Malware Analysis Report

2025-01-23 11:53

Sample ID 241127-ycrjcaxkfx
Target Downloaders.zip
SHA256 16930620b3b9166e0ffbd98f5d5b580c9919fd6ccdcc74fb996f53577f508267
Tags
infinitylock lumma redline xworm 814fa discovery execution infostealer ransomware rat stealer trojan
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

16930620b3b9166e0ffbd98f5d5b580c9919fd6ccdcc74fb996f53577f508267

Threat Level: Known bad

The file Downloaders.zip was found to be: Known bad.

Malicious Activity Summary

infinitylock lumma redline xworm 814fa discovery execution infostealer ransomware rat stealer trojan

InfinityLock Ransomware

Detect Xworm Payload

Lumma Stealer, LummaC

Xworm

Xworm family

RedLine

RedLine payload

Infinitylock family

Lumma family

Redline family

Downloads MZ/PE file

Command and Scripting Interpreter: PowerShell

Executes dropped EXE

Looks up external IP address via web service

Legitimate hosting services abused for malware hosting/C2

Enumerates processes with tasklist

Drops file in Program Files directory

Command and Scripting Interpreter: JavaScript

Unsigned PE

System Location Discovery: System Language Discovery

Enumerates physical storage devices

Suspicious use of AdjustPrivilegeToken

Modifies system certificate store

Checks processor information in registry

Scheduled Task/Job: Scheduled Task

Suspicious use of SendNotifyMessage

Uses Task Scheduler COM API

Suspicious use of SetWindowsHookEx

Suspicious use of FindShellTrayWindow

Suspicious behavior: GetForegroundWindowSpam

Checks SCSI registry key(s)

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-27 19:38

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-27 19:38

Reported

2024-11-27 19:45

Platform

win11-20241007-en

Max time kernel

397s

Max time network

398s

Command Line

"C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe"

Signatures

Detect Xworm Payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

InfinityLock Ransomware

ransomware infinitylock

Infinitylock family

infinitylock

Lumma Stealer, LummaC

stealer lumma

Lumma family

lumma

RedLine

infostealer redline

RedLine payload

Description Indicator Process Target
N/A N/A N/A N/A

Redline family

redline

Xworm

trojan rat xworm

Xworm family

xworm

Downloads MZ/PE file

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Looks up external IP address via web service

Description Indicator Process Target
N/A ip-api.com N/A N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\fil.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\nl-nl\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\core_icons.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\Locales\en-GB.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\ResiliencyLinks\Locales\devtools\ja.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\Locales\he.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ja-jp\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\pt-br\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\gu.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Content.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\ko-kr\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\nl.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\az.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\hr.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\check-mark-1x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\Locales\gd.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedge_pwa_launcher.exe.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\iw_get.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\new_icons.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\tr.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VC\msdia100.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\themes\dark\warning_2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\sk-sk\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.143.57\msedgeupdateres_nn.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\RHP_icons_2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\eu-es\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\pl-pl\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\lt_get.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.143.57\msedgeupdateres_es.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Locales\en-US.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\HostSideAdapters\Microsoft.VisualStudio.Tools.Office.Excel.HostAdapter.v10.0.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\DirectInk.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\close.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\goopdateres_it.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Internal.msix.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.143.57\msedgeupdateres_af.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\pl-pl\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\lets-get-started-2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\zh-cn\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_filter-hover_32.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\zh-tw\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.143.57\msedgeupdateres_ka.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\uk-ua\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Locales\de.pak.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\css\main.css.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\eu-es\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\css\tool-view.css.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\sqlite.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\ccloud.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\pl-pl\PlayStore_icon.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\DropboxStorage.api.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.143.57\msedgeupdateres_bs.dll.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\es-ES\MSFT_PackageManagement.schema.mfl.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\sk-sk\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\msedge_pwa_launcher.exe.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A

Command and Scripting Interpreter: JavaScript

execution

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\findstr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\choice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\findstr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\schtasks.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\543648\RegAsm.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\tasklist.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.pif N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\tasklist.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\schtasks.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\findstr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.pif N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\findstr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\choice.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Files\ji2xlo1f.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\tasklist.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\tasklist.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\findstr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\cmd.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz C:\Program Files\Mozilla Firefox\firefox.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F1A578C4CB5DE79A370893983FD4DA8B67B2B064 C:\Users\Admin\AppData\Local\Temp\543648\RegAsm.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F1A578C4CB5DE79A370893983FD4DA8B67B2B064\Blob = 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 C:\Users\Admin\AppData\Local\Temp\543648\RegAsm.exe N/A

