
MD5d9eb94b037c28fe6e3f7501eca0acb85
SHA1c6f259bdea67a6ef7111facc3eb22013afa7a903
SHA2563fe37b00c10fcf84f37e82315ae5bf4e895a598e6554455b105e87a1bbc7c5a3
SHA512295bc5eaddc07af3c10bcf7f779482ad1a5d0ef514386f4a68162746180b337211eb7328531fe4e1f4c96968828e87d31ee2dc8cc48ba7172a47402b1c1432c1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\icon-tab-alert.svgFilesize
903B
MD538e2c64a7152a0f945ad017f5de5f2dc
SHA1c29a0c6837ba7bf11abacbe8037577091330a99b
SHA25613ff0e548ee018c0b696599debd453b66a69697883cf76bf738bcca31c90deb5
SHA51235c8b067abcd945405597fb44bd2e1d8d0cde1c76450970b8818e14320f4c244bae1f1de308dc367090df1a525cba66823772885a2a0519514b6f26d066feaf5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\icon-twitter.pngFilesize
620B
MD5a5ea8f5764315fb6b4fe78c08374d12c
SHA1ca92b664750000c2b1751bc6076e21d88fab90f1
SHA25621429131a8d20a91367bcf989179c27a407a288703e9f0d5a083a17efc75e058
SHA51237549e299601c8a89e9ac3edb3ceeaec00b0579fbe8091fa46dc20cb1bddd525e49a35f3a63e77f8bf140eb55662812d9a249d8b6b7b5f604ae9eeb35dcc4553
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\icon-twitter.svgFilesize
1KB
MD53f5dbfb34d7b83ed182fd8e5cef2c8a2
SHA1553adbb234ce87fd9cdcfda49ed1f1763faed349
SHA2567e1ee1ddc297260c20f418ce5562cba892c984e4d35ec4ffabc59de1a29774a7
SHA512e3f4fa51e303065825db710d2c9d448681d7fb440f5e5ea3a63e15dc8c418eecb165bcfe0a3df532693a248475f865cb1ba1ddb88401a5ee23fdc5bef4eca5c5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\info_empty.svgFilesize
874B
MD599214cb6cfb576ea571317f1253a799a
SHA1e913e4fd5b3d2b4885e5fca62fbdd2c011f70f42
SHA2566e64269fc58d3aa150fee6f72eac7eef391b414c794b1f6ad745b2039e7ac4a5
SHA512cf02d408d37589521438a3c65fe55e35d84aedbfaeadfffddd1f42ff72f9b1704cb12a21b611a9bd725624b55de4a84045e6c7824d75f229ff2ac679b1e0d095
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\info_full.svgFilesize
1KB
MD5c3bb811cc62383835f671df55787e136
SHA1fda83b89e87aabb4ea80de473c0d163867aab9af
SHA256dbde26f6347cedb6e96c6bf657c451d15896a0392d960cc7f989d640cf41f951
SHA512326e7c7821305b0c8055d858ca018052fe353d6c9a7cd4e9658552ce6322307fdb996395b8062f748c5105b2876a14c9e12c0b9377c309ad22df6427a68cf8e6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\logo-avira-antivirus.pngFilesize
840B
MD5e2db107f9448a33652e11c32dae61df0
SHA1e293903d826f13d46167d90afd8bdb64ed4a552c
SHA256054d3344e60e8d3e76150d829f6a7bd555de218a3bd57ff1b127c1a01575fb06
SHA512ce064889bb68218f28129a67ed44af9a5a6f8e331b1e58997fc2604c4e8d67aa023263f8dda8921a8252db72ace9d7c63c8059e8b8d588a690c4eb02001d566b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\serp_info_safe.svgFilesize
256B
MD59186187679112c42384c521136db2b63
SHA120765282093df3d82d97ff933cd3c08ba627d6b2
SHA256af7f5412f18ea3af7ec1f46393fcb875f88d37cd98b55bb4547a5f158c08bb9c
SHA51268929441dd39830d4ac36e8557d9c72ee9eecc3b84a4f62fdcf040a3850885f8ca991135d021a6ceb876a7301c5858acf9ecd08d5ad59586c1d0b8a252ed5515
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\serp_info_unsafe.svgFilesize
231B
MD58cc50dc5a444ebe378c4440f8d4b8fe9
SHA10518fda87170d17d601458dfedfcbb976344c400
SHA256c920a9fce3aa568b5604e57798395a3fe40a74ee2bf47c7edb435405e249738a
SHA512dd779fa1e21b340340ade922488ce95158004b60a53fda45f23955a58f045eb86817e1a0b4155ee05f4efd6d7f879fcab17e54c079698c64a8075ae90fcfdc7f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\serp_info_warning.svgFilesize
437B
MD516dba44567b599779c8e16b81adbe0c8
SHA10b8ca6f931213baaeaaf5cddaddd9e183927d3b2
SHA256d6c72240ceaaa88e4ba8d5767c1de986c47ba65782dc159c863d6d459ec17025
SHA51241a3660a75247a4cccad05afd6f5f6eacd92618b2b138196e34aa82653d5190b6403b7cb4a8df0636c976b15265f0b76425b731c8820615b4012b69bd4d7286a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\tracker-milestone-confetti.pngFilesize
6KB
MD59e79b9aafdf25646fd3b5b6ea75a61c7
SHA1e71b4130eb3019a3b7356e3c6faa0318ba7d3c77
SHA256bb66e678fb57e2216d6b595b12402afccc197b7a4cdc013133541510884dd64e
SHA512c4d008a1d41548abb0c27beabc17dee827c74a6fd1f155c053fcd4c60a431e9f7a13a073dcf5afc3b72ad8fd4b786924e5f81f685a663f7a6cdc14fc9ffe7be0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\tracker-milestone-medal.pngFilesize
1KB
MD57b7cfda26d9e37359c6e3e36cba333d8
SHA1e35a64770404722bbd90e2df6e2370b61b21b5de
SHA256918d521185d8fbafe24c2b151b7b6a8d0939a454b14bdb18594e6f90a7806edd
SHA51233a67fa61c594293846d4f57b66821a4fcb50c1b734b84fec7d2a5858fed57e482966159f4869895e4c7c3b6c4c881ce1b1c8bc7cc2e86c5613c4929b73a5859
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\tracker-milestone-medal.svgFilesize
2KB
MD51e89bf2d0bbce7df8472f46f8b4acc7d
SHA19192b23c47c174227a9d308c21f1ff3aad0d71a5
SHA2566f3e6c9c71314393bb919fd98e586d0819fb1accc4ed01662ff3f2c75220a61e
SHA51239b9e779997f14445487a804cc7dee87bc244159f1ab5858cf305672b5857b6d314ed0749be0aefcd24cdf6b5de1158bd71531b2600e3ed0f697b6b0c31da070
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\tracker-milestone-ribbon.pngFilesize
1KB
MD5dc7976dc0952eaf15101816cb6abd2fa
SHA105282b84f7eba5593e2b1edb1ca66dc5d8fe4591
SHA256a39905dec7e6e5a521b8553d519b5cd7aced1f15603343eb6e4d666530fd3744
SHA51295bc4abfe255b47b1c4c742cc9e7cd7b79349e45b874dfa58c5020498006b446cf7a41f277e83a736d1d0831bba2d10608be0e72dc52680c08e92b5c2daeabdc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\img\warning.svgFilesize
1KB
MD5d60bc06c2ec496fc59a76d60fac11ed3
SHA1a3327d3adf65d6df6032f4c0e30bb96ba7261cf1
SHA256166e48f491c2cf4858544208342972d4bb7391d24f5a45a2156a37581eb8c1c4
SHA5120caa088d4c14f8c59c58f057e9278e5a7cca640f5b22971a6b7b3110aabd91c9107fa027c55c1ab23d35979a66e9e917a55b006ff2695a997d068418e40faf93
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\absLog.jsFilesize
9KB
MD52b89745ecc5de4e13f1fedc43482557a
SHA1ee9101dc206971ff75f18589d0630caba7f480be
SHA2563eda81f84ea2b76545e074d33b55023d781b80d72d2601b234ac9d609486eff6
SHA51232ae9fd14a5ce4c2e8639429162a9b9434ef205b3f4d538c7db7dcf89c0c819c7e09b0be8b67baf5f598e5a4a5049dc7375fd846c344e0c7c8de62eea0dca16f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\background\background.jsFilesize
654KB
MD50683bc8a30e5c842dc69834cd7bac0df
SHA171bb1b2f40659e2a52ea810b6580be497a5e8029
SHA2565e6956f28c168c98459b1e3cd6c79aadab906e3d36b2a328da0155a2c9a6b277
SHA512f09938cce5955e2c17b4521ad607a2a7cf40a3c9387ed8c4d2bc05bff22773d1b2550360949c14f291fd4e131625173349d0b9480473699b2f4cab843080d4ab
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\blocked.jsFilesize
208KB
MD54bbcce3657c1e18acebc06f5b06efd6d
SHA1dd72dce88228ed524805cb3389a30afe17f33e39
SHA2561784c13c352e0894f635adc49feb978dffb9e297df0463475973fcf28f0f49f5
SHA51237c460c0c8212b60a6aa05921c255c17d19eb163431e205b8868eefed9f59cd626f6b479ac5902ac5940f307db5497311eb9c61731608cd502b43a4b5c87cf66
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\content\about.jsFilesize
45KB
MD5f233e608bc4e2a77a532683a824ad6a5
SHA143d1ff919c1f1ed9561427bc8db8c038fc3f8a38
SHA256d88784529791b189ccc07e6a8da77342fdef534b7c1d4aad4d4aed573211b512
SHA51285b9f960f7ab8167fd212df72ee36455cdf1c8f2caeb30448ecec2f4d55cd8948d7a904b0518cbbd7f4d7f992c9328edf69b4cd226d99f9cbbb942c648b9a810
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\content\app.jsFilesize
335KB
MD50e7d00902415353e9d2f26baa1f406a7
SHA1aa2b666e59ca4e1bcc67ee1d6ed8e66c54c5c3bc
SHA256218760626cce8aaab50ebf8d4a50e4fa361048ac210382811b3680593270317c
SHA512b38d75038458d66a60ebef0a3ee11bdedc451869d18acf7b03d479ee3fa4c9db1cf770ecf8d775382e308c085d1fed6ba072602a8076042f616ff94f4e37574e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\content\content-offers.jsFilesize
129KB
MD5ae174ef8fc9b5556d35cdbb66efcd3db
SHA1a6e0f69591618925063cd552dd2e6b1e8e80ac43
SHA256e75eccb2a78b3a8448e52d03d22e6c2d0489e4e429f0e5536370f0424fa5b56e
SHA5123d552c1eda031774df63b6b0b4f6815ab5c83712e5a028fb9b3e8fd7848ed3b69ed6897e5972f40625034544f63de3bbd3b7695512555d996de9ad29f370b56f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\content\content-safety.jsFilesize
51KB
MD5a5e71adc2dd64778b08ef86d4f3a0916
SHA115a7d9c605212da688f98962de89b17b1d6026d2
SHA256de4a6d7a43e25e94b8ee362d6ffca461067ee096d2981b7c84895fd363bd2d05
SHA51206cfb3f8221535a7b393364181483fef5e0577d9fc8376eb2398003d3ff597d87ef5cf2f6b05b36d5d797d120cee8935c7ba7bea6f770eb7b8024da6ce13a89a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\content\trackerNotification.jsFilesize
177KB
MD54f5ae6f0a6ba1506293173ccd7771033
SHA17088679a1c10846a4dc52387fcae540faa765121
SHA2560be4261b6b9c4a2d3643875aa974b00c838083f628e0c80524444da662e0353b
SHA512d6f04f83a40951ce54660ce1fb98614d303130a948a168829a64c46cd9e71f78bbb3b3dbe2ffeeca751c0a09d242593e6ce7c0097354e43fe4ef300f579af1f0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\content\verticalApp.jsFilesize
332KB
MD5b73f7bd62220b9c65578925cbee1afdc
SHA1784b450b310c76acb222f62cac9bbdc311f03024
SHA256a65f64f7a053d9dabc2c38a7fe3d847161d1c7840ac28b9b74fadaeeb9f3899b
SHA512a01d5402a8f0939ebdd9638218ff6f9ddebb625d1a7119a6f758edb7271134ed178b87863d41835445a758cef64a5d87a930a7a354f9c166f24b14bb8efe0f6a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\modules\offers\content\iframe\external.jsFilesize
10KB
MD5e9db2c42f256276317d2a5b8a0298227
SHA1594d0fa32a319c48ec3df9757e09f790f0670c74
SHA2562f9155a3854d87ee4fb9ee6c601f6b0e8b3d82035e844ab7a474f9e3eea1ecc5
SHA512b461c32f0227050914aeb9b9f65633241885e05ad318a900120dd84566e90a6e791e17a4f54e56fc3b691f64b7804e9de1bbe20af47ee7b2d38c0a9058407226
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\popup\popup.jsFilesize
357KB
MD58d977bcd481571f1a0f2afb96ae29bbf
SHA180e9c458e3af9cec62dab4d493b83feeefbde161
SHA256867b688b0ca8e66dbb6f98b9455a8bcdcf7e1c22e8f7a6d4ae0b8d14bda0ec33
SHA5124efe04ad875e0ba81fe13d08cbed3c9e58531f4ace7bb9b86e0f4f70223de47218633618753c17d35c42f69d04c5d913101770223c88c400a3e4448ec5042142
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\js\webRequestListenerWrapper.jsFilesize
1KB
MD50aa31d222e3e532d08dade874060386d
SHA19f70f33d57063ff00be4a42b904826f0439508bf
SHA2566812d26dea89315371c21370d25d2cf702d2648459571f25c2c0aaf173e8198e
SHA5121abe07a44c5da2bb5ea15ad4f663fb6237a866d40e6f6bcf04fd976af0b1e351c3776f22936ce672e91bacc8c9fe8213ef8805130f7a9095fe0cd95c6d3d8526
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\manifest.jsonFilesize
2KB
MD5c53baa16050867e10a4ca63e54395085
SHA1809f1522b9aad15092c9d8ae48870bc00c01eb73
SHA256f8cebafa8009406e5a1cc63355c102a8a3a839e93b12922d7345973ca2c0db11
SHA512f5a488d787d4a6a3b24026a1a91cadc249f5914c00e6e9708da290b36240de2a572f87c7691909b16819b0c2cf842f8921ddcbfd8117c1c6f105fe2eef16093c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\offers_js\cms_ao2.jsFilesize
22KB
MD5c3c1b39922ad43546db6d0e25259ed1c
SHA12212d82a25efe009f4bd2095f0615c7e6cda52e4
SHA256a12fd518bdadec21a2dcb06c5af2bc42491c4b118d584622d9b383b8fa2ec7e3
SHA51244e6e62a962669184cf5510232484e371a2e9697cc913988bc1f7c360f9894129faa31533fcbb6c116c226ce64084bbc93a259242e12a926137928be94e15119
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\offers_js\cms_aon.jsFilesize
8KB
MD59c32a76bd0a53f822a2636d05128caf0
SHA1a5269df2021deb7e53fc6a2e9a096269446d520b
SHA2563b7deb17b3868e08e3b0d0bfa55988e66a1e59bfb2d22479941ef856a35779de
SHA5127d0829ba3a6527f0352892f03365509d06207e5dc15b3942c5cc63905e763826dc9bc4d16a92094a496905844dee9260a4b3c111988cce051b304d459201e5d8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\offers_js\cms_ass.jsFilesize
8KB
MD5eae4adf3bedc7e449fe9ff1a83cda946
SHA15fee2aa4ff51fc307c554e954713a37b23ab4dcb
SHA2561cc480d6702efdfcbf54a1408fe53cb84749a4ede31600b79ce2c697684ba03a
SHA51227c06307a7009b9c35ab1c7a36b0fc28bc04ef0e8a60a1db419b7a7e3cbc484cef5bda95dc7f7eada74d9dcbda62694ad206464e1ab38ec608e51e24e8c59ee9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_302902797\CRX_INSTALL\offers_js\safeshopping.jsFilesize
92KB
MD50d0f8899de5aa533ad82e135e0bb1cef
SHA15e61091673e64fdfc7352e8277fe1806c9bfaba4
SHA2566b42f062b3d29d10554d1d688b61a549ddb8cd72d3f6945c62dda03359d253f1
SHA51204301400b4bfcde4dd108db6d979299993107aef20fd0a4d05c20e074aa5d9d17d7fd45fb1a5e18c90ae0e4c167002b5942e27800f13558767d44e98b3d4fab1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\de\messages.jsonFilesize
160B
MD5596067c38b6295f883e5511a2ac9a76d
SHA12ffde0050aef0733e11f8386dbbc06bc636a8717
SHA2567477395930e5b9c9ce5c8c8fc0b71ce8e2113aaded95368466a34fd1eb81499e
SHA5123342f938c2462fe9e8e0b7b6bce46ecf97788b24d74c64dacf1adb75a6992f040946bc4b9eeba658ec3d2414d044b3865c24bb2e153cde604ee5a06069a3daf9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\en\messages.jsonFilesize
149B
MD5df3f22c1eaa295e15d92284fa3d018f6
SHA1ad602e6540d59c8e817196c2f70074863ed44a35
SHA256a82bb22aa3fdf01214124cdd56d1d47a9508e57ef05cf64379bb41615a4104e6
SHA5126068ee6f412b08cf81428dee3659cba33d1b5ecddcf1acc25ce2a158c607452dc6961d925df3af83b8766fd817906175594b39b1a396e993589b916abb6aa162
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\es\messages.jsonFilesize
161B
MD5961530b8414aa43d3b3aff88bc5f4dbf
SHA16094dd23509e92e88caf739b9efbb25b3a0c5903
SHA256847b06b5ce12a053e67c37e532f961f2853c41cfae22bd5bee24fde3f27befeb
SHA512b343babaa53e17f372280b4ec25ef50e4bc64be20fb1bf081446a5d7a2bd7a87364a80f2c32a4ffe60a80e472c61459d646a17d2d2a8608b0ebcf4cab9e331f0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\fr\messages.jsonFilesize
159B
MD528d662b19e3d1f962ee9fbd0bd57f052
SHA1742aec8e47a007aa487ea02a48f4ac4fa5aebc06
SHA256443aad335809951baf50dde8704a4e11756e02b3a3c927bd9acc7b577d526ad8
SHA512bf21e194d9eb7c5c1b4666d4a1c50864ad50a6a9d01204eca0c5461ce5e032956d04dc028ceb92becd3110eca2b2da184c02ee53a8958d88810112762d3c87fa
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\it\messages.jsonFilesize
160B
MD58244e1bd235dcc03fb5d56aef0789a81
SHA1c2f356faf82415cd7a5d639617a789c98e9234b9
SHA25698677ded48ab15afe70ee68d220ff86fd5c535e4307effc90b002afc8cb28078
SHA512213cfa5a6d331e8c997e76b3b61b59563d5173e0cc52659e02898e25be1ad14e3a276ca17892488fbcd1750cca1d559c2dad43d6897b2369abe3eeab02cfc5ef
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\ja\messages.jsonFilesize
191B
MD59fa9039de2ff41373de477221f7ecef9
SHA1badeaf9e39922a931b69f79fd511f24078bd5ec5
SHA256162c9b2e46c4c24de5d1a0845ea67b245c5cf9b0fd75b71edf07a3bb676ae197
SHA5126ae0074d69d01e7ac4c6a9dfb91869cdc76ae39449a32110d59389aafaa1fec65a36af788e02b6c09e7eda702b50f6e9e3be6153c0a996a06539874e92c855ac
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\nl\messages.jsonFilesize
169B
MD5452d8f051694d8ab743e5fa7adc71bbe
SHA139af4b3c56f4e451982ef6cb7ac5516cc67146a4
SHA256674e2b72c7c80f5ee1786287d7cbc431065ed6f5c964eb3a2d3d2da5d52d8afb
SHA512ae1741f93b885ef246de7c96630cccee487fd49cdea77c417bd92ce7ff6763303a17d6087aabb635937d3eaa3f2566193fabcaae6f30c585315a18d0c1ee08e6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\pt_BR\messages.jsonFilesize
157B
MD5f6a2670805eb0606d9e045081907ed35
SHA198b4e75cc17650d89609e24ff1a0cc48aa894f07
SHA256a9c1f98d527d0ee70b5abd66ec8a90ecb94275411ded92cd788d7d30dba90804
