akira | ea5d904dbb4d9106dd9f1047e657feb93caf8f7f570d848537d5305320745c12

Analysis

max time kernel
180s
max time network
197s
platform
windows11-21h2_x64
resource
win11-20240214-en
resource tags

arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
submitted
11-04-2024 22:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
Size

573KB
MD5

503f112e243519a1b9e0344499561908
SHA1

8d635ca131d8aa20971744dcb30a9e2e1f8cd1be
SHA256

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc
SHA512

71da9efbc24bf3428f7efd08f47e6dc698cdae769a918800de72ab4945fb79c2f5b92d21a839d9e13e700b3cfd6ae365073c32a6f368e43830c6ccba3322d00e
SSDEEP

12288:BV0qnXKTH2P6rxTcQpXDHgswvodgnAdA:BV0EMm6rxTcQjos

Score

10^/10

akira ransomware spyware stealer

Malware Config

Extracted

Path

C:\PerfLogs\akira_readme.txt

Family

akira

Ransom Note

Hi friends, Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion. 5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion. 3. Use this code - 8207-KO-BXVB-HKJB - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.

URLs

https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion

https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion

Signatures

Akira
Akira is a ransomware first seen in March 2023 and targets several industries, including education, finance, real estate, manufacturing, and consulting.
ransomware akira
Process spawned unexpected child process 1 IoCs
This typically indicates the parent process was compromised via an exploit or macro.

Processes:

powershell.exe

description pid pid_target process target process

Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process 348 2492 powershell.exe
Renames multiple (8197) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

description	pid	pid_target	process	target process
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process	348	2492	powershell.exe

Drops desktop.ini file(s) 3 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

description	ioc	process
File opened for modification	C:\Program Files\desktop.ini	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\desktop.ini	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Drops file in Program Files directory 64 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

description	ioc	process
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_thumbnailview_18.svg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_CN.properties	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_x64__8wekyb3d8bbwe\Assets\Icons\StickyNotesLargeTile.scale-200.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Todos_0.33.33351.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_neutral_~_8wekyb3d8bbwe\microsoft.system.package.metadata\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxSpeechToTextOverlay_1.17.29001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubLargeTile.scale-200.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\MSLID.DLL	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\ja-JP\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-96.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\resources.jar	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeLargeTile.scale-150.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_zh_HK.properties	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_12008.1001.1.0_x64__8wekyb3d8bbwe\AppxMetadata\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ar-ae\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-32_altform-unplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\FeedbackHubAppList.scale-125.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxManifest.xml	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Click on 'Change' to select default PDF handler.pdf	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\7-Zip\Lang\fr.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PROOF\msth8EN.LEX	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\NewsAppList.targetsize-32_altform-unplated_contrast-black.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PaintAppList.targetsize-20.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\Theme_Photo_AutumnLeaves_Thumbnail.jpg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\ar-ae\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSZIP.DIC	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\images\bell_empty.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SnipSketchAppList.targetsize-36.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.4_2.42007.9001.0_x64__8wekyb3d8bbwe\resources.pri	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-256.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\phone-image.scale-150.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\Microsoft Office\root\Office16\FPA_f7\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\Assets\FileIcons\FileLogoExtensions.targetsize-256.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SnipSketchMedTile.scale-200.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.41182.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-96_altform-unplated_contrast-black.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_neutral_split.scale-125_8wekyb3d8bbwe\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@fluentui\dom-utilities\lib-amd\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2008.32311.0_x64__8wekyb3d8bbwe\Assets\contrast-black\GetHelpAppList.targetsize-96_altform-unplated_contrast-black.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\contrast-white\PowerAutomateWide310x150Logo.scale-400.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\Assets\contrast-black\NotepadAppList.targetsize-20_altform-unplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-60_altform-lightunplated_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_2021.226.1915.0_neutral_~_8wekyb3d8bbwe\AppxSignature.p7x	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sk.pak	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\zh-TW.pak	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\Images\FileExcel32x32.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-256.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\VoiceRecorderSplashScreen.scale-200_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\AppIcon.targetsize-256_altform-unplated_contrast-black.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2106.2807.0_x64__8wekyb3d8bbwe\Assets\Store\AppIcon.targetsize-16_altform-lightunplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.scale-200_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-80_altform-unplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-commonjs\components\DetailsList\DetailsHeader.base.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\sendforcomments.svg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-48_altform-lightunplated_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MLModels\autofill_labeling.ort	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ul-phn.xrm-ms	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Suspicious behavior: EnumeratesProcesses 40 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exepowershell.exe

pid	process
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
348	powershell.exe
348	powershell.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1740	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes:

powershell.exevssvc.exe

description	pid	process
Token: SeDebugPrivilege	348	powershell.exe
Token: SeBackupPrivilege	2728	vssvc.exe
Token: SeRestorePrivilege	2728	vssvc.exe
Token: SeAuditPrivilege	2728	vssvc.exe

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
"C:\Users\Admin\AppData\Local\Temp\1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:1740

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject"
1⤵
- Process spawned unexpected child process
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:348

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\PerfLogs\akira_readme.txt

Filesize
2KB

MD5
de49e2e3eeb866fc517949893ed74bed

SHA1
3b503e6776a34f026f77ba7fea719dec182575e6

SHA256
994010aaf2f723b06ace4f35eba28068160c38714fda8d62205b3b2e7b96b07e

SHA512
f4c59b0f90ff8f6e05106c47160c239da0b5598845316a5a8705bde5f47378596fead491db828f4ab35ec84f796a22907210b51729d4c023c7ace68dccc1f9b8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reject_18.svg.akira

Filesize
1KB

MD5
7add09ad2e929bb82b32edfe2cad61ae

SHA1
b03b11b079c754e5798bb84109607b40f04394d3

SHA256
a2a44d747ff00f21fed327c7f2870e13569c6b6c80157c4dddbfc5d2d75eb455

SHA512
7c068831fa042137c0d5114a470c50448e026a23e38b7e6b1f64b08547aa45a01e8cb1c61f20b85bed51ec778d637f29a637c8ec77962f08be0e871bbc49abbc

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.akira

Filesize
1KB

MD5
4758a3a9bf89b8f773868f269ceed554

SHA1
ba863c37427c23bf1e4301b048a477d189953d03

SHA256
b50877d640f0a13999aa3d4e2444d81ee6ecdc4f6a1140015f222512769c4f41

SHA512
7989e59ac6c1318cb6e4b9c33ada63bcd75025ebe1c0ecfe4f2b8a7a9336c0185f60c3237ef53a4ee1e808dbafaf780de7c2143463c6aae5827577e813b205ce

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.akira

Filesize
1KB

MD5
68a37a18ad03841d283aa4839adec2df

SHA1
2a41b6d6a3a3fafa3a4c21c38d5fe47a47c3ef5b

SHA256
7c34ff9ea722f0e9b835ed3212851d222736c662b65561b623556077ac5b26ba

SHA512
621909f765b202baa5cd0e78017bb8d2a93b3cbaedfca438dcd79efe3eda42c064baad30d90fd2ada0dc2016a01cbc9b96f0ae785cd50f583d29de253765cd00

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.akira

Filesize
979B

MD5
6746a9b0aa9a0bbc1070dd45cf93e54b

SHA1
c30bc4da16b630333899c06672d8f5ca0da0a4b2

SHA256
a94e8a387df5a61383147afde791cd2075371bdcc5e3cb81e9875f1b0d439858

SHA512
de9375db22267a3e47cdb162a02a319b80ae624978a76c9e7d87dd9f082aeb02ce0baa9a27637da8422a9a8adfac74233c3495a8c87569ab87c4f61389cbc39d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.akira