Scheduled Task/Job: Scheduled Task

persistence execution
Description Indicator Process Target
N/A N/A C:\Windows\System32\schtasks.exe N/A
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A
N/A N/A C:\Windows\SysWOW64\schtasks.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
Token: 33 N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\taskmgr.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\svchost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\svchost.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\tasklist.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\svchost.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\svchost.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\svchost.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A
N/A N/A C:\Windows\system32\taskmgr.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files\Mozilla Firefox\firefox.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3512 wrote to memory of 3396 N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe
PID 3512 wrote to memory of 3396 N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe
PID 3512 wrote to memory of 3396 N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe
PID 3512 wrote to memory of 824 N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe
PID 3512 wrote to memory of 824 N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe
PID 3512 wrote to memory of 824 N/A C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe
PID 824 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe C:\Windows\SysWOW64\cmd.exe
PID 824 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe C:\Windows\SysWOW64\cmd.exe
PID 824 wrote to memory of 3800 N/A C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 1556 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 3800 wrote to memory of 1556 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 3800 wrote to memory of 1556 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 3800 wrote to memory of 1660 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 1660 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 1660 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 4676 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 3800 wrote to memory of 4676 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 3800 wrote to memory of 4676 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\tasklist.exe
PID 3800 wrote to memory of 4668 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 4668 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 4668 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 5076 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 5076 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 5076 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 3064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 3064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 3064 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\findstr.exe
PID 3800 wrote to memory of 3084 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 3084 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 3084 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe
PID 3800 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif
PID 3800 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif
PID 3800 wrote to memory of 2160 N/A C:\Windows\SysWOW64\cmd.exe C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif
PID 3800 wrote to memory of 2224 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\choice.exe
PID 3800 wrote to memory of 2224 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\choice.exe
PID 3800 wrote to memory of 2224 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\choice.exe
PID 2160 wrote to memory of 132 N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif C:\Windows\SysWOW64\cmd.exe
PID 2160 wrote to memory of 132 N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif C:\Windows\SysWOW64\cmd.exe
PID 2160 wrote to memory of 132 N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif C:\Windows\SysWOW64\cmd.exe
PID 2160 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif C:\Windows\SysWOW64\schtasks.exe
PID 2160 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif C:\Windows\SysWOW64\schtasks.exe
PID 2160 wrote to memory of 2620 N/A C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif C:\Windows\SysWOW64\schtasks.exe
PID 132 wrote to memory of 556 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 132 wrote to memory of 556 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 132 wrote to memory of 556 N/A C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\schtasks.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 4228 wrote to memory of 1752 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe
PID 1752 wrote to memory of 2508 N/A C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\firefox.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe

"C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe

"C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe"

C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe

"C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /k move Offensive Offensive.cmd & Offensive.cmd & exit

C:\Windows\SysWOW64\tasklist.exe

tasklist

C:\Windows\SysWOW64\findstr.exe

findstr /I "wrsa.exe opssvc.exe"

C:\Windows\SysWOW64\tasklist.exe

tasklist

C:\Windows\SysWOW64\findstr.exe

findstr /I "avastui.exe avgui.exe bdservicehost.exe ekrn.exe nswscsvc.exe sophoshealth.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c md 543648

C:\Windows\SysWOW64\findstr.exe

findstr /V "BiddingVeRoutinesFilms" Bowling

C:\Windows\SysWOW64\cmd.exe

cmd /c copy /b ..\Suzuki + ..\Major + ..\Tit + ..\Adjust + ..\Invest + ..\Severe + ..\Sony + ..\Prefers E

C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif

Legend.pif E

C:\Windows\SysWOW64\choice.exe

choice /d y /t 15

C:\Windows\SysWOW64\cmd.exe

cmd /c schtasks.exe /create /tn "Keyboard" /tr "wscript //B 'C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.js'" /sc daily /mo 1 /ri 3 /du 23:57 /F /RL HIGHEST

C:\Windows\SysWOW64\schtasks.exe

schtasks.exe /create /tn "ScanGuard" /tr "wscript //B 'C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.js'" /sc onlogon /F /RL HIGHEST

