akira | 48993461cb699505b2a4f2bc0ea377edc80d5b717dd9401934a15d27eab43ab2

Analysis

max time kernel
28s
platform
windows11-21h2_x64
resource
win11-20241023-en
resource tags

arch:x64arch:x86image:win11-20241023-enlocale:en-usos:windows11-21h2-x64system
submitted
10-11-2024 19:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.7z
Size

201KB
MD5

6136fe9da7f17575bec5ad6a2d8c4ab7
SHA1

456b8a3be1b9692a4ba9d2259c5f6f1908b7e647
SHA256

48993461cb699505b2a4f2bc0ea377edc80d5b717dd9401934a15d27eab43ab2
SHA512

29b7f8d1d78e06601004509ff7cc4487900d5be6f1cd612da8bbbffe90cd8e01e839a268ea1bbc4b0260718cffda5ca1392128427d24a18fc64cfabf62aa89ec
SSDEEP

3072:B+7YT+wWmDa4MpApArypJeJfoXDntFU9w0P6RWa02meL1K4PHUOMP8M5UGpb3xf:B+7YSXYp+ueJGI9xPYW5eBK4PNYB7V

Score

10^/10

akira execution ransomware ransowmware spyware stealer

Malware Config

Extracted

Path

C:\Program Files\akira_readme.txt

Family

akira

Ransom Note

Hi friends, Whatever who you are and what your title is if you're reading this it means the internal infrastructure of your company is fully or partially dead, all your backups - virtual, physical - everything that we managed to reach - are completely removed. Moreover, we have taken a great amount of your corporate data prior to encryption. Well, for now let's keep all the tears and resentment to ourselves and try to build a constructive dialogue. We're fully aware of what damage we caused by locking your internal sources. At the moment, you have to know: 1. Dealing with us you will save A LOT due to we are not interested in ruining your financially. We will study in depth your finance, bank & income statements, your savings, investments etc. and present our reasonable demand to you. If you have an active cyber insurance, let us know and we will guide you how to properly use it. Also, dragging out the negotiation process will lead to failing of a deal. 2. Paying us you save your TIME, MONEY, EFFORTS and be back on track within 24 hours approximately. Our decryptor works properly on any files or systems, so you will be able to check it by requesting a test decryption service from the beginning of our conversation. If you decide to recover on your own, keep in mind that you can permanently lose access to some files or accidently corrupt them - in this case we won't be able to help. 3. The security report or the exclusive first-hand information that you will receive upon reaching an agreement is of a great value, since NO full audit of your network will show you the vulnerabilities that we've managed to detect and used in order to get into, identify backup solutions and upload your data. 4. As for your data, if we fail to agree, we will try to sell personal information/trade secrets/databases/source codes - generally speaking, everything that has a value on the darkmarket - to multiple threat actors at ones. Then all of this will be published in our blog - https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion. 5. We're more than negotiable and will definitely find the way to settle this quickly and reach an agreement which will satisfy both of us. If you're indeed interested in our assistance and the services we provide you can reach out to us following simple instructions: 1. Install TOR Browser to get access to our chat room - https://www.torproject.org/download/. 2. Paste this link - https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion. 3. Use this code - 8207-KO-BXVB-HKJB - to log into our chat. Keep in mind that the faster you will get in touch, the less damage we cause.

URLs

https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion

https://akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion

Signatures

Akira
Akira is a ransomware first seen in March 2023 and targets several industries, including education, finance, real estate, manufacturing, and consulting.
ransomware akira
Akira family
akira

Process spawned unexpected child process 1 IoCs

This typically indicates the parent process was compromised via an exploit or macro.

Processes:

powershell.exe

description	pid	pid_target	process	target process
Parent C:\Windows\system32\wbem\wmiprvse.exe is not expected to spawn this process	4500	4016	powershell.exe

Renames multiple (8289) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Run Powershell command to delete shadowcopy.
execution ransowmware

PowerShell
T1059.001

Processes:

powershell.exe

pid process

4500 powershell.exe
Executes dropped EXE 1 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

pid process

1056 1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

pid	process
4500	powershell.exe

Drops desktop.ini file(s) 3 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

description	ioc	process
File opened for modification	C:\Program Files\desktop.ini	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\desktop.ini	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Drops file in Program Files directory 64 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

description	ioc	process
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\Assets\PaintAppList.targetsize-48.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailBadge.scale-150.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\currency.data	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\Java\jre-1.8\lib\fonts\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\lv\msipc.dll.mui	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected]	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\StoreLogo.scale-100.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxSignature.p7x	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\models\mail.config	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-96_altform-unplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Todos_0.33.33351.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SplashScreen.scale-100_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Exchange.scale-200.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_radio_unselected_18.svg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\root\ui-strings.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\it-IT\MSFT_PackageManagement.schema.mfl	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example3.Diagnostics\2.0.1\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\GameBar_LargeTile.scale-100.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\it-IT\msdaorar.dll.mui	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\include\jvmti.h	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\resources.pri	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AlarmsStoreLogo.scale-100_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_x64__8wekyb3d8bbwe\Assets\AlarmsStoreLogo.scale-200.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\Locales\tt.pak	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\sv-se\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\es-es\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\NewsAppList.targetsize-72_altform-unplated_contrast-black.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\PreviewCalendar.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\Assets\contrast-black\NotepadAppList.targetsize-32_altform-lightunplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_2021.226.1915.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PaintAppList.targetsize-40_altform-unplated.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\Images\Square44x44Logo.targetsize-30_altform-unplated_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\include\win32\bridge\AccessBridgeCallbacks.h	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-ppd.xrm-ms	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\cardview-addtotable-dark.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\WeatherAppList.targetsize-36_altform-unplated_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-72_contrast-white.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-amd\setFocusVisibility.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-commonjs\localStorage.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\tr-tr\ui-strings.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\nub.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-ae\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\Trust Protection Lists\Sigma\Social	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsSmallTile.scale-100.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_x64__8wekyb3d8bbwe\Assets\Icons\StickyNotesBadgeLogo.scale-200.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1909.12456.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PeopleAppList.targetsize-96.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\EmptyCalendarSearch-Dark.scale-150.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-commonjs\IDisposable.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxLargeTile.scale-100.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\Theme_Photo_GreenClovers_Thumbnail.jpg	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RHeartbeatConfig.xml	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vreg\officemuiset.msi.16.en-us.vreg.dat	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GamingApp_2105.900.24.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Xbox_UnplatedLargeTile.scale-100.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\PowerAutomateAppIcon.scale-125.png	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_x64__8wekyb3d8bbwe\MediaInkToolbar.xbf	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_2020.2012.21.0_neutral_~_8wekyb3d8bbwe\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-commonjs\Overlay.js	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
File created	C:\Program Files (x86)\Windows Mail\akira_readme.txt	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Suspicious behavior: EnumeratesProcesses 40 IoCs

Processes:

1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exepowershell.exe

pid	process
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
4500	powershell.exe
4500	powershell.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
1056	1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

7zFM.exe

pid process

3480 7zFM.exe

pid	process
3480	7zFM.exe

Suspicious use of AdjustPrivilegeToken 7 IoCs

Processes:

7zFM.exepowershell.exevssvc.exe

description	pid	process
Token: SeRestorePrivilege	3480	7zFM.exe
Token: 35	3480	7zFM.exe
Token: SeSecurityPrivilege	3480	7zFM.exe
Token: SeDebugPrivilege	4500	powershell.exe
Token: SeBackupPrivilege	3160	vssvc.exe
Token: SeRestorePrivilege	3160	vssvc.exe
Token: SeAuditPrivilege	3160	vssvc.exe

Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

7zFM.exe

pid process

3480 7zFM.exe
3480 7zFM.exe
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

pid	process
3480	7zFM.exe
3480	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.7z"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3480