Filesize
1KB

MD5
752e3cb87215fe1036fd576a120005bd

SHA1
d3f6cc18a38b3fb6e6ff5a79e5d3f46a8a3209c9

SHA256
8ef72668ed97593ce7b81c6c1e259d36e06a2367060fb86d96b0f5b0636416ff

SHA512
bb3a6ae4a8064c7a552665fb4e4037a3c1bbf27b3ad0b67e98d27731cd3dc226935db17e4d23b547b74285b724d2ad2870d9492b672012b083959125a3331e02

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.akira

Filesize
922B

MD5
83690cdf8e767ca370bc0c8a4e7a5e08

SHA1
7672445bc8c3b32df71224599b58bd56af5d9d30

SHA256
1935d70541b9a19f7b481c6b7ed8cc656768d256a94f5475430ae09c7dc9794c

SHA512
f382456c51626f6598e2edbe4013f9b4e8b540d5bfdbb6e0a0eab3afe275c171b446c1db3c4dbed8f9ced0d0375cfab6be342dff41c2da81b681e7e748efe60d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.akira

Filesize
1KB

MD5
1cf27bc96fa916d99d96c7c9063bc890

SHA1
fadc9d1652a19eaf5defc0c93bb7e9e707df9437

SHA256
74c059a71a7750b5ed8bd54a5bf5495b9a94642a61ffb12949a68cd99eebaa59

SHA512
91f439f8623b1939bd1bee38ac5a11ddb3e351df92afec2c0334d4f613c6e51a61db78094d0515559b63a176483f84cdc4cb0388479bc589eb1b54ab9b5a8aa6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.akira

Filesize
922B

MD5
6f9a931754ad60be9f4454574fe50a3b

SHA1
e6746a0a8b2b07b86588fef782aa42283d3f6ac5

SHA256
b3d278b4dfb7bede79052c47bfa3819aabce43d0ff039983674de4fbfe91e45c

SHA512
3a9f823b1d36ba56fa40e3fd31623b4d40b9d8257a466d7b6e495eb351ce41295bb16da62ff5f9e98a2e7fc6f199462efe7e72209ad74780789f2c8adcb42f69

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.akira

Filesize
1KB

MD5
bc7290a162e6064990fb59227677ad59

SHA1
6e01955f09d6cf36f33523631aded293875326ed

SHA256
89727b7b670f2e5059160f61050fd80baa36b1ff9b7445e23980887d80bfe6ff

SHA512
41aac257c4889562dbf487998ab3050fd7a8c02c7a07e14e1e445aeed52dcc3f01d48cdf0bd0129eadc9d1a7d287de64e3df0793db2154f0624d5cf9ee912f6f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.akira

Filesize
922B

MD5
9eb40f28cef3436726cdd2874bc8eb2f

SHA1
25a26ac6a4a20564b636bf1ed39441858bbf84e1

SHA256
48bfbca47c6bdf22b497edddd7b6630574f388e83cddd1846bc5cc14bfedd472

SHA512
bfbfd227768615af1e0c7680ee1cee96d1f1189d22efdbe841bba3ea87d4eaee192860406bd1925b985c9ceb391eb9d9c90b4570ca4ac97e458c4a16b9ee306e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.akira

Filesize
1KB

MD5
76095b9c7fea0e789d435d0d6000c02f

SHA1
59ddf30151784d84e7f33327038e8723d0e822e0

SHA256
4ea3040714ac83591a4e03d8a9bcac424bd629d36c588cf9ab1ad2792e7ed0e1

SHA512
2f6d540d08c17e0920ec97a0013524df676fabfc6d34b78880c387f15d96d9567f79125092ab37f719acb654e3336394ea10bd92ba6606aafff785fd6a58a391

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.akira

Filesize
8KB

MD5
9a6955e304732e0b0bfba8ed462ae485

SHA1
4684ef2a2e64afbff807d795da583f4b0426deff

SHA256
2989a0e0fad3456cb11d678e1f054a226c7188d811c4949cc42f216048747524

SHA512
7b7e25a88bf15531737473bc8b9e3e9a65dc0c91e9143044031f8e3a7c5ca8fdfc1685a58c99882da194e30e33e61f61c2c401bcd97e30c1045f6f75d0625096

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.akira

Filesize
8KB

MD5
bd6d14d5725cd4bd5f4f1aa012d37a13

SHA1
dda41eb63384736ea6c95da8c9b63e486460c4b2

SHA256
8646aac16ae3d98ea064e754d9382797dff0cb8bac7b899a69d2c581528325ee

SHA512
63712edf21dd69ea7078bdb641934468419b59796c23d75bc9a51a245156874867ec8b20214976c74bdacb5384728088e225839397bff0fae65a10fea07426de

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.akira

Filesize
15KB

MD5
c01b5a49ee3f330ffe574f550658216d

SHA1
23bc6ebd999bb54787420f3b352b132dfdfbe3fc

SHA256
310232a354f56c81333868621825b1de24c291060bc8f336d3d9aa6923092296

SHA512
b0fdf10a813ad7f798da2b15c7c4af418b1237c4a960be9c90e92ced75b5ee8690f2c6ae3f481ac96fb5cee6e58fb3523d3e516ece744a36f876863060484c8e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.akira

Filesize
8KB

MD5
059529a779a4dcff3399ebbd4901e9ad

SHA1
097dc8053edde9cb5bf167ab0337aa165148192b

SHA256
450ca52133414568278cfd2fce58922cef2065ad94220d91e5671e644e0bffae

SHA512
efa0fd599872a409b924092af3eea20560c1039f98588c2d4b2bdea5ab96756553b33e25883988c04b5a5260303cdb7cfa3dfabf20533281570e8c59aaa1955e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.akira

Filesize
17KB

MD5
47481a451bf6d69b65bb2728d2d5aa33

SHA1
562c7abbec9f35103e73e4a6c3133794541115c5

SHA256
83d95be40a69732a6e3aa8a18be52353f563207cbf93c7b80b2aaaf45e94a921

SHA512
a5f20c757c8d4c5fa36179e7395993bd867ab5c96087ddf3632f190472ae4c088b07976d62e50981494121ac69e82ec010aa753c0c95d4121b8921e65ff01198

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.akira

Filesize
713B

MD5
14e4493df1fbc527300eb0618c4813cd

SHA1
da8bacf1e385611274d8beeee5c3131852780b8f

SHA256
c19a67fea441da3a627ea84abc8a739e4e71c557190fa96f2bd65134f69ff534

SHA512
24a0083a546a56981644a5c09c84dba7d7aab25255bbc040d9757da81f79deb2b911e5cb03ed53de1fbef9247fb3c5caf0d306328eb2501bdd0a967ce1c015aa

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.akira

Filesize
1KB

MD5
1b26958efa3783d914a4295cb1124c6a

SHA1
f72562d1551a661318f75dc857f70de339dfe52e

SHA256
a50338d7e4295e6082779a5126ffcecdacf20b343a8e45ff5f3a421ba3db0454

SHA512
85cf68ca9e40b1dc92036fdbed9e35479a553ff588083dfc28f3bcab2bc9fa075e737563fc7eb0338cef2d226973e3e2adb73b54ef83e3d314d75c0a41dd89f3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.akira

Filesize
9KB

MD5
096f7228e93b103d1ca2b38f92edf29f

SHA1
723f3a807b460974ad4947620c826c69d463362f

SHA256
bcc41845572ae2c37dce17494d675ecf11e6c7264a59e7e7148fb81cf07989bd

SHA512
e039ef3fed41a047562e821d16baa566eb643a1f9c37cfbd8f722dacc4100497cce10d80d78f26592892645ce39be9c728251c2f54369a9c0390db9566606fb8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.akira