C:\Windows\SysWOW64\schtasks.exe

schtasks.exe /create /tn "Keyboard" /tr "wscript //B 'C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.js'" /sc daily /mo 1 /ri 3 /du 23:57 /F /RL HIGHEST

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe"

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=1884 -parentBuildID 20240401114208 -prefsHandle 1800 -prefMapHandle 1776 -prefsLen 23678 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {d6980def-18e3-4ee2-b0fa-3806f01013cd} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" gpu

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2328 -parentBuildID 20240401114208 -prefsHandle 2320 -prefMapHandle 2308 -prefsLen 23714 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b64561e2-2ea9-48df-a02a-36dc4f7110ef} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" socket

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3208 -childID 1 -isForBrowser -prefsHandle 2952 -prefMapHandle 2932 -prefsLen 23855 -prefMapSize 244658 -jsInitHandle 968 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {71bbc197-5e18-46ec-b575-3f6798f71d01} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2964 -childID 2 -isForBrowser -prefsHandle 3772 -prefMapHandle 3060 -prefsLen 29088 -prefMapSize 244658 -jsInitHandle 968 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {607a2ab3-ddd8-41d4-a598-2c90684736eb} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4292 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4284 -prefMapHandle 4280 -prefsLen 29088 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {5055b486-0c43-4325-8f50-7dc17ebc5490} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" utility

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5244 -childID 3 -isForBrowser -prefsHandle 5312 -prefMapHandle 5344 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 968 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e57676f8-5f6f-49a9-a7fd-2fe6d36d16c8} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5476 -childID 4 -isForBrowser -prefsHandle 5552 -prefMapHandle 5548 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 968 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a9271fe3-b377-43c0-ad47-c251db0bc485} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5460 -childID 5 -isForBrowser -prefsHandle 5688 -prefMapHandle 5692 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 968 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bf645713-a280-41b9-8441-63c00b771bf1} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" tab

C:\Program Files\Mozilla Firefox\firefox.exe

"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6032 -childID 6 -isForBrowser -prefsHandle 6012 -prefMapHandle 6024 -prefsLen 27132 -prefMapSize 244658 -jsInitHandle 968 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {58f4f12f-3cc6-4225-a2d0-8b0903d2d3fa} 1752 "\\.\pipe\gecko-crash-server-pipe.1752" tab

C:\Users\Admin\AppData\Local\Temp\543648\RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\543648\RegAsm.exe

C:\Users\Admin\AppData\Local\Temp\Files\ji2xlo1f.exe

"C:\Users\Admin\AppData\Local\Temp\Files\ji2xlo1f.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /0

C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe

"C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe"

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe'

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'svchost.exe'

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\svchost.exe'

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'svchost.exe'

C:\Windows\System32\schtasks.exe

"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\Admin\AppData\Local\Temp\svchost.exe"

C:\Users\Admin\AppData\Local\Temp\svchost.exe

"C:\Users\Admin\AppData\Local\Temp\svchost.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\Offensive.cmd" "

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr /I "wrsa.exe opssvc.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr /I "avastui.exe avgui.exe bdservicehost.exe ekrn.exe nswscsvc.exe sophoshealth.exe"

C:\Windows\system32\cmd.exe

cmd /c md 543648

C:\Windows\system32\cmd.exe

cmd /c copy /b ..\Suzuki + ..\Major + ..\Tit + ..\Adjust + ..\Invest + ..\Severe + ..\Sony + ..\Prefers E

C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif

Legend.pif E

C:\Windows\system32\choice.exe

choice /d y /t 15

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\Offensive.cmd" "

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr /I "wrsa.exe opssvc.exe"

C:\Windows\system32\tasklist.exe

tasklist

C:\Windows\system32\findstr.exe

findstr /I "avastui.exe avgui.exe bdservicehost.exe ekrn.exe nswscsvc.exe sophoshealth.exe"

C:\Windows\system32\cmd.exe

cmd /c md 543648

C:\Windows\system32\cmd.exe

cmd /c copy /b ..\Suzuki + ..\Major + ..\Tit + ..\Adjust + ..\Invest + ..\Severe + ..\Sony + ..\Prefers E

C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif

Legend.pif E

C:\Windows\system32\choice.exe

choice /d y /t 15

C:\Windows\system32\wscript.EXE

C:\Windows\system32\wscript.EXE //B "C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.js"