SHA512c9fb76f45ede562ab84fd51de20173d77082d216309acb66400ae46296ea1dbe2fb7e704bd9e7ad85a0fc8990ac1de5ec59f8a25c540d18f0422ba3376ca8eb4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\ru\messages.jsonFilesize
237B
MD58db66377405161cb10f3f408c9b25e42
SHA1376b7aeb73da5340ca6dc3024f16187ddaa76903
SHA25699f59537a0214691530bac18484ddc9442a6536d80ac451a4c3d38a541c83bd1
SHA512069002552c65620d2f8d4aafbe7c170f3110d02b90d8add72cd425d4d03e719981022075755f6ca58ec68c3ca6b1711902f8c549cac3b4bb69714d8077be27d3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\tr\messages.jsonFilesize
153B
MD51305f7dbb16342d090a5628b0ec1110a
SHA1c498664ab98067adb906ee45e5ffa5aa945d8c7f
SHA256a41c979148f8189112edf4dcdef4d510a31c7bc6191292b38728767d1c0ac573
SHA51281fce451df7834849cb7a03fe2fa8b9b627f0118a87621f862ecdce2c972c41afc28edece3f6b1843a569731dffc5c9386a8d395df71ac4449f7aed87586f21b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\zh_CN\messages.jsonFilesize
150B
MD51052f52e8c607d6077ccadb3aec9e511
SHA1fb2b79318c937443dad834bf590dede48431a6c0
SHA256a3af868cd705f13792e8d1f7bfe75c1a42cc6a0fb9ff5c4f76586bf295ce16ef
SHA512656c14aa711e00e5c8a4c97f3bf037b9e7b650ddf98e50ff647d8b3e3f2f6967aeb631bd26d9dd03c7d1a3d0d3f9d5d97d5b2e3c3203bd37535039399caedf79
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_locales\zh_TW\messages.jsonFilesize
144B
MD51413179df68ad369e26acf16bd7e0bef
SHA1d04da2e6492c63d5539f61177aec2a1666ecc7bb
SHA256fa44cdd6db50feeb3b5bd2af202c86082f407b70c3dd7fe7dba22050252e768b
SHA5122965e4a27fea36bd1f825946010d119a338a7b807bf7feecfe2b89a30d0fa07c3b23caae205bddc66d449958cf0e02890378d48c3c7ddb18ac4a52838d0f2d30
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\_metadata\verified_contents.jsonFilesize
23KB
MD53368c9faaf5b1c77e8545246ebce0976
SHA1b5d1d8d3bb7ff38fd89643ffe572469939cd149f
SHA256023a1e0d0400721e3a78b22d90200fd5e71d798cae449315a84faddf69fd9bad
SHA5126986138f0dfd832dba8fb4123f90be9f55b99554a720d93622e418a78ecc9b5591d03a08d25f70a06a4c95371e95cc0663e4ccdf97f43bf5c599f234754b783a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\fonts\KievitCompPro-Bold.woffFilesize
44KB
MD5027ae223979e9aa03a719f287c068e0b
SHA1c8111c572362d877c0f4e32b65e622af44db8cc4
SHA256a233c73dd1225e3275e695ac72de5acd7c9cdf4124c2c1ee56c988068e5476df
SHA512c0a91a42f1b8b4e281d3666dbcab3db1c2c2b6fe46ccd425bebf976774e6f541afa59121c072587e4b8713e2903f918bf1d90fb7902390f3062ea999e2618c16
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\fonts\KievitCompPro-Bold.woff2Filesize
32KB
MD5164abe057fc3eb335d3b9c8c85be08c2
SHA151ad4dd65145d426b0303f1fae4220c947ce0d6b
SHA2569f27cca321616c49f43649a9cdf2d37e3087a542227639875361ac516eed9926
SHA5120f8be152d334368dbae80d60c132c4d7fcc76eb7af65911dddc02dbf0875fcbb92c7e043fb76d2f8c428ecc5955a874b64ea041fde953649a04c558faf284410
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\fonts\KievitCompPro-Light.woffFilesize
43KB
MD5de8d96c3eee8da2e1c675a421054ac55
SHA12b7e51be3c770624e7716706aedf234e588fa069
SHA256e02e879080b419eb294eeef69d83c696ccbe98e47a39c7bfed11721eb95a4bb0
SHA5127406617240132648d197c1772c2f210d34192a4554858251dd61f999d7df3b8a24d283bedb67be20943c37673437d1658a4af72b5124e665cd6342a0a9ee186b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\fonts\KievitCompPro-Light.woff2Filesize
31KB
MD59c8f40b6938ac2a40f111df86af2f5c4
SHA1b90ad006a6c683a15eceab85dfc75e4650bc2db1
SHA2568815a2acbc58713dfafcba861fa0177390d6046bdc8345ef55fa9c1d21c55a87
SHA512b5cf3dea7b749352ca6b52205c10a5937ef955fad782a982ce553f79f7fef5051d40caad301141162cdcedcb2e8473563b9d6aff74d18de903baf3b3e6b1be51
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\fonts\KievitCompPro.woffFilesize
43KB
MD51f390cc4dc99f9b621d4047083741a6b
SHA156b828dd11fa075a136a9726e210f0208ea11b6e
SHA2561a670dd6194158fb7e45ab281c5a4d5ca35ee0f44df5aeea337c9226df6169a4
SHA51211781d41402b3e7e0c211353ae296d69366fc614efaba56f8a69ce0c74d7515fed8fb7bf1c11143f4cb75b333b6480445e8d76e990c2cfdbdd6fa2fc50afbb82
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\fonts\KievitCompPro.woff2Filesize
31KB
MD54cdbaf9a71aa7b69c4cbe22595e842f5
SHA159806d172c95a5515ace130d66fd8f87cf4f9fcf
SHA2566d46097697edc09f49b3b3de3841afdb8f6af7b8a8a10a58e9f805bd2370cb9f
SHA512b546f57f9bb27c66a6c2da3ca885f8fa4900417efd03fb5b7f6ff647885945d9b27e82f9d132503f1e5497d6f47ab4481b4bd1576da928612d36852e04ec60df
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\main.cssFilesize
43KB
MD53bade62a4802cd9c82aabd54f20af93d
SHA1e2a8cd4e883331518237760d3f233dacb6fd2cf7
SHA2561e61657fdc40ff113102e19fb76734b3035fb87539162d4a33d60ea78e6397f6
SHA5120446eb03b74a8af5006ad42440232a7e1d67b04b104622ebdeac7ffa5f236bfbaf423b74e759d7b8c82f9cd1c635a93b0b9b6469ece2a128836dfdb9d058949c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\css\notifications.cssFilesize
7KB
MD5f9426066d14076e79049e8ddb65bd696
SHA1a16e6344bbcfb56d37e6e63e90111c337436bd72
SHA25671a5c19b6faa16ccf99287edbc9686b308731b16602d55bf109a0e2b1416bbd3
SHA5121a81b290e2f8e93a821ae0c03ae9d29a257c9dfa9c108650a18a9fa4a3179dc8fa9eeb6076ff32e76ab16088f3818882777e4d2b8b9b203f0f58f486c95eef8e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\html\dashboard.htmlFilesize
546B
MD5ec19b50e559a9b27f197c9a451e1b1e0
SHA1dc7ddb18cb9430290ae92d8a2aef35b9ae23e81d
SHA256b1f0bc8de563c329fff4c162c612fb248ca331fc844450839751ee29bfa3d293
SHA512c9456238f3c1453a076e930f9980879ea8f624c1544caaabef0b062f867f3cb0be09bfa18cb9e132fa5a04f418755a37f674bd2d3192d87fb40f6afac311c3bd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\html\inlineForm.htmlFilesize
480B
MD58b464e714c1c429156e70120642ab5cb
SHA189f58008fc785be7e0475be7b24e433004d1a218
SHA256618398a0bb7b64a8a40867cc142ee884a6c8862f5c13306fc5f731cc95d4af38
SHA512475185c0d17ab4092da932d64d6c77204dede75ba3390d637623d196f0b0a90d89f25d43c7ea78caf82cf9db222261388b589f80d7e441e695dfcc5d84ea2ad8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\html\inlineTooltip.htmlFilesize
486B
MD5cdee109268f6239f9fa4fb3cea2c7ee2
SHA1a7e80f4c1ae4fab0db6b54958e1e66bd32755122
SHA256727c86a4bdd1a3817f0a43495e42c22fda591213fe167980862cb27e2fe6894e
SHA51276dee3ceed57d4dd8a2b13807c7b3955e9c37f64b9dea264876eaa22946430c168a424cf833e523fda5c4a3b49e536537cf2df5ed07f8f13d4a3a14a00ecd0bd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\html\notifications.htmlFilesize
542B
MD5d218540ce34212d2aa09f69a74fe9168
SHA12431e40c9d3c06a581d8ae05a045529d4c67d209
SHA25658e62e764e91cdb5d12e0f3da16395ab9e97a858512395362ebe518c63e280d5
SHA512c3890ddf872e588d501a1f5f268e51357d28d512777c945abe3c85776e32446e28b7f68078a4c7354b5e4ed034abdc2135340b38b1b60ef578068e0d15e254d3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\ISECBundle@1x.pngFilesize
2KB
MD57652da5a0c8b85bdbe9bdf382ab29ad4
SHA1291b9bdf25b182cd94bbdf8567a567cf404bd01a
SHA256e88cf6b750d4daa997910bc5d021fc4d94588b727b7d83923b3efe464dc77f7e
SHA5122bfebd2f4f92b6ca977dc7c249227f61768171bd88386f6375006165280b5061c6eed57092475afcdd4a3c91bd50d3611e4f4fb837c71eccc4a77c5b4192ed19
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\ISECBundle@2x.pngFilesize
5KB
MD5036b1eaec26a749d8df6674e243d3482
SHA16e3146bda34f158c206238e60aab3e6b8e2da055
SHA2561b1fb86640ca97ec9512198e4c9f18bf9ca19fda49db01e030b41059258d329e
SHA5129e08a97e0e4017d1f3cce78fcd52e9b29a6ea21d1cb4543eb01754c788214504dc77cb0ffd277d1a7ae8983192dca9f7d84cb9d536300bb30e73da3ff590ce12
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\ajax_loader.gifFilesize
673B
MD533a752211d05af6684e26ec63c2ed965
SHA1298727755cb9a5102a771270b8c2de44b2bf4186
SHA256d24043d57ed7f603eb9fb2ac930b54f6e850b68b27d5cefc2af7b5a6c1ebb9f3
SHA512a796ffd4afccdf327e649b8634fd3d03aec888dd40b0a61080d89e50de766526b2f22f3521fc915f7cdc4582702177fe50c5e3585c690f509013a71e290109ad
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\assets\icon-survey.pngFilesize
2KB
MD503c9972540a5a494890caabbdcf011f4
SHA11daba0ba1f4decd1ee4a5dbb1b013a1f689d8cb8
SHA256b1472f7e76f85f2bdf96783a7bca6e0c7de3476974523cafe5855e87d5aa6eb6
SHA512079a2950fdd78873cdf915ca51f31226599a02a0fef973e12a019d68be489a65c5b28366ceee1f37bf077d1c699af545838581b53d83e0f2364f7f1bb6b40bc6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\assets\icon-survey@2x.pngFilesize
4KB
MD53ee6c46bf174b899af5ee40231c7b30e
SHA1033384be6267fa40b9ca3e70bcdc936c18b4f734
SHA256ff72bd2553d1dea19ecf3d3e24ddf40c300f15b6d54764c7557d96d754766020
SHA5124d69a50c1e91621bdb0e7e7ee23c50fad0908d84400938b1c3e06514d27fcea7b8f3b5c52fa590abc7ef79f991f2f3a52572363ebe91d5616476e02a796cb8ed
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\assets\icon.pngFilesize
1KB
MD5bb32c87f325b5ddbfc97b1e58770590a
SHA1f11f0ce4199a8642ea7dfa5a2136f945fc056d06
SHA256c87beabefde7fffd858049d00d4798941e3921ae6b9b9a658255ab15dd76cc26
SHA5122b29f515bb48738213914dddebf9ebe0afc70fbf71b0f72c129ab7c1ed82170b18fb1e91bd568fbe2b44855b9db9caa5201f827e6c84604162fee9ff8fc7e056
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\assets\icon@2x.pngFilesize
3KB
MD5911ef3c054d03cf5328c24f4c6fb7c76
SHA1f258dfffa5d2d0644c2d3bab41ef4fd7c1f8be3c
SHA256eedf80272af3b31075f26bdd310ddb902da84c5e55696e83891e82ac76cf9085
SHA512ae5cf07abe1f7b8dced32e5752cdf06f5daa0bd3bab41447274f1c62b7db7de2010f958d3dab2fa366394dbffea2d0df567c05108b3f994f022e9681c9be2642
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\bkg.pngFilesize
13KB
MD56e16094194823621770d46ebedcbc0fb
SHA118d48ae4ad67ef20e949b58b7e5e1d6dda3a871d
SHA2569b1acba079d3bb0ff8742507cf0555c648065a0f0d9b6ffe3032c010fc16fed2
SHA5127ceb2b2bcefaf69b8173ccbc34f0e7e12fa265cf62a5f3a91b632f425d2cff4dfe7e94a6e6eaf25ddb929f890ca096b2bef87d9d99a8988abfc29712f1aa0790
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Dankort@1x.pngFilesize
555B
MD590332f9ab72f802645c5ead71e84998e
SHA1c8b076651ad3e1263bf335ba43b460f709a67945
SHA25614b5b257716f48952922e2dc53932bc7663829886ed3b25cf121342259d53201
SHA512f1739e3da9dd3a985013fc790252d34e1179439b5e3f2a30f472d223ceb219d1a4d6fb3be77a04508783f1a51ae3c61d9b06795a074d16c1c5b92c87579aaaaa
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Dankort@2x.pngFilesize
1KB
MD5cdce2e75f37466623455dcea951eceb3
SHA191d489e0c103ae3fd44ddeb3db8bf823fedfa986
SHA256d3ec2df55e92e295dcb5c6de44011d4b2c7d1581e099d5d9e9fa9b9b26c617c9
SHA5125af971a19d73ed460f4071b8f7027179b04f9908a545a34e8d91cc8a7d32dc68692a53a0f1f3756a9d231e7bee7a08dc059400b134434504a1812459f20d8c9c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Dankort@3x.pngFilesize
1KB
MD5b7c315931b39fc667afe206132e1379d
SHA1b093fdef15fc17ea120516a3a5897e60521d2069
SHA256b2d545a1919b6bacb2a0bb656456bbebc173af74cebbe262de6df0afb32bb969
SHA512ee939b628cc21af0d0ab934d61dfb35ccc8b6360d8d644e40aa8e2ad4a31730a10d51de00e78c7dfb18b7d94b2e6dc6d29e0cec0a29db8d771d9a38202318748
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Din_Club_Intl@1x.pngFilesize
561B
MD54097562f037c225772d8628b2f85d075
SHA16f6b65646c839166322fe5de1462a5cdc781a61f
SHA25699e7503ccd5371be0075d457e0044317d6d4e81f96ad6d9cf540988cf810fcda
SHA512e8e5ed0c0e068911fd175119a662743c416ea843f076fea423a83e464b397bbae2243a14378ae49ca53bee2bf49639af00992d30b933c5cc152263f27b774125
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Din_Club_Intl@2x.pngFilesize
1KB
MD56918d5cc0d90fd7816e9a0257e0fd675
SHA10b18a2d3969e44b7c0f0f6036f7c41b4eb89dbcd
SHA256fcae1a533dcb0aeaafe2f5438f6bb5edc19d5c4332e484f00127095cc5f1ff48
SHA512f72df90e2fc57dd374de9424cc78f4b71c329858624d4b2487e712a3eff7d86d876c0d2c0bc16f12c751a77ea3158e620d276a552ca5f552854085f67d80964d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Din_Club_Intl@3x.pngFilesize
1KB
MD56d548f7002cd22f41a1e7793f94293d4
SHA1ed2af1363946db1b38fe012f7b127afc59149346
SHA256cc82d12ef87806094256cb5838930702acfff74a21ce2f9b5cc1b38cd5f822db
SHA5120c9ca1c9defc1f23173feb04b1cacd245d8a7bfdf2f82cce10b9f75402a214863ed683eca8126c453d03a61343487edd8b5d3a45f1d60ca0de53a8ca47f9f0b1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Discover@1x.pngFilesize
635B
MD58a79ae959608684c5f878d29b32f99d6
SHA1de95f17ad9c2c29363b35f4a9ee304a17d9b50b9
SHA25637554355c4f1f9d8873776ac0c7a515e33d2d1a7ede6607b59aaa9ba431ffd93
SHA512953b8a261377b777213eac224f2d1fadde0537b991232007e375e2981eb5504b852a49eeef0e95614d44190871d0dc7300195a6aa3fdbb69c6bb41a6794402b4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Discover@2x.pngFilesize
1KB
MD560deefa8443b80a2c601d7562973315e
SHA14239782a0f2dbf0b4c7ec0831d3e0fa792df2d51
SHA256534597133f8a7b70e594713e2113d2201945a2f0d35d1d6a1287cf149b08f850
SHA5126d42566230048869b187d35810c484d2daa60b5523d9a17f3b0c1bedab96e388350262b3aedf8c96101e45a2d794b1d0c696cd9b386c86a8d62c622d7dabe96d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Discover@3x.pngFilesize
1KB
MD5db7aab43f6f5e80aecc4281c7019905b
SHA107a524f32dd17378e75e2c7a3329db2baa9c8ddb
SHA256b26bdcd193c190fe3eac9bca542b60391fdad1cf5bcf4e641a9e50d96b99ea6a
SHA512faf8547173f218515a8881ebda38f2a07a416bd37b6b7d952ec4267154c5262cdb66a004aa93656ee8ab50e025d13007ce8a972b150db63324247ff66aab8b40
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\JCB@1x.pngFilesize
438B
MD571a7d5500cb19b0d3a5a46a3bb2173a8
SHA1135dfeb670a39c5eed6dfebfed38d5b81b3674c1
SHA25613a8f199ca7a4237a548093ba66bf484f42899df90a7f65e200f038021290c6a
SHA5128fd8a5d1979499d45cdcd537ca7bc161261e9d7fcb8e291febd121596fea6a97a6e89a0bc3ff6e7b9112db69fae6e477e8fae0ae5b59aba08eb6a178cc0cb64b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\JCB@2x.pngFilesize
689B
MD5b197b19389ab19038fa44047ed6af6b9
SHA13b1b9687c281e2fd4ce3a40de2e845859d903611
SHA2562f0cc1b36542f8db4e8e1d3231cec92b0916e21dd8bde1f517e34359eb2a0dcd
SHA512ab735b35bc2179c44366a8e7b5e799794172aaeb768e88a5d88d69226779f4f99afa8d6ffe7e4687e5fcaf4a97bd4773f06523973b0e9b2c66d58319d08ab7cc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\JCB@3x.pngFilesize
923B
MD53a0c12e77ed5e21a8c5dde895fa7da6b
SHA16d7a4f46cdfe65c1b7c28b6248a8613ddccfece6
SHA256e11e7ca727b531e8e13588ee52821cb3087c43fb0018179c1177e1e1bbffdb65
SHA5122871f8e1c00ba38452bcbbe04e6b5c265f7980cc7404eec8ff6feb5e7d15b25d17ba4110e747120b853ed04c9ec8846aaae0440a2aded44278309580e1a03f0a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\UATP@1x.pngFilesize
742B
MD55c03928b22388e66bf086cc0642c6772
SHA10ce92d2ce1e5be933845d0c047b6e531131f5029
SHA25635fbf6f9dfebc99c1f3229074ef1f8ded77523ffeb5d1ad600e7b9384b0dbdc7
SHA51248a1affa729e369c7f68ffb72e5d1f950b436c895626afff2948cf6d0a6fc8b0340c41ccd60e86b46d16f9bdd0f9fd4b9713b2e3f5f49de5be68ea84e9a0ab9b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\UATP@2x.pngFilesize
1KB
MD51086a4411ced78b186dbc29dc33af96c
SHA17ff3665f9b663f7ebec0827ea27eb24d5c30e0f6
SHA256f726a498648ca6712624456fb3aa6763bcd71f8dc2cd044c664937f67ffe074f
SHA5124d30e09d4b9e586294c2bc53958b49b9d574053a80deef54b82ccfec9ee4221df28c2b3f5c3ba245e37d807d728f33473aa7ebcd18456691491bf534f9166bf6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\UATP@3x.pngFilesize
2KB
MD5831749581de068486bfa011c9cf7ddc7
SHA11e16e02303fb85cb4a1dfb64f3bf3c46eea3baaf
SHA25693beb0791d3e6fdde0be76fbc56277b43e93b9db09091f24e3ea0c7c557f2e87