Filesize
19KB

MD5
af86363b99d0914a25c0df6abe8824f9

SHA1
b2385ac2dd58cf6e25d10d8354fc2d989968bd22

SHA256
20863f7a63a9cf660fddb46357248433c2b1e6c36b27370ba2d947598c016467

SHA512
a44eabceb526a7e15858b0de14db351aecbf7dc68682f85c052840b7b56db2d6491e677d1e7401429106e9db41ef375530ec778050b9923f1f7f18063256817e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.akira

Filesize
1KB

MD5
7fbc8f17d2a6d011fdd33d3a094cab4a

SHA1
e681ea3e332e7a864ab8540e550f1bc35d031437

SHA256
5c531d1500da6808f6457a81995f6be8d5e3f7250a85f76f6efb1f6df1b7dd27

SHA512
2dee299dd39bee2706dbe4f81815fdef0aace1f828731aeedcf34e9b9aa6268297a18576dbba7f3db28b1df27d25f5f921d8fa4f1b767599e723d93be7732359

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.akira

Filesize
1KB

MD5
8ec65c67d6cc0c5bf136b17b26ddf20c

SHA1
fc2b24a3561d220c9e96000bb764d2843f729e04

SHA256
e2cb7f812a1286c4b63f0a28a8b862c1168f769a9be1c06819a520647b5d324e

SHA512
1c8301049e3c0ab407d9fcd5105260be4a8d71b6b0a35ca04582572e4036a2b6284753088cfecb04b8889709f105da2f3dc8fed93a3685c4d5a772b8efd081c0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.akira

Filesize
1KB

MD5
1805939c8a330b68fc7eef58a8e2055b

SHA1
635037868bba8eef077c744c28a64a6cd9a162b1

SHA256
d259dd0d671541deff4c9223f3530a468915f4e4078608f2569bc3f5eddbb412

SHA512
ddc35e869015be9476bfda2a89ce9db18d2358c61b4dded008a370fc39c5db417aa00f062f5c01408f4edef7ef6bcbf10cb7f2135c1e80e40daa4c06854527df

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.akira

Filesize
1KB

MD5
c76b0c723d37a8127a597329d9a5d825

SHA1
c780b295c6ca29d7547857256d9e6e8db04bc3a0

SHA256
7b7d08cedd35027368abdca674d10787872a79f8628aa61cacfc432fdb34ef4d

SHA512
fbe93a12da98654ed06370480e6875468d0754140e86a45e0d1710cba25e1b8fa3d9834469713047e11eb2e2c12f6795f09f6e79a4efc7366ad327e96b9f4ac7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.akira

Filesize
3KB

MD5
0f90fe4fedf7e6a4a05cac4b7d2411ad

SHA1
105d4fd12802e3d9dda418e5ffe3063981e95994

SHA256
04e15439f5e01f0a5517feee1cbaf1daa446e243a4af78c1a757e9ed77cd9553

SHA512
1887ca6ca408cb44f065cf80fbf7343d970818ddcd3d09bc1dfd40651d6ad1c33228062023641194f3168f39b5bf1aab84ece4e108117d44b8a1b27fb929ee0b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.akira

Filesize
2KB

MD5
a513d8c386c4dbec8b5d80ee0924ef31

SHA1
b4f25adca7479d1677833d05ff1db9806b39a07e

SHA256
f7cef84eca60da9957f0f0faea4f73346fbeafd59e00ea91d1dcbde5ff2ea9d4

SHA512
9b16cbe93955ec508322c22da738a5ef227ee685a4ffb5799ecceef73cec283a728c2cfc2c0cf852f1c1db733cf16042910e0f4d73f9ee8897d0f5d8ecbc5a5c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.akira

Filesize
5KB

MD5
8b34eaa63659e81d0df5e63e761529da

SHA1
d77ff79981074d04bd58585a33686fe06a593006

SHA256
dab9b08cadc40706405b5acf7c7dcc84d4981a42ac10ce647e077579a03a034b

SHA512
be67b37068ffa624f1a785428b93af2f6279e298f8f2d81164fd4ed1f52c7a879d5f007861ae7742aa2936b4a635caa867e0943dc1fc054c5aaa4de39c7102cd

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.akira

Filesize
823B

MD5
70ff16f631cc3d53805012a7be83f0e7

SHA1
0b5430f3cabfb349eb6394544c3c0deb6636f66a

SHA256
5102c6097b770ab5cd73e7a2d5f3fc02bd7946fc187fd8f45bd4e0fbac0353b4

SHA512
c9aba23ea34236811eba1f98a0d9d1ba299bfbf38cec895cfd82f126dfd642f18ebbc6192ee00c512bfeedb7e6156f1dd347e50dddad7a81e8c687826cbfafc5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.akira

Filesize
919B

MD5
25c2c1917723abd0e2cadc577232617b

SHA1
7678cf2aa31d01b07b09b87f0c6dbfaa6faefb47

SHA256
2f7cd72474e8a325d2fd14d1fb6566383ee127b84136374d7eceb15e5a1cb733

SHA512
c64468322fe6b5bbfcdf63575cc9c7f747e28483d8ab67c5895c8ea34fc6ba94a1a98b71545dc987658600716521bd0b407d793701ce0b212a8e61f79134b20d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.akira

Filesize
1KB

MD5
fcb96f7198987dc7a687bdf71296dc9a

SHA1
83856e50ca8253690398483c4e47299765d78883

SHA256
18216c43a0c20d4098b1bc99427cbb9cf0062c222f88afea7df1b6c8b9d6e416

SHA512
8160e7dd54b65f329f97d62f61480897ab9751f98f90a3c61a717594901b58c46c7b5aebbb4b47dde01ee85220cc95a54bc0b7d31983efe11e33af25fab96d59

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.akira

Filesize
1KB

MD5
a2d132a642e3cfe4e57c671ac2bd9b3b

SHA1
24f957d8d0cdcfff32507c858f0141285025d988

SHA256
9ad969370239f12a24c6247ff05e1c96dc8017415739678865e0a48a7738c3e3

SHA512
91b382a0df6db86b5f1226effa19ca4e761279caec0da67cd8bcafc311b2d295ae8d0c98d19cf7f5396c96ddb76a7b6f25ed63ce1b85f843859a8e9af45e42b9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.akira

Filesize
3KB

MD5
ffd7f76c036a115aa9353b6e79491600

SHA1
1f4aeadd174249fce56bfe59ae876d9e92ec59bc

SHA256
b3e27c9520837f1ad19350ab70cea20707c57e7f8aed4ce6827f4d34c911f54a

SHA512
1404c7a5e25a7e6133ae2f94c249e3d30a8d65185628adbceee976c7514e2c74b5090478c2893867903c6a342a4be25ac00903d6c197f5580cc353545e1209c5

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.akira

Filesize
1KB

MD5
71fbc97a48449f0746bf720f7521140b

SHA1
28c87ed1673bd40895dadfb53deac8150e239443

SHA256
4a1299c481514f05ca493a3aa482a0fce6907bc548cf791be357230a30eaa72f

SHA512
232eb02e0d67723e60572284bce2caaa92404ca8d221df4515d7a4e22adbc6125a7da5f59fa4a2c04d8004cdaff67c276dfd63030878b9c0adfb271198fda94f