C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.pif

"C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.pif" "C:\Users\Admin\AppData\Local\ThreatGuard Innovations\P"

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe

"C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe"

C:\Windows\SysWOW64\cmd.exe

"C:\Windows\System32\cmd.exe" /k move Offensive Offensive.cmd & Offensive.cmd & exit

C:\Windows\SysWOW64\tasklist.exe

tasklist

C:\Windows\SysWOW64\findstr.exe

findstr /I "wrsa.exe opssvc.exe"

C:\Windows\SysWOW64\tasklist.exe

tasklist

C:\Windows\SysWOW64\findstr.exe

findstr /I "avastui.exe avgui.exe bdservicehost.exe ekrn.exe nswscsvc.exe sophoshealth.exe"

C:\Windows\SysWOW64\cmd.exe

cmd /c md 543648

C:\Windows\SysWOW64\cmd.exe

cmd /c copy /b ..\Suzuki + ..\Major + ..\Tit + ..\Adjust + ..\Invest + ..\Severe + ..\Sony + ..\Prefers E

C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif

Legend.pif E

C:\Windows\SysWOW64\choice.exe

choice /d y /t 15

C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe

"C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe"

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Windows\system32\wscript.EXE

C:\Windows\system32\wscript.EXE //B "C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.js"

C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.pif

"C:\Users\Admin\AppData\Local\ThreatGuard Innovations\ScanGuard.pif" "C:\Users\Admin\AppData\Local\ThreatGuard Innovations\P"

C:\Users\Admin\AppData\Local\Temp\svchost.exe

C:\Users\Admin\AppData\Local\Temp\svchost.exe

Network

Country Destination Domain Proto
US 8.8.8.8:53 urlhaus.abuse.ch udp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 151.101.130.49:443 urlhaus.abuse.ch tcp
CN 123.60.59.48:80 tcp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
RU 185.215.113.16:80 185.215.113.16 tcp
US 8.8.8.8:53 16.113.215.185.in-addr.arpa udp
US 8.8.8.8:53 spocs.getpocket.com udp
US 8.8.8.8:53 firefox-api-proxy.cdn.mozilla.net udp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net tcp
US 34.149.97.1:443 firefox-api-proxy.cdn.mozilla.net udp
US 34.117.121.53:443 attachments.prod.remote-settings.prod.webservices.mozgcp.net tcp
N/A 127.0.0.1:52638 tcp
US 151.101.131.19:443 www-mozilla.fastly-edge.com tcp
US 151.101.131.19:443 www-mozilla.fastly-edge.com tcp
N/A 127.0.0.1:52673 tcp
DE 162.55.0.137:80 arizonacode.bplaced.net tcp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net tcp
GB 88.221.134.155:80 a19.dscg10.akamai.net tcp
GB 172.217.169.46:443 redirector.gvt1.com tcp
US 35.190.72.216:443 prod.classify-client.prod.webservices.mozgcp.net udp
GB 172.217.169.46:443 redirector.gvt1.com udp
NL 172.217.132.233:443 r4---sn-5hne6n6e.gvt1.com tcp
US 8.8.8.8:53 46.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 233.132.217.172.in-addr.arpa udp
NL 172.217.132.233:443 r4---sn-5hne6n6e.gvt1.com udp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
GB 20.26.156.215:443 github.com tcp
HK 165.154.0.136:8443 165.154.0.136 tcp
DE 88.99.151.68:7200 tcp
US 8.8.8.8:53 136.0.154.165.in-addr.arpa udp
US 8.8.8.8:53 ip-api.com udp
US 208.95.112.1:80 ip-api.com tcp
GB 23.214.143.155:443 steamcommunity.com tcp
CN 60.22.23.50:9898 tcp
US 8.8.8.8:53 155.143.214.23.in-addr.arpa udp
US 172.67.160.80:443 marshal-zhukov.com tcp
N/A 127.0.0.1:46682 tcp
DE 88.99.151.68:7200 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
N/A 127.0.0.1:46682 tcp
US 8.8.8.8:53 prod.balrog.prod.cloudops.mozgcp.net udp
US 8.8.8.8:53 prod.remote-settings.prod.webservices.mozgcp.net udp
DE 88.99.151.68:7200 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
N/A 127.0.0.1:46682 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 162.55.0.137:80 arizonacode.bplaced.net tcp
DE 88.99.151.68:7200 tcp
N/A 127.0.0.1:46682 tcp
DE 88.99.151.68:7200 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
US 8.8.8.8:53 169.117.168.52.in-addr.arpa udp
N/A 127.0.0.1:46682 tcp
DE 88.99.151.68:7200 tcp
US 8.8.8.8:53 73.209.201.84.in-addr.arpa udp
DE 88.99.151.68:7200 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
N/A 127.0.0.1:46682 tcp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
US 147.185.221.22:46682 tcp
DE 88.99.151.68:7200 tcp
DE 88.99.151.68:7200 tcp