SHA512846d783b25b5d30b1913ed249b00ed12671121aae4a3f8e68b1c98def6f27334c8d1fdd5058abe10e95d4019f588d07ba97227d8b940100526373fcecc1c1171
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\UnionPay@1x.pngFilesize
1KB
MD5c72ec46565055c64f2f7b879d980fa38
SHA15a99c4f51e765327792194201f44b2818a031ee3
SHA256d4f9bb4e0b9474b48b2f981cdb0190d8c2c1a8d99e1626094575e955e5f37bbe
SHA5128dc7e988455b66e5cfd70e8f507a84f17775945f96203e03d98af267036a5375e6e18a40ef55d2104cc499c125e227dc2a89b061a1877342a5a8209d5a0e6505
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\UnionPay@2x.pngFilesize
1KB
MD537915d8dbe3be6d830084796ad97ecc5
SHA18919349ce9f21746817c0a0c348d496c5f57ce35
SHA256de7ca9705662bc55deb740083b80b663172bc602c58568190186c07142c56410
SHA512d6c1fcd77c5a345f7a726dc64c2f967f44fd54d34a078a86060b67d513ce36a830db8c8aa53e8dd027944d190a41bb64ee7fcb672e84803f232dac08a8b5e54f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\UnionPay@3x.pngFilesize
2KB
MD5bdb252ef973a0bdda897e396ffab97c1
SHA113379786f2af6c322ee6eba895ca20e45216dd14
SHA256ff1547d9cec4c9578e0be3cf4c7eca85f97735c39d5574ab5b0c83b22a04dac3
SHA51297c5aac292bd7c4a067c8941e5a112ada60c7b096dc0324b94a90ac7ac1f600c88dfdd565767488811e5a35c2f64e6d6bf5eabd46af45ce895e5abe8fe7863c5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Verve@1x.pngFilesize
867B
MD5bc2d9b45da4f80700a00ca61981b1866
SHA1d0032e0d26b8cb2b3fe7d2ab6c1da25141d93048
SHA25640aabde8ccaf596e4c41d19e97d087330d60abd7b922f6350784467cc3696923
SHA5127bf7de24ed13bc1ca352cbb1fd6e3c6a0f388d8640412c48af69437c07ce1ad067ad58374a9cb69c0c0e279dcdea4e551b141e450c2747e0eb7e7a2a45c7524c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Verve@2x.pngFilesize
1KB
MD5b99dc482197e200e6c41d63f38719795
SHA1cc2ce172072b27afea290ae997a8660da978319e
SHA2562269010280b9738368bc553f248c9a2c809d2a9b8b861d5ce6d402857f2dde2e
SHA512aa7c493b2676bce605053c87071955bbbd04f2c58a6d693c9a86aad74a5c588c830111c8cb863a0ced44537f6daf949152b302475a8b2bc66c646cec0ddfb8c4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\Verve@3x.pngFilesize
2KB
MD5bd79bbcf0e79436dd2dc8d78fa00c209
SHA134b3087cbef903f54301a117fbc383125b05881b
SHA25686ad41ae9f00e0636192d84da1f8faa3a12ff6157d601f000ae4b4d9c1d42663
SHA512745e6e06de157ea4a5db2591440014b1616c2b9d7b61e9f6c15a75a2bb16de4334beec1bf5570b80f6f55275fb6ef5d73075e5b57bad8f88e7e4eaed4bfb2b38
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\am_expr@1x.pngFilesize
550B
MD56953c85f5cb512336d281d542a08f5df
SHA1c067d69525eda6fff9eda1d583c030f893255a2c
SHA256b99349b93302434fa19782bb776eae0827585b5a221a9936a9984561c1a9f258
SHA5121839cd143fed8fe8709d1cc1ad3bbe80a29e9208b7a6b8166b64d80e8bf3627d6c9a1dca9c63d4cb71663d2390e32eda98f4110aacb2c6d7557fff6fb1a964ff
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\am_expr@2x.pngFilesize
1KB
MD557d548eaa32f80f3cbc6e07e32b4f66e
SHA1b1b98482892cdb7d60673efbf578e78963780f00
SHA2564c6537f1e37a31c2101f7b66a9480a9dcd6be01b9a3aa5793c69627cc2f34293
SHA512aa8012221004c4cf697ed86df0ab1ef16bf6140a5cb3d7cedaff0973b55d3c183c83f33ee823ed445b24c9d4a0b33190eaaf17745dd99628fce05006bf57c85e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\am_expr@3x.pngFilesize
1KB
MD5946529e7328a03dab2eea55c156ad767
SHA155c03835bda0d4253823a432365d808cab904fd4
SHA2566052a3cbd636d8a83d805240914a0e2ccbaa2ac886e58c68f3e36ba7acb2c5e8
SHA5121e00489fe0e0125b425083462a52c2f3d424e46ebbd13d78833da6e2b94ee39641e27089f798180500307fb36bc55b6f7d7bbe3e8ae6ba74cdf3803018ec9138
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\ch_t_union@1x.pngFilesize
1KB
MD5e8848053895bab1ee7b5763fff7be855
SHA1e06d971dfc8e1ced8f35811b510d14e231b09ae5
SHA25622725a0a3660bf429ba6b94dd2f3e5d55d12c77a51d6716fc47e3382320b6c31
SHA512a8a52991de7e3bf1a7a96983521cd2e3143afe85de90489d8115c7cb21dc00aaa5cd58761f57f197d1f4dd38ae61b07acc606e7c8d807638f157ce88606d186e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\ch_t_union@2x.pngFilesize
4KB
MD5d61aec2033cabdb2f2b52b29db9aeb94
SHA1501c95a757469cd7e0a00350789a454faf1f78c9
SHA25686bb978a86556c88a06f45f226bb1377c64dd0d59d3f8212f0fcc29239c65ac4
SHA512268d1c6a094dab0c3f6ad82bb0e18793fdf3a88e4f8f19f4a3922383b5539a3f553f12b267a5f7aba2e0ed12e31cab65f9da8f1a16d8adfda97b24eb3372b242
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\ch_t_union@3x.pngFilesize
6KB
MD54ddc15183541ce64df7643afedc66967
SHA171bd12e5057c28a657650c585e0930688e5e823f
SHA2560100d00a3ac138934daa169fcc63ea727ed17296b007fa50fe83d5378403d4c3
SHA512ac84edc0359feb146c3649c738aefb28687a11aab02d2f851909f7f2e0271785a04471c95b49e3ae3312af24d88a8f571b3df7d07a278e76a95ba4023152447b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\lankapay@1x.pngFilesize
1KB
MD54f6d5778be5c9f981c446f27ef612e2d
SHA18a1e4c657fe563bcad9d2249f0d1bf9b260af469
SHA256a29542fe8467c154795244389ab0f5c3a31ee1594d1e83a49547a7906fc18891
SHA5128b0b2c23bc0a33b4dda3c36da43af581ae573c2d073296605119bf76af76f343149d58a28d8a9ba30313a87de95a009f311725d5bd1734c3f20f35d3fa42c166
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\lankapay@2x.pngFilesize
3KB
MD5f036e1e131102ce4ca424b19e2c23601
SHA12c2caa8de3d3fa327fdedbc9676879133ea68004
SHA2566875218a4a83af984a20ba4fdab4acef2af4ad18ec7c651e27af0047df1a581a
SHA5122bedae944223da91949e7d96689ee9503d1cdecf77b170272e2fa335d57a5215c03d684b4db6dd511bc740448226795a8d9bf9789579c36e597638b29d98b764
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\lankapay@3x.pngFilesize
6KB
MD52b0551358a479842832e4184642a9f0f
SHA134d5518b380c60de39e0497b9fcf8ac525f696b8
SHA25613f2f99237cdc2426d9b66386321bd5e130fd98b671923767eb188674bf3204e
SHA512c3268f8fb0d8ef99586366bffb7dde03a42a4f92bbe83aba6cbee906a8f4f2b67a5626306b937d63861e9df3c10faf1cf66000a1eee15a745d2469cfa76fa1cd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\maestro@1x.pngFilesize
600B
MD529857003fa3446e68c86682787269587
SHA173e66c08712a637d51bf7662c74705d37368a677
SHA256ff3fac0c6a196bb41c95c992a029fe3ed86b70871414b0616424fe67a151bdc6
SHA512b16820f0257a39705664d294b2ff25b00838f12f31b14345209143cdc298597f9dd7c5d4bf550223ebc69e373822dcc4040207523e68a0075b920dda19b69c96
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\maestro@2x.pngFilesize
1009B
MD53f1278b7f86b05e5b6326986aed280e3
SHA1edbccd632813e83afc0651dbcad1ae6655150936
SHA256da8706087fc1c081566aeee8c0bada7901ba0e54525f6e1b34a0969b2a6b7ab2
SHA512089255d33c459b7182ab373f793ce3205b500e1431256e88bcd3ba78487eee19c130bbcd42c634478bc9903e337e0081ffad159916cf2fd7012d71535fcfef85
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\maestro@3x.pngFilesize
1KB
MD50d8118e89611afcbba26912026380217
SHA19ba25d720110b55b9df830bc2939064f7f2d240f
SHA25699289a8c96b0a84f67764671192d5fd824c77e0569896bc0dabf425bd1564472
SHA5121b12f57ca37a701093110afa298727a95ec6691ad640eb7dd3df3b36d3933f505bdef5c8b5729492117f8158af2b00a03114c353367986d1d840f2ed48744a97
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\mastercard@1x.pngFilesize
578B
MD5c11afe01ac07127318a98efdaa35d772
SHA1bdd3ec3b284c7355d796d509117583c62bbd993d
SHA2567372064ec6b21fb3a15177184baebf48977c20f6a478003a1e37599912c44af2
SHA5125eb451640669a93a4b2f28930734e8d4b6ebd2675aea5725637851515c063dfef3fd3664e2d5a4f3eb32c27d6367da2e3bbb6228955ce912924d0fd98d5e8763
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\mastercard@2x.pngFilesize
944B
MD58c6e50ee32809166290d6c42cf48db84
SHA1fe9920ce1e56cfa0e97cbc66bb75bdfd24b37bb9
SHA2565283b999f79da00db07da7546f6dbe85d4efd6a8a066030cc1a5df312e378732
SHA512abb728f3092467704db71f39ad6af47d46479761dc4193e05ac0376201b722b9f06f271fab4b2f12ff174faf5ba10ddb5055514b908dbb0b4d0ef94701fba75e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\mastercard@3x.pngFilesize
1KB
MD51b447b6ab9e97d15c1bbe8a832bcccfe
SHA1e10f76a6b536cc9e3e4d9719b2bf7a1591088758
SHA2565b8619532b5b63b2b10f4af74a34c0d51571279164ef672c6aa26acfbb783c12
SHA5120d06de74046131dfa842dfb0ca6610277c664814c8bae8fb6b8441e13bb9fe01138863b2f6c251bf241de99c37d33f2a5680e3787979dc52e109e0b528bc5b67
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\mir@1x.pngFilesize
989B
MD53027c3cd48a8ff569a0b93c75d6e8f5e
SHA10c9f6e5027712d69c35c27c9b602f6228414191d
SHA256d929b3ac7b8e49488faf0f45dd828181b2426f9b7eddb819617ef7a57c9c272d
SHA5121848e5573299928b79f56825909b22a1a54ca02f4a89c60dfc25a145204e9f54e515161c428607ca375b16a6f3addf6d7b8ba76e8ef4011eca5a7792acd6e648
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\mir@2x.pngFilesize
2KB
MD50fbc15fabc6f1108a8a5d782b735bfef
SHA1d72afe6d2292afb94f7b91795f30728a81a6fe80
SHA2569f40772044e0dcec968abfdf4d04d6a6f2bf3246d3313c3f77823645a77852de
SHA5120cf5f0a82422bbf7965a758419e58d78f30f1395d28121926956078c2ca4f46c4c9a77be92823949bea00c33ddc7b2bae57f11b859c92f40d8ad626e5dd60344
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\mir@3x.pngFilesize
3KB
MD53e0cff1c5b993ffd58b0e588a80b3084
SHA1302a6d238324125db244063c66f089984dc8eca1
SHA256d8b29ac6fec7aecfb6202827f651b799e5d56331bb00f2d381eb32e2120537e6
SHA51256ab20e1dc5dbd1b9faa372d370f7d5c40e2deb88235c36e56f81cfd9779c4f37ffd6b95b2d3172e599b687010361e804336e5c6315657d51f2dcbfacafd03f5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\placeholder@1x.pngFilesize
220B
MD5ab284461ae6046919fda1ba49037f210
SHA111a1bc6407d08a1f94657ae506ae92270c0e3c1b
SHA25665156714a7a9ebfdd577f48b47bffa6b37bfd46dbc688b5a2289016c42c287d3
SHA512a451bd8c48504000a43a5feacf5a962dc9d35f078d7ea362889a357ae4230cd5dbff97fb49f00bdad760225f61ef40dffd7f2399cffba2c5a378cc64b59ae212
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\placeholder@2x.pngFilesize
394B
MD5ff082a873806b970bad5b6a602a36f24
SHA1bb61991c15e4bad9a889f4ed6a5e1a34ba9b9a2e
SHA256b468ea77af3c97a532632324a092437b405b62efa21a5353b42ce0b4df80e72b
SHA51283858e8cc8ad3b87cd25baa0e6714c45af3c3fa4e72d02477ca0b24a7cd9ddacac2e41443e80492e4c20df0b6d8f52797d63668db66c66a06722cd18d21d4987
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\placeholder@3x.pngFilesize
502B
MD50090628a46913d8f9bacd34b1d7491ce
SHA133e708170a544dd8a6519288fd7b3f84a8c1855b
SHA256c65724ca5c23b02e4cd803497fa342696c2b89787c086c77f220a51ee69e523c
SHA512290b53e7aade7424306cebe4229831a5af2aee375d251b0939e9f7760d49ba9aa45df9736a34fcdfdf12b9be440ca6cbe7a683efbec51488d9495a0ae2ad4b43
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\rupay@1x.pngFilesize
691B
MD5b29acc56f431d12f16977ccc195ca1f1
SHA14e73aa63eda04a02e5a118dd2da737a7189bde0b
SHA256057eeac5fec64b45a591842333486c6ee363179a021f852f49d97e5fae2ef59d
SHA512dc04087cc515e32939094cdec097a255e62a85e553b2f74112c3720778a9d7700aa23a5a79acfafd0ebdf96b06d86ec966b1875f6a678daddf2feab555475100
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\rupay@2x.pngFilesize
1KB
MD5aed436c69462418bab96036bd2119997
SHA15b9db67080df812df068f47fa89d71cf3a2f80ce
SHA2567c9ccf319382df776a5af1128c722755b041914c4a44f0b79348cda11669ed46
SHA51219aa2269feeb80f860ee70cacffdd97ec2359034521aa221971b3026a6aa6c5f0288c4b642df80f3cb5c573ac25b077a5b38b256c6d8c0405edde9c669d6408f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\rupay@3x.pngFilesize
1KB
MD5206e30f04b1689610f9de339bccc59a2
SHA193c9e20d37d66bd0796711d1cc4fd685e683bbce
SHA2562eba56a6d472163b5dd3c6d8f0b4a173137153cb0f245d7fa69c708c4b7fddfb
SHA512a19a7be301cc01030ba2c7c18e55f30e50b63180bbe0924f832ecc061e25af6caa839c14c726baae22c7b978632f6cbfbcb454bbbede8f5e096ca84c53dd740f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\troy@1x.pngFilesize
808B
MD5aa7524bfa7c2d7f46ebbfa5d3cf7a87f
SHA1e826092a40ad014355a5ae5422e7c8ef0bd9d72b
SHA25662931841d64e59b3eae6a4c8fd9b0a2f9dea12741a196ca389b5229e97b488e2
SHA512e56e0729d0ceb8e67186704bf3b2bae7f36d7a75f038eca65e28f34fd199f4692c825c5cb18d3c7c4c7e45ccf4aa842277752689a382cc8c81771eef5f5c2304
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\troy@2x.pngFilesize
1KB
MD50b68f4cb69ce2377624731863234acec
SHA18cd003375e3add0f5600cf9e0540c0b553e54a33
SHA256275337c2b63d14d2f27edfc5390d890efa7578b533976fcb14e90944abd49a2f
SHA512cfe42deada0c5ff743c72317f51e2bbc59a1f1924c661af0ac65defde3bc9006b696161997abd8e665e70be83920f15864840d3e8b6511fff5cb826b607858b5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\troy@3x.pngFilesize
3KB
MD5f4f077144cef59c8879aa736b73f1001
SHA1bc23530090602c617050ff81295e0f6653120be5
SHA256b89deaa23e8738486ed8f7908c2c145ee3eee095bfad9c845803ebcf3c931b23
SHA5129511b5841d23bc0544868a5afd089ed190b2fb3cc2d878888e61bfff774b2fabd05a674e22d76f374c1537f522ecdbe5ee422deb337f68eb749b3b6aa42484a5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\visa@1x.pngFilesize
539B
MD5ac6e811a85c64b90bb3a12226a26cdbb
SHA1f36fe2a40c19f6be7fad84d0dd925b79a43a9996
SHA25622c73e8a87c2b462f13ef7ba4d8f0fbf712f947adc0eee9adbf452d971e967dc
SHA5127c2d8666374ac06a74314681986a59eb6aa32543e909c42c9ea20ab31cc63ba1496f7cefd9c04d79c4069caf793294f44d6a29119035813c1e8e02d1f9e8bf6e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\visa@2x.pngFilesize
951B
MD5ad9b6c3ec6fc679b82633bd5bf23675d
SHA1be96308abbca0005dd9e21f671a33807437dd12a
SHA2566a75b4220861599b356288cca83fe346fac5f63faac49535e09c12d4dcbeefd3
SHA512f5444038c2eddab8ed48e821214d58dbdb91bd4a7c6fecf35ba1ea6480725ba328d2cc13ed1fbcc50d5eb6d3e2b8b77cd709d48ea13a6e2010ba18f181afbee6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\cardProviders\icons\visa@3x.pngFilesize
1KB
MD59ca721401370229bbe93fbbd7db54282
SHA16b1b46ec7fbb5902b63692676529c6a4edcafeaf
SHA25608474d27d02b202739eb0620aa36f7b4cddd5357fecd7624d6c6f1d55a18d659
SHA512cde3c29b462f6a6514dc713cfa33cafa91d20873d7efa78f7496dcedd5f4751e55ce8d0274034d430c2c6e9fef570f928c3ddbaa94f3091955a682b8367c99c0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\ftu-animation\anim.pngFilesize
36KB
MD597c2ced412c847f5c8f1673d69e802b3
SHA115bc0d31606a349bbfffcecb95f9ad458a451566
SHA256403665a1b3d0723cc096622564d6660dd1e59a375f8c2149d8a71c1eca43b922
SHA5123d9339d243fbbdc3010c997e1a398f68761f740ccaa5ea12941c8ed68798f57a805d86f6e15f4114ccd5ebc46f615f9a545fc1680e10f3ee8ffae2f9e39aa19a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\ftu-animation\anim@2x.pngFilesize
67KB
MD59e7ccd97af6a47972e2440ed33ae1b26
SHA1d10e51a451628126cb4f37268430a728d0420f46
SHA25664b731875bdac8a842626e991d4ce63296133a82a83910b36fb6b92c88c21a08
SHA5121f56f561a0be966f7a57be15fe13f76cc8c37d11deae9c1be919b2214b64a8dc57b6d898f13f95aee7e4c24217db6bc19969e208e5eb05d85d629281db399d6b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\get-started.gifFilesize
60KB
MD548ae450a7dbb4ad131d9cb4573f4c5ba
SHA16595ddc89f08caf4ed1507cc3e06083a3c46c383
SHA256e0faf05eaafa0a4362846023b90cb6beb54a5e4591b6152b4d671e6ced095e15
SHA512aac113a381dd9f3db0b936ec0f0a81973b13b79dd9bc4010e790fd406c5ba4bd24b65cb915e08afb07ac836878e803f3c56f42da12e5e7f67dde31d4fb0be435
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\get-started@2x.gifFilesize
188KB
MD5ee82730fcef8e738a37246f582c76456
SHA1bb1edbe0b4eea672dfe20ed24310f3e98cb46b6f
SHA25606240a958bd8fcb9174bc5853d8359da9d5faef86481f0cd26758d020d6ded98