C:\Users\Admin\Desktop\1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe
"C:\Users\Admin\Desktop\1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe"
1⤵
- Executes dropped EXE
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:1056

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject"
1⤵
- Process spawned unexpected child process
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4500

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.akira

Filesize
1KB

MD5
380d08d348409df3095c76bb5db29f1a

SHA1
d1493f6573f320a1076d36bcac2e6590eaf4aec0

SHA256
51ac4439efe71e262fa90ac2a130f693a71c139dfbc343072cdf8412da59c202

SHA512
b733400d59b15103bb365783c840ec0c33d8dd01e892cf59bc31a9b35af168603774a7ffcb9c079bf5cdddd75b443f8d1be0e9954f6cc08971317179b7437eb4

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.akira

Filesize
1KB

MD5
3e701b66b9947454d22fa056562dac25

SHA1
10dbba11423edb82abf702fac5642df18a5db196

SHA256
b5bd043caad89ea6a9d88033ae4dc3914461307312b67e0a891507f58a86c93a

SHA512
da6df67887292534fa41633a98a93064f60d3b4ab1f4175ac21be9403688e64a1d05baa407018e63919ad67547db0ce28be17f07c3de23bb932a92eecc25144f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.akira

Filesize
1KB

MD5
f209eac765f4620f0d2f74892dbf94d1

SHA1
e7a4f3dd5780a7c5bde5e124bb369c7d649c7e71

SHA256
549861076fe39230bea8f38430df35467172fe9b8180c5b75506e2dd56b5157a

SHA512
3edbe583ab3bc13d3355eaebfe0335606672519b81c60f2ae990db3f522078575cfd6a1f374af677515f9cb13bcca947b5c021a231399d16d01ad631acf87e33

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.akira

Filesize
979B

MD5
af8fa5f2578d29886c640ff8ab0757cc

SHA1
40282050eab78620a18b53aa02f4fb1a4d20fdc9

SHA256
f18641b9ddaa52df890bc5798d415e47d11b863aa9ffb2ac677e26104272ff39

SHA512
a72774956f9c1195449027d189214cf320095f81ecbadc94c42345c3e3fb45d2c529e9e4cdeba180a0f9e38d9387c9a5e5f01b1f252d0c1837dfea08c8f113b9

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.akira

Filesize
1KB

MD5
245b13caa5b2cbc7e64697f6eba2887c

SHA1
3611581ae1ff6c99037d847ebf6dffa812797bab

SHA256
aa012337d41baf7a9076fd5017174524e43b0f4838c1ea8311edbfd9b811c29f

SHA512
603fcb5c02aafef9b9bf30fe852264b56dc86d77b3909a445a6c2c454f53488461bacde915ffef0d16f24de564199167f35eae5e9e35e5c7e221ab5c14cab480

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.akira

Filesize
922B

MD5
b3b1c1666389fdfde0ced218d5a706c9

SHA1
d9750abdc8aee4196a0085a5c3ee5b8c6f41b62b

SHA256
80963e2a136e79539a334ce427a1490dd529e0e77d706dcae3f607f5cea58f45

SHA512
da563c2cb6d52035334fa5d6ded38be02487d21fc997d62d5f7937a61489abc77f905e4e34ae0e66ad587138700d64e3c330f57456111c13eb1eb1dd0148dc38

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.akira

Filesize
1KB

MD5
94692d2e20f3d93d9fde3f5cc1e58b55

SHA1
2d556c1c6d013d6693abed9918c3b5662fce6a37

SHA256
3d404378aa3d3516314751ad11a447665e15fe30b88ce9efd4fb5a69f304908e

SHA512
8e16b614d2a1476058dd957a2b6a9bc8626be7f86f786cdfa23cea84c612f6e8f31728d5eed4d2d50956f43a8e0af5bda0b085a5c022a4beb693e4557a1089de

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.akira

Filesize
922B

MD5
c10fb1afadd046fd676e37a0270fa93c

SHA1
1d7f1184d61650a1b759c824eaeffef65dbc9875

SHA256
8c5e4c11e2d4acab7ab85f180faf5f351876b714c10d8bcd453fd6b3144b836f

SHA512
2a4c17512f40aa9829a868b6b6422f69bbb186b71392a0d604461b05ce7e25326702c922efa0eed3e244ac38d365b5ed2421538a451284d95b3fc665b0d4f325

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.akira

Filesize
1KB

MD5
634c1dbbd3ecbe16316058ed85cbbd65

SHA1
71621529de48f831c247507b864a4430e9427169

SHA256
980709c884da3ee962954bee5e8dad795cf64d9e020f28cfa87952908fd27564

SHA512
ae45d5508634e0b268c199b9048c20fdff2b3c495f8bac39cec2e56724e885818140f56bd8bfa6dcee038abaa68b70ba54cdb138a66113f301fb545b9354344c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.akira

Filesize
922B

MD5
23d0ff7d4ef426fb2dd51946f4f66719

SHA1
c4b69310f7c8052e40cbafd56b3460a7daad23b7

SHA256
b56e5f4a2bda82d58efebd970def593ba2fabc6250b4b5e74efec96696c34480

SHA512
3bc5747a1587557f83e8ee5c6ca861c39034f00c26944f306c094b9f39ddcb9f986df94db566f342f00ca429695478b83ca2fbb7b675bfd890182b14417d68ed

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.akira

Filesize
1KB

MD5
d0634e3507e78070e02d7d1d938324da

SHA1
264f9ae28e8834bbed10870b1be51ab615e226b5

SHA256
5ede47210d9cf95f8cc30fc35e194765975c2997481c6d90150f12610d34e185

SHA512
ac5c5771afddb8844b8330420c261fdb9045d76e6d44c38420f8f87022d74e51112ce4cabdc85ba1389cc3b5c439982affa28d3963a471afa5a5ca1bdcc87a3b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.akira

Filesize
8KB

MD5
da67939ef80e8dd137f75a5f7b0eef6c

SHA1
1eb325c92c223a7c80e5b494db76493e72435c1d

SHA256
a4efa6969433033df959b4285bd68fe0d4921b8ab4418f0ef88c4ab94be9d0ed

SHA512
02079bb45fa77e5a17d1191530f7946446ba6aef3e2cabd6bb663cc17c8e2848e7beed61e10c4450486b021ac2a7324c32bdeb8daa4f4425eeac7547a291153c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.akira

Filesize
8KB

MD5
57bb3be6e4e3b2858ade96031feeae23

SHA1
bc2d2b3315433ae4fc7d3bddadc0496e3e8a1582

SHA256
e3023346d7afa7b8ed2dc5abbc2b24c9168c45436e5051ad156635b546dccdba

SHA512
2089778387bbcac009bb633b1b180fbbf975c90f934c92b816bb0cdd597831963a690fd1c1fe96fa0f7aa484a039b0e867cdfaa546da22c84bdedaf20893c054

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.akira

Filesize
15KB

MD5
0413325477b1eebb61e0d9dde733704f

SHA1
0cdaed1e4c92958c5aa2cbc4cd12383f2385340c

SHA256
3040e1c95cfc7e30a651a4e2fcddb12fdc23a77746cdc9b8e9d0b490d40225cb

SHA512
40cd264c24431f309a1b96c03fc10ac8f8a5261e9077713a3c4b7d3621f6c215a6f79c8a06a4bbbcbb162e5f2214573a76ab7de026e087a7daf8103d8f094911

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.akira

Filesize
8KB

MD5
a7cdae3c29fa40c7ad214305427f190c

SHA1
9b7c1c9c9bab8c3567112c012191d562434da110

SHA256
3d290667f1b679d3f8857efe94604c38856640f7161ed663f6d90b05a423727b

SHA512
e6f3fc292753f3fe7f6f3029a176f88c04b98b011363302c66cab4c2e999b78100ad50450d4bbc7dd5ad23986987c4146d68eed70cc8ef0fc2ea67afe63669b0