Files

memory/3512-0-0x00000000746AE000-0x00000000746AF000-memory.dmp

memory/3512-1-0x0000000000B50000-0x0000000000B58000-memory.dmp

memory/3512-2-0x00000000055A0000-0x000000000563C000-memory.dmp

memory/3512-3-0x00000000746A0000-0x0000000074E51000-memory.dmp

memory/2044-4-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-6-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-5-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-11-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-12-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-10-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-13-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-14-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-15-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/2044-16-0x0000027BB3DF0000-0x0000027BB3DF1000-memory.dmp

memory/3512-17-0x00000000746AE000-0x00000000746AF000-memory.dmp

memory/3512-18-0x00000000746A0000-0x0000000074E51000-memory.dmp

C:\Users\Admin\Desktop\Microsoft Edge.lnk

MD5 fefa20b6964bc93dcf5475c33dc251e8
SHA1 aad2b7b674cb3271272dae9a4bf9684b2b189213
SHA256 09cdb3f9904c6580e8b5b91f2dd3022b334d7d2db4ec763c96b9768fac4d55b5
SHA512 4a402df11d93f0b023b434b99f1efcac6ba7d1179d1ea23d0b99a9df0a9ed90a37af956a102626033a56690cd367fe42395b4b926288ab4dcd91caff93cfa6cd

C:\Users\Public\Desktop\Acrobat Reader DC.lnk

MD5 ecc9dcb2933a610d1b9889e9a69c4b4f
SHA1 6ee2157af9053aec31e15695110ee788b96d2ec9
SHA256 2b2ceffca72d8ed509dde7159b5a3f00541289986d274901609bea71d5205e6b
SHA512 e51edfeb5fbe44c97d7e482c5381e136f85331d671ca2b1145e4898a3f027a54632d5018a5746abc7b7dc5a5f99c43575e05be213bc1732131ca85a26f70fea9

C:\Users\Public\Desktop\VLC media player.lnk

MD5 96f97b49938d0d28aed0116fce6e9d67
SHA1 46654cd941561efb9e7e1b8696fe85f6f9a5e6e9
SHA256 99f9669cd8227567b9b7e4546f132c01085ac11b4e8a6abdc11f7a6f261147ae
SHA512 4ab8fe724aa5a35e046c745d33a1ef23c916fe7046d97704616b2752c9f4b605ac3d4e1e5705ddfbd0b6cba360f9988d36ffec71d8535113a3cff6b260df38ed

C:\Users\Public\Desktop\Firefox.lnk

MD5 9445e0ae7a417a320f59c21465b6cae7
SHA1 bfc550ce8a00b88efd59c750b42b6f5ccde160b2
SHA256 3191eb4579ed3e9a56736ec9d4f04d1715b32bbd0a5333a4451ac4ad7708553a
SHA512 95bbed981987300667f2b94a79a7cfe35289b97de65864ed53033db95438d93848dd483b61124b8c1d3a0b1a7cd016a9e3e0c3b6e781683038f51babcf051738

C:\Users\Public\Desktop\Google Chrome.lnk

MD5 40de04868e8a19b0e1ebc9c7288cb3bc
SHA1 fd05a906cb3c93b29165769fe231f2dc9722cf60
SHA256 ea080f0414307c7ce6690579d76bee94aa01472bdae010a5344a98c690122541
SHA512 4526985ec1d80f7b663788083cf1d1ca5247788c270453c34da7a15c619c7da35c1124e8fda4ad56da8478d5d7f9378f7aa9dd7eb205ee93b53ebea3d67e81b0