SHA51299ff0afc975aedc13a9e1a13051b1c0b75c404d1d94553236bd8ddc77b08c05f2043761438d1d08b4d1d49fc3c01f5e7a6fa8a4d3de73282a3669686371e80eb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\gift-box.pngFilesize
4KB
MD54622254c2ec90ccdac3c14b7c2c04552
SHA10285d597063f4648da731b9072086c7c9f9c59b9
SHA256fcdc822baeffdf19057316f6ecf06bc6be8909cd498b2d95c24eb547f35106c1
SHA512bcbef0e105f5da7b1ed7978f9ba577dfbf1c7b11bec663b1aa07be25f9caf681c618f17f7496c7657c9f0c9559cc381020bd5ba2f12a9d90d82d2b634e514675
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\gift-box@2x.pngFilesize
14KB
MD53f0b852f82c36c062b261d843858f323
SHA1a58f32e02f6d90a6fee6c2dc98583dd9fecdb05b
SHA256333e34b4e2c28286a0afaf4e2ecf533193d96bc1c28be960c7922c8f640c2573
SHA51254451d1cada4321e063ccc807f0d8cf3676d6a719fc1f71ec96d0fff073b3db17c489f4a9232bfd066f5c799055dbacb83713f5d15b8dea479a6f5ac0b38e4ee
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-click.pngFilesize
1KB
MD57284e4e8871aa13afb5cda71c2b9ef1d
SHA1d7d3a158e119afec0eaf65845b07a0409e759120
SHA256c4ba2bfb68df9c1a10d2225e8b615f9026f7aed8664ad8c5361477e6749372e1
SHA5121b49ae47003a7b7e6a45e76f3092a01f65a13a31c162361ed31e6531f858eca72e580151d75f7dd218f908e923289ac543ec7f4003571b0650fae58c9a40e54a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-click@2x.pngFilesize
2KB
MD5e5c9c16a3f7252a4e3680fbab599e0f5
SHA151eef6dd16f62c047083b45e4887a0062614b3d9
SHA2567d7b1552797fb09c75b8fcb5ce34b09ba81a3184c5a30541ddb4eba44931d6d0
SHA512b436eb705586a0dc25b7f693775969c2a0c649ab67c511d08e34b4ca3ecc9aeb9cedf3b3c4d2c1b987c91c740c7676554107422fdcb243dd70c1f47ae0934c94
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-close-gray.pngFilesize
203B
MD5cee947a245016421ba6718d4502f53b3
SHA1625a2769ebe0ee769197fd8723d54fd311e5098c
SHA256a23bd7f8007b57a3e8a27b00d4bfe37ee70eae74236cf419ba67c6166c746dbf
SHA512751a0b76318dd30f4bfe943bc5a54d36dbc353e7875e1c1428fcfe2ae0525987f83ccafe11c2c7e0828414854808962e6a3d0094d7b2c14be735956936a9713b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-close-gray@2x.pngFilesize
1KB
MD55349afe9099d5a54d255e09668f98b3f
SHA187a6bb59f22da6bfac260fc71a07617198fde887
SHA256d3f1e1eafa5c7a04d8a5bb30e15b2ef4ec10995f0940a667b9314fb89d0041e7
SHA512c42297b80e379b877a8807a78afb2c4b05d195ac3b029ad1811abd8fcd1a02a74a088de0e13fed28a332be84d7d31a98d23cc29d7ed28580a715153a3028f708
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-close-tiny.pngFilesize
142B
MD5089526797cd7faed8b89a8082c7dca91
SHA1737bc0c2b94df084051596624556aa7e5d44bea7
SHA2567222b4914554848cee5f6be58b51a81a412df49f511737ce1f62faad1d6b83d3
SHA512eae1d9bbb403ed4b130953e4da6288ea225a458e009afd59012848aa2e6741ee8ead30f56af0e23e4f7ac5e7455ad124c02c3b2d199f6162a24ca0375b2b1058
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-close-tiny@2x.pngFilesize
171B
MD5dac8889f0b4465c1b58c76ca434bb0c4
SHA119939a67c9e9cf35c4d26ccbf448a2a27a6d474b
SHA2563e4911709fd9c6639fe9d93186e3c4bceaef4dbd9d9e9a8b3bf4089dfff2193e
SHA512e9fa7f2ce4d642d421274da6a10224ba749b3a814ce7e285a7e9ba281bc9086ad23b2be94244cc8d1635f84eb4d97e09eff8f7a65aeaa7a05231468f496797b3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-eye-crossed.pngFilesize
928B
MD5a190290305410c98586a54a4e3febea3
SHA1aeaaa600b4c22370cc1b25f2c49078d0ef0ddc39
SHA256e197cbd60518c928159573a8d49a6cfefeea94de62b124272bd2ae2052efd5fa
SHA5125259a1d05a8c7eea18d940198e795c1adaa261807cbacbbe9ab448e8e9d3184ebc0dc3e79c6fcf25b381c8d1243ef598540adc67cc16fde7644eb5b9f286f4b1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-eye-crossed@2x.pngFilesize
1KB
MD56680058302015aacbd62ae0357b5bd89
SHA1211b4eb807e102b15dfde6c85b9448aebe84e8d6
SHA25682cfbe50129804b1d647bac2b153559427ab10d63233254dfb528eed59a5559c
SHA512ed8ca0b8c07cb581c17f2477291fb8fc4716359ef0be7950159dcf0a174daa94086511fcc0c79fe0825c7ef8d651c7dac198b6198a4a2bb450c002ae4fd27ec3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-eye.pngFilesize
778B
MD5772d1359b09882ae41ab3d3bfb2ccf7b
SHA1f88d35d69682b548f6f4718f7a58b0c8bde638f8
SHA2564811df242745523972cefa1ede313152be609c30e2c94adc276143b47421e522
SHA512c64acfcc0e3a4cef06fd762d3d5a77e11e4e3d20a105b81601c437e3ec503d9a226d77fbb9deec93fadaeaccf2920da955ca5a4e270961edac0ad6ba437093f4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-eye@2x.pngFilesize
1KB
MD5f9bcbe4add4290a1c087a8745a01a103
SHA113cecd3a1277d78422030bb791a97e9607ba103c
SHA2560deb228122c458d9c2c8e84f04b4ae69d5c0322eaab3b570e685e2836ecbce91
SHA5124e754b55aca2e0b50e0397d4cd1e2a43d7424ae20a721efb5bbc5638d9e4450f26078674547dfb867d32b11d0d8697c624bc50785584095c8ce1fccbda70d2c4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-facebook.pngFilesize
237B
MD5d8dc5c941c2adf4b6e4600d84ee61571
SHA11c32222ce15150798f71e6610de33746eaeea5cb
SHA256fc96ff627e5cc5b12adb131adb2745d4884c0fd05f237808a882cc1a66370464
SHA5127b87ac1abf82ba4291c575b138b8e7ac6d722a05d713f9e2245375cadc6fb515ea144e12055407ce7fb6faf6b259bb52124fb4ce80e2f7d5dbf1d15b51fc8fcd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-google-plus.pngFilesize
613B
MD50c5c7af961266d84291146536c9ffd7b
SHA1f51c32e2ce1a78d10b3d6249b616cf8aa0ccdb52
SHA256549365abaf98700b3cae8d626644f052c03e76bc7ba0e96e35602ce5e23f2714
SHA5124a68700266f432c2b81010eec81241e14bd5853436d6dc964380db48c68cd9723ad84d41e61c1d6803e9952b2908d36d3b112d51231cfa40f323af674be59db2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-help-gray.pngFilesize
456B
MD5473b9ee24fce0e320cfcfb4578fe9cdd
SHA17fdba86b9c7211df9eb7238bfa4fe6deee3233db
SHA2567df3ee7136c4fc04e98d11db5bc50aa3214c189b1675892ec82e13f6ab6d7ce7
SHA512d47c8327d10db56dd7fbb50dd7c66d767c7713de87a99892535be7b4eb949f5da1cfcc506aacc6e4f86c780c8cf41ab19174f0c56c0f0a4945cb3aab9b103e90
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-help-gray@2x.pngFilesize
1KB
MD5d6ced79fca409c098f0dbdbb78c6da4b
SHA1cec3f5732e96c1186d8af4a1eeecdb28ae7d300e
SHA2565b3b7df3cb822ef5f823914e10d22f5e2f9f8aeca023f4d6cfbdde970616e415
SHA512aeb01c7121bed5c7e93c367d1b2c05b4f8b1b6c979cce1ff4e765d5418b4ddb0763d62065ba7f9f26c362fc2fd36e1d6f17e89927fa381654da80bad2e07cce2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-lock-gray.pngFilesize
1KB
MD507324dd94c7e256df7e728895510cf07
SHA1027f3e06b13bac82e61b28812f2501ecbfb3b9ff
SHA256e69b0ddf22c99f305864581ef06a6f421f753633c77975d881a28e403d22eaea
SHA512c3e99a57043bf892afb7737bc515dd37378a833e59436b16ce8835b7eeb3161f109349a4d12e4a207d6d8200aae361cc8843ee3a6a087f35afeda8accda8b390
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-lock-gray@2x.pngFilesize
2KB
MD57c5bd65bf1face43ffd5c0da89a70a27
SHA125cb7f2cbbd01372fe68dfb9cb0544f59f041b92
SHA256b767b5120819f6915a27bdd47cc24d117fbb8e9581be4c7e745970a21b8a1ef5
SHA512f48016e1673f71c4a29a6afcb48d1e45f0d0f483a7219476aa1c8d15c39bf0f79367e8027a210bfd87115a1cd566c113be9bf4f03154b3708cdba47cb043488c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-lock-open-gray-large.pngFilesize
996B
MD5037dbbae97f954526beb6601468dfc43
SHA1613bdae219f7ffc3e64dc125266ba3a1c1b7f5a3
SHA256c104e7dd9b03efd27a1ca85c444a908a72f3cb901d92d5d8c0e22aeab436b288
SHA512f461ef4885965ef9f164959b943f8d4c5f4a908e2aa578fb8a9cf435d3fd1a62eec0468868a7fe9f0b092532b9f3681976aeaeaf58a3362085ee02edf6f2bb9f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-lock-open-gray-large@2x.pngFilesize
1KB
MD5352fd72a0fc01552c8eca76d3b09d522
SHA12b95e0a08bcc949444a56416f8cb853f5da44b35
SHA2565a907ac796ae7774f840432e56d44b266448cba1ebdbb1d55ae6015cd1dedb48
SHA512c729e67391e4db3b1d12eb7550b137980fadfa0289cbf8e57c6ce1ef2b5d46f1b9a6dad504a0f3bed96aa40f70accf47f3f0e01b7d89ace0d146e40016832018
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-manage-passwords.pngFilesize
721B
MD577cbddf30b5cbb7bcf395a19aaf190cc
SHA1763a28cd4aa9bb5e72528bd1438e5cc64de6beae
SHA256d761d2f60056c0cecd1856a015719aed8f97efb71c42369706169f7dc599d8c1
SHA5120bec71200c3963d426a3d4acd95bee9c984d89f5879e2d5371f329f1ebfe9738e7b489b06d11bef263e1e4a7856ede7720e1cee228c5c7e1f63ac776feb3a123
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-manage-passwords@2x.pngFilesize
1KB
MD52f9f50c79cd90cf9bcd495cf12591e04
SHA1c31dbd0853a7429a5f9a0760d745b13f054e7236
SHA256605a7465d033e8c42b90705b1ff58e402aff21b368e11c6bbd834c66fdbcc70f
SHA512dd6d2512a13de7425cc74587e5c3e81e1cf06e0dc208300af95624d78118c545ffa0ece0b6c6fe438328d2274ae1573f20fb4e854cdff2748ceaa91c0f47aa43
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-search-gray.pngFilesize
759B
MD5660a4e3059bcf02b9609b63037d03d2d
SHA1d0002361f09d63fb8eb7c579e9dd8ec6e1af2744
SHA256a09d4a47317587d47b69de72ef7fa9fa6859ed63bf67ce227c46fd26002747f6
SHA512a59a40fc8d2f509ec1e69aeba77cb859bff826dc0be8be46d53b9de5dd4b3df8eba55e99a6ec3d334300842a545b577189001e8af2603ac43a643e6c383f3219
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-search-gray@2x.pngFilesize
1KB
MD5342f9e6c37d4bb3e5df8e6c6d33be015
SHA113c662fc82dfde2369374712084390aadca36b16
SHA2566f9e35559d16528712d08d849f19769a64a56c6ab0508c884bf830ad2ecf7bb5
SHA5123e5c26466f6b176ac3c73b7c04a20eae85ed61a393023e007f8dd327fcce6794c88c3e04e5ec0b4d4e5ad328836b200e8f869ae38dd6a3de2c69b2d50997d6ff
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-settings-gray.pngFilesize
1KB
MD52f455cdcae976fa1ea3de33be7fe99af
SHA13623f8286e0adcaf1a82c41a3aad6260aef3c352
SHA25687e510ddb8454d68d2a62a2baf36369cc1abdea91d972d699781f603f22df757
SHA51237b6e38695aca8a1a72b7d3483d84ff1b12f553ee01a46729c17a13df5912949c4d48e4e6d25c2ae65f0fe2e647d616f8ccfca6bcf816a88119382bf557bb2db
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icon-settings-gray@2x.pngFilesize
1KB
MD5df81fc5582baee6470898c591b566ec4
SHA1393e4174d2933b1ad6d245f362fc4690612a013b
SHA25636018936c2801c5c2f9ec3d5c668967b373961ce8171b8c728423c902616f977
SHA512bfcad186317693efbc7dc5ba42f8fe3394fc38b79022f18772d82dbd6129922a59455b240a415bb87e8133e1fad253839d3c9517c69535874de041dc83f1da9f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\128x128.pngFilesize
4KB
MD532cdaa480de04d055cea8b7f63f24b62
SHA1b5b47fc982bfc40ea275458efd278bef26feadaf
SHA25638bb4e18db551bd40803ee058a68c9ba327c9148884c8104218931832c592ce7
SHA512c818320f311b37907e845374bd68b5653b49b83a4659b3fc4ee3d97eb6d77c6bcbad1397a47c8b7f83911f76c9daee6d44d4da961006fed221845189557cb6c0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\150x150.pngFilesize
4KB
MD5f2311a9535e3c28ff057532706d15945
SHA1143dd0aae49e00ca0c770af34c92cf2e994d22c4
SHA2561edb31afef48db86ac5c5d6dcb62f2ad993e285908fdc01fa3ce8f7680686f4e
SHA51298343d14cbb757b3e9c0df36423762bf941b42a078ccbb6615a1d0b0f1a2d84f047ab428bc6c26a1451e722c4757cd56ddd67fe19adf91c6c2cf89363216f5d4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\16x16.pngFilesize
1KB
MD584ccbe95bd88005da7ab4ba78a65ee23
SHA1e50f4143f056c81fc944ba642c68c6bfb3754d05
SHA2563901190429d527d427b5e50c35e4faf61bc39ca3229c0e928117afd73c2fd62f
SHA51291b3e278b50983b41a6f6fdd36d3538a987e7480571fa941bac19d0fdae7837e3dc3ce2d16ee8b717b6dd8715f52f8435de1124042c6f93672728479d43a316c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\19x19.pngFilesize
1KB
MD55db55f0c00bd631a553af0609cfce0a4
SHA14e1629505475d4214d85a9a37ad83ed33ceade8f
SHA256d3d9628db7687be8deff5f25ed67cc2f22d6ff8a76007e352bc85c5f479dd4f5
SHA512a172ed2c29432ca14a9a5fbd4393ad8d66d728ea0212afd361c47713cbdab0b562b4460685b3bc5f272539ae91f70cb16d429037cfa735c56e8548d7514d2929
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\24x24.pngFilesize
1KB
MD5db9ca9127ece67b28d557a57f75aaeb4
SHA1b2d03e0a1b46c4dd88b186869847c662e9bb8219
SHA256af5f32591bf069243c5b7f9c4428cc535ccbe9275035530f27142f6b80c29f8b
SHA5126bc0b8994ddb0e42c08fbe399441cceca1089d4bd60740fca3d0a43a7d80c76865cd5f511f707a25b5d1283d5baa6b2288cad8518760dd4bdd6722cf1ed2e5ea
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\32x32.pngFilesize
1KB
MD58b9c41f6eed3b1621ce81f19fd443555
SHA15849cedcdbc0f3535e3be216934de5adf39793b8
SHA25622b8ce97c45aa129ca843a5755face36e44395e908b663fef5040a3cb51b3cec
SHA51260dfb3bc74f7a02a5b3805f9042a1c68981f3c02179ed140ea5cbba555cf8e37aba5730c96d0100caec190e068956e69454bdddac831da0a0fe7678bac0184b9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\38x38.pngFilesize
1KB
MD5d4ec84b27c2207faf5eeec5b36379c18
SHA19d30cfaae152bfc32869da96d11b3ed4138754e7
SHA25621e5b64df78f8f1d27656a17eff701111b9b33224a4f383cb9decd952997bc23
SHA5129aa68af818dbe1644d83e5c30dfd6d0f9171bf01f81dd6c6699dc5cf9470eddf65741ad6b39ff8747c9402495bca58e2835a792c5cbcf138b1aab6b1e44dd2fd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\44x44.pngFilesize
1KB
MD50e053d762ae1b6a5bde27df1e865c1e4
SHA1b164fb688414c7027b257e89ff593a66a347b6a9
SHA256289b845b05106882ea198ee98c583d92287618dca7974282ad9d86a22c5d01a5
SHA512131a824c25ec1c8eda4b3457bccd0a08347e412cca76f200b946ae6367f8a20db73be681e950e3926866b13a88601dbf530220166ea52ff9df084406d9d1d77b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\48x48.pngFilesize
2KB
MD545e4bf6f710b42bc11893c852727b94f
SHA138a374c9cc64250daca751a1e9869ac7fda951c9
SHA2569107759096cc8eac7a639651b45c8360ddebdf0474cc722ed2d0ba54b58d1e80
SHA51278002f421454ecd7167fa4483544cb7622e22871fec72269f777f77ae7382d4ef14d3d5b5718ae52fbd1fd65a262c70a255fb77f8b66b1b8bc0832d26c7b3d87
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons-gray\50x50.pngFilesize
2KB
MD5b441b317356c8ce4f3e5afe170487d6e
SHA1c8b7b9409053cdb61b39b83d41954e408b3a71b7
SHA256458aef4bcddc51de25043d5f180ad0c35da78c6635d7229ea939e49f52e5cf2a
SHA512f6f8f4abb09472ce44fd618ab1159f1b7bb8802ebffb57c50613af3ee726dbde7f031d0dd52825d8ff0c924210e0e8f4294425e3d57132a7f55c98fa0681889a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\128x128.pngFilesize
3KB
MD5b0c29e248a2ea61700c27774061e4eb3
SHA130dac37a21ee38360f3fe3aef66553fa8be7ee6f
SHA25672fbc3c53ad300c29b2d29471a200d13286239858b2979ee821172b98bb2cc76
SHA51286220b1a3a135279f7051113d4157dc3ea27b9901b1f87f8311e37d2f4f5b72d342df350426a064def920d68e35cdf0d7a4bcf9dca165c8bff743393ce2ee3f2
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\150x150.pngFilesize
4KB
MD5ef8a66f73f643a76960475622736e51a
SHA12c78867ee975f9ea3afc678cbc4027081a37140f
SHA2569bd197aa852b67c241675c8203fb594fa37bdbe92f86e21ede3096f7a61663a1
SHA512b1515862f066a18c958ff9ebb6e55ee1676bb31835533a4275cc2cd29967f4566cb0a7af7237588d27f9a4db519ac1b6bf04800cfd469957d01626414f03295b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\16x16.pngFilesize
460B
MD5b723e6c5c6ac731f77d7e185e0bbb0c6
SHA1745de82a134ce7e713c5fb2858cc829de752b8e4
SHA2568e43ad25c80fae8614559805afc9ac7a996a2fb9841d534a330c165ab382920c
SHA512f4e48c2fd182c2ac02a76521df4607484ab75f7e1e35e584fa1c85709e90d801ee638c4a9c0920e685fce9f6ef81e5d97467c9bbe2479fc7d891bb395f9918ba
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\19x19.pngFilesize
1KB
MD5d357966e2bd37fce2f12516281ffca25
SHA12d04720ae16acd8089e42e53d90d9db0c112311d
SHA256031d16451756a28e098e0de35fafbbbd9d5d6ad85b0104c0a39c285d8f951fac
SHA5124de28bc73fac3e19efe77f8e53cf817d12c0bfa0b5632548abd67600cb376ee18149781b8fee0ef3dff7b26a8920450b5f7049cdd2b6fc7d76cfa5c81ebf688d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\24x24.pngFilesize