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.akira

Filesize
17KB

MD5
a4537c112b0fbac1c4a476899f867430

SHA1
17fc922d23abd5e0e24bb52399e4162f11a530f6

SHA256
bde2aff217f13124dbcb6e94eb89e00e69f3c10eb922ad222ef0ebcd3fbdea23

SHA512
d5e8535b8bf158b9e73d5dff52d8aab74cda633af0c03f939e750900c11304fcebf1f375e3353dd50638687de1005da151914a4d39fc3615fbef9b26cf9b66d7

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.akira

Filesize
713B

MD5
26de50734cd37c0dc79bfd555036e0c2

SHA1
65397bab62c7722c7a9d1672d0a3bb14015ad903

SHA256
2e9de63dc24b0077918a19e2b44c8e272fb3e8ec5061195b22a04528fe61e88c

SHA512
db9cf9ff68c95defd3bd64bdab32086112db233d76e2e9b2e92849390dba5b027c6fb6ce273c2f111d8306a010c08ec4b6ea129eedb9214ff52fdc17fd753c07

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.akira

Filesize
1KB

MD5
16e4288d2660b0ffc16e8d68d7462cab

SHA1
4ab618f6ee1d7285c9cb82181c7a081b49a32d08

SHA256
1d0ddd2ec412089b7de5cbf37b30e941a4322ad42bd8cb4cb0480ae0adc200e8

SHA512
a4ad9143a9f4767d053ac200795b3f487d751c7889889b318685bbdd0ac9ed58d5b6b8bf53fe5c1fad733b8ecc650f2d95fc3faed7875b1f9576f7bf3be7240c

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.akira

Filesize
9KB

MD5
8c14aa5f8092525cfc5030eb783f9393

SHA1
19d8177a64d09e7d4baaad2a7eb49c2e751de533

SHA256
e34ae311b54724968633626d665597add48bc353fa9ea0e11a29006effe94e29

SHA512
d0fca57ea6b6778630ce80084ef4ad9f13aea2ad6db8d1020f59e89a262685f4646a0f55170418f54a6617add83e8643aa707f83a2fa1418833a28f653324f6d

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.akira

Filesize
19KB

MD5
02cf1933c8ba4aa5adf1b224b3e7ca75

SHA1
7beadfff25b33c1c704332856a46933f6f5462bc

SHA256
7acc5ec54dd69ea2ccb0573f524177787bd4ce57815b83f05478b2ff1139829b

SHA512
b58cb41a5df05e0de9802cda13644f87e65062b7b2922869ca5834d68e425c12b326ae57f7ea0d80ccd3848372bfa7d92da6d6dc7993c595f1c51553017c13ec

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.akira

Filesize
1KB

MD5
41b1391c24b62737344b72ce01465324

SHA1
c01900da3018fef34a6a53eb9676dee0b5915a5e

SHA256
fc2e32b0754306e5b8e762f99c57c6ab775ec06da5fb94f7007c49684baeb617

SHA512
91346fcbf789685e6b0baab3965341b597c55fcee85bb834a5734d7fa62d33be2c5c62f115620292efb9f6bb7972919f0b7199d9e48f70e47d80dfee5b1e177e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.akira

Filesize
1KB

MD5
b0d9c0bf983b77e51b6ad9a053be3960

SHA1
d911d8022d6d9c599639342d9cf20c184dbac02e

SHA256
42b3200b965189c10f000aead82aa9c454abf5316eb50ff00c8f56271ebef7a6

SHA512
905e40dab486db046d4da227877d7de99a7b5aaf9b1a91033d469b5e8933c8ac80320fad3be7936065013cc7d8617452409e9abc5ec91b92a94abb11987c6ce8

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.akira

Filesize
1KB

MD5
80aa497af09b5e33f4df1d6aac107e08

SHA1
7af12ef168e651bba670701683a7fa5f024f8827

SHA256
10177199406a93ebd5080056cf9bd02ecc2e873f92cbd443ffdd6482d23c35de

SHA512
afeac9e3d533d39de77fe04401a6dcb3ebbd72b7de453aab279c42e23d402b92bc12fe6a081817dd49361adfd9109543fec41e291852a6189d36d87c2ac1ddef

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.akira

Filesize
1KB

MD5
196db2b84a70e9c169c57b940f28af25

SHA1
162f1cf7bcad0fdd6c1c9d570c59d641dcb41b84

SHA256
b26edb5d8d095c0258923ad91de1529c86a9a21fbe5504bb8be8e2b9aa535ae7

SHA512
46c69e50142336de177bbc97d83b5d57e3dc04c9d83027af1be4be4c9627bb18f4b61d76a65167a93f0e4145e5decee644cc8a3fa70eec714982448174cb250a

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.akira

Filesize
3KB

MD5
892595bbd9dd095f5c2625e7175f8977

SHA1
dcf29659c507275aaac09a004eef0d7c2301e989

SHA256
6c40e35b56c8716216917b98d672da482fa0d75705c3b0d6a432832e42890024

SHA512
12f27a9507769104ce71ae2efb17eae19519e2d437493dd5ed09074761a1b0c8619c28cdb5c471ba37004d588a9f083314e21cabaa845e8481a4c544a0df9500

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.akira

Filesize
2KB

MD5
552a80635a0d9fd4e2f3f6057750767d

SHA1
006c29b86d5b8004a1c4b638c6bda16e635168fc

SHA256
38537c7ba62a9096405ac5f39d7953f79da713b590165d8df1f91018213d30cd

SHA512
150bfd3241aaa36589666d9abbdda9aa1eba519352610c219691c2dac8b36ea7a5dc5ede08e00d44232ba380d639a6c936a7b01905bbcfec4f281e98c3b2ab0e

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.akira

Filesize
5KB

MD5
009a94a9979bb9b6dd7e5c466a29345d

SHA1
fccb5e6a093d52c9717bc2ef8d6844f717c17191

SHA256
14dc3c92fd045c0270664bdd12d6887ab417a0f1f89716f49e3018edf107f508

SHA512
7a3303b0eb00740397d0a16605181b2b372e5d88231ba084de7eeff5b7846fdb167ba1ed7b0d4a2a33b3e1bd0ceb358f0b8830d427c00824644d09129b0fec5f

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.akira

Filesize
823B

MD5
c3b00a96dd9e36cbb0976ad0d21f562b

SHA1
3d14618ed33262817a053ec5a49481aa79c52e39

SHA256
cfa47bfe3595cb3573611f75634e24a9ded25996849974653398500ca080f894

SHA512
b8e0bdcda2923812158117cbf57a0aaedebd92ffc4c85c97014c5b9c2c37730baac5be410c5a717bcd526f42556b420c9ad332bdcffe3fad2758134807949a06

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.akira

Filesize
919B

MD5
50cf82e3afd6a4f48a8a8d9ee4692fcd

SHA1
6751f4c07cec5a8d41049c30240bf6eb64296edc

SHA256
974f91351e838a97b1e21bb1815372afb7b45052de85c78fc5659a7165fd2fae

SHA512
c8a66c905fe58cf3a51005d7c55074059581dfa05e4aff719d5c779671ecc70582fe970120e443ff2b86abc9c13e056a060333b203f4605da8334abfaf50979b

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.akira

Filesize
1KB

MD5
64b1e853a736c618f5129b2a2a5b5685

SHA1
16de45c41fb31c459436ac0e51b488f798df1a28

SHA256
e84963a2683ebc9266395688c871b687afcfd969047e27b8d75e1119cd256ac3

SHA512
9972033bc4f5d24a12f0be26fa6b2b4bc5cfff52264c7b4e6e4dae10d8c0e895e1f0ce4351e03f87efb220e5ab4df68ed5704a28e1dbb31ab8d48d3aba9996e6