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.akira

Filesize
33KB

MD5
80cd37e4c4abf8cbdb1132b39c7e2b8d

SHA1
169d640441c530c1b732eb73cd501b4192f1644d

SHA256
7f8c6848bafb2efb4a8ebd44ab6d7f9b581dc904bdacd0c11a189ba710430596

SHA512
eb6d880992af504a5a7a97e632d153aa5e4b3471cc946c252c880501136499fb0a7e89465b9568efa188de254342d2255a33ab17fd86d975605440cb88064b64

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\bn-IN.pak.DATA.akira

Filesize
881KB

MD5
881913c68bc85efecca41d5c3ff7d55e

SHA1
befdd0d2d885816ecf1dccd48d435394b9ade333

SHA256
54b1adb48e205a9db216da37a7aec6776b85ac83420ed574a3a71d13fdb345d3

SHA512
e4b8bde8f2cfe7065dd7ec613886f0d677ff11bdf5ddca821942e30edf0f3a5fb196af5d080c0e7f596a306f82f268a9b876f8ab2bf9dfbfc09edca031b46cb8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\te.pak.DATA.akira

Filesize
914KB

MD5
6ad9ae279326ac217b99a0acd87cb620

SHA1
f3aae2b14fb3426d970816cc37403ab650c34c0a

SHA256
813eb34b67415ba185e0d5f9658b9beef0bc04726f8d6e1b764e77be7f3e6955

SHA512
c7099d527790c52c1fea666f5086c936b72e204e99b7c2fca1dd936bfbf57404ba7153517b6a85e1f21218ebb9b8d0a13184ed85abc5e84e0fa0da8166901094

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\th.pak.DATA.akira

Filesize
809KB

MD5
d73afe512f8bc9e8e9a8553fa96807df

SHA1
2a9d78fad408ec57c1a04ba38183572194dcf80e

SHA256
3a76b5ae9755ff63ca733665155e27fc0d56daf99b723bac7b07359ac1fdb346

SHA512
94ef7d9175b7a609e3db15d0d0be0b104456b829792c0ee821570098e6984db8ccc486544d7dde8ad1d0160e197e7ffcf89791ce2286b533616a5675001eaa71

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Other.DATA.akira

Filesize
1KB

MD5
eca12d94100eccd3009f4bf13dac7fa2

SHA1
0987190acb5eea4fbc45cf734c220b70ba77c9a3

SHA256
cd3b2368b8766532c80628b1c3063366ace2d20e244ae043157002e9bd1e164d

SHA512
7c8c7995d7c6318914c3d3f708bc8df644db05e314ef8ffdbe839030f10f252f97c81763aa95cb69f3e26945432cdfefe65a91218d6227ba32d108d3d92a5871

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\nacl_irt_x86_64.nexe.DATA.akira

Filesize
3.7MB

MD5
4109ae712c6e3b007ad32caf5e8edca2

SHA1
345081186c9d9ef3628896ce9d17a3ac7c5dc96d

SHA256
40616011ef1f65105baa8a7f127792ad6603a060648b3e60bd9d90716e87c4fa

SHA512
b62573476d5f105d74fe7ea097ba22c3f97f8c2e6fc5ecfd5b46ecd21fe5b33c4372ba005add7b7672a514009c0ef41aabeeee2404b70362648579c11bbdc06c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Edge.dat.DATA.akira

Filesize
13KB

MD5
2072308f63e61bfc20ccbe2815b6c688

SHA1
830a44f19f59cd003371526e29f4d5323e5cff87

SHA256
ca44331cb7fa22015930e8e2bb91a8f27948a06a580bbad5a1de7752790c3011

SHA512
c833c8aca1dde0b7e5d82c275f39e2ff5f298e326ac0a933662d78cfec2054e79dd0941a5619a70f3aaad0504247a96dff05fdc18535edf8d492e28c4dc3b8a9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\EdgeWebView.dat.DATA.akira

Filesize
9KB

MD5
bc3aa9360c1d5bf3efec1c0c4a74477a

SHA1
5f8cda0e62b45db50a689d4d27b2eace80d8c4ac

SHA256
4237c29df168d3bfc78b0fc48651ec052c5c8293b60740ec4ce7b97f4c291c78

SHA512
a5d0fbeae771632503d6361156e1334b84a3e8d9fe394cc7ffc9802ccd11dd2f7138e3c901f4411a234d7c46c45a8084fbc62ce1abffbf472d7f57625687765a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\af.pak.DATA.akira

Filesize
393KB

MD5
2ae27a66fe7af3be35de39dbc8ae0f53

SHA1
26905d085acf20897e1ad4eed379cede4d5dc4a4

SHA256
f54885a6daa83cad4c194c0bc48296f1342e3efe7ba4fc75871b6c44d9e54a51

SHA512
6f0d5f0827238650e8da7ce8847e335f679f85eb46759cc655268291bde3532d796c74de7cc42a3e77de2b7dc61dbde81918376dd98243ce020f663ec0cacdb3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\am.pak.DATA.akira

Filesize
579KB

MD5
0733f59a2acb64da2199edece3ba4ec7

SHA1
ce1db6c3933ef2430fd07dff9f360fb2d3cd4224

SHA256
8cb6819d8a3f88c69051d293a28989f4ddb6d4070625d6fc2d4f239108fb8387

SHA512
31b6dbcf29e2d7ef96d00e2f6c5a70403e9f4d6c12aa829e08d16e82af403c19d10a4fcbdf1d539df40e161a9a047685956f6c7b5a0a47a8515960078fc73e59

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ar.pak.DATA.akira

Filesize
598KB

MD5
0f29a66613fe0d60c437916cf33ea08e

SHA1
cff3201ee2e3fc73ac4800b364a744d898316043

SHA256
7f20c462292984df55720e28777ef25f881b0d0bf8d0506c1c18aa01c2fce3b6

SHA512
909f569d0958e84743e5942e6ad60f6fc8910ca6055959572958fca4d576c8c1705d48b5e18d93469641278cbb0e6521bbb009f02f8dd47de29ed12e564d1333

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\as.pak.DATA.akira

Filesize
854KB

MD5
bd1ee2b90fcc563d4ab00f0438a7c1cf

SHA1
62addc2d2a1ec4dd2d7ca2738c2e1aa5ef4be01a

SHA256
949b85623446ef61fd04b69a64a9d36cea9e53552bdd45f939ceca66052e9d67

SHA512
85235e79fdac26f8c796f38bd700e4702cd77283a9063917bc1390c60c762a92b706e9da54144fe6c6f057312f4f5c6302e9e71b6a5170a39d01b24d86e72eb9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\az.pak.DATA.akira

Filesize
446KB

MD5
110fe9a7ebc74c07c5013acfe421a4a8

SHA1
86f9e5b1c9431307ee5f57a374dddbbc14f70561

SHA256
5ea8f44d43a7f48349c9d2bacd999447ad544b73a379d84fdcccfb160de2fe1c

SHA512
b8186fec153804eb553f4a24f9497a6d5c4d51fb57b3b7b6f13172d033cd941b0ae8b597fbf25f79596216b1afe54512ebf0433094b0050e6af50d3fb362ba61

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\bg.pak.DATA.akira

Filesize
674KB

MD5
3df75c376124d130e3a133a50152676e

SHA1
1f06b862cc75028d1549daa6c667be8ce05eb344

SHA256
9e728b7d07e68e9c93e408f4f086c50f96fc2bfde0b76550a5fc5b39fd2ce770

SHA512
77dcc9c9974028a9e00222e2ecd09b50f80e458e18d9af88c80b8b25f355f0da1226ae29aaa1a2499a90a5b85fc2cbef59bf29df13e826b563eacde5d683549a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\bs.pak.DATA.akira