C:\Users\Admin\Desktop\CompareEnter.ico

MD5 e9249b9b5c0cb3d34c8f3029aaeb4901
SHA1 22e441671a334abb7252b0cc26450aac9a3e1ed9
SHA256 e257f858173c0b333cf047c685ea325241e94aaf0aa6741c0dacdb36c774178a
SHA512 cd405118e02dc11b127fe266919c4762dd5390e27b5b5dec906b65b5b1efb5b71c150fc75978dbe1a0b0c2d50e317e018f5175ae5aa141729958aed1619f98b4

C:\Users\Admin\Desktop\CompressMove.txt

MD5 df075d6310f94032e2ce70f9b434b413
SHA1 799730985189b24b381931d57b3a8e896c6fcb35
SHA256 6702dc175327a951cc2dd41a464d32e936b942a3d47fac8fb4c9ad7603d81eb4
SHA512 e2832a8f06d238e365a5e9872fbe2a56653eb38ee5d9453b96642e1dd3853f24b9655c0df76172487bc6cf52c42b6394f4beac552fd2adfa0121f66dccda29b5

C:\Users\Admin\Desktop\DenyStep.wmf

MD5 9f36857866a41e231eea9189a0a6c199
SHA1 f86078e0e75dd6f6e9519b9f007497ad17f66de0
SHA256 f611813871dd6618e6896b4db6c45e9d73fd38bd6eb434cfed0d5eb0780e09f8
SHA512 109b6fcb5e7e229a670a537539d7ad1bd5999df1094641c7a61fe433a415249dfccd19c8b2b7a2a15a78e7028166449ebb98e3644ecbbd24c9e399e937bd81bf

C:\Users\Admin\Desktop\InitializeExport.aifc

MD5 ea71f988e1284862ea07365f4ba264fa
SHA1 0a88e042f2991c1e4165d320b2dd6144bfcebbb5
SHA256 1b116cddfb48e5488ba6271a9da8d012f5045044a96213e3a86a5638afde0ca9
SHA512 7a7b6b4daab0820a8822f1e22cb321b4d4297e3237e6c793e7826ae18a2707f32aeda732f75562d1626e0d3bd83c22a2e62058a4a3078c0c2d7b85df2c24a5e9

C:\Users\Admin\Desktop\ResolvePop.crw

MD5 2deefe842f3d4db8a3920be84ec73c98
SHA1 42412a9eec025aa4cc6db85d0227242eb3f09890
SHA256 15ba9d3b88c998a2002151326a1972aaeb0f7f6818741bb1694b3f40919f8e01
SHA512 d2f331a8eb0b4b9bb33ec34ffea7d6b3ac0e1e000bd062462b5223641e2c3c07af5bc39eb8c2d330a10e9058cfe1330ca847b4863dbcafd1ba4bad9b910dd787

C:\Users\Admin\Desktop\ResolveLimit.avi

MD5 eb9848c33d76d9db8d11fc149f39eb55
SHA1 8cc769591db753b0f8844456d415ebaf433f5652
SHA256 65d2d270904a89c1e8584969d6b7a31571512de763d3b493bd6eda00507a5908
SHA512 cfb337983908a0dfa27d6e969c60ed78b7411cc213d5a601a17a3be04d919ffa1d7d2ea1cd8262e53b1447999ce025fd96906d8caaabd9d345294fb71ec21e1b

C:\Users\Admin\Desktop\GrantUse.zip

MD5 5225759bef7ef975bf3318ad189fb50a
SHA1 444ae3896e824aac68a91c9a4fdfc16ef0d13dfb
SHA256 4f7346c52cedf41d749ad2bd404f23c603d7cccb21c923ffb5b8356fd51cb49a
SHA512 54fb196d8ece578b231eb547d8836e0fdeb44821c095963bec982526f234a82da7bb19fcf8abf8abbe62bd48f6f072e2896483bff4f2af33fd5f64a618742059

C:\Users\Admin\Desktop\ExitSearch.ttf

MD5 7f24b7082d41c0e3190a95dc3a846726
SHA1 56f4c77d021703c9fe2b93b614eda5aa53187893
SHA256 8c041644bd65b1b2a2c2c4d2b2c713242dfbf102b3bf43e233d4029ac763ee2b
SHA512 0f4aa97bf5806f143fb7479bab02cf067c4f9b7f4d3f18f73d831705e5759e8b1bd2687f4bb102b316da470c582fb361b4096ad95556847fa95829d59c3d2b3a