720B
MD5720afcc3ad473e897d536e7c2032484e
SHA1f964b5d58e8c43508e6e330fa0d2f264cd688b5d
SHA256f105c8ba2d8e6bf3f6a0c2d07cd3c6002819fa63737fcf8390b2d1d4525ee1e5
SHA51284a38fcbcea74e8837ae120ed792727aeeaed623df56103e95b5c380a86ee93e1db42e9aceb188a5dda1607b50145ba580f460625c98bc505260f14991a175fd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\32x32.pngFilesize
981B
MD55c76eb265f706277329754adf93a7c8a
SHA106cfe13a4744c9793ae63d3f541e7d8ea3c51ff0
SHA2561c171472fa5e9984cf0136a848bf04a8c51807c2f4f5e8e52990480e2a495865
SHA512527a4f761ec1517ed9791bcc1d70c49c4ab299bd78fd76faa3fed84ec77a3830681aa8e16d57dfdfff82b2713cb073dea6495358eee9db9a51af13e7a0abe3d8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\38x38.pngFilesize
1KB
MD58b4d816ed19a78fb6036264ce3aaf9fc
SHA1707a439b74bd6c433931dbbafed021ea190c7861
SHA2562b82d3d1ac2c9dd120ff0dbb5fcce381c9188c66d5ff5ef9d44d7aa26d02abd1
SHA5121ab1fda6ea07b741c9e8e3ae03463442d65d1256203c8fb781ab01fa2601c93a37cb4762457ba623d308a8bc0bcf99e6d12e486bb7bde604031b93c229a17db1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\44x44.pngFilesize
1KB
MD59bff062e9e4f6c042ad2e84645667850
SHA13e8161f7089a68bedae43b2eb570e04768658e72
SHA25659844913c14b6a00ee70a399da34049dc8bcc129afa12869fd870e35b6e1ddd7
SHA512839de0c6e0fc46564c9a00c79fead8fc263de31398666f1d8f248e64445ca9bf51ab1c22047710690b3afbaa873f37edd88583fb562fa226e61bd305cb7feed4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\48x48.pngFilesize
1KB
MD56572cd308703d889057395f64a0caedd
SHA1aff95bd4abe251d3a005da6dea1c8a2e89bcf534
SHA2563fe5962622eea510f5b2433379a7fe78e61e30c49b7b83179616d94ed6362ddb
SHA512cad7286c4b7dca1bfc139bf4c23ac6d5957223d8ff41289ccd8cea918f803c3e2b16abcd9093785668691a22fa59678a03a66733b60cc0448bae549e68b2a6b5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\icons\50x50.pngFilesize
2KB
MD58bbc340dbd9b5f6eb5b42afc1fa60ab1
SHA1a3e1093c173a00559221ca5c97cb4b5e79bb7606
SHA25699266f9e809166bc5e1432fd65e373e178ea4a185fecebbf17d6b17e7d604ca0
SHA512758378b2543b4b840d300088f4cabbc191a41324f66d56e9b23b13ceb1af771f17e2ab88903a3f150d9fc49cd27c4ae52720939ce03d3c26ff3f7b74238e4ccd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\info-badge.pngFilesize
309B
MD53895bb0b2b33935ae386bdd0c8a6dd5d
SHA1168aefa8fb3a8d4afb6c302127418ec48c388b46
SHA256401647f062e788d7569ea2e55836cffbec3bcb71d05b05ecd922e4d8ab8c06db
SHA51281d9af6db2810dd82be3f104eea92b4392a74c27a996f3479ccbcb599285558c9b13d8ee28baf7381e62fcc142ffda6d82cc47448a159a65ce7b4b81f66dc326
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\mobile_section.pngFilesize
344B
MD511ba61f9f71b440e9e023e86ab8b7bc9
SHA1dcd0d08f83633dfd070a7230733e3bbd591b2857
SHA256e12026c3145d491de0fc047dc521207ca00c9ccfbe22495abc55e7c2ad893f23
SHA512cd43e3781fd9a2136d18329b03658259ff69e68f98b93f30c61e414056bc23054ed0d3751fc0a660576efc4da329a6e2dd420fa332dca0ef7e58e16bfcf6be12
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\mobile_section@2x.pngFilesize
496B
MD59349f3c9af653b3b52d4b4e32c938313
SHA1bf6a569d15e6c8316ac736dbb3b879371530fe42
SHA256e6689643923eab2fb2bbac471f36d4be403c99e2e7f880e4f8a758ebaba93e58
SHA5121f3893480da58f34bd0d6701543ebd43a1b9ad62a7bd1f61064e2da586572ce61d326b629b9b9b24cfb2c89698f10d881bffbba306558b39f6b9b1507daf36de
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\rocket.pngFilesize
64KB
MD55e53314ad9c8e93aa8e94c6148864a7e
SHA1af580dbdc785fce57b97a878cfa5e48143653f16
SHA256b4c98920efc1a965a1fb3385342948b174a7074c0e041ab1b93f7fe3cf6f625d
SHA512ea1a77993e5f34e16efc090c377bae1941f71640657f4f054bc2102910d52fd801aaec4812b6ae09952e5adf4bd966078d5f0dd5c111ae0fae7772927c80486a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\rocket@2x.pngFilesize
168KB
MD566040bc85cb7d4f19efba787509ca654
SHA1cf6f64b1868918265f0cace6acd4bb0bdf358e50
SHA256e104ea9a9abad73e07b695bd44ee42aa1092e81464c577cf1e6c404aeade72c2
SHA51241262109e9ab828c407bb6bd696e0a9290c40ea21aa00a4083b66de93be963d0d162f78e59bd0123fba3b7b452098e1d4f3ae0c3e560514de0b3cc17f4d5f373
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\2-safe.pngFilesize
2KB
MD59365ddab7dc17fb2e4ad00a8347238c4
SHA15249283e15939cbbaef45119edc92f52ce04b0b3
SHA25623769936799fc95022467f85c9b4acd00995beeb1c36f09aa60ac48fee28c4de
SHA51232a2cdfc52da744a8060604b2c5887f0b7cc4ea18e9476d08937ead71c6ed0eed21d4e211900efea378d8cfa222c7e1f78d3cd6107c21e290b7921664ede9d92
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\3-browser-with-extension.pngFilesize
11KB
MD53be032160b1046738c13f343e1918b22
SHA1d17316574e26f6ddc9127c3f240f3b2d974143d3
SHA25699fcf93ac11b7726868eea3d72d916ef4a19ba0651b7dd6bcf9a713e9d99a77b
SHA51268d5f1791109039809f4714461234689adfa2f39e0944e222908f78329787797e0939788a6c613da88e69b36b19f2d52a615385707205d93c58925cb1489420f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\4-pencil.pngFilesize
2KB
MD5e4a5ffeb1b12314a9051a694bad16915
SHA1c065f29d37bc183fc7e04ef91093e83bea795d93
SHA25672908c9c045a2ad16a3cb1d0c6fb3a7ee362d72c6e4eb90b26649794aa1ed3ba
SHA512e100fe08777c1380f7aff3f6c85ba2b7d41cd0dd6978e3d6dae08c771fee022a7cf5e4d2699da000ea7033eab15a3c5738ed755647e4c5e5908f0775161dfec0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\5-cursor-and-boxes.pngFilesize
13KB
MD57a54b0a5c021c0df884b4e66d0848468
SHA1f95f8eb5f3e25aa5132fd5a8964d17d6b6edcbe7
SHA256f61966367ceee7e09ebc804f6420364c17a23b269d6f14a3c3bb701f29166735
SHA5128d8bd87fc2bfdd8f108ca565793bdb29a1b771e1a03e868f9c5ca8ace1984d25ff170302c29b9622c3f8cf07c4c6ff9f43033fad4f6a1a7d7e6186b01adbc616
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\6-browser-bright.pngFilesize
2KB
MD537d8123ce8ab75a64de4a68fd6fabc5c
SHA19431143b8fec9cec6c9d21ae23c168b4dcfa878b
SHA256095028404641396da92c452797027b4abf9048438f554f53d80935aa7d748717
SHA512685fb91a29fd69934b71e593892e2a5a359abab217bd723654c43caec065acea9d8d23d31d7a4077a641ea51ec37e49748a6d4c97cd02718f164c575fcc8fc5f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\7-allow-permission-2.pngFilesize
18KB
MD504d73a77a1ca0464fe041c2a3c505d6c
SHA1849b13fcbe3569bb4ac29a13c0381f24dcfbf7bf
SHA256192e6c03158d0d96fac7dda190ec54945de636e6a032a7d58bfdf4dd5b4f1349
SHA51242e8f912328d0a78fe3f3d8490ff3afe7481b530486b37ee94cca50b56732fc75230d096091def3fd1d447493e6017876132e9e506813279bc67544dec46de9e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\images\tutorial\7-allow-permission.pngFilesize
17KB
MD5eb949169fae4e711f11573ceea7e640c
SHA1a3a641a2e2029ae5a99418d4104580f9ced6ae40
SHA2562ce139fe67123e63c733bd23558b4258d2e783b88a04d5df64f74d7769a891f2
SHA512ed3fb2e58f22ce648fdaa36cea8191b3bd51e58d5b8c8d2dbbb550619a597cac841b1bfb8db0b6db98000fd30d713df60d0373efb1bb97c477f60c39aad9632f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\VTWorker.worker.jsFilesize
30KB
MD5691b15c22df5fe82a64a051c785a5eef
SHA11376b850f6b5cf9bdff00bdb67289e0ea9654c8c
SHA256300bfec2e5529ca5cf9a6b02cea50a2f76032ef5baab75359d87ba74e5049ef5
SHA512ac12aed51994ff2120f387b56b12f785277efe677121dd027029e1b7d8a502bed2733d93853c6332be15748ecf58ba110f21abf0de4c96fa037882fe1846df55
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\background\background.jsFilesize
6.2MB
MD5b1f66beef8ca3167d96e22c35c6a4d2f
SHA195345cb5e71ad36a6ae8a002b7c7613962269cef
SHA256623a247185b586f75d8636b8bb97e468eedaa0d117dbb0f442fd4ceeb50a10bf
SHA51285af74dc5d0b247f684d11a98c3ff193aa377784bfc929eea1b460c287303de94cd5ecd8d33a942524795eea8d9267f63afba7022514156a61a44d794feb9181
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\background\deps.jsFilesize
1022KB
MD5793bf0d406756de775ef3223f193a2d9
SHA1df45ff650bb39e3b47080d14541f28a1706b236a
SHA25651da35c786b4b722ec5cdf0454a89eb0e121a98ee66c0b15003e4029e900cec7
SHA5129dc55c61e87b7f7fce25757e2a90f1b6407c384a885f0fc8db03f927de05959ae0bb3ab294ed47d36dbc4d12e2900c27b950b80dbf094bd15053dd88bc97b37b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\app\dashboard\index.jsFilesize
2.2MB
MD57f456e9f21fef23d2eaa79d0d923e828
SHA1384ca7c6d00375e15e13dc057da930d8c738013b
SHA25673516d11760bbe2afe3f4495646be7e5db6519ebe6c915f519d57d329b110b50
SHA512f8bb9be287f014c8c8dca49e6622041b8d0badedd58c1ac4135de300f7de38bc8a533235dc677061f4722be4eee776e0117f07bd752ab42f6c64c1d488fd5ed0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\app\inlineForm\index.jsFilesize
2.0MB
MD5c246d0519036cb53172edc0a7755992d
SHA15af8eadc656c14152dc86f1e3acf592088e9591f
SHA256994bb9a1ab48b8f03e7a62684c9e40700778cf8abe57dd1d950a8c718c9bd99c
SHA512de666fe2e09a7d90ce970234897c3d5ddd030be9426072df17baca55c990560b473be0d181fd52a2beabaa2096a303b333d81ad82897892bce716009ed8e180f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\app\inlineTooltip\index.jsFilesize
876KB
MD5d341cbec82f0fd80467b370b661485de
SHA140c33ddb4f9cde772ed2c110725431792d47ee42
SHA2566034c3cb4b8f62e4236a51ed30fe6c7fddf68ee43fe11c9446b494fdfe8d1b31
SHA512c1a0aa4e9766432eae06ee7b8a93891a4371a9355766f28efef65d8f11d0a4def6f4199c674e96a44d4a35d4e85e6310788686458b96b94b321378279d909f6d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\app\notifications\index.jsFilesize
1.9MB
MD5ae2224081bca605cedf85bcc1471141a
SHA150f7435ea056a3490acf12b9b0104203ea73400c
SHA256f6f1526b2479cb749dc6525da7e11ef062098e83bd3726d49b5bf336559a2cca
SHA512114be0b2500e32422d490cd8c944577fd438a15f7470aa4db9791d40eaa7f95fbf94734936f867447aed83126f74b177a399eb3e3e4a20d05595c9388a19e85e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\common-modules.jsFilesize
495KB
MD5f674572d0de2ddbff24988b786450272
SHA1d54cb58768b455013e7a3a154f48efab06c3b748
SHA2561b1878bd9407f8a4bec2107acca50c6407c275db77900ba708badfa087807b8d
SHA512cf01ec8a7ae8b2afc418a59dff3a5fa7f6b3f2ed4da2ddae78842687270827023062b3b3d8dee3ea3c7bc03ac7f694828daa94fc289f68c73f4d6825d482ea9b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\common.jsFilesize
201KB
MD5c300112af808d6bd58bf12a6815fdba0
SHA10b3b6ced549bc93d31c2ebdc3fd98c5d6a2ed267
SHA25615c223fe6034ba5317dfe109f582c0b1f98cf701493278f36665edf21283fd6b
SHA5121d0893c11d4af690fa0ef8461a8370c968be9d1527aa366079b9961dd9b19be9508e5a597e5572b7fef0a3cf41e83d69aa409d766a285be16a0e8769b7794156
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\content.jsFilesize
1.4MB
MD5f9c34f5d5b322fa0252c4613c506fb38
SHA12bbe5ebc34f4599d0333f0a8798457779aefa32d
SHA2561be4db117c321ca6ad575713a9dfbcab32108f9df45f9b51f001531da3a063c4
SHA51220b3925b7a434895bcbc518f61d7f37fb647480e92a12619ad025f7db3abbfd26f381715bdda8e6f8e40fd4cec4ef2138e6a14aace2b8dd145cead34d68368e8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\js\content\panel.jsFilesize
1.4MB
MD5bfe39c08baf4b2c17d8950ec81ee4e29
SHA13054155808e0b64a5440a40fce81a586d82be2a8
SHA256b98c32616fea3815de29e0b873c080f92632ab4deadc749e358c8fc1d41417a7
SHA512603fe811861764493e7aeec7c5fdc3c6f59cf1441bf3b24552c136bb8a411c6241b2c1a1d5c0dce0855c695f1c79c8486c99ccc57dc79da3992f54c051c2684f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\manifest.jsonFilesize
2KB
MD58ccd73aedf45ee6977b8d748581d8da7
SHA1b5f37f23c978794a785e0f7e23d78420ff1db942
SHA256b7170777791b01d527d6d7f9a73629c26a87578cac55b91edc8cdd15e6a91d9f
SHA512dec7ff63b337c9d9b6f782fd5d04cc1e9bc172b92277e8441687c4e21aafe85bd6110cca210649e295863b926afe0fac1247be767a5ece573f967600e7cdcd15
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\SymBfw.jsFilesize
127KB
MD5bb562befd97bb4948e9d4abf2cc1dea6
SHA1feba93eff1f4a8cd2ce925e08cb465315909ecfe
SHA256dbdcdaa5c814396d91d0f0ea5ac74a96f4c3267517d476a016477ec8ac6d2a0c
SHA512ed8c3eb97bbc691ee1da824e1615c0a33fe5e0f9bcef89d1180f3107be02e3179d93823340d2216954259c6a6a3b1d113372992dbf691bde88c8bcf58d459070
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\SymO2.jsFilesize
80KB
MD564d71b695d2d3c1bf53a785365b40aa2
SHA14b9efa6a0aba6526a18eea83cebfd6350cff2360
SHA256c26691fac853e131c35473a40b5bd135f853a0c10f73f30971dde63ecf30dee0
SHA512855039488f08530accd09f40858c8d2e5f0fa66707b689949f13bad2f7c15359ea005af0730ffcf1829ad6bc8fd261aa41d607867d786ffc13114394ad06f4f5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\bytebuffer.min.jsFilesize
43KB
MD5cc650cdee8186f00c04c41c88259df4b
SHA100542143aa650cfa0de6b92271632049619fd6fc
SHA256667864815b83fb02da58804aabcc1537523d4fd70b92a229deaaeaf903af370f
SHA512a9c9438db47a3098f4f66bfdec14a923b5eac52c9538c80121b6625d1f0dc72c837cd301d9f5ddc7a85840ca9de46b8fffeacb715bc2f01f3b4a84a14734113f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\forge.min.jsFilesize
275KB
MD553714fdb38d37b004feba8e227581af1
SHA1b071e632e1f0953354e1224b8cdc95ad5b827a9b
SHA256dc67fd132427ad96c9666c844b39565413c40ddb1f2d063c53512fbf6d387dfd
SHA512f798b2d116486f0dc7fc581f023db09c2409973150f9e6927d4795fe5f1657218729244cce6dccfcefbce63f5b6bf1c5a619228eb0930e372e0d7d012f696d84
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\long.min.jsFilesize
7KB
MD5df87f7c343587fd62d4f59c928a0809b
SHA1161de1af4cb851a34b21af1fe22bf53b83ebb914
SHA25605a415e7b2c180d3b6046dfec58ca1c14501e7ff3e12b85e8574375d80e2cb94
SHA51251b51de549263b95dccb8734817f0f0cdfb9617a6338cf1fb8a784c4e5cbc31746858ca279d212c2323bdbfbb865ca5ae672024606d9bbceac8c1606c499b334
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\protobuf.min.jsFilesize
54KB
MD5bcfd877ff8794417ebae2e59dcbe7478
SHA15e9962448e98420f7036e3f7edafe9a077319ec5
SHA25628f658fae9185a1184fe1df24812aef888a8818c9ee90c18294940c7a59b8fe6
SHA512f9ed9d3c815c892e5e16cdd79566fcaf8a59a1f05efeb10c612bf113e781ebb44b99a07457e44d2cec927c753b64ffd7db3f22ec149ee5a486ef38762d908e28
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\nlok\uri.min.jsFilesize
47KB
MD5268406436366ab07f3e1a250759578c8
SHA14741dfa27c71c749a755cb472f64335815a56440
SHA256b1f4ced2d877d75ba5ad1730b88183128e86aa2e9c90e59bc2eb690b7988d60e
SHA51257f32fa6186011bc3fb68b235dd37745e4eaeb05422648f20f4807f508d53d426a4703a534f7c96a58f6479cba8d12b06835954ec01adec4bf141052f6b2a341
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4060_940601839\CRX_INSTALL\panel.htmlFilesize
393B
MD55279b5dc70c7652de080320490060f9f
SHA1be4bc8409ea2ce08848dd3ef9bb683657dad820a
SHA2565f9b2e95290286c39777a018a3e0e57d59f091c317056ccf0a9f3d09d64aa9ed
SHA51243aa1070fab2052f36dc3141d7bfb26ec0cb4743e8a872f18a99f0481ddde01a3f1860b3c2cddc95617886bfe62c42a6791dfd636adde1c01d3edbc8ea6cfe9c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnkFilesize
2KB
MD5ff5ed36d29b68615b3b1513029272966
SHA1809291bb1856c664f7d313890390fb895377ee97
SHA256cfdc5892f7e76c47de2d1367432a5af4d6cc03b911fd1ae3dfd4ac454a06d23f
SHA512f4008bac9e2f14ac6673638216fbc0cabc938da11e8fa3b18f1e571b2ce8903b053e8e9d13d5fd43e0eb1b4c617adee92ea06841b7ca3fd13531024a89db98d0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
4KB
MD5532a9fe3b2dc14d231483a0ffc220ab0
SHA1495129220259d26263ee816b0a59d0dfad3eff05
SHA256ce251b2ac5fa317187bb17a46e09f76136e892e1e5ba0c5e89090e0a4ffb34f4
SHA5121df57a85495db0df026aba0aa514f366908409a6cdd42930c2098a1253715eb5493b1db2ed2b2343c596a31d5fb3ab0aa86b8fc330859656cec5dd94785ec342
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
111B
MD5285252a2f6327d41eab203dc2f402c67