Filesize
419KB

MD5
3fbecfb115421cacd58bef5419f7ea5d

SHA1
c666f9f448616234ec8578525b7e66f178d4b642

SHA256
f377a96a9dc7817faa87c8d70a63656f79276a3b02c69d3d27e832b502436030

SHA512
2e0548fa48f6997acdca418adf7f0c237fcc84669fe1b65b6a656a85eb52d70580d6c95324dc9e2dff272a5a78fcd09be8b225dc1216da8f114f3ac9ca69c96f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA.akira

Filesize
426KB

MD5
076df99268ece9321851a9ff8c4d9e9c

SHA1
bb324048f93028129c8ed532345ca8d5375d10cd

SHA256
3dd8b15544a7ae694d4b90294ba9cdcbc202b7d7a6a6442ce4acbd16674775a2

SHA512
400883b7871fe2f3c85604674d8920481ef51c9987129ffe7f5d9ad85559e1c3affc47f3122d26b37e8295a50cefd8e998dac6cb286ebd8c4718b59c871ae481

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ca.pak.DATA.akira

Filesize
430KB

MD5
7db1482df8a1443f5aff2ba996f3e6d6

SHA1
de0d4af796f64f8cf46316ed0a8bb649643bc90b

SHA256
261d9664cb94d85b1485ff3aad590bb2c245f64ce859e05c2d0491828b2f19af

SHA512
667b9979e8460934142fe27b4205a1415b8be95f6fda694e8faafe8c7d3c92ba08a6d08b90e6c78826cf95691c3b6af430064d4c60dca0510de1358f4bf3f4f6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\cs.pak.DATA.akira

Filesize
442KB

MD5
3e0c2a85fbc704ba9fc7af484b5ab935

SHA1
533afa71222915e9fd818f96dd0960a35ee12a1e

SHA256
63e24e9e138fec71978537e4902d341b204de3d26d6070c73b6d422109332a2b

SHA512
19ca0b3c0b0d622f435a93ecebaba32a2e84962a6d00b27bcb3b1d2265a8d773f3ccebef3e4f5006f0cc55cd26da2bd3f48db0b5c7b6ba42677e954f29c793ab

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\cy.pak.DATA.akira

Filesize
432KB

MD5
d1c103823a16ca42e2721d4f7031b8f6

SHA1
6a2b814ca237a1ca30ab229f61fe729fe021efac

SHA256
880bbc8e64ac537d5dccef74de796365d5a663aaf6a80200c75c6cfb8fa79829

SHA512
53b30d8339de670ca683511c73a48c90f22bd114c4ddb71d7861a01739a5a2771568fa10a204ec909e7728825f97e75c58c5fa7e3561a4087486520218487b50

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\da.pak.DATA.akira

Filesize
391KB

MD5
a1a403bdd2d0727449af1b220c902613

SHA1
9df54edc719c17b6c6da3b60fe1189abe545c660

SHA256
2c7181cc7ddc22a98c274abef0400df230737caa4dfe55ca29995e6e3b1d3649

SHA512
1a86269a947bc9eccd168b4b661c966e48a837ad24a766bea6dba41837fa77fee2c80bde2028f942a28323d6e337a64820c10d6d0b1c1deb0a8edcc500bd660a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\de.pak.DATA.akira

Filesize
437KB

MD5
ab541c80a76355aea66ab3e48fdcf8b3

SHA1
341d18c4ff55c1dd76034da35e3334787ebd2ea9

SHA256
03655b9790857c6f2219f82fcd967fe6fa72de4d60d9ddf13052d3531e83b4d7

SHA512
71aba594e1c9f33ff913ba35e442ae7533a6566b5ecd4386202af811a965d4b156f7f10e01d242d855777811966ee056ca69337b759b9a44df718b39ea188a51

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\de.pak.DATA.akira

Filesize
14KB

MD5
ee42ff20878e8e1d7cf961067ef5358e

SHA1
1bae13d563bebb13119e62a9405ab83bc6e755eb

SHA256
8dbb89d5117e365ffb1798f682c135ec97faafb846e531986fbf75ee2013ecdb

SHA512
ed99a0ce0419e06bd923e4d981af007dfbf9d5c6381c2f188f9a897dd434e9e7ee099b45e2058dc29e0212518e01fc4c02d766ab10740759f035b95aff05b665

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\es.pak.DATA.akira

Filesize
14KB

MD5
d76d7e6885889fa832487174a06bd378

SHA1
7698eefd5fd197d604df99058b997377fae05f25

SHA256
e22c445778c1ea8846943c5a49bb07a447941a16d4d16c44f3eb7f390d94c0a3

SHA512
a996c78acffe6b75c10d156c571479d862eb53d091d70d3e0f82504f4187880e1e18366a9f1bafea56ab9c459d62f2ab41d99b5fb6eb6788949b20913dd761ba

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\fr.pak.DATA.akira

Filesize
15KB

MD5
264a2d1a56cf4f4a9f7ac2164627007e

SHA1
e2766367af472e4896c1953d95943128a81527a9

SHA256
41f482fd4bf342bce4fec1336ee8fc97c77fa56fcc2e915120db8949ef33c856

SHA512
f3a23df3730def8dc64571913a13e603fffc8fc74bccf55f15a4683758a213d4853d83773e39352aa5019f8a3b75b0f73e1078a246f9cd7e5336776ac0c05bfa

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\it.pak.DATA.akira

Filesize
13KB

MD5
d5eea871c77c003e872e591323199dd1

SHA1
059e44fcca0317e06862bfde7bf06b397a50a753

SHA256
581e7d5d79209379451c754b5ffd20a2cce65f3ef612ba0d9009dabe8ac3f25d

SHA512
d9f161f26fff79f5b3d3cedb13d77f198fc4efa804c2be40b0e741fd5333a03f5ccaae0f8f9c61009c42e2bd508c254a47df3af26b314743c4424769c4b17551

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\ko.pak.DATA.akira

Filesize
13KB

MD5
c51779d4664e2706071ee8c20bd5c022

SHA1
3a232645c0b6bfb90561364f55e507018f8f5ac5

SHA256
8eb080d76453999e889a48b119de0d56736bbbbe5e1855a14e510c2ec1c0c595

SHA512
dbd71d97d86f085fcb0f6ab6a5ff902976a719eb56682dd3a8683cc89facd1dfa87ec40e64d02def7a2e0f26ed915298fcfb1d87bec5162b9093abd184964f7a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\pt-BR.pak.DATA.akira

Filesize
13KB

MD5
eda443e1e22693e982ece91fa9866dad

SHA1
a61d9251d7fa9156d79f6f2c09dc6cf1301f4f40

SHA256
4c75033b84f059343c07a7f00c0ae59fc0577144a260dea3803c0ba3c7da69cd

SHA512
9577e32e4a4e6e5c167445cb4f3a4c57da127060498826989a3e6697ca21ae373ea2a244832f1a75db0df5e5957caa84441613390ba22934d6542d38ae7e99fe

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\ru.pak.DATA.akira

Filesize
22KB

MD5
91317494406222f7d78ba4665a9b4f3a

SHA1
67b4889debc489bb52b9fa41fd6b74a7ca399656

SHA256
79d133b3ef695b03c7fbd7361cb7a6e14d6b7b8a5ce074186edb01a451402479

SHA512
7d095407ca02de3eafcefe94193896bf4f3d9a2bd05e1f7dee3a95bf5c15564282a0e88baef597af78088ee175c1bc7c507a879914dd8ab7ce55574d7faae2e5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\zh-CN.pak.DATA.akira