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.akira

Filesize
1KB

MD5
85c37705e20150c667b594fc16911b19

SHA1
8edc59c0fa1aa0902a3f9b75588ce5447dbbd531

SHA256
f46c615ff48b97531c990bb7094bcd33499f0c0a483ce66f6c1eed73ae239595

SHA512
758d1a1045525a79bba61b80f676f72f6ce53032b6941fb4c39312b2fcfae68a3cff0ad3ce3f3fd3b81b8aaa3b5187b472c5db303a86bc8e4d18270df5d2d602

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.akira

Filesize
3KB

MD5
7e445e767b2202474a85106889ae3891

SHA1
c4f885d9064178999fe9a1d704b5bd6e6ee706bd

SHA256
fc80e9928711d2365a2b627f2ab2bf86a4da0c04bd4e97dea6741aeceb9c79c0

SHA512
722f97685d5fea6aefb1ba6afde7cdf9183a91b7cbb981314926d96f6d8b9ddb75133caf90ff6a32eaefcaef1288f35c495d13602801fc89e1fc0b7c45cd1d18

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.akira

Filesize
1KB

MD5
4b6d0ce5530bffb1358c4c4e321680ed

SHA1
80902fd84483edbe24469b9b609f417cbba8e49a

SHA256
d395749c79c87d8a35cb532e782c403562bb51d7874da8edc12b7b016b42c1b1

SHA512
fabb3da3ebe6e17010ace58c9f042e37d9e245b84804592ddd36e0196a4522944360dfddac7c8b46ca3dceb2afa4f53042c6473ebfd1f1fe39373f9c22824ccd

Download Submit
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.akira

Filesize
33KB

MD5
760772706354b2bea46c32c7d637c490

SHA1
d059de878ce4c6b20288f151101941e760f1b58c

SHA256
dce8bfc00ed4b702f5d387bb0690c03b26a1258363a008b7e4c269806c6023b2

SHA512
c575cbbe924cc136ec246f98514afccc748aae47da7c6d612581eca8e272432c124e859adb9329c4a7cd9fdeeb004e9e03d26bbb2d4fa4c088d9025ad0c4f83e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\icudtl.dat.DATA.akira

Filesize
11.9MB

MD5
8f9aa3ac0a1e1ee21d360c33edc661f3

SHA1
ad78155845d16d7da08b555928092865d47c5f9a

SHA256
ed0fe869edce177e57a410e0a2e8f55762d523a57d491ee71d233d118e791f95

SHA512
eabb90fc2340e717164a5a2eb22927659d6dc5be6ca31549d1371605dad03d9f0fa6b8b13fa8ac6d6e087b79a1a7e3d57b481fb4f8742d990b04990cd619614e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\v8_context_snapshot.bin.akira

Filesize
162KB

MD5
d5bec34da5a10bec221e81c8f28a8716

SHA1
c4a0262d4fc05504ea44d1f7bcbdbb15b586e8eb

SHA256
bf90f4978759585a7cb8fc637438c187a54e3c890613868326a8672d3121ee81

SHA512
3d01dcfb7e193cfe70feb6b06f57c8eae199e6c1a49e52d1b114757889fe515972274d71fe26d284abbd2294278646523d39dd66fecaf63c18aa7681718506c4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ka.pak.akira

Filesize
930KB

MD5
796ccbc37dbc167fa62878c3880e74f4

SHA1
d648f2299d2c9bd356159012af9c812159ede9d6

SHA256
126730e9e7e0ce994980d07c8bde4fb6d2cb2307e32ff4d8fec0a12cd9fa6dfe

SHA512
2f81a4eed1ea101be5a7e3e2f7497465bc967beb395c2186d78c2419f869cf67eddde5b0f774bd88d2c3056afa2ad98d62a8b4eeba2ad2fa633fdca46745eda8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\mk.pak.akira

Filesize
669KB

MD5
af4360bf306df9de4247be963b984e5d

SHA1
ed33c02871381324bc8d76f6c20bbc853790bc97

SHA256
edd51c71bf14087d5677adbe0c44c11f30a2fbad52ec5af4982be6c6f44ca242

SHA512
6e3557bd7c8e52685cf712778e2df2f604742e8e0979f6ef97aa47e022dc193bcd78adfe97c07bff3498d28be8f9e261e2367460a04b3f6a7249a2e94edffc43

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ml.pak.akira

Filesize
1.0MB

MD5
0caa3eaf4bc864c2e13f1220b51bfac1

SHA1
0891370459ddc8537a818c61a406bdee19d9c691

SHA256
002e23cbfa707faf7c06e6f4111119caef3123c027c41563829c399a9888f1a4

SHA512
f2ca84dfbfc093d36486f901e64f0ccfb6fa69c16636aef85a1891084357e51c1c1179be7097127a98ab2bc3f9847f67adbde340958b3973480f6117b76b9cab

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\pa.pak.akira

Filesize
848KB

MD5
48aa8d8c5900ddddacf9359168a2c5b6

SHA1
06a6157b1f5cf297da89f68faa506d055504dbc4

SHA256
692a618f6590b92cd0f973f583f6a5155cb4ec187a8aaa10b5d8b7501c2fc422

SHA512
6c3a07efe5aeacede77937e21f66dfa837ca6c7a49102694c6cbbedd6fdf16f93276112b44226a067b4074431a1828a50d8cd665f477a6adebc4211e1dce6e7d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ro.pak.akira

Filesize
436KB

MD5
c0bc25e527f9a79e25ceb8ab802355f2

SHA1
d74b1a4962bd3f81dad82227edf23b7aaceec17d

SHA256
a99dc17f4f542861b8e264dd44f604fd1451b4bd949184876c8eeb9bc4644e51

SHA512
897cba65ee65ad92dcc18f19c6870b43faef3237a4d5dea17cf54b21d1d627281cff639d483676d3e0feb8daabfaf241ffe0e4f794f42361c4517d0d2b5b21d6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\as.pak.DATA.akira

Filesize
853KB

MD5
d449f252abbd8def483156883a20a2c6

SHA1
cdd2f93f40c68a5f0f68cf94adf51d52951cdebe

SHA256
3b7a663ff725aa30a4d9b03ca65d1e60c2365de8439e7648cf641df399d19fc7

SHA512
eed3ff6e45f379aefef4febb96409046da1b01d173d6204f8c264bdc04a520df97212ec7e22060cdd074742870b32605065c337a91394fedc00b6848b1c7a522

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\bg.pak.DATA.akira

Filesize
673KB

MD5
19608cf8a17fd5a9706d5589247c014f

SHA1
6ae99437c69f8335ad54061b6ebf419309d87d66

SHA256
11f7fc3658b298ac9f037753a3c9fc623bea47cd4ceca3445d58840adcdd30ca

SHA512
f736cbccf198a2aa3a7477a77de379f156f9d4a72f6204a554d5f4ef36c738c55862d3bf5608ed9de56bff75ccf15f4ff74c6be16217ccc985ae625954a2704f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\bn-IN.pak.DATA.akira

Filesize
880KB

MD5
fbc6ca9422ca9352fbb5d5f192c60fc4

SHA1
7c5fc274fade2258903845ed700b19c0159044e8

SHA256
9e6a2e7de0306ea73aedc8001166465c5957db2ddc4331ed989a1350ee487055

SHA512
c0bdb95f17389804c2d11d42ca3eaf0e37259768297104a4e38727a0ce445a99c078c1c309d28466a677a485c516265a53dd52ad402d0eaba3c2563af7e2983a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\el.pak.DATA.akira