SHA1acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA2565dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA51211ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD539a3a3a401bad6b7844ae64b7474d907
SHA144c619a462914b81e25702e3feb952dd8234bfb4
SHA256aeef229c2f7d7fa0735e23aa77d791d38783bdc5fbcfe109a04f3ccdc8abb945
SHA5128ca4dc4330051f5d67fc65eaa462d508e29b605d1f58a2d5c906c8c8bc83433cc65f6c3508b38b575a781f2123ba596a28a6d90dcfabb33c584a11472c9c293b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD582fa2f26f0d2e80c8a1face2f461ae35
SHA1518455fc6de3428f05cc999966526c8bd52e03e4
SHA2564f63b3ef19c21c968599765e726663608a7f8ef91ce2eb6213865d34836878b8
SHA51274706f95dc811d7362cdf778f6c0f45547b9832044ab75df5d526dd5f5a23cbe87e8af1db658044f7813a7f346447f781ecf8c3c7174d13650ad7af27fac236f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD5a0e86d9634ce0a398bdc1c6347c1acad
SHA17464e0135d8b5ca8d4712f33d9718e1cef351551
SHA25621adf6c188cc1c78c9b6bf4abfb89ccf6326e65a3419fb9c06dcd9b2e1dc99ae
SHA5126b63fddd84c729607a7a532485f9168c56e4e86de1ee0aa5bec51469b8e01bbc2e727e7b0bdd7c0a419fb9af78ec1835c58bf294f739027d2ab2e7c7c2b342b3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
4KB
MD50c701eba0197db5e8a6748a45354ffa0
SHA16b620bb8d6169dbc53045acca83686f80b222592
SHA256edc609db9b0e725138281146775f0abe6b2d451cdd345b71152867e20e665351
SHA5127a73c5606c440bfc7d0da386743266d1bd1a2559b45c6df555eaeb2dea49128c8568a90d38381da54b6298858672db643babea756b8a3cce463385996245eab6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD5d5479929aad53da6120f194cbe08a3f8
SHA124e93bfa178a1d823c446d3d3757342d96f46fc3
SHA256366680bfab9f685f1c2feddb9095fb6f92238de604990057aaa657d1669bbda5
SHA5123e252dff59ee2ac33ad15eb8886254ea8b6ca340f933322d8e3993d5990e7357dc7405712c211238f3be2c7c9e58fd988d0129043ae2d1c33383b487943d122f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD50f2439466083d25d221376e32469aada
SHA1a9d861dcfe5dba8b6294add879d3db190ec341d6
SHA2566a4b6f9c90ce07bad2682eef665fe42794ecd0b1a1638a87cb7fa18fe536e695
SHA5120cd295991c6eb506e8d521937c3b5ef6158f347ec6e8a01592beb79c59e78a472631678d335156993139b97a88baab5da3b640c4ab0d1de9589f43b39cc11f72
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD5303304fde6cbfefeb83adf3abb841be0
SHA1b6e233fdab1463af97890d3a07fd4e45883c44f9
SHA256f326106f41872762dc2fafa0ee471cf4ae62e29b432a8e1df8b02344ff12cf83
SHA5124afb8032c8284421dd0c81ef9e82a7fd37bd651b21dc5acaa81532c0e37d46cb5817e43bee284e3ec937a97acb7199ebafa1825148decbdde9b6927809811fb1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD5556b7fc01802a0fa4e0485b25d57ab2b
SHA1c1cc82be67adedc91f1ce847cd2a9cadb3f9fdb5
SHA256d1c5a8abfce6e3ef9924afc591101749fe43988714de68571ac990acfa4f1e45
SHA51235606eefa7914f1089b3ae895800ee32625481a8c84293485be3e31ecd9b01d06d93483dd789f5336cb1239afa7802d38a30e47ec8cb4153b9beff9ac0279cbc
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
3KB
MD50759c46d81cc3c99e0ef5980a5fb870a
SHA1c82f991d201b9b1305f71b68e0d89160c1b6de89
SHA256f8e3e0bede212efcaaf8c7df90071c19a246507fed092dc994208e2605731608
SHA512357357c6968fe4bb871b6772be65d7b9b3b265772d140ecee88acb2b39eb5624826016be5c0ed19123bed79e113512f12c22c5abb5a9ee93129f46d3968a1146
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent StateFilesize
4KB
MD56c0670af84801e2aba287c09a8b40efd
SHA17315f8109fda614a73170ba59723845461b8a61d
SHA256de22804598fea4dc5d2dca7927efd3fd666c8d34cd71c9b47cba89d9fbd4471c
SHA512b5d657404a55f5d9a7edd526d843e0023e4fcd87dc4a45f975013bef20a41efc8c7c8af870553842e6dd5a1175007be2f401a8c9e60ccfc751a9dbe11d003eef
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
4KB
MD513f17b43994d34f357ee47cc76356b98
SHA10c255383ab430d9cac3ec6ead6d33f0e422b3dfc
SHA2566b88878fc8216e2076a22a5047125c2ae5f28c24584854f69019f01025fff221
SHA512d8a6dc59555281b03beb2e2ef842eb7a5f843881b2c40759f134bb6367d15448f89f4da0e7dc0a99919ac5318ac84b32ba574422f2e8f9e089c31951abc97a0c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
5KB
MD50fe594f7efea81fe82fe56d32b9541cb
SHA1916430099ec7a1b0a247204103ea4b81822270a4
SHA2564c7fab176a46c94dec99ab50aecf7be5eb0eb1b9f198eab520652448ef3b7a93
SHA512a31b2e202c6a6908683650413cbe326e8dd007fc5f52b8fef0bfac256395a0c418a290cdaf3cec162f7f4bb0224c534d6cb093cb75ea4afa31caf96a5429cf3e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
6KB
MD55a950858595f3e65713af6ae01b41ef1
SHA1628ea1402ee982e35b7623cf9e9ae8ae1fdd1705
SHA2566ff2b4b7b0ecc443e0f526cabe697388f6a7333455dbecb1c7de4c9557c0012a
SHA512546e30d55dcbdf1f91f56f806aef5809d35ad648864b44c84074b2b5dd4a45ab815097385d8bb00a279dc5f00821b0e77d11f1fd671fbbb2398c86e76540e88d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
7KB
MD53139c67ae7f65576eb843eff1854932c
SHA1f3c2e66c43f276227d345019af0a2db138368a37
SHA256b8428ffe0fd1ad91e385fc65e26f26d199dea4aae1fe540fcb3795b82f6b346f
SHA51221baa87ddba1fd6f40fe5784386d0db96c471afdc294a48ae63009c7f06e678e425bda59affca2deb96a92f8475479c139a1d320aae7cd7ed05fb42bd160009b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\PreferencesFilesize
7KB
MD590ca667fd4d04eb601ea3aecd42ee9ea
SHA11b7bf1d9fce0cdf83d149a3ae859c4d64528aac0
SHA256974f0efb254d4c8b6c6680146146ec7fc7477bbcb79ce672006659f21f3b149e
SHA512b5af0dde770e151c611d793b5c9dc0e0e940ae5370185b6cf804bc05dbc1c1f2d30fd325f165882ea14d2dad5412ff69b68691142dde45605f8b0cc9efa71fba
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure PreferencesFilesize
24KB
MD55edab6d3ffbeee247ccb4423f929a323
SHA1a4ad201d149d59392a2a3163bd86ee900e20f3d9
SHA256460cddb95ea1d9bc8d95d295dd051b49a1436437a91ddec5f131235b2d516933
SHA512263fa99f03ea1ef381ca19f10fbe0362c1f9c129502dc6b730b076cafcf34b40a70ee8a0ee9446ec9c89c3a2d9855450609ec0f8cf9d0a1b2aebdd12be58d38c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure PreferencesFilesize
30KB
MD574b707766d8bb9eb016ac990c56971e0
SHA1421823298b1b3d913a88d549fc3887e153a70fa6
SHA256c02d6999474a0d926f7bf58eddd0a96e98a42ad88bdf5e8ee958e472be2acd4f
SHA512a04498a2bb8e0063fe8800549152c3149b35393c134ca831f17840058aef312549d7943564afe5eceb15425013db37fffe8a3763be10a2c35a9ab74dca72d792
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\15daa5df-30a7-4f32-b609-f7d7abc4fd3c\index-dir\the-real-indexFilesize
624B
MD5ea5748bee5137132558be5e7289cc77c
SHA15876edfa63e46a64de48ec2240f1492db3a84b1f
SHA256bd6d88b323f38b4e9b132ba259c0181254b242ebd0edf8faca63e2f944761809
SHA5121099a23cd2aa38d49abbfb25bffc5af7b84313816022913b64525eb9843fe3e544ed7327e6c0a9106c27739c55cfc9d5d8a0cf53b6441deabd03e0b777b181b3
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\15daa5df-30a7-4f32-b609-f7d7abc4fd3c\index-dir\the-real-index~RFe579fda.TMPFilesize
48B
MD5e50c7e414ac52d6ea076e64039a06a79
SHA1575fa44818cd888d5d3cbb3be2939e32d7d9388e
SHA25674c32f6f54b2e47454cdd90cfc6e1950e3e4146f28868c330c8b5795f8b64488
SHA51259c7f6e6bc82d415205dd1b8b0e8b468cf98b1100343d048667aabab79f1888c9d3f55c382c8d8483af9db58b5cfd2203d3962103155b26018f2c4460fb94a93
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
26B
MD52892eee3e20e19a9ba77be6913508a54
SHA17c4ef82faa28393c739c517d706ac6919a8ffc49
SHA2564f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2
SHA512b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
99B
MD5274e7f0896fe4c3e495080f412f0cdd4
SHA100cbcbd9e6c0c03b20060fbac0b7ea8f8d07ca6d
SHA2561eae5ce894251ca69854a6ee8014386e6a1422201e53ab601830bb5a0d9a4e92
SHA5125220128ad993cfc3c716e387db0f76937f6a1cdca646d394dfcf1dd1b7fbafd2a885ec8932ed9c18b9e64637eb6cfe4841aeed757f37034513d4f4280a6125aa
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txtFilesize
95B
MD515acc326835e72e58ab8d9fc7ee75a8a
SHA15a7d9c58c56a4973ac6c34a4bfed3ab9e53dc166
SHA2562a4e1cca52a1803dc7bc33fcbd7706bd6839202cbe3e68a2de927948f99b501c
SHA51229732b4c97c7e726eb263143f508f179383ce287dba99b72cc3e93e8bcf91a78b3e6ff911e4767a16d6602ac1c7efae1f14aef5fbce945cfe5e8a343a11efd0a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe573cea.TMPFilesize
90B
MD56f711948d7b5a5389ba17f2d75f4c86f
SHA12e61326caf647a604140160c540e294f5ad5b7f1
SHA256059b7abcc31dcd7a01a0bbe8aed4043482597ccd507354b17e8fa08326ff8370
SHA5125d8e081a21a6bfbb9bcc7d9dc4753f37d00dd6d6f232ebc9d0d3ca8c6420bd227fffcd4b60bca8f3a3fb989c9677357891ba6a6289c4e556519b002d5748f55c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0Filesize
14KB
MD53ac3fd717091d5a291489ff60b7ad03c
SHA11db4bf0ef91601ba213556ec49ef834c0933985d
SHA256d8d99b2cb4a65c82a9d824d84f0c7e1f5a8bc39544a8403cd1693720cd081c00
SHA512fd78d2a86f178ef815ce80a53c6ae44bb4625cd9b772a7a3a09cf10c681767b853798ad6e8b7792a81c369c27226e81c0d48a5cb0dd6d921f98fd7d2bc151f1b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1Filesize
7KB
MD54bf6c394b4a721334a9e0eefe245b86a
SHA12a6527c0d1c583e60f6be220abf4ab1cf00b5926
SHA25660037374c9af7c58f95dcd0833db7b4a0bf80b91802d4c61192648c507c39771
SHA512fd780eba47b43b21f0bbf336585eb03b0d98d1ce20f9cf63cecd3292d1e0f3e00c8918177645f02b783cf1af4d24b9e7789550cfe3afb074d3beb0c69c68f783
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0Filesize
136KB
MD50eb023f94e5bb5c2a981fec37c013e7a
SHA1cfae14f75b9ebbe3b0ce61bfb97aeec0bc594120
SHA256bb2fbe73fc71d16205f995527bbf504f9414f22b0bb093d7770f9af97e3c3f7e
SHA5127eeff55e4e0a4d9e0169cdc7c4daf2ee9c51dafdcceeb71ef3877cf756e7347562250b472f14d7741dfbed85ec75f70398d26f318047769fdba58d5698311c40
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1Filesize
339KB
MD55845ca78cc3b03491f5a7900f8b35f41
SHA1ff9ad8cf3904ef9ac4b07ea7fda6c4c7c1def549
SHA256c799f6d560d3505c3b3764036e634bff3b78849c6f25ab1abcd61896b0dd3364
SHA5125737889dd706cef1303ce3424b59fe6ea3c9f905e2fbae3a650fce95fa61112e0dcf1588c68773b34b429999e5db7b121b4e4c888eae2c1e572a91c1af9a2ddd
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-indexFilesize
96B
MD52aa34249c0b57c15f00ab0166951cf49
SHA1bc5d36cb50bdc70b2aefbf7b9ac5323dd6175f46
SHA25667e94bc340df5dd4d72e5c4a5159986002904fb09ccc382652a30946b5dd5b27
SHA5128d3a8bd83a444fc43a9718ab317554914e29c8420a7a7f49c3e047059bf57f092ed571c3f54af7e1193b43cb787da95882d0fdf762104dc18b8427781fb966fb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57949f.TMPFilesize
48B
MD55be09ce112a07c8b6930f87e72e5a8aa
SHA1e80bce10c5422af8da2199509e367c143b72a3be
SHA256c88b53d32b845f571b38abc6ddcaeaaa91e3f6e660e1466c58d1eee558485397
SHA512c3afe85b5891def034778c66b9ab26271cee0f52508a13b7cd177e1849f5344069959825ce0c810b81d2eb21c9571b0fb8a2a84c565aad16c301a400fc8557d0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
1KB
MD5dccdfe6fb15414a245e5eefb4de24b80
SHA1d16cc702460cff9ac909702fd5861bc6ad0aadfc
SHA256e55ec164012c2a5579399587011c27ed4714f5d8522324e64e33a1ce4897e7d6
SHA512a5dd9f35e696cf7167d47f8b80ab6914fa23d5db9d103de2a5ac72c49a725546b0f5ac5d8b8df760ceea8dcbdc6f303e471d25a72a172d092002c72034f30aa0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurityFilesize
1KB
MD5d9759aad500648fc3131c121493c28a6
SHA19361cf752152fd0fc46addbbe5e5c22f0ab2f020
SHA256895ee0f3f3d0302f06e712fc5b7c413e12b3c67ddf24a96fca01352fb9783510
SHA51243dc36554901d552133abbc5b1f4ec8aa96ea4e985a23a4ce1a29134054dd7e4f7ee6c799defe416ee7cb305002d40b3196525d31300d1359f92eac4c1c0b44c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe576179.TMPFilesize
873B
MD5284ae6466874c0b0c38b90de596b9b6e
SHA15e8b35e46c4e63d7f68b31eff20acd35442c41ec
SHA25640d61ce575d2cabd9d4f050d78e084299401564e0b41271aa694f2fd89f8784c
SHA512f0341bc4cde443462f8a023bfdfd756105325af0b653b8b771132df4adf303aaef52f51377430e7528022568caf93d6fa582c48cef610c2a4acd62a415f8a680
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENTFilesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
9KB
MD5c5304e99d9530639dcc296bb8923f7ae
SHA128ee93c2899eeca8840a701cb5f5cee0448d5e13
SHA256596b6d3cad8d8f2aabbcdcfe49508d70dd1086f2394bfb9c732b4d3b9e90ad10
SHA51291a55612a7e52909f8f674bd4b2fb468ecf83ccf568d79c76301b2725d2738326e004f0848cda931d23f70588483daa5d44958e537b7c9980b5cf29876e992c5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
12KB
MD57be5950e130fc7875cfd05d758acb35d
SHA1765e26b5caa68f5b62d500601fdaf512b119fd09
SHA2569a6ecc0c1935c83510eb7bb030a1d39525ffe8880ce8ec3dee904b086d543184
SHA51294e8bad2ac68c9c5c887a47df7ac78fc7535d6783bc6f6e3e6d241883ac48e360d4ef183d3fa42167c9d24510df9f21ff2cccf9d856ca98806fe7aeb33c1e91a
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
12KB
MD54b524124bd87cf6807d0387d042d6a61
SHA19e64ee9e1ed4d579820de3b707d290ac258763ef
SHA25634e0e8ed4b1465904b0fb937a6e47380bdefc9cdafae126d370bc827467a7a69
SHA512f1f59c2629ece0c8d8e766fc9ff36bc77ddeb52bf668a263ffc08dff48d3142260ec30d475fb0658168354f759630ea290bbf053fab32ae5ba9b935c0d664a6b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local StateFilesize
13KB
MD582f62143885290bdc488948e631cec51
SHA1e5b73171033d56e2d1a783d798f04dd55a3875af
SHA2563f6ab74b4b308159329d12fac51df7dfd1968666a52eb90c6a21067398eb1cd9
SHA512dc7c420c7bcdc3aa9b52253e957198468e26b08282d5e11f6d5cc3a818e5a8f4ea3a637c21ce38a6dd43463c6f927cee7a7050ca160391894f3fe5bef0d29f41
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\3312733f-a5f3-4904-9167-1e4b28241898\avira_system_speedup.exeFilesize
33.8MB
MD5f7ee91fa12eff824ccfb0706bf56c483
SHA1b28d5f78c1d870f06dfa7c8fbe37502c92c116d7
SHA2566ddecaf64cb3071f5843da0c9c7edc5f02646e27677a196d231a500e2f33e8ee
SHA512c44426d3194c64cf535982d67adb8bf2b3b8b58dc251d71347f42c9474cfb579a148cefbea7afad61c2a75a9e62d159c4844bc71a044d314984b971b63c4bd4c
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\7c0efb1f-e562-4aa3-9f7a-f278c585bb81\endpoint-protection-installer-x64.exeFilesize
260.8MB
MD594c3e932b6132c05064c92fdfdae0334
SHA1fd485537edc0437975e103fe5b74407400eb086a
SHA256b16c7aa9d18f40aa8a26120526f64b38da2b8f78e6a544a14700ed1a0968bb0e
SHA512fb682cec644958a1e6070ac93ca323a34263e090455ff988402a3e42de4c8dacb592314a874a958a80eb6418562bfc0b992a2463d8d4489b5e6ad1bbecf09ec4
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\ACSSIGNEDIC.EXEFilesize
202KB
MD58c4622622a1044250d32b3f75dff1308
SHA18eef39eda2043c3f2fb680b5ecba9dc399b70f10
SHA2567fbac7f635533ed207d3479cb8a4e5e96fefae5c1ddbdd5f52780ce6c3ddc6c2
SHA512a36ca64d20cfb8a9cf04c6d7565cf8f38922092850913d0ee062305fb755c6570693da32dd866c7c667d7e03b8a9656dc74637b9535ac6e26a156a200c3d02cc
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.COMMON.GUARDS.DLLFilesize
16KB
MD5f8dd8ab51f12600c10a26f8a1d675acd
SHA1a49a9768dd707cce4b1b532e67b735d7afefe4d8
SHA256fe20d6228f137e70cd0a0c0cb96a9246297c66cae9c6e8089d38d217beab2970
SHA51205ca0166f98bd1e0e465466724c7b46f98e4fa72c1d15ba98000da3202cea69987d57a7a4012db9d1be0fb3c1f548524f58486f69c119f12a07b2930cd8857c2
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.COMMON.GUARDS.DLLFilesize
16KB
MD5f8dd8ab51f12600c10a26f8a1d675acd
SHA1a49a9768dd707cce4b1b532e67b735d7afefe4d8
SHA256fe20d6228f137e70cd0a0c0cb96a9246297c66cae9c6e8089d38d217beab2970
SHA51205ca0166f98bd1e0e465466724c7b46f98e4fa72c1d15ba98000da3202cea69987d57a7a4012db9d1be0fb3c1f548524f58486f69c119f12a07b2930cd8857c2
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.COMMON.MIXPANEL.DLLFilesize