Filesize
11KB

MD5
f0c36490cb90fd175f49bb54391ab988

SHA1
08cfa3f518e749bd03f479d77211f64711e5d1da

SHA256
fc1def0831f06aabb0c15b10e8efef0fd6e620208d4201d1250bf3f5db152a1b

SHA512
5034e681905ebaa098c0d390038e549e4aaf816e9953c2257a674b20a0bb19c2776e6dfab1ff06fae17fe8583a433ef60cb3c0d3178a0e0d724af5825124c61c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\zh-TW.pak.DATA.akira

Filesize
11KB

MD5
fa58c47d334291e6c871f3bd271db788

SHA1
fe7b3f6baa00c2f33316def7a308df5a4d29d4bd

SHA256
1e81afcf79066036a9e811ca66af0bd3c5a050a7aed5fd8095acc468fc02d1a9

SHA512
8d2760114f74830963535186b98ae20b4223e970f7cb0b52a40d144794fb15b2d538e97a127d92792427f325828f5ce0f5ba570fdac13f6b44c4d9df327b9b4f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\et.pak.DATA.akira

Filesize
385KB

MD5
7306807e8f656148afe0654ded593251

SHA1
6e5b2f6817ddc84d1c4a5922854063175c6e25f8

SHA256
98c849e57e171aac28c1200d1cec974f40b07c82b3b54bb4deddc0da2825971f

SHA512
6a224e48793dea2f9cde7a73b8ab759827aef9031a331fed947b2a7e40b2ce188dc2c9e62316dce1e0f373861d445e5209b2b5c02758599736fcf1e76a0e9cbf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\eu.pak.DATA.akira

Filesize
401KB

MD5
72d941e9cd6c5094f08069aacc5753a2

SHA1
3fdf7da89a663b25c3b1da8122ebbcccf6115638

SHA256
78b09ac73e96380fead61e6d3635b31922ec1259d7697f562400b8069e1d585c

SHA512
2ab2320b0d65387a22e99a5403cdaf5f1f01859b3d0300e8359236229afd5f8b54488ca4066bb977567271efafc4f7b0b44c9283c80c51e00b3e99bf4c0d9091

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\fa.pak.DATA.akira

Filesize
605KB

MD5
73469bb1d507bdff247417cb65fb85b7

SHA1
5e4f91bb9e6af21fad7e1060ef44e68d6c08d387

SHA256
27860e13ff7276726befd64681e56100f32e05a2f07156aa83958e6ab76fc02d

SHA512
ed0a72841948d612b9b85ddbf25a99ee9dff3f45ee71a50700bc3b4317bacb3a6ee5734ec75f3c1152a3dc7f036dd0f44c1e115ad8c3d542815517e11aff98fe

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\fi.pak.DATA.akira

Filesize
405KB

MD5
d5e20708803e74a2b48a00fefa73ffcf

SHA1
1681b98e8770892470e299055e651203ce4bb619

SHA256
c064f169aa046dc97e23d7c191b8b8b28a0eab9fb743cef8b4b1204d05dfcb9e

SHA512
3ac15fb6a06fc5f624dfea68bb63cdd0e85659a0c88e657e33d07311a986e88d8cdca0e15b82c029feb1fe9e6127f87e66801310d9fbf372fc19410993f8ce79

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ga.pak.DATA.akira

Filesize
469KB

MD5
9adadcdb2223d736c6564222f477223b

SHA1
c8230062afba0b537603b240d4280ffcbb01de32

SHA256
958e987392dcc13af79476148e4946bfb73319a429afeb7c2c7bafe2f0a07511

SHA512
f565884c99f13150ed723abf1a69a64a718605e092d6205b8fb59af41c9b86067e40abbaa03ed8c7971319a9305831018e6c44848c7eb1f9833a5a6d2f318c9c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\hr.pak.DATA.akira

Filesize
424KB

MD5
73f4f9a7e9b968634bb0fa5e1a7b708e

SHA1
1209416e5e14c326eea84ca81bfa2e166dfc60a0

SHA256
51199006b547031b5094720556b3e47e54e0cec12579bce2c259dbdaebee1521

SHA512
909fdf585a49018fc0f3add2acd0b9c0f0ed8a83b34702800d19e40b0008db3f70e0ff3551ef18d2c7b2fd30876ce5e3861f92a28e78fa6a958bf75979d6dcf2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\hu.pak.DATA.akira

Filesize
452KB

MD5
3cc5e9be3a127b9f49146ffcc1ae49c3

SHA1
03d12b5238e5b830883cea7c791434164b4504ea

SHA256
2afa020ba81906137b9b5bcd28f1e1de08fa28d64f3d3c3ea8a53b5d07122ab9

SHA512
8f52df671903f6f7678dd7836e82c82bb4f4e41bea29245d555996850da2fecca7d48acc6aa0f160da9a3409974f4e643a3c5e3c472bca34f4027572bf5759fe

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\id.pak.DATA.akira

Filesize
378KB

MD5
802174cec7be98d3f57a8e3fd0ba81cd

SHA1
86d68692a19dcd74f9bda3e0a48dc257f0aa0425

SHA256
e2352731a18d4b920e81973dbb9648b499f998cf87b3daea79a85bfbd34cab88

SHA512
a874b4deea53fdeb0c4729cd460ee08dffdbb669d0761e24440c1c42ca504b2393e7015ba0f1a55b5d6d67a82cb71e16cfb44bef67ec88226f62238fb7fca771

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\is.pak.DATA.akira

Filesize
411KB

MD5
3837a4ee76a8746d7954872397494df9

SHA1
d453a58ce059d87357992b0d118ffedc715f5d40

SHA256
0aad0131e1a693bebe31d56bbeec1bf9d2f7ebf2b945a01eee310cb7e917cbc3

SHA512
1b25ae95f9812db1023178b9e957103e385cb787b575cedc8fb0e483ed3f9833e5406f71ca4a47b58bc5233157603385b20f8c582e3b34587a6964348ad5a07c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\it.pak.DATA.akira

Filesize
419KB

MD5
3317fdcfc4d5d110ae72021dcf8979a6

SHA1
d1dadbd37819b5a7c0ca1f102b03de1f99f2143e

SHA256
d4097dbbf9e68207aba2ba285f239dfefd09463427ccacaf3e24afe93b784ca7

SHA512
8dfc795be372e0d9743954b094d898bcff5cdb41d9d39ca2e8c725be0528cf534810f25f6f4b9dcfe7054831b290c3f798422fbe353f0a703f1e2505a9f898fd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ja.pak.DATA.akira

Filesize
513KB

MD5
ca0fc15050fff3e1568cf541e2838d3a

SHA1
0bbb117ea32df93e765bef084778c83ff61cb691

SHA256
cac33efec56a4b08d1bf1164ab4ec3c44c52523ac345c7ca2da19480278aa931

SHA512
052fa08f5d138dc8be4d04f0524b6f5f74bcf1031ae7bdea1b3d28565f0b94e808dcf88f30a4c1f33def4fb340a9409f8de3ffbff0f41ac08f5587496327eb44

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ko.pak.DATA.akira

Filesize
425KB

MD5
3573063f7b5c26fbfc254ab63ed6ccdd

SHA1
a7b89fbd4cd576e3e1821c5b621c1f9e23f5d19d

SHA256
c9dffc3293583576e573a268976f849dc91b458d8a9a43c5b65c48ee6b2cce49

SHA512
94b9d2677b038ff079bc47acbf20c2b8cb980440a0ab3db5d785fe9e4a4a6362556b9ebccd1f86e3be9c5eb15ecd301a87afb631ef611796f2929ce7346232ba