Filesize
755KB

MD5
064582138b51c4a02fa9015ae3e6bd8a

SHA1
66d70e4096a9e324b7e6f3acca731499dc15b036

SHA256
8df917ba5a5139d54c80391130f1c22e444fc01f56ee513659e3a71ef80d01ea

SHA512
3cf1a2af2450209a72adc2ef625de7c68ee83a9dce9dc9d5e8aeffd59910566b4f16e7d6e863d49ed9f3b817f9e37c36b8d0892127bd9915036dd5d66409c6cd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\es.pak.DATA.akira

Filesize
424KB

MD5
6f1ce4f566c5c26409bdc19bf470a35c

SHA1
9a8f5875da91e62758421bddd0ae452fc0a25a2e

SHA256
6599340b8f9a95673dffe66aa956c1efd8cd56291303ef47ab76078b596633a1

SHA512
9da8a92e71396e73c75cf11390ae19b5d7b0a0c44e1f440a8b9ba51f2f63333e4e92eb01b0a41546bedf91f883e728193d0c8c1c1da7b53d45335265929d89dc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\et.pak.DATA.akira

Filesize
384KB

MD5
f2844e31ed07cfba56453b886bd896ed

SHA1
1e8e356ee4cb9bb55996ac2e88a07d74ac2c6687

SHA256
b778e47673c6c4ce34a61643b72a8d9111eea9e213d48e711491c452f6e99ece

SHA512
d6f2ea55a9a54402e6a3d4a4fc20fc49888dbd996bc2446b76059dca09599e752918be1c4615bc4d629116030b4f05e059a8b92bce499f6b357b1dd3c09a42a6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\eu.pak.DATA.akira

Filesize
400KB

MD5
31a6dbed93362ff3174cba5b30618a81

SHA1
19bbd9dbc0950b1a372494ca5208d59c7c95d5e0

SHA256
25d52f2ca56899a6f70d9f913a3763dfe6d774d8a6f68c78b6cb59fa3e71179c

SHA512
19c25353648eb2a92b2bc5ec4918ee0bf239bca5f3d16270b07cf0b9012046eb68626cf27a106cbfb25b6ff9fb9d7e7c2a72221d45926d2c8f8023760911b6db

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\fa.pak.DATA.akira

Filesize
605KB

MD5
bd0cb0bed88be0f70f2aa6a7fd19d6b7

SHA1
99900e2b2750ba6cae435e66cd70a4e24a0b8b37

SHA256
c71c93b94eb3ffc2d25b1e86f1fe23f3ce5b12ee75ce20529eb3efa260675fb5

SHA512
78957fbd79181e2679528907f0279f3838d30d0a10e403bc2de6be7cedbf6add2a613fc426cbe30f614cfe9fdce9deebc145881e8c1217377f56b57a2c08070c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\gu.pak.DATA.akira

Filesize
830KB

MD5
0804bfe7fe0a54d66cdd09d1d6fae9b7

SHA1
7d7ae11c774f4f54062b87e54fc7ec262b5f407c

SHA256
c628b26a35fc5f66a9e88ff23cee232934ba0f98c9392082b66efbc2ce70ad8d

SHA512
f3fa6d9f6e256477a73ab1b8d284f6ce8c2cd0ad211496313f06c534a397279e30e5b19e2d21d7d0cfc03e91e04cf700598e18c9483c84e083d2b6118cd8ce4b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\hi.pak.DATA.akira

Filesize
844KB

MD5
7cb171fac394cf73fd2febb859471267

SHA1
3c14bd1c5caad9d4eba105676ac7c3c7af343437

SHA256
1f4d017b4b8e6c85a77b8ed9cc80d82153e688201d84450fe6d19f48e76cbbab

SHA512
efe3ad3105fdde001e4d47637c017723fe309b0f8717a176043872671b4c79ecb9404ccd83a10492441ef2a62616203665d1ade181883ca6dc01e6d6d07a324b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ja.pak.DATA.akira

Filesize
512KB

MD5
a91829e4e95ef69daf179b4c0a5cec64

SHA1
f8feb1077fccb13c88f2694f58aebac70ed38c5d

SHA256
5c5d13105b43940a2464664cd21033eff5912f6fccdc74fc25cdaadf7861a561

SHA512
924c031adb24daead086c20e903dc417e3bd5256e7c6adbf56e3cac37660008e79baba569c8e812df04e9b7d14d9ac8e2c67c358ee5d804b75cab932c01c5f49

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\kk.pak.DATA.akira

Filesize
661KB

MD5
138f81d63cbb436ead71b02b6a97969d

SHA1
8b811dcd736085bb6ac8283ffeaae2d8ae6c9a8f

SHA256
438c2b25ee34d41cd1ee59ff4a948c1120098036caa98c1058f56ade2cb01851

SHA512
0ca184d538fb6cf49aa8588056b00724b359307413536223df74c9c917ebb98307436c1c4794897261f16bd748224c760ef1786fd5702842111b7a94e9683d64

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\km.pak.DATA.akira

Filesize
899KB

MD5
d67a2ecdf71c06ba0dbbebaf575dc5dc

SHA1
b5068a6db1c0873121840982cfa1efac698fed97

SHA256
edf05bce819a639b2e31a364959b70d915ea12266299833f679a4948b936987b

SHA512
29c765b3a6b211fc4c8f4e849108fab5ae0ca38a2edeba99830449af8c429c3a992189a7cded3b6590e16b03b9ebb00114862d45b4bac927c4fe754841b19916

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\kn.pak.DATA.akira

Filesize
930KB

MD5
f223082714cafe5c85d2e90c4531fdff

SHA1
3fe3567250c5982b8800b807bb9b3c17877c76ba

SHA256
5e91ea41fc945cd54ba2321e508e731df46af59469546d109e111b68cf6c983f

SHA512
16ded6d69ff10adfbe1721238c1b4d39a718c2084ba32c232a964aeaf4d99a8b9a2b7d1cb1f41d7cfbf6a675a0710ab473ca91b3f11f64c9a7fa883251960b0b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ko.pak.DATA.akira

Filesize
424KB

MD5
a86dab2626394bf48340ede20f8d6aae

SHA1
4c7841796f3c2c8a6b14c00a41161bc5c6e53bef

SHA256
b22f00b7f8280fb71fd24b72ffacc28bb82b68ebe9bfa408c1dedc73ff5c2692

SHA512
0fd985e31e5c38c6faa52ddf7507c07f419cd00bb8e5bff15c0b36e343c5a4adb811fa3f4788de2a4869e762dee3a3a2167b8793044f1772c996e52d4800a19a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\kok.pak.DATA.akira

Filesize
815KB

MD5
5a38115f1e2e5b78ab864561363ac9da

SHA1
d0ade971536563bbc9966a5559c735048ac283a2

SHA256
b912da0c90797d1fc2c98d6eb05c303efd5ee3f375e036765b05c1144037e42e

SHA512
ead13b686c9e0d39e68c30b4df23123659ec6912355f22f636e6f2097c5c5783ecb9a6df46bd8b9b0669cf85762530aad947584d26189af15c9a34e86cefeacc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\lo.pak.DATA.akira

Filesize
827KB

MD5
0832861d8d359f4a2a8c685e8ae0030c

SHA1
fc23b6300ba04fec0233f6e061cc3ef2b3f22993

SHA256
0cf7cb661f53a4cd9386699b70ef8259fcf3c109d81c396e93de47f344906f49

SHA512
28fde361a8c285648667b1f3b57701bc96c465744ea3469d1023915c9e40f7f4ff9d784035c886464c743a0ac4228997e2fa8c361edf38c4c3007cef2023fd95

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\mr.pak.DATA.akira

Filesize
847KB

MD5
0a6f370c7b8ec687e5a6873b04e1be3f

SHA1
d950dd1800985c8e0c1e91d40520e45bb8e73430

SHA256
07dc13dd88945601cd77cf7ce1577bcb171812f0b0d544d9652dd2db279a0fe4

SHA512
e6450866a1870a03058ccb8067acb6d62e30539839064107648d5254431cbcc487c5ec232e3fd5a08bb5986b30833597cee175dab2d01d906eb11392b0ecea2d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ms.pak.DATA.akira