C:\Users\Admin\Desktop\EnableConvertTo.MOD

MD5 3ae129ff46811b77fc87208a822269a1
SHA1 7e39e363a43c8d099c6793548b0ae094642126bf
SHA256 6aa2d92304cfe3236dd2ce44de49de97b7cd3532c8b7612f2a560830e31db181
SHA512 86d8fc6686f7eeb2f24661f8d3c103d541b8a251e925f4f873f1a89adb7a21ce4a97c44b82587d1adcb5a1015d72a58ac2a59b811b7aa4183b43ecac8e495b35

C:\Users\Admin\Desktop\SearchConvertTo.mpg

MD5 f58dfea503685ccb8a76527515c8e3e9
SHA1 456f8ee46a988815afcb343646c890d87f8e8ee6
SHA256 2b37e0be911f9603501edc7dc10d7782791e9fc2bd98fca6294b0c6c2c4c9a76
SHA512 77b3c2492cf559d816204d03554c108719cdfcf5bbdc8dcd47ff24a06c9910d0b2cb6cc8b85fb2a654e0445f0a26bd2bc10b08592917a8c817843a97ed10b28b

C:\Users\Admin\Desktop\SubmitExit.crw

MD5 376e65449626cdd5eceb4701d6b374ab
SHA1 30f43642b4219e5b1538819fe4be9d703df127a1
SHA256 a7a9fac7cf1251c95dd84c083e4b889641ed326a3482cb1dcf7f7aafc4167478
SHA512 6b3c4ea9ada985887d0a70b88785fb820dbd324c5443de8f2649eced710b05855ad14c23528bebb1633f9001cac6d7690da5c69a9a3855b86eb13895f8824046

C:\Users\Admin\Desktop\SwitchBlock.potx

MD5 44f526bc7b8018f6d2164287665fb6c2
SHA1 0882d56dfa4312ca01b66c955689e6aae527e7bb
SHA256 5d78d632a8886189881404dc83ff56db2c566d9d3141e5089e1edf51ca3b552d
SHA512 1ae5e29d9b496b2ceb5743cc3364f5203b9f76c8600b61d5db4a4809f9767376fb670a17b932278246802fd189b8eb8a7e341d0e33cc1cd4e98d50707bb38cec

C:\Users\Admin\Desktop\StartDeny.rm

MD5 b1def6617d8e323897e4cd6d0df9b952
SHA1 c4f31e652f757457749f627e96df9a127b1e9cab
SHA256 06eb7162389ce80f3bb8f294cf91d4dc801f68241d93b496c93d482e28323c93
SHA512 0f8ab3e70ca5386af9bf79b05a4dc10f9acf5f4ef78ede9679a7215e464bae49a8ed11d05d257a408533aef54b63247b700875c2bb0e6d3e68ef47dc0f07716e

C:\Users\Admin\Desktop\RestartReceive.xml

MD5 7a62fc7eecd74990b18e69c67a31d615
SHA1 d809481d7e4929ff673769272288bb832aed2bf6
SHA256 2b35a797ade1969b510b89a32b6059d514f482548176137396c1a4811b6e2de3
SHA512 2d202e440bc72a9ebb4c5a8a8703e0e274260537c634ec7aa848123eaf0084d9e82f97dfccf20deadecdefce2053361778e6d1a49f6a326e5502e1c42469fab8

C:\Users\Admin\Desktop\SplitFind.ico

MD5 573cd06fabe835f58ca50a1c53c11c16
SHA1 cd1638b86038a2848859928940d8a8898da94225
SHA256 c081b86ccee832182c7e1311f907af50970fda8d40b666d7f8d7826cfb80cf93
SHA512 bb7bd12da4fd5e79a08651339fcda8e9db75334f399c8fe5a22b24ad7b4d4910cafc15e4934ea00339ec1d0420e217013141a049c500bc3374d4e6fdc5449503

C:\Users\Admin\Desktop\SelectTest.tmp

MD5 6e11b5a13a1293b6585ddaa92df5d00d
SHA1 c3ff1592f9c78c7103bc76bc66086759d8709f5b
SHA256 3ded01e7bece9c89df9c1c7b33297b8e68b7ab74fb7495f422460907b60a26ef
SHA512 08bbb1b84d9585c6469c50dfb5e4e6590912d50339d7c890a783cc68f6796b1869ca34254717ccec6e37a01d99bbf5bd364e9290b2484b534560418bba92e419