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\lb.pak.DATA.akira

Filesize
427KB

MD5
e64d0d48fa6fac2a49adc3bc88f9d949

SHA1
42d9f9c645d041d6a5f331e7f7e225e575985c38

SHA256
5cd532ad08a14529a048f4ef64388a8322af9933a7558923fd9a1c4f99ba8c62

SHA512
8a0b646ee5ee1516065f2a5037dbe2f149385643b459c39cff97f0f25df970d37f0720575cac22eaa9ae9a5b26413d2bd16faeb4ea9cc18007f2a3758ae46a38

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\lv.pak.DATA.akira

Filesize
430KB

MD5
0fba478253f63b14a465792000cf1743

SHA1
7b192f6cf4e105044ec00eae0976080c61345728

SHA256
ef0688328f394b4159ae7957e6673d1b58e0193cef13dd7f83816345c026f390

SHA512
f27961fec237f5e3967bc26c15ff456aecc6c58272d87fec2bc15ab0b0d439663e537fbbfa957d6a05f8b41d4fa6e2ef63fbd6b79df6b57f0badb9f84c569826

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\mi.pak.DATA.akira

Filesize
417KB

MD5
ad54111cb2445529c7b2d36f791c6708

SHA1
0e78a10ac0b4959d58e617e989e3bda1374d5cd8

SHA256
1b692a4ab4ada86abb614386806a279208def91758e189ed49272d964d5b260a

SHA512
bb4fc369c044929e51aa1399ba82985a2c2e8902555aeabd1abf3c236d27d0c1922c9ef076cf44f6e63a7ffed10693ad2e5d88594666629dc05d554813b77a69

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\nb.pak.DATA.akira

Filesize
382KB

MD5
384b2cad3d55140e500d62ef937d2f99

SHA1
645155ac12df7bce78c1b1fb414cdaf884199c25

SHA256
bef6175ca2114d1a7c921c71f11b242c1e4c45d444be012525548581ea979924

SHA512
ceb73f5721182fed78ccc7654555636fec800fb6326aedd11c1cf673e45d56e7e6395796248292e887575c752d1fc683b02c8393ce9d346fcbeaed6bd4262c32

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\nn.pak.DATA.akira

Filesize
382KB

MD5
f88931354b5364cf70b64c49b0091f14

SHA1
bd4d447ee52c25a4ddfb63b4ecc9fc84e61256ad

SHA256
15ac3b8e664ae8aec19072307f92c9da11c8b8159f49a7515428ef0e4c6714fd

SHA512
c1b3b9d5f268dfc63e8424eaa7107b74d34b18d0b53fa679f9ce2b09d399522cef6de5a0fee7ebbdf6bdfc0d8adb0303fe77ea0ddf6a05dd3d276bbf63227e18

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\MLModels\autofill_labeling_email.ort.DATA.akira

Filesize
21KB

MD5
a9d95d9a156aaca8d29150956ea82ccd

SHA1
d254255b0be1103b54f6b0884eaf64949aa6e4a3

SHA256
92bc553ac25924b61a8d48992c72e41b238aff1ce04744e8b7042015015643e7

SHA512
0e4f2caf46f75f5507c9638e7072ecb971a93c2654ac8cf2e6ab46209e371c94d4e8e488cb1b0dfa131e6a87dd32d237617c6f58ffcc6af5078a3810fd3d0a53

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Notifications\SoftLandingAssetLight.gif.DATA.akira

Filesize
126KB

MD5
dd34ed0b5d0c60e71b399d6ec337a8d2

SHA1
f7b8300bedc8e73315d5a7b4112275bcb1a52358

SHA256
6863d1632ed2999e22f980b36c3e75db5cc8145e94a8879803b2f5894f0b4f45

SHA512
2cacda7e514de599d8f9ad8280e86b3fdacf89ce2ea3808ed0ca5eb20012e110c4b93ecfa98f7546cd4c0954b8c1d872da59d71374b32c0df392946bf2f611bb

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Beta.msix.DATA.akira

Filesize
53KB

MD5
02e96b8571e1c87045879aa82aab9940

SHA1
d0068c1964e499efe41b7d130a9c9313dedc9aaa

SHA256
2c4a7f05fc58e74b124688332cebb2cedfa51491736f866535950d1bd1fc2acb

SHA512
7613e9a70cc1312eb9151871791f1ba20fce6f8b5028d5d6d5ce160815cf21aa259ef0362dd7e3d3c22e8e35cc9129f48db2e958bc3c815f8526ddaa9de8a27e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Canary.msix.DATA.akira

Filesize
53KB

MD5
c141c62a692bff30eb1f2076ad8b94ef

SHA1
15a38273dfd5e7d75cc851afb42ee0eddc718c9e

SHA256
2a1b54484e2a8b0ef145b6a696fd248b04a51dfeb74f515e48695ac456c4b083

SHA512
e801260d6024aa976a3960935a419fa8345dc72f490be4e0c25daa3f77505cbcbb14662faadef72cb3bb65a52ffb1bbefa0aab39a45f4748f9c6633ac1dad2ad

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Dev.msix.DATA.akira

Filesize
53KB

MD5
2bb9c3150243e976f3d821215d8ced91

SHA1
eccf9952850cef7f61886cb3b526d3762dcc232e

SHA256
e4a732615c32258ec36a87cd8d1e0eb24cf13bb70a7d31589ef0669d0b09eac1

SHA512
9f70e32a479471b7417894ad2f03ad3ffe23541e1135ad78501c820ab2a0b2e1e5995edcbf5637cb05771715db2811e8f24d78198f4f2d88ac675f2924ab7a60

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Internal.msix.DATA.akira

Filesize
57KB

MD5
f615ebac229044d4d8ae944165dc0116

SHA1
10e1d1033523fb010287c5be7496a15a41d9a40a

SHA256
ff41b0b837ac31fc7a965f28bbc5764358c9e1afbaf391b1c51d1a4e3dd16776

SHA512
245d5bae3f2945b086ebf848e6a1b79bd412500bc32cecc8dfe69662643a62a39245c87d984a09a651a83cadbb57c51276d6e0688a6e266c5c1873e22210ca1e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\icudtl.dat.akira

Filesize
11.9MB

MD5
faa6b531628250d329378126cc91d01a

SHA1
693082885af8fd706c9401205285fb70946eec50

SHA256
78141e2b5b7e77bdfece351aa6ab2db58c38776c5a8192c25da6520876f70277

SHA512
846efeeceef167dfad6474f5761a32031aa31d23a2ba9bd327b2e8006420e4a2c478497d32b0b08c5e8ea2c1b0a6405a3e24440ad722e0a866ab9a00400b1670

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\stable.identity_helper.exe.manifest.akira

Filesize
2KB

MD5
fce53f527285dba3d1a78d9493a0c269

SHA1
2f297da07345056b844d67a83ae03815562e54be

SHA256
6bc08ec6d64644093e5cf182cf68d471b2d72d1ec2a5e26bc6958f9397470fbf

SHA512
54c60ad8e5f2a1a30a850896550a10733a5987286d1f1d8681c9f9a1b6002755b594563a89b2e0886ec32c6669e10a9b3a020636b78135327d466c12aaa51825

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\ResiliencyLinks\resources.pak.DATA.akira

Filesize
14.2MB

MD5
c0b083beff4cc8b18911e63889736be5

SHA1
9dc382f6f1927667b35c4668e86f68cb6909b14d

SHA256
3572c8008eee726881cbb2e927c52b1462abb4bb6694f4229a4c2a5cd86ac754

SHA512
8fe019bc35f1c82008f32bafd078b45be186fbac35916f69df512919db0bb6706165477c3481ae4dea5aff1abb685f4570cd7605572219d589e06360efd85f16

Download Submit
C:\Program Files\Java\jre-1.8\lib\images\cursors\invalid32x32.gif.akira