Filesize
391KB

MD5
9aae40a3542a1d1321adb24a7b4426c7

SHA1
c183e038f71e96b8f582f467eeb146a657f2ff5a

SHA256
3fcace8271079dba8962d140694e8a11a4e666133cf9e8edea48caeee0286f15

SHA512
10e41d0bd83a72ace192fd6bfed058c0f514230d1fd128102ad1cbcdb93db30b1b1b36e072019af7bc60204e9f50b9c7146ec5b362ae3dd649fbde256c970e4a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\mt.pak.DATA.akira

Filesize
440KB

MD5
c6ea1cdca416fdf5dba6391b73e02168

SHA1
762ca2ea98089741b54f21790bed7c5ed50ed551

SHA256
4314866047495d20c357d6e7b7088b1f4ba8f01c234f4fbb24168f4ad8dc0009

SHA512
b7e747a04e6a9a44eccd68117d15c549985dab581489da6a6365545d4a3f12eab4568d7dd84011d275001c786f1dfed67b6e3c18f38ef4deab949e7a0512b0e7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ne.pak.DATA.akira

Filesize
899KB

MD5
7c8f20cd6c7253b5d2cec20d95c534d7

SHA1
2a05764a4ae30e0bb1cae71c3cd461cb9207518d

SHA256
e4c3b85a6328951b2aa0850348aee84c01a4a84d479b37718cd12482d1aa4b49

SHA512
542fac5deec81e9ddfd0178ec756054dffe1764b800a45c75578794b502147bf9a0826181e563ba69127d0cd86116651e64a3e5378f23b45da087145c89ea9a3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\nl.pak.DATA.akira

Filesize
408KB

MD5
689b373029dbc8bdc277c371afa395e7

SHA1
21990ed7e1374b18cf471cefeaeca2c88e683dea

SHA256
7194362766a9c3bbfa151329187c63e9252bcd792756fd323ee6f213fa2d298b

SHA512
04846ecadd0169c3391662e3ee1443e7f63fa7c4c5b88ad6dbf11bcde10e0a30b5c110c87d51bf632b703bba90b0c0ccd47d23f7a4f4d75167754b91248f8014

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\or.pak.DATA.akira

Filesize
925KB

MD5
87eda830829dc7e490c8b72d16766dcd

SHA1
186fa281c5e74446a454094626c472444638ea24

SHA256
5c4470c5a15b5f92c7d040db39abace4aea92f59b0c2f433b316200ab48a664d

SHA512
f8eed1747522508278a1697af7f2734cdad5c24b1db5e2ecb8a254e2eee54a9ac499fa052cad3045aef25fc10a2a61d6655b061115e9c6cdac5f038742d3855a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\pl.pak.DATA.akira

Filesize
459KB

MD5
73726f049a46e542ebcb58da64f7039b

SHA1
5579a6843955408330c4ef7f325930e8dd09440c

SHA256
87b6e03852518bad515481d7fc7545005daabdba15a1e0cdc66f673421c6a2ca

SHA512
09a2bb3d97364c18c476eaac61cc4c4a89b8b47cfb157c1bd5faf0e3413d5e71268f1f41522d26b2a82981a0a862a57d234de6763e850cc5abc666746a734a98

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\pt-BR.pak.DATA.akira

Filesize
411KB

MD5
6cd814ecf6f1cb6f9d00475cc2313c2c

SHA1
5a24c468e1ae9326e344acebdb56d4a92a40f972

SHA256
f40ae249c1634ac476a7c1a66d5197a75a465ab1565bb8198f99f1bf16b6d027

SHA512
5c5e6fb668eac5b41870a61bc649d5c1cef05fbf971bc68e87e6b6a6d877044f019b73e34aa614d6d1d1978d85cf8f80ecc1144ba1dec4a0d7f049814e2ab0a6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\pt-PT.pak.DATA.akira

Filesize
424KB

MD5
383e43017997b1ac0c2cd773f0ffa458

SHA1
3dc5e621890ace69ecc9d0c8bbaa539e7c0615f8

SHA256
fc19b788e0e265e44fef661cfa8d66e24bd7b6517d729e997bccf84d91715278

SHA512
04f059d9168cd2828a6e0ecbd372b35a769c92e9de53185bd353d43de5cb6f9ec5d8240a5b442c7fb255fa240e1c0acdb9dc8ec959eab0ce6a67d79cd578cda1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\qu.pak.DATA.akira

Filesize
412KB

MD5
c3904a7b8bb1ea5d02f919c3342b91f2

SHA1
d3d4d3850ce85d1c21ccf9a79405f705e9df938e

SHA256
8764883ea86dbde57e01e79bdab1e66acfa51eb173be93a30598d328695dc88f

SHA512
055144f6055162335cdad2f01c428e620d6fd0f29bd6e405449f85bcc85e6529485f5ad8694b9566d156f77b83a1f31d08e970a30c96c6d7184821a7d4f31607

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sk.pak.DATA.akira

Filesize
450KB

MD5
4dcb4dce334e2016e876758e4b5ee131

SHA1
85db3a9d417b9c7fbf6c4995f15f7309cc032748

SHA256
c52caa84a0521b13553523784c0bfc2c7f21aff7ac94b99dc51167141f390d7c

SHA512
015617dbf0929150f3111264c6974f87bf306b39c089c502cf73e0b9f8ad50d77a6d9256ebf1ae03d4624f5b698cc8c1b604ca48c6048cf75439775691000124

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sl.pak.DATA.akira

Filesize
424KB

MD5
eb7ebb10b8e905bac4c3a08c3f42f8f1

SHA1
24162c4f8e3ab845cb7eb4ce71ed3a803c063591

SHA256
22236c2e833b53428cf5c3fee4b383da8c4d6f69e445c7db0842a3e6751d3e44

SHA512
163ac3ee3ca980143467ef3007e5db1392ccd92243c1ed1b11c5bf5cfb84eabdc7cf6218789a292e516c01b77b7cee8a974f03e7f57b620c557b2ca9c3959653

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sq.pak.DATA.akira

Filesize
431KB

MD5
b3a60667f63a7eeba468667dd703b6a3

SHA1
2ace5c6805581bd8a50a236c52759ef387bd6df1

SHA256
9437774cd957c769cb802b34e3ec203d49bf2ba418aadcadf3da14065941f700

SHA512
a8fb2a326433916b62a08ca8d23ce173cc1b437759bd588aa6335a5e49d11b95d97acc8807bdf9611dd7f11a9a5c6d5fce2365c378f453cdb7ee9e1509c5b37e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA.akira

Filesize
652KB

MD5
b5993344938bd99aaea63051d9653036

SHA1
bd70e25c485659f44eb89c21ff20300e938f5288

SHA256
73f6a9c1e9480fd71eb22cf70214c378d98607720be5c7b653c35c5debb5d149

SHA512
aa3015f201b4f68f8ebe4320824051b744a051685991e72bbf3ee112b76f3a49cea83fd23967d31195b1642d79f078ca7fab831a9528ee5106d020fff3144ef0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA.akira

Filesize
419KB

MD5
9620994e8ed604312d4992aa001cc811

SHA1
2d570eb0c247e7a4726cc6b2b919542e3bcc2b84

SHA256
5458c12dbea375b5d579ff23bc4e7f30a4b0e401fc2bcc60de861ae9947b0406

SHA512
71c7525cbe5856a63a436c310a5a1b9ee7c8b08e38a3aca1c1fc4457ac5c8c008d4035f4d2921e9e3607174b4dec6330fcbaffefaac96d8d10a23f76042bef85