67KB
MD57a626e065aca5b636eb790d67c6d9f61
SHA1ef5ba03f8711841eb5314ba2db8562165bec27e2
SHA25655e59a3dbedc7b5dcd63d4d5da00a3e7734f5e057395e7dec8c64fb632a6d820
SHA5127a73dc0f151ba9b7cb6564e3e263f49c1c1b3d981e2eb3c848028818f5906a96ce2d4c6242207374bf8f690a6bd10120045c6bf5993b224dacfb97f437c26ec3
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.COMMON.MIXPANEL.DLLFilesize
67KB
MD57a626e065aca5b636eb790d67c6d9f61
SHA1ef5ba03f8711841eb5314ba2db8562165bec27e2
SHA25655e59a3dbedc7b5dcd63d4d5da00a3e7734f5e057395e7dec8c64fb632a6d820
SHA5127a73dc0f151ba9b7cb6564e3e263f49c1c1b3d981e2eb3c848028818f5906a96ce2d4c6242207374bf8f690a6bd10120045c6bf5993b224dacfb97f437c26ec3
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.FILEDOWNLOADER.DLLFilesize
47KB
MD595b0d118f521cc7d1e34e35fbcebde08
SHA1656a1c80d93b46559644d0bc8ccdd14b58f324ad
SHA256297e096527003863f26b5d3b1bfa4ce1ea91e169e7c2b0d13bd0d6ac3daa95b9
SHA512d47c2bd5da14a20288582cce6bc82b618a0a62e7ef65e3c78a34dd3959cb02e514cb8a34eb8d19d153bcfdb3df66d6825538d3185edbf56e8220de6a77647522
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.FILEDOWNLOADER.DLLFilesize
47KB
MD595b0d118f521cc7d1e34e35fbcebde08
SHA1656a1c80d93b46559644d0bc8ccdd14b58f324ad
SHA256297e096527003863f26b5d3b1bfa4ce1ea91e169e7c2b0d13bd0d6ac3daa95b9
SHA512d47c2bd5da14a20288582cce6bc82b618a0a62e7ef65e3c78a34dd3959cb02e514cb8a34eb8d19d153bcfdb3df66d6825538d3185edbf56e8220de6a77647522
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.CORE.DLLFilesize
381KB
MD5ef70858c12ea3f3415be19fffbdfc446
SHA1ae797de460ef45758b299c6ddeaf0620a2356703
SHA2569b94411580dbd21d111088f47109968dc0ec9e921d4a612a3556195aa8e9f1c3
SHA5127f6d5dd58e3849ae6f4f90abb9775b5bf6e617890a05b4c30448bfab46ac824e1943bb92f61b20bbf702de7f353edd3c3c62c765eb3fbe67dbd6aab2b7e6569a
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.CORE.DLLFilesize
381KB
MD5ef70858c12ea3f3415be19fffbdfc446
SHA1ae797de460ef45758b299c6ddeaf0620a2356703
SHA2569b94411580dbd21d111088f47109968dc0ec9e921d4a612a3556195aa8e9f1c3
SHA5127f6d5dd58e3849ae6f4f90abb9775b5bf6e617890a05b4c30448bfab46ac824e1943bb92f61b20bbf702de7f353edd3c3c62c765eb3fbe67dbd6aab2b7e6569a
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.ENGINE.DLLFilesize
358KB
MD53e6073d55d85baa10502b42642c4b3ae
SHA1368204c5dd7e58dc0b3b15c277fc074a4ba66355
SHA25650a76db7c2112780f404356f2c724264c241d4253c94ca734bb3315c685cf608
SHA51289d5a15af749a52597e015b2a72c0897efdc33da18fd292c54e1130680cb889ce0a12f8c053427ab18ca0b77b0320025b0275b14093359768a7167123222ce31
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.ENGINE.DLLFilesize
358KB
MD53e6073d55d85baa10502b42642c4b3ae
SHA1368204c5dd7e58dc0b3b15c277fc074a4ba66355
SHA25650a76db7c2112780f404356f2c724264c241d4253c94ca734bb3315c685cf608
SHA51289d5a15af749a52597e015b2a72c0897efdc33da18fd292c54e1130680cb889ce0a12f8c053427ab18ca0b77b0320025b0275b14093359768a7167123222ce31
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.EXEFilesize
1.5MB
MD59a25207581a1b65bf1a5e621bb89d20b
SHA1ba50e4e8bf6f823903b4daec850347c7330ddcc4
SHA25674c7b039cac90f18371630383018797aec41dc74325a6763f41037af9e0b1bcf
SHA5121f1d846ffa91533f6aaf8b8c3c36b707426a868d091caabf46ca96e40034d029f3057bdc0d8b222837d0ae6136fa213f58b3db85acf7da1d623e1f02e95d9e68
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.LOGGING.DLLFilesize
167KB
MD597854fcac22becc58bd605fd2fbb7cd0
SHA149b3313e06ea3e2709b2cd44d36078887e3d71b5
SHA256ba83667783c1d8f3d488ea52f077c83e270811b50dfa47214ea98042da1d845b
SHA51222ac205a7f4813333390f0700bfa3a467c71032d752f86cfb94febb6d4a2354031d3d16d64562bb14e68ccfaf2de88276d0cd1cada4971d21b4fc44c2c666d05
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.LOGGING.DLLFilesize
167KB
MD597854fcac22becc58bd605fd2fbb7cd0
SHA149b3313e06ea3e2709b2cd44d36078887e3d71b5
SHA256ba83667783c1d8f3d488ea52f077c83e270811b50dfa47214ea98042da1d845b
SHA51222ac205a7f4813333390f0700bfa3a467c71032d752f86cfb94febb6d4a2354031d3d16d64562bb14e68ccfaf2de88276d0cd1cada4971d21b4fc44c2c666d05
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.REACTIVE.DLLFilesize
205KB
MD52701e7a63a440d7246f428efbfdfca23
SHA1f9e75d86d5cf14dc73a2c1650533b4deb381198b
SHA256c53854b1149e631724936a4dda4f7ee298b20c9d7c3004937080c2978bb9217e
SHA5125a352f7f01ca45878e996584d232fbb161b6037c690b0d63bbfb87e69db069bda3e1258022e2c7fcd704914d1203c8ed8640feebf37c961468e9ca5e73ffda22
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\AVIRA.SPOTLIGHT.BOOTSTRAPPER.REACTIVE.DLLFilesize
205KB
MD52701e7a63a440d7246f428efbfdfca23
SHA1f9e75d86d5cf14dc73a2c1650533b4deb381198b
SHA256c53854b1149e631724936a4dda4f7ee298b20c9d7c3004937080c2978bb9217e
SHA5125a352f7f01ca45878e996584d232fbb161b6037c690b0d63bbfb87e69db069bda3e1258022e2c7fcd704914d1203c8ed8640feebf37c961468e9ca5e73ffda22
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\DRYIOC.DLLFilesize
438KB
MD5e365c9a3a13e5ba5fdc88e91ac82bf22
SHA1a1a57be18a50bf930c43fc2177cb34f5727f3588
SHA25648a92ed9219ef24f0a8d9e0789c7454c5e98036287def14fc651dddfb2e1dad8
SHA512866e6fc9409e58aa8a1d044e731e3eabce0e98c3a96f494899bf441eeb6aad55657f712b1152ab4a1b64f850b3cde1222730bd185452a9d9c224345a93eb4a12
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\DRYIOC.DLLFilesize
438KB
MD5e365c9a3a13e5ba5fdc88e91ac82bf22
SHA1a1a57be18a50bf930c43fc2177cb34f5727f3588
SHA25648a92ed9219ef24f0a8d9e0789c7454c5e98036287def14fc651dddfb2e1dad8
SHA512866e6fc9409e58aa8a1d044e731e3eabce0e98c3a96f494899bf441eeb6aad55657f712b1152ab4a1b64f850b3cde1222730bd185452a9d9c224345a93eb4a12
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\DRYIOC.MEFATTRIBUTEDMODEL.DLLFilesize
70KB
MD55be66bf14e37b5a544e3a0458cda6265
SHA11444b7cf5b9b07c3b90192de00b282f42aa30598
SHA256ae1aa92c44a857230e2a00dde01280963e9f2d1e49d9144d8df4c60f5a87663e
SHA51223e263e697e9c8ea8fa0b03d7fbf43c61f37302bca72af54ee4eb5017ccda6f6ba1d0641b14111b20c2fb69e588ac07a03d3254579663ff1111d996d39db7aed
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\DRYIOC.MEFATTRIBUTEDMODEL.DLLFilesize
70KB
MD55be66bf14e37b5a544e3a0458cda6265
SHA11444b7cf5b9b07c3b90192de00b282f42aa30598
SHA256ae1aa92c44a857230e2a00dde01280963e9f2d1e49d9144d8df4c60f5a87663e
SHA51223e263e697e9c8ea8fa0b03d7fbf43c61f37302bca72af54ee4eb5017ccda6f6ba1d0641b14111b20c2fb69e588ac07a03d3254579663ff1111d996d39db7aed
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\DRYIOCATTRIBUTES.DLLFilesize
32KB
MD56509faf4f54cdce3a4bb7b980423408f
SHA1dc1ba2418f43b9af1b22349eb97064c4f5f347e4
SHA256f18c55033591d7202b21261948d886ccc27cde168a6553dc92b9d4b1c8ac9334
SHA5123deb9e6c0c9b80527a8fe3dcd9a8d324c357b09526f8e3666475ea4abd5aff49c4f43599543106f183bcf80a0212afc1b79d8212ba86b415f39a2e63aaba5276
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\DRYIOCATTRIBUTES.DLLFilesize
32KB
MD56509faf4f54cdce3a4bb7b980423408f
SHA1dc1ba2418f43b9af1b22349eb97064c4f5f347e4
SHA256f18c55033591d7202b21261948d886ccc27cde168a6553dc92b9d4b1c8ac9334
SHA5123deb9e6c0c9b80527a8fe3dcd9a8d324c357b09526f8e3666475ea4abd5aff49c4f43599543106f183bcf80a0212afc1b79d8212ba86b415f39a2e63aaba5276
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\EN-US\AVIRA.SPOTLIGHT.BOOTSTRAPPER.RESOURCES.DLLFilesize
35KB
MD5feab4764d36f33988650ada96a7c41cb
SHA14b8ff7efd39453aab4dcc7fd2ff73d33916adf69
SHA25649a48866162d79f1d085e9e5ca964c84d82c4e1da500be0ea57e90050f80551d
SHA512a0ce963227d46b3f62765f41c683e3a830449837219a88d052024269d6f8b8faafb6a632508b9b9f3e7ce809e71804ca5dd78ba87e0987c82e1444990816567e
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\EN-US\AVIRA.SPOTLIGHT.BOOTSTRAPPER.RESOURCES.DLLFilesize
35KB
MD5feab4764d36f33988650ada96a7c41cb
SHA14b8ff7efd39453aab4dcc7fd2ff73d33916adf69
SHA25649a48866162d79f1d085e9e5ca964c84d82c4e1da500be0ea57e90050f80551d
SHA512a0ce963227d46b3f62765f41c683e3a830449837219a88d052024269d6f8b8faafb6a632508b9b9f3e7ce809e71804ca5dd78ba87e0987c82e1444990816567e
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\FR-FR\AVIRA.SPOTLIGHT.BOOTSTRAPPER.RESOURCES.DLLFilesize
25KB
MD5823ad4c928e8398f73e261a2e67a2601
SHA198d877575cb0384208acfe3084a6c83b533f10b0
SHA256315b8a7c3e1738d2f9f9cdb9fe2017a427b369e803b2dcd8bac4ac5eccba1dd2
SHA51281a610b4365ee542175a0a693065c30acc7a7362cbacf82cb083f5f6de0e8054319b311161b054043d4fdc81f5f2848a127649cd510fffa3feaea361a66250e0
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\FR-FR\AVIRA.SPOTLIGHT.BOOTSTRAPPER.RESOURCES.DLLFilesize
25KB
MD5823ad4c928e8398f73e261a2e67a2601
SHA198d877575cb0384208acfe3084a6c83b533f10b0
SHA256315b8a7c3e1738d2f9f9cdb9fe2017a427b369e803b2dcd8bac4ac5eccba1dd2
SHA51281a610b4365ee542175a0a693065c30acc7a7362cbacf82cb083f5f6de0e8054319b311161b054043d4fdc81f5f2848a127649cd510fffa3feaea361a66250e0
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\MICROSOFT.WINDOWS.SHELL.DLLFilesize
161KB
MD51b745b3f978d2680feb8c421194134ca
SHA1aa87e2f9cb0e886075c7d5a9fca92c3dc0686bad
SHA256f4d5800b8ddc3e6d909c640164ebbb2f1af6c477312a94e9922d41ef718f5d23
SHA512d1195641b0f06df64d7f76a6199719b84b3d07817a12668048861ebe58a4dd828c30d8efc4a82ca599003069bb2f571db351e4d4b02e2aaace06ffc9e3f076f0
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\MICROSOFT.WINDOWS.SHELL.DLLFilesize
161KB
MD51b745b3f978d2680feb8c421194134ca
SHA1aa87e2f9cb0e886075c7d5a9fca92c3dc0686bad
SHA256f4d5800b8ddc3e6d909c640164ebbb2f1af6c477312a94e9922d41ef718f5d23
SHA512d1195641b0f06df64d7f76a6199719b84b3d07817a12668048861ebe58a4dd828c30d8efc4a82ca599003069bb2f571db351e4d4b02e2aaace06ffc9e3f076f0
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.COMMON.DLLFilesize
180KB
MD5668ea1b74db7c1393a55e36e0d20158c
SHA155d680ac555274ec039c21cb05c4baec20948c0b
SHA256b3bf4d67e26bdb6c8fda588511ddf5fa026ccd562ecbac6799dfd9fcaaba8132
SHA5123e97cf03b6e5152866024aa97b5df292bdb28760b8456537aec4ae455bfa17fd2d8c4f05ea32a6d7bcdae2bf6b94e0c56c9d6d7091bac49cc8686ff7c153bb73
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.COMMON.DLLFilesize
180KB
MD5668ea1b74db7c1393a55e36e0d20158c
SHA155d680ac555274ec039c21cb05c4baec20948c0b
SHA256b3bf4d67e26bdb6c8fda588511ddf5fa026ccd562ecbac6799dfd9fcaaba8132
SHA5123e97cf03b6e5152866024aa97b5df292bdb28760b8456537aec4ae455bfa17fd2d8c4f05ea32a6d7bcdae2bf6b94e0c56c9d6d7091bac49cc8686ff7c153bb73
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.COMMON.DLLFilesize
180KB
MD5668ea1b74db7c1393a55e36e0d20158c
SHA155d680ac555274ec039c21cb05c4baec20948c0b
SHA256b3bf4d67e26bdb6c8fda588511ddf5fa026ccd562ecbac6799dfd9fcaaba8132
SHA5123e97cf03b6e5152866024aa97b5df292bdb28760b8456537aec4ae455bfa17fd2d8c4f05ea32a6d7bcdae2bf6b94e0c56c9d6d7091bac49cc8686ff7c153bb73
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.COMMON.DLLFilesize
180KB
MD5668ea1b74db7c1393a55e36e0d20158c
SHA155d680ac555274ec039c21cb05c4baec20948c0b
SHA256b3bf4d67e26bdb6c8fda588511ddf5fa026ccd562ecbac6799dfd9fcaaba8132
SHA5123e97cf03b6e5152866024aa97b5df292bdb28760b8456537aec4ae455bfa17fd2d8c4f05ea32a6d7bcdae2bf6b94e0c56c9d6d7091bac49cc8686ff7c153bb73
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.DLLFilesize
249KB
MD57daf679d2491093b84e02d84cd9cccb6
SHA1acd3d2c8dfbdff7e10c255e986cc063952e8f9f3
SHA2569eb0e59d74b0a92fa7a66fc823fe2a24b7f32db5258ec97adbac6e0dbdadf791
SHA51279d6d3027a356523cb8f16b30b6fca13d262f82ee4e682af1c424c9527ea5322c7cdb538b09dbeb82c21c83000288e18413adbd5574d31e58bd5b095d2f8ae0e
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.DLLFilesize
249KB
MD57daf679d2491093b84e02d84cd9cccb6
SHA1acd3d2c8dfbdff7e10c255e986cc063952e8f9f3
SHA2569eb0e59d74b0a92fa7a66fc823fe2a24b7f32db5258ec97adbac6e0dbdadf791
SHA51279d6d3027a356523cb8f16b30b6fca13d262f82ee4e682af1c424c9527ea5322c7cdb538b09dbeb82c21c83000288e18413adbd5574d31e58bd5b095d2f8ae0e
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.DLLFilesize
249KB
MD57daf679d2491093b84e02d84cd9cccb6
SHA1acd3d2c8dfbdff7e10c255e986cc063952e8f9f3
SHA2569eb0e59d74b0a92fa7a66fc823fe2a24b7f32db5258ec97adbac6e0dbdadf791
SHA51279d6d3027a356523cb8f16b30b6fca13d262f82ee4e682af1c424c9527ea5322c7cdb538b09dbeb82c21c83000288e18413adbd5574d31e58bd5b095d2f8ae0e
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\PRODUCTLABEL.DLLFilesize
249KB
MD57daf679d2491093b84e02d84cd9cccb6
SHA1acd3d2c8dfbdff7e10c255e986cc063952e8f9f3
SHA2569eb0e59d74b0a92fa7a66fc823fe2a24b7f32db5258ec97adbac6e0dbdadf791
SHA51279d6d3027a356523cb8f16b30b6fca13d262f82ee4e682af1c424c9527ea5322c7cdb538b09dbeb82c21c83000288e18413adbd5574d31e58bd5b095d2f8ae0e
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\abcb9db0-ab23-40c1-a941-dc312390f15c\MicrosoftEdgeWebView2RuntimeInstallerX64.exeFilesize
139.9MB
MD52236eb1c247aa64839b19b18e2bb20d1
SHA19406cc6cfea40062b89781d30b9fa52c62cb86cf
SHA25638b8472e5f16252db789eda569247f5f8f19a6f51b9d3d577aa4381298a216d4
SHA51264123e4a6d46b4ecac7ccdb259328c70260767e870b0ad85e329360a449a3f27a7507f2aae03edd72b6b9cffe0addf96b6cbb3943267675c14119fcdfb3c1e40
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\d8f6ccae-8b60-46f4-9702-b7f566d028ba\avira_spotlight_setup_wdp.exeFilesize
34.8MB
MD56b04033cc6b2883e8e646e2d3de06747
SHA114458f58ca0137b29507fa1313e2691caf908374
SHA2565af163c1ba191fcb574e372904c32e44a386ba02d6e01a4559aece3b83821d18
SHA512218c49de3a509ef28aa88e6d649f48dba49a16040e00e9c10441286df69a7cec90acbcdf01aa050a24c0151cd792cfef16fb726a037a9b5454f3dbc87a0b412a
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\e2f0422f-8bb4-4269-bbed-920b9db1af32\avira_fr_aps10_4064744797_x0k2hxoar3t4xoobqwfh_wdp.exeFilesize
6.2MB
MD5127cd4a0396ecfbf0471a58a70e6d6e2
SHA11bbd1ed6ef68a5ad51fcb5e14fb15c52a0f2978a
SHA25620409aec3518613040544af55698c4557c176266d9adb0a46c53b581fcfc5f6b
SHA51273c8f47208a21bddede88734d9a57653a254d57db50907e85ba1c3471d0647d67392b6661ceef661393d919916d2c8f6bb61d2f44a8349d9f8a7de724e9ecc3a
-
C:\Users\Admin\AppData\Local\Temp\.CR.13598\ea7739be-e115-4213-b23b-dd0c717c316c\VpnInstaller.exeFilesize
6.6MB
MD5dc8cce753f77542d3c18447727d0bb65
SHA1f2cc1bba338375185cf21856e2e4c927abb3b43e
SHA256dcb2dcd53494047d9b4e51e0d395c3de7d5666aa8e9ffc81b5a2bd1addeba55b
SHA5120b5f53fd638b92fdb433e61cd267b782bddca03973a582b9d8b80317095569354801cd85a736cc75d95796b4a9e92121758300d903fcebb84319e695d2beee9c
-
C:\Users\Admin\AppData\Local\Temp\.CR.26685\Avira_Security_Installation.xmlFilesize
1KB
MD5ed19838810a911a2e60937e5583a5742
SHA13db8eb2defc209fffaa241f9ee663423210a7031
SHA256a89acec6d524cac4b993eb46083748f57e35d62bf55513cbadaebbad1faf0e60
SHA51226e441745881901741af67d5ae62122b01407058d7c8fea2faa9c9d7dc0f2d4911efda9f33352d917a3ba625880ba4f9574b78b846d8be22137c66609a80ba75
-
C:\Users\Admin\AppData\Local\Temp\3223358e-b358-4484-b3a5-3656c16b8d49.tmpFilesize
1B
MD55058f1af8388633f609cadb75a75dc9d
SHA13a52ce780950d4d969792a2559cd519d7ee8c727
SHA256cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA5120b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
-
C:\Users\Admin\AppData\Local\Temp\b3af245d-44c6-4915-88ad-80969b694022.tmpFilesize
6.2MB
MD567e523b6a4e28b0ed2ae7ea5e9cc6da9
SHA16e5be8222d10b339c8a433fc9b80824ed15edb47