Filesize
687B

MD5
a4008f084c1036b2775598e7080bf2f5

SHA1
9fc8976ca97871f7b10c7f28820ea4f74a0f5bd4

SHA256
7c4174805ab92ddd07ae826471042c3c8acccd2b206a703a597963c281f7aef0

SHA512
d99e08e5c530a278e8e9e3a2686a288ab776747c4af0bc26a8df60423a04d297ab8f689f8fd2918aa70a7535e3a5b6869804d96822fdc2ea7698cff3ff4756f2

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_F_COL.HXK.akira

Filesize
648B

MD5
44dc3957bad9664000c9ad531254a902

SHA1
0be721db36588e28fb3c9d3413faf38f0d6617a7

SHA256
eb52d44ff4b488161ce3f92c9dde5941f5a63cf4c038b8735d61fa12215bfba1

SHA512
994a4c18e3d1254d493d8a0b093719b60a82c0604b5c0fbbaf83627a9db6b5cacb6c8121fed681d9a2b6fe11feea2035d054e855168a6fbeb8581ea32689b5c2

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK.akira

Filesize
647B

MD5
7693a71bd607b39e4b1f5752761c98ce

SHA1
ecda0ab470061b2bf7850453631bd99c086b4778

SHA256
3b4f3ed2f71506ef1cf5f725945435aebd9d8042a896b29f8b3ddc8a60b6db6d

SHA512
905412bed99849f214c2432278ab49ecfe8eb0f4e44dbf7e91b4c4ab5a40b6fe1afe7a9f986066cbe1e6aa59c4ed4ccebcbdfb810fb76a6fed4757a5370f5202

Download Submit
C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo.akira

Filesize
605KB

MD5
65ed75f1e45136da31457dc52ba71da2

SHA1
3d24c4b76174da4119129ae7f9bc02d2cdc50de8

SHA256
cc66d028d68aeb1dff67d88bae1b22037900908a50060ff59c5787997d79d62b

SHA512
d96e106525bc571b110548ecd551c2cf773fb3ec5e030485511d5d5ba596f72599725534a7d4720e5f413b06699fe69a9483876ffd326c90e69bfd79f21dfb9f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT.akira

Filesize
550B

MD5
6c72bfd06713865f354bbbbf8e0bf8c3

SHA1
263d3d828833584ebd132dd0b60576916c4c7cea

SHA256
03dff72ba2968fad5df3c390a10b5171c3f9857b4defb4da1fe5fef1ed6895b5

SHA512
15031d959ef4c74101d74403ea2dd89e41896f5512d9a7eaa83d8fce46d7d6586181edd6f12ebcbce1bc5e4d91c1571ee8cfc96e22917c36bd280cbed86df75e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001.akira

Filesize
575B

MD5
4d15b303550c949c48f2c7f8b81521e1

SHA1
a22ad5dfdb8310849b1117b2ae409b9f30a8cf47

SHA256
5c9351698bf150973af7240f616a02456b7dfb07fe1d2e7af211334ecb0013b4

SHA512
cb4e225654e4c5734ee66ac36f13d82bbbceb9ee7caa242106e8d5c96c3339541f443d1f06bc8b669a5f009015487cb894368de790ecf58c3ae418604cb7e88f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2.akira

Filesize
8KB

MD5
8ca37e5efee8ee85342f564d551d4cdc

SHA1
9da794b3fc44ba8ce8cfd18c35ef6847f9897b8b

SHA256
4bf3b2ce88aadf785ba6b0d783754f6d30039ab40ef904f4862f965f887b7add

SHA512
88fa639cfc252939e4550469c81f8b1f856b8c3ab2173199f3ae07285ac1c8216b8fa419fab8c92d3a5dcd52f9106d71bb17955f3ec13ddb34d3491ec73d95e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_0.akira

Filesize
8KB

MD5
59f80fe31af0f341c9068f752c7530ba

SHA1
290de42b719d46dc2d194012f0c70bd5ca2a2d4f

SHA256
90f5c9afd6d46fc9dff37fae903866fa211bf623c8c4e80fc0422b3032743e58

SHA512
3ea5a9ea66581a5f0c5494b8fbb35e1194378929b4634bae0b53c3ac3400d42307eb8cb92e095e4e298a550f1a3548eaab900195e29f014d884e616c1713ec48

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1.akira

Filesize
264KB

MD5
0f9657ce1645694a7b0f8d4f8cff88d0

SHA1
7058adc8c24cdc53b25f209418bbc648ade36e97

SHA256
a2e6538492996f6378ad598813fa7c86d77c87efc0a00d116f001ddab279220d

SHA512
f4af97520592aa24d5877317772b147434b394b8efccef2f806d82309bf2ed9ac937defe620b7b117149bf5ef8076f7ef52eaa611bba1136281287824d6f5038

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_3.akira

Filesize
8KB

MD5
e5d28772f37349cd25e0549ec7adf1d9

SHA1
0fc59b93b097b1ae8e17af00ff57b4a7402607d5

SHA256
ac6d9af8064b0b50bd4633a7cd706ef4d53f2cdfb7b354eb52e168e9a469164c

SHA512
04a7d74096cf67bbf68c646d415fcef4b90e2c0a968c31f0fca39b29833deda9a78f60d51e1c310604490ad05ccc68a6c6f2c73d5cd83fcabf8385fdaff21541

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
3KB

MD5
456778333124acef50fb444139faceb4

SHA1
6a2e0afe623c734e08cea9291ff4a953903c9242

SHA256
e77aaa5bede61edb22931ea498fd6d1665ea019a40a8a79154c3298c37993370

SHA512
e77a6367827b639b8f83504826195562dc4cb41dac8e338088f032f88c89cb692b0286ed4ba949a8a202110d0d5650729845f31bea5823475223286930030b17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index.akira

Filesize
558B

MD5
dfa527e4ddfa5d489e68e8bb94da9f6c

SHA1
a4af176cb266eefdb34890ddecf768646253e361

SHA256
dd790e7e90790c88599a0d60507bbee29964496deba9f07af63e4ac3a47cd0d2

SHA512
8ebd0b26b09d80c846dae7974dacb0290b797c5343b3b9a683f5df91f44ddc6d71622a09877c608fa3d0f7961896ba0febd1bb9803dca9c8844b0c2c9987c082

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00001.jrs.akira

Filesize
512KB

MD5
8ac1c335a633f971a7795dfcfffecea8

SHA1
9fb1b035f3ebecce5faf07c85cc04c4fca737561

SHA256
3cf6514e3ccb5d3643927fb48808ada9f2bcfe74ca6b8841ff9861197751217a

SHA512
6dcd07cc2568210a335b6a32a7241254339dc838ad9e9f4d88a0877a9fcf81ec5df8d0af7e2d45b3ec4e02499a8e10b2b3a3a11282a05d7ba81eacc30cf5c3ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_f3d45a5k.0t0.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
memory/348-10-0x000002108B9E0000-0x000002108B9F0000-memory.dmp

Filesize
64KB

Download
memory/348-9-0x00007FFE6D9D0000-0x00007FFE6E492000-memory.dmp

Filesize
10.8MB

Download
memory/348-15-0x00007FFE6D9D0000-0x00007FFE6E492000-memory.dmp

Filesize
10.8MB

Download
memory/348-12-0x000002108B9E0000-0x000002108B9F0000-memory.dmp

Filesize
64KB

Download
memory/348-11-0x000002108B9E0000-0x000002108B9F0000-memory.dmp

Filesize
64KB

Download
memory/348-8-0x00000210A3F50000-0x00000210A3F72000-memory.dmp

Filesize
136KB

Download