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ta.pak.DATA.akira

Filesize
1019KB

MD5
51b2f45d392753e65522a2e795e1f1bb

SHA1
7be652a5dc9c59f770c51cf53ba94f761de52b3c

SHA256
eafbf77403c3fa5b54a54b96d9e02aa64630541bee358c2a28b1ff92f56e700d

SHA512
75c7d28ffe1e7a347b5c7ab896eed462afec0df0e1d109d637b71910223e7dfb9f555a722bda723037322a8883c122af389d54eec11c8cf07215f8adde7f0cbb

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\te.pak.DATA.akira

Filesize
914KB

MD5
3b197d379a6dbe400c47ff2d5876c01d

SHA1
58b0aaedd6ef890debd5f19fccecb8c7b50eb459

SHA256
77881a8ee05175066fb6bb5e1bb6eae4afc18522b31a530d71baff0b1f2a4b9a

SHA512
3dcf97135d4e4068956a6470dde1cb140fc5707bb9df5bac38a94bcda16223ab2eeb464667e8b142aeeaf1475fc7bc54e40a1e51c89c871d29648aea337ca833

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\tr.pak.DATA.akira

Filesize
419KB

MD5
96900bcb102fdc15015225c6ae30431e

SHA1
dbdd3ea34a78b81a271054315aa8d276edfdb0ef

SHA256
bed57172076b282924259d5adba932e94f1f1d57469362783002a9ff0a9e0575

SHA512
64ebb201221a29132ec22158f507fac7274d10a14f110822af9793b7b1e80545f54107e842245e0cbcc5e5e3087d50ae3b39cd41bf727f9c014f88c062a797a9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\uk.pak.DATA.akira

Filesize
678KB

MD5
f122e1570b95f2bce4d8c5ffe308f811

SHA1
c3db06e5575ea2320d7205dfcfa0479a801b30ad

SHA256
a7d61e82f9cfa52980aa6374894d69caf0ab5c053b05ac758f2f64552911d9f4

SHA512
1837e176a2fd0c3217f913a2906f937e6c94ac83871418b3215fab17df01639af00b0385a413d3f8224e9493b39bb44d9dab02b849401725db84ba2424c7f0e5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\msedge_100_percent.pak.DATA.akira

Filesize
862KB

MD5
cc51981afc3646f53285bc143f363905

SHA1
0176e60f2aa4ca10f9f13b74d043a3b88f333e82

SHA256
7fd2cd53e6719d320998a028e46e70b60be64f85714500fb51d2da2a350ea193

SHA512
c7aa1eb8125e3802a14b835dec090a1fe6ee4617f5e42da9a3e97ebb56d2714d28b97792017ac5269fd0e28f67545d6ae5ef0be624b7bfe3ccb7a03297d85dc3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\nacl_irt_x86_64.nexe.DATA.akira

Filesize
3.7MB

MD5
3fd8e1b6d439fb7bf1c3b440a4b3489f

SHA1
ac246568539e4e09739541dca780ae7bcc07ec3e

SHA256
8baee554eb655fa2ee9269f1b3689a48e0766520d1c0a2b029d441859817b452

SHA512
06d85e214a1c20349a4a66f80daa6e90eb2006e8ba32eef3d37523763a36fc0462518ef5f1e462e7c1683fe2a043cda0d8836eed00b5a6d0d2645fa7cdc71b2b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Trust Protection Lists\Mu\Other.akira

Filesize
1KB

MD5
0b249fa424811d791e3e25f1b93beb9a

SHA1
346d2b724e08157d5484c535fdf64cca9388c5b3

SHA256
699ceb894272d92ed19721d6073e29da7efb2ab6debd9e646bf7b648e40d5411

SHA512
fe631ea5ada0a914789beeb260830ade8a2038bcf44ad641768f4076084e9fd91f1fb37d6f3bf946b4cd3c42f87dd3735cacb903aa9a55e29d0b14bbecb1b637

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\VisualElements\SmallLogoCanary.png.akira

Filesize
15KB

MD5
89e30481178755358a129873a8dd7042

SHA1
eb5f8f63674c39c432c7935d27530b59add6e07d

SHA256
a6a7b0222046e195b61a1fd0c6c7e93ef7fe6f96490f28b8ed96b485648ea977

SHA512
d921afe23638cbadaddaf9925043cbeb971ed75b6f0656bc287d6d72d4d8acfc319988250cc9cbe22171a5c5a49fbbf5c8c5be3afbd99bd2e27e6cecb9c7e06b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\VisualElements\SmallLogoDev.png.akira

Filesize
15KB

MD5
a5c23e2e6294b1d32ba2330ab5f8fb55

SHA1
d26b171d47563a8565e289b41f8d4a93f215b1ce

SHA256
f8d80d8f664c9b1ba506e74e2d8f948261f663c79ce4a3e0d3d94f209505558a

SHA512
94c4f58d98e1fcb8edf0acdf2bf23095727a062139299d16bdd366dd8ac0e047a1505bae0fa542a51f20604845616bb30154dcc1f2e0362c8aaec0053d1a705b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\identity_helper.Sparse.Internal.msix.akira

Filesize
57KB

MD5
d547dcec572a1eb9c6ea3936a91d4c7d

SHA1
45a96ec380162379099aaf3da848c50d030079aa

SHA256
4c4b1f218ae92329a63ec5e223e9a98483344e8e2c0e7fc6dc2a369e6a6165a9

SHA512
b1542fbd9523b9d5d247183b355f52e117066f8ff542bbaf64b4e4170c7f2b55b3eec9cd3be0c30946f35b61ccad7b8d39b10f483b0ff793bc76d5646b827224

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\ResiliencyLinks\msedge_200_percent.pak.DATA.akira

Filesize
1.5MB

MD5
e161e4cb1e15a93b6907e3f24e6d27d9

SHA1
8182d5cb05c062783cfb589b917d041f1a7ed15a

SHA256
d6d7153b2917809dd962e6671d7a17d3cb002624e07666507b46407650253b13

SHA512
350a33d4273b891630ebdc8353b2a46ced9ae8438732e6bf5d9e331e2fd9650d56beec12820d035e6ef3e48d41c5bee4d2d5096184ba522e520c02a7f0bb4059

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\ResiliencyLinks\resources.pak.DATA.akira

Filesize
14.2MB

MD5
a12ce517bf5071fb982f57d39023993a

SHA1
97e6f6d63774c4c9fb124d70493eb7155a110dcc

SHA256
983a8d1639a0a5d3bd59a2baeffbe754f06e0ac45e77d6f94a04c963961e2cde

SHA512
0ae15fbb4c3df75e67349b9d897034c9e53015b16d7968b3bb6dddf9060f36db3a7c978a22f575e25fecf8280136dedb48df1d3534f861a2760811f27ee07537

Download Submit
C:\Program Files\Java\jre-1.8\lib\images\cursors\win32_CopyNoDrop32x32.gif.akira

Filesize
687B

MD5
ab97fe95afc37c0283241024914df656

SHA1
fcd127e6629ae06c784e7a06707e4bdbb8e1ccf2

SHA256
bf991dba62e58643d02d471069fec00bc4c2ab68329b84a411e57f93999abd05

SHA512
859a5dc42fde3a363704b505beaf6474ab56abeb32f75ffd72efdc307e92b6f6f7178755914937257913ef3ae3511e36a60e474febfa551d397f707737a617f3

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_F_COL.HXK.akira

Filesize
648B

MD5
ea46f902ec7acd640483ad2d5a27df07

SHA1
ac7bfd8edbb6ba7dd3a3c509475d8c2937de6104

SHA256
61e1967fc603f6115a9ece9758d4eea03b58c2688b05d4db4d793c021291f351

SHA512
9caaffb82a0367ac4d2d2c90314ed0e5013ce027b23cd5a6e3aec06a1a60af44a169aefb19d33d54055077392e31d10a710b8e2ddd6a03d84786c0dfcd761a3e