SHA256202ad32ee2c1ec4f22ae5c10f15d0937b1f314e347c891258f8ae7038006e68a
SHA5122e963c84725c282f0d4b48a865550abbe977d99836fe9fbb126da2e16499b14822a16d15dc8efb1f91d44d3973c8b76e1904504066dbd6c957bfc5289b42981c
-
C:\Users\Admin\AppData\Local\Temp\e65252a0-4a07-4dc7-a699-53de4c21df55.tmpFilesize
1.8MB
MD508526c43dba41d8b40d98c4a33e3850b
SHA1403baa8e261b93f83a22c577d39f53c108cbe9e4
SHA2565616c3955183ef70cf911cb72f6d55277c95dac4cca5fd19edfa14b2d657977d
SHA512a3417ded6762e544faa4519c20823829b7a135fe3fe9643f2d63be1d67adc508b194d7d7672006d24b9b3560be32e0ed635c0b6a1f649f0a96ae93422dfc0ff6
-
C:\Users\Admin\AppData\Local\Temp\is-E96FK.tmp\Avira.Optimizer.Common.Native.Library.dllFilesize
4.3MB
MD52b3dcd28a4d23d7beb2db9243baad02c
SHA14e44a6a7ec0e7c011671024ec371316a0109013c
SHA256259ddcd54ac1c6796523bb66d54bee317a647af6b7f9ce95ea709a8311cc910f
SHA512212e3c4e3ad2412010aa98c6bb7fb448071825d1b18736ba8f80ed13e757c3d0ed9d8cc78c18ec2a879a05e7041c49d2dacdfd156478d5bf069338b5a21c377e
-
C:\Users\Admin\AppData\Local\Temp\is-E96FK.tmp\Avira_Optimizer_Host.exeFilesize
2.3MB
MD5c64adf95719d708651367ec99510a640
SHA1e22423df1d7098da7e1a9ad5315e56a2d721376f
SHA25611977002c883fbb3d9c554377e1ee122912d301e81f452d51c4eb840b390a7e4
SHA512dfac2eba22c000d6e6b516478cafecb31b24022697b05f3dd5fba70df9428a630cc478c12132196c679d4bd3b6ebda05bcd68a77a3fa275054b71ea16c099d02
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_1234410537\CRX_INSTALL\images\icon-get-started.pngFilesize
3KB
MD55bf73fc5729ccc1eaa81865cb6f491e0
SHA1877489af9c0ff9bced96733107a2c8ca260bb7a4
SHA2562929cf9a58fe263184f9b60d8a9b27af2a4b85bf978fc3bcce8ae05d9c721f0c
SHA512c0246398226ac1f75ab3c628c3b426b89c543eda8f833f3fedc8ed8a90714ae759c6a2ed0c7d36d605e554a7f9aac574ea7228e598d5c7acf1d5e4ba455dfaad
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_1234410537\CRX_INSTALL\images\logo-password-manager.pngFilesize
2KB
MD5833fd8f51be1c48926c2ec18bb5cdae1
SHA17b07c0ee94fc37be4681e10b5f218d7ce059eda9
SHA256e023fdf40b211c886d5e3c3488523baf0a2c6451e5c7871951799ca764f2164a
SHA5123c45cac2f4e860d1fde138207049d0ad732fae9f7678036883151748f0ced6bb96e96170cee31ad349db2a6c30f40317a3b29c944b56e8e6c2aed7f7f67ba8d7
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_1234410537\CRX_INSTALL\js\content\content-inject.jsFilesize
23KB
MD5ebd2ca53630ff1df9f98e3f29230a4bb
SHA187975e69b95b5a9d8bfc3623bca99f9193020705
SHA256e8d5eafb4fd4923662f4cbe591e184b6f8bcd4ac6296c015c7e0e352a7b27ff2
SHA5122ddecb8ccb6bf09527df8ccef9c8f076b422f69157816aea4467707ea5a307199b4929564f2d84b2bd8916d3aaac23a582fdd27cb9fa1c7b4948cc862174e780
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_1234410537\CRX_INSTALL\js\content\iframe_content.jsFilesize
56KB
MD5cb2e70ecca3f713047b1c5719fe222c3
SHA13fbc3a00a8ade48a2cad9bb4c27b668828dd1e95
SHA256f887b78f622c242a34e2fb5974d3be0537e6a4d42d25399ff9000a0eb445e35a
SHA51296975e056f79dff07cf70cc17ca788c34f2b98a7e147138c9ba7b8ebac48d652d8c512bc64e3ce5199977d6f0101d2110ebb303df2f5ac4cae63299ba1e419c9
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\_locales\en\messages.jsonFilesize
213B
MD5084e6401c611027c7a37ced03dc4cad6
SHA1fb43defd1877aa79f7721487cc4dea82763e1f32
SHA256b129c59e3a5c93071f454754c4e9c9a985ec86f9426ddc1a781938dbc6047344
SHA512a9c896612d57dee55503869f6e91c68da3029b2b083ce2a672fa1875ed3153bbd71341c4df2a060c17c90610cd403e24546ae364782a62085c3868e118d0a3cc
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\_locales\en_US\messages.jsonFilesize
235B
MD57d1f1a13ab9860f983720e6fbc3bd93b
SHA150911a792e81c14a376fc32a22ccd22f0e05aadc
SHA2560c27964dbb0e474e06a06cbf50c5720058a9c3e6f8dd69c27350bb47f59af2fb
SHA5129940b947187abec73c154f59915cc36bc916ede860c907bf591fb71696878840eea2d1fc7fe012dd6ca7d7e8a25af545374747226054c877a2704b3e82cfa49f
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\adguard\adguard-content.jsFilesize
208KB
MD5252fd89b64e3d3ee049e24098907716a
SHA170c2f95c7ee683bb4b7b563fb606ec16fa612d3e
SHA25626eba787912ef87717430e78b53dc832bd6290db089c742526933e8d8711f660
SHA51220d35a34598a5465fd2e3ba4e5cce61fc2d0d1ddb7f8165b98f7b30864b9dac9b0d2eb9800e62593b60e4b8afed6297fbd2da3f54011c02ce0284d612e887dea
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\css\ExtPermNotification.cssFilesize
10KB
MD5869c9f7ad6d54c1e14e94b7fcf90f6dc
SHA159ed7c434f978caf6a6e0d7d59e9d8286e89a351
SHA256755d8a77d768cc7059cf32c28ae7a25d6d54a5f4b9841384457f459d18cf38eb
SHA5129c7bd91bb20403742f6ef03314732e8f7a426561a59ab9ed8b3316a704d623147d5de3f46bfd7d8e529d93048aa877599dac555f669fb920e719dd7a3d332ad6
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\css\content\content.cssFilesize
54B
MD5b176b474414092f01ce861f9da4bf2a2
SHA1d175c77bf023434e6bdd14697d12653a4d397755
SHA256e61a1a270d678bc281c6d857da661c2b9ab77dec18f2723dcc106463e1911c63
SHA512692fe6310ef028b4ee7fae0d363947084fc1bda5d95b3d9f2c52882e02e75fbeae88b6fcbcf7e954400eda5f66634a45bf2eec022da1cca19cd64cff9600842d
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\css\content\search.cssFilesize
4KB
MD55c96abf57abfc0c8d233a915d8a45278
SHA1dfb82a20642c8569408cc58e1f5329f4bd530e3b
SHA25698b0a8047168a3c7424df463c1959578103360e8ccddd76575da1ad4addaeca7
SHA512ff6c9d771be44ebbbac173135d86b840c74f0bbb2f72992f2151b9ad034c22a2da4e53c89fedbe68d0a31292b325e255d739d47d291fd3b614d18df9caf301a6
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\js\blockedIFrame.jsFilesize
173KB
MD50fdc85565c94032f4dce86a7a787b8b6
SHA117401e40e8d4e255abc54b655e902cea6aa38979
SHA256a07ed2044e8cf301e20489b27940818bfb7d77338fdfdb8e0ff7554d1fbf6a49
SHA512f61ffb25c80081657c59cc4265f02f53b0d16ef4dac6546327f6e8f6fbf36b1daa246d22f258c06e8aa0eab873a434d66584314f076c37418d6a1c7d60bd3c28
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\js\content\common.jsFilesize
5KB
MD54672ef0eaf7515a69409c9c0fd3e62bd
SHA1ca920038f11d0ae10069b87f0ee32260a0d0f523
SHA256593ba5536ea92a87e55004874648ff12f096c71bc4dc81c084f0c59cf662cef8
SHA512304c5f7440e6e38127594892d993c740ce338f3b12a64923ab6793936126d0f68df27f83d0213f85926a15564ce84e81401e06448ff8fbb0d92b871db984e526
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\js\content\content.jsFilesize
14KB
MD57a3e8afd3d8a6281c2e4ec315ee78fb9
SHA1c08cda369d09232f4beb9db962a3ee21ef016bf9
SHA25692e5d77400aa83415876f5a8d78c55c27bf5d47a48b99b73cb36f0088cee2c5f
SHA512aa77695cabe2c9d6fd8a7a68735fc7152c36ba649f49c876d716eadadb99a474cdb7ead4c4a73abcf41c0b1d40a2ea7e218956be2be790ee0abc1a05801bc8d4
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\js\content\jquery.jsFilesize
88KB
MD531c7feb42feac79c49c294d7e2360786
SHA10bd82189e7dcdec830e87fc70f775900db706f6f
SHA256dc007e1b0c1d61d2ed7c00f7c3c4deb9831a1e622fb1cd68900d9bd330d38e24
SHA51252171e3dda6cad189929da6ab44eceae84872e7f70d5339cb85855d25c6a9b5d035a32c71d33cec72d324f94b695e4c9cc55c23299c339dd216713364c757a34
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\js\content\landingPage.jsFilesize
52KB
MD55eff50079fc107ded28bfe8cea8a8687
SHA1c9ed85de0c4162bf3b575571ec8877391a2a9f66
SHA25684fbe1ed16cb1614d369b40a31b63de5c3e5bf0305cd7d9a16195ddcb8637935
SHA512817ad9b4e6383c8085763973388dd0fb620dba69e2897cfd3f95a69efb50e939a359fa713c939131b74c513367db1e88f16f7c35e539eec4ec3bc05e85a60536
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir4060_142858752\CRX_INSTALL\offers_js\cms_ss2.jsFilesize
1KB
MD516aa6b7a57ed00862d0106da2ea9281f
SHA1229472fd4759a6ede4acff8c5841b2922ddb5b66
SHA256ea2299d44948ae88d95e31cec8677f05a2174b70b896465ad787e19143eafe6f
SHA5128b3a3a138a1ab98658502cb90a3cdd650e7092b1181477d86ecfcfaee18589178f714688a58fe2c924b46f834ce29faeacf0fb3413e1dcba0077739f8b47f301
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-msFilesize
3KB
MD5ce79e4968b425e889037e4b0ad5642ca
SHA1c1d41f44e4a9e980356a5ae0aa89c09161d55483
SHA256fe172a8f98bcfaa5e1c779e27918f0362b7eba8ca9392df326fce69d5ff11066
SHA512e15d9f2772c01495d7be6f5921bd8b475952e41b59054b92840cee29560097055207d68a02665b31684ac2cfef0027656f07c5d29c1871fbe3890960bd785245
-
C:\Users\Admin\Desktop\desktop.iniFilesize
282B
MD59e36cc3537ee9ee1e3b10fa4e761045b
SHA17726f55012e1e26cc762c9982e7c6c54ca7bb303
SHA2564b9d687ac625690fd026ed4b236dad1cac90ef69e7ad256cc42766a065b50026
SHA5125f92493c533d3add10b4ce2a364624817ebd10e32daa45ee16593e913073602db5e339430a3f7d2c44abf250e96ca4e679f1f09f8ca807d58a47cf3d5c9c3790
-
\??\pipe\LOCAL\crashpad_4060_EKGGQXUFCOBCHBKWMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
memory/660-5098-0x0000000000050000-0x0000000000062000-memory.dmpFilesize
72KB
-
memory/660-5101-0x0000000004C30000-0x0000000004C7A000-memory.dmpFilesize
296KB
-
memory/660-5100-0x0000000004A60000-0x0000000004AD4000-memory.dmpFilesize
464KB
-
memory/660-5099-0x00000000049B0000-0x00000000049D8000-memory.dmpFilesize
160KB
-
memory/2144-151-0x00000000053F0000-0x000000000544C000-memory.dmpFilesize
368KB
-
memory/2144-179-0x00000000057F0000-0x0000000005812000-memory.dmpFilesize
136KB
-
memory/2144-198-0x00000000095F0000-0x00000000095FE000-memory.dmpFilesize
56KB
-
memory/2144-197-0x0000000009610000-0x0000000009648000-memory.dmpFilesize
224KB
-
memory/2144-199-0x000000000A2C0000-0x000000000A352000-memory.dmpFilesize
584KB
-
memory/2144-200-0x00000000055C0000-0x00000000055D0000-memory.dmpFilesize
64KB
-
memory/2144-201-0x000000000B200000-0x000000000B266000-memory.dmpFilesize
408KB
-
memory/2144-204-0x00000000094E0000-0x00000000094F0000-memory.dmpFilesize
64KB
-
memory/2144-227-0x00000000055C0000-0x00000000055D0000-memory.dmpFilesize
64KB
-
memory/2144-191-0x0000000006930000-0x0000000006950000-memory.dmpFilesize
128KB
-
memory/2144-190-0x00000000069D0000-0x0000000006A0C000-memory.dmpFilesize
240KB
-
memory/2144-189-0x0000000006980000-0x00000000069D0000-memory.dmpFilesize
320KB
-
memory/2144-187-0x00000000055C0000-0x00000000055D0000-memory.dmpFilesize
64KB
-
memory/2144-225-0x00000000055C0000-0x00000000055D0000-memory.dmpFilesize
64KB
-
memory/2144-186-0x0000000005B00000-0x0000000005B08000-memory.dmpFilesize
32KB
-
memory/2144-183-0x0000000005940000-0x000000000594A000-memory.dmpFilesize
40KB
-
memory/2144-180-0x0000000005820000-0x0000000005832000-memory.dmpFilesize
72KB
-
memory/2144-148-0x0000000005380000-0x00000000053E2000-memory.dmpFilesize
392KB
-
memory/2144-178-0x0000000005760000-0x0000000005774000-memory.dmpFilesize
80KB
-
memory/2144-139-0x0000000000570000-0x00000000006F8000-memory.dmpFilesize
1.5MB
-
memory/2144-175-0x0000000005780000-0x00000000057B6000-memory.dmpFilesize
216KB
-
memory/2144-145-0x00000000052E0000-0x000000000530C000-memory.dmpFilesize
176KB
-
memory/2144-154-0x0000000005340000-0x0000000005356000-memory.dmpFilesize
88KB
-
memory/2144-194-0x0000000005C70000-0x0000000005C7A000-memory.dmpFilesize
40KB
-
memory/2144-157-0x0000000005370000-0x000000000537C000-memory.dmpFilesize
48KB
-
memory/2144-165-0x0000000005540000-0x0000000005582000-memory.dmpFilesize
264KB
-
memory/2144-172-0x0000000005710000-0x000000000573C000-memory.dmpFilesize
176KB
-
memory/2144-195-0x00000000067E0000-0x00000000067E8000-memory.dmpFilesize
32KB
-
memory/2144-169-0x0000000005C80000-0x0000000006224000-memory.dmpFilesize
5.6MB
-
memory/2144-168-0x00000000055C0000-0x00000000055D0000-memory.dmpFilesize
64KB
-
memory/2144-226-0x00000000055C0000-0x00000000055D0000-memory.dmpFilesize
64KB
-
memory/2144-142-0x0000000004EF0000-0x0000000004F60000-memory.dmpFilesize
448KB
-
memory/2144-196-0x0000000009550000-0x0000000009570000-memory.dmpFilesize
128KB
-
memory/2144-160-0x0000000005480000-0x00000000054B0000-memory.dmpFilesize
192KB
-
memory/2416-4769-0x0000000000400000-0x0000000000711000-memory.dmpFilesize
3.1MB
-
memory/2416-4101-0x00000000008C0000-0x00000000008C1000-memory.dmpFilesize
4KB
-
memory/2516-4793-0x0000000000600000-0x000000000062E000-memory.dmpFilesize
184KB
-
memory/3640-5169-0x00000000054B0000-0x00000000054BE000-memory.dmpFilesize
56KB
-
memory/3640-5146-0x0000000004F60000-0x0000000004F82000-memory.dmpFilesize
136KB
-
memory/3640-5156-0x0000000005400000-0x0000000005418000-memory.dmpFilesize
96KB
-
memory/3640-5148-0x00000000053D0000-0x00000000053FA000-memory.dmpFilesize
168KB
-
memory/3640-5158-0x0000000004FC0000-0x0000000004FD0000-memory.dmpFilesize
64KB
-
memory/3640-5133-0x0000000000670000-0x00000000006CA000-memory.dmpFilesize
360KB
-
memory/3640-5166-0x0000000005440000-0x000000000544A000-memory.dmpFilesize
40KB
-
memory/3640-5160-0x0000000004F90000-0x0000000004F98000-memory.dmpFilesize
32KB
-
memory/3820-5144-0x0000000000400000-0x00000000004CC000-memory.dmpFilesize
816KB
-
memory/3820-5189-0x0000000000400000-0x00000000004CC000-memory.dmpFilesize
816KB
-
memory/4648-5123-0x0000000000CB0000-0x0000000000D04000-memory.dmpFilesize
336KB
-
memory/4648-5141-0x00000000055F0000-0x0000000005602000-memory.dmpFilesize
72KB
-
memory/4648-5143-0x0000000005660000-0x00000000056B0000-memory.dmpFilesize
320KB
-
memory/6180-5188-0x0000000000400000-0x00000000004ED000-memory.dmpFilesize
948KB
-
memory/6180-4797-0x0000000000400000-0x00000000004ED000-memory.dmpFilesize
948KB
-
memory/6504-4779-0x0000000006B60000-0x0000000006BB6000-memory.dmpFilesize
344KB
-
memory/6504-4772-0x0000000004BA0000-0x0000000004BB0000-memory.dmpFilesize
64KB
-
memory/6504-4778-0x0000000006A00000-0x0000000006A1A000-memory.dmpFilesize
104KB
-
memory/6784-5183-0x0000000000400000-0x00000000006E1000-memory.dmpFilesize
2.9MB
-
memory/7048-5159-0x00000000054C0000-0x00000000054D0000-memory.dmpFilesize
64KB
-
memory/7048-5239-0x0000000000400000-0x00000000008A6000-memory.dmpFilesize
4.6MB
-
memory/7048-5168-0x0000000005AF0000-0x0000000005AFE000-memory.dmpFilesize
56KB
-
memory/7048-5163-0x0000000005B80000-0x0000000005C18000-memory.dmpFilesize
608KB
-
memory/7048-5161-0x0000000005AB0000-0x0000000005ADA000-memory.dmpFilesize
168KB
-
memory/7448-5229-0x0000000000400000-0x00000000006E1000-memory.dmpFilesize
2.9MB
-
memory/7588-5217-0x0000000004150000-0x00000000045F6000-memory.dmpFilesize
4.6MB
-
memory/7588-4802-0x0000000000BC0000-0x0000000000BC1000-memory.dmpFilesize
4KB
-
memory/7588-5216-0x0000000000400000-0x000000000070F000-memory.dmpFilesize
3.1MB
-
memory/7588-5218-0x0000000007780000-0x00000000078A2000-memory.dmpFilesize
1.1MB
-
memory/7588-4814-0x0000000007780000-0x00000000078A2000-memory.dmpFilesize
1.1MB
-
memory/7588-4812-0x00000000027B0000-0x00000000027B1000-memory.dmpFilesize
4KB
-
memory/7588-4805-0x0000000004150000-0x00000000045F6000-memory.dmpFilesize
4.6MB
-
memory/7708-5187-0x0000000000400000-0x00000000006EE000-memory.dmpFilesize
2.9MB
-
memory/7752-4770-0x0000000000400000-0x00000000004EF000-memory.dmpFilesize
956KB
-
memory/7752-4092-0x0000000000400000-0x00000000004EF000-memory.dmpFilesize
956KB
-
memory/7876-5105-0x00000249FDEF0000-0x00000249FDF64000-memory.dmpFilesize
464KB
-
memory/7876-5106-0x00000249FDE00000-0x00000249FDE4A000-memory.dmpFilesize
296KB
-
memory/7876-5103-0x00000249FBA00000-0x00000249FBA10000-memory.dmpFilesize
64KB
-
memory/7876-5104-0x00000249FD6C0000-0x00000249FD6E8000-memory.dmpFilesize
160KB