Download Submit
C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_K_COL.HXK.akira

Filesize
647B

MD5
42922e85340fc0aaee56dde0de60073c

SHA1
b7959ad612afecfcd698b5c979fea7f0a6325a7f

SHA256
0c74cb1fdbd85006df0047d6d7445ad9f01084225834f9b4bb7ae507cd148429

SHA512
1916158ebb01d398b8b44cfa8ed0a45668ed9035829277344c1bf1994543a2c7087b58d4cdc211ced36de66a13b1681a301677c401fa8ed5cc7b0a04031c78f4

Download Submit
C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo.akira

Filesize
607KB

MD5
30929cfe7b962bcb63d40c3790ffb58b

SHA1
05c0e34c1d7707c30bad1dd058d676da7ea2f7b7

SHA256
c57927f29d297152890b6dddd90b82942d986e93da8b3c3de3f83f72ac560b80

SHA512
46e2a6f1b8379b5af99b254ac12a47402ec7a17c3bb6196c1c06fd8def7bd6276a66e2b11b9c9558c4deacda27715999c43167b2251a63d36a6785e85cecdfaf

Download Submit
C:\Program Files\akira_readme.txt

Filesize
2KB

MD5
de49e2e3eeb866fc517949893ed74bed

SHA1
3b503e6776a34f026f77ba7fea719dec182575e6

SHA256
994010aaf2f723b06ace4f35eba28068160c38714fda8d62205b3b2e7b96b07e

SHA512
f4c59b0f90ff8f6e05106c47160c239da0b5598845316a5a8705bde5f47378596fead491db828f4ab35ec84f796a22907210b51729d4c023c7ace68dccc1f9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT.akira

Filesize
550B

MD5
4cac3e40a252ccc415eae131c0f389d8

SHA1
992326e5fb238901620de7ea5e0a28feef8a2399

SHA256
d7b2b1a94d45f3113d56f1f4b19a3958fdc00602f25ba65a75936f72c7b1dcd5

SHA512
646d702ea99065b9bdf00290f5cb2c369b5ef7333ff52661cbe5bb20b4e4040437bce8ee64828ae04b7d5c7c0cbf519e1b371c4fa27a567c84e2fdd00c5e4134

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000001.akira

Filesize
575B

MD5
1f334c711cb1cf45e96732fb87fa43d1

SHA1
3c0b078d253f6e9b597b07bfbfed5926909d42f1

SHA256
7c14183513c6ce0c25a6e68469d09ac94bffaafe19dc04b022f6e43003aa832c

SHA512
a2fcd7f2f9010a8fc5e77765185c6fe2d026b7d20f1fab9fe539e23ebe5928846c686139b9f4f570254b870a4c51adaaa4e89ecf1272e9c9b287b12af1eb2155

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\wasm\index.akira

Filesize
558B

MD5
6e28a942e855b0d72b3171adbccc6ef9

SHA1
fcd50ed3abb55de3d95c1fb75dfb4d3ddf571671

SHA256
590b20dc8f15f200b55eae76a27bb3697839041ccfc4a270703d86de6d6e4aed

SHA512
9881ece4e51c3cae249646ec73f0b7a8f472910416d3800527b41c77de5c3c8aeb1bde4cb4c659f1298d82111bb3563da796eea990adc2048a7cb23bb69ab8df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_0.akira

Filesize
8KB

MD5
4105262168e3eb1a7d71eec395ada75d

SHA1
c8a1bf28ee5a142e43bc6c459d84c4e542ec1ffb

SHA256
b509e5a57207de42ca464ead6e339754466d0de488b5dfcc08e93197e60a1920

SHA512
4674206ed312b57c43f30438d17e874451b65bff641fca526a88371f35072fd21826667e4a973c92b602054c168fb698ad1b37af3fa275caa2baace92cd415d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_1.akira

Filesize
264KB

MD5
6615a07ade2561a1b917fb416a7429ce

SHA1
4ab9e5aa6147d1491799a2af6de6d5d3459ef452

SHA256
2c97b967fd0ac018c5ce08525ea3fb04a346c237cd4aec6854c40b3c9e338ef8

SHA512
9034dd71132e5ca94dacf20fe25543a9b77b78ea6f821f360e98743cceaf3bc1db4dca027f46a758e9a7cdecc08e87b7875b2218d410627329068c9060a54399

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_2.akira

Filesize
8KB

MD5
e164fad5ab9d7f6c50c8c92e8d06e1ba

SHA1
c961769b209839caf346a689a83ff80f3e6b5dbf

SHA256
67a0a3c6235026f8eb91202a28065e93d0b5fea0157938720bd840511a27606c

SHA512
ec05c26872253d1523468c68b2500750dc065593e500c92fb31fcaed289069f6743389693fcbe293aefdcd31da1fd3092f4ced6ee1cde2fad22688f441cdc688

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GraphiteDawnCache\data_3.akira

Filesize
8KB

MD5
797d72844a7b532104fe840f588162fa

SHA1
7ca6a04cf914e912d652c708119e5029da213a2b

SHA256
ba4b3755af70135b53cdaef8db483a89f281d0de95fd9b828c027a45a6c04c52

SHA512
698a15405b1456f8e411f9cbdfaafb8443326a1882cd2446a894eab119d7f57be863e5ac1616da7434d526d1078a6181a6050bc72cebed26a42618875971250e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
3KB

MD5
841a6e0e1e93c0316c187ff04547b78d

SHA1
e9eb49afed9b18145f85a7cfd6e387b48ead65bc

SHA256
3801b6e7730762cc5da242a598c708eda155c28d6ff50c2f4ad677db85290a53

SHA512
3a095eec3be43cf2a20d4d66f4d1d4a5099edfbb5b67c20f333738b1160edad77d575e0fa2e0afca71081a743bf4e29e2e99f86d73f8ebd7e33213140c2305e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\CacheStorage\edbres00002.jrs.akira

Filesize
512KB

MD5
3e454490e34a582a63a69761fa2db0a9

SHA1
593ac9c989cb18ba81a3e57a77135fd30be3b802

SHA256
83a48d06060854db4bc22a19339b887cf40f0e55f1ea886193ffd876809ae999

SHA512
7897d7ad87ef3a1b5e146f6ab3265a0f0f003bcbe7b35dc730b34dc01e1bce66d47448af40cddc0b3b80d8e07979445371f66c2d63204c6c48e88ca14682a411

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_kqiv4dys.2jb.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\Desktop\1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc.exe

Filesize
573KB

MD5
503f112e243519a1b9e0344499561908

SHA1
8d635ca131d8aa20971744dcb30a9e2e1f8cd1be

SHA256
1b6af2fbbc636180dd7bae825486ccc45e42aefbb304d5f83fafca4d637c13cc

SHA512
71da9efbc24bf3428f7efd08f47e6dc698cdae769a918800de72ab4945fb79c2f5b92d21a839d9e13e700b3cfd6ae365073c32a6f368e43830c6ccba3322d00e

Download Submit
memory/4500-16-0x00007FFA30120000-0x00007FFA30BE2000-memory.dmp

Filesize
10.8MB

Download
memory/4500-4-0x00007FFA30123000-0x00007FFA30125000-memory.dmp

Filesize
8KB

Download
memory/4500-19-0x00007FFA30120000-0x00007FFA30BE2000-memory.dmp

Filesize
10.8MB

Download
memory/4500-15-0x00007FFA30120000-0x00007FFA30BE2000-memory.dmp

Filesize
10.8MB

Download
memory/4500-14-0x00007FFA30120000-0x00007FFA30BE2000-memory.dmp

Filesize
10.8MB

Download
memory/4500-13-0x000002A1F9450000-0x000002A1F9472000-memory.dmp

Filesize
136KB

Download