C:\Users\Admin\Desktop\TestImport.ods

MD5 9242d3a61cba4d3f5eead7afdebfbea2
SHA1 56101c4b7ed97b3746c423dfc90dad08a220fb87
SHA256 5cbc2ecf693ce1ded388a3022a6909fede9f7a687a312ba83c017c5ad76282f9
SHA512 1ad797f9617008335d8e34e0ad86eaf917740cb97cea81e35e851dad0db6b482e5154a1626246a438da70554da2de5bd1a6410745837014cfbf0d86a7b48b904

C:\Users\Admin\Desktop\UnblockUndo.search-ms

MD5 6220078e83a76fbdeb30c19706090111
SHA1 3dab83a48236c50fec4504da151eefe82bba4588
SHA256 db7fe01ba5f2af78969a7edf3036de1c22c87ba821ef9fc1374e9f751504255b
SHA512 f5ea4332a0d8700cf81562d0c1eda2bd1b6a6b27b753efcd6647d889443f6901bc643554dd49e7877302bfed2de180420a88b642aed55277cc0f35fa9d895fa5

C:\Users\Admin\Desktop\TraceRepair.gif

MD5 d82efb0ebfd9a65ef641a6af0aa10c28
SHA1 bb79deeb23147f67e86cb04846bd3f203c817045
SHA256 3ba372ada3152ddc7235dd91f101740f4c12d7ec716b1e98b45e2331a15dd714
SHA512 b627cad7509213088160f84ad3196b3ddda0407a0dfae27157cd3fa89b118460fb73f659496f212fb883e4e5bac1b8d111b95d1f1ebf97cdb3b9446ba9290b89

C:\Users\Admin\Desktop\UnlockGet.kix

MD5 9bb7e8047fc275194fec41a558fc4cd6
SHA1 c947b999c994631a580d4e3596613108fb1d1e83
SHA256 e98df0b5ef4fa6c8d19f138d859bccd301c72644554b45e3df54f2b4b5d0de53
SHA512 d342cbdbd8f857cdf77d7fbae900a3ef4148543e67a3509b29c4c60691a49cce607528dd34fd4740738def3ce9b88eb146de6c7819fb3e146769d8c24ad98b40

C:\Users\Admin\Desktop\UndoSwitch.xls

MD5 afe61d59559429167b51cdbc1ddc65c1
SHA1 f7ef3fc9d4e732e06a36818ced0a07b7e9281f83
SHA256 c8a7dfb38b4204d899c50978bafa3ccb8d02817d1042a0af59b06321c78ce914
SHA512 c8e7f959d3434ed0817b6382648d32eb7344340c454591dd4bb6b57b1790eda2c713bf966a3a1ac375af90a7f978cc530e925f10e78bff38350bf5a34f7996a7

C:\Users\Admin\Desktop\UnlockExpand.au

MD5 490771bde785726a5ed474b4dab31177
SHA1 d0694266ddde90b20347e742fc59929ba152f31c
SHA256 e481bc128f758fe29c179c1411a74e579dbcce3b466e7123467d3b79f970c8f3
SHA512 2df9e2afc2f591b23b4546107ea7a235f4b2c7b05bd697f7ea1a79fed8ee33c3e83b3699e8c9cabf6d642c926521f00af1142118ad7d82552c343e7a102097bb

C:\Users\Admin\Desktop\HideDisconnect.xlsx

MD5 0ab5cf7992adc1064b743f7e3469dba0
SHA1 bfacb79a6d637d017ab66670dd0ed447617234c1
SHA256 b09d1a7b557e535337a70bc0c952b204661ed5100cf7470476eb879d70fba807
SHA512 535b14ebe0ae3a48d903bb796b2daad217171f234125c648fcf56ebfa2515a1ea4a61e9ee9d6a2276452dec084e682cddc96b8a565c16d674136a71f4c24c6b7

C:\Users\Admin\Desktop\CloseRepair.docx

MD5 b9532827bdbc13f1c0e180e1cc3ada1c
SHA1 791baf0830025232f90d323c9cdc2a5a37f423bc
SHA256 cd0ca8e86a4bf3c9bb55706848f7f5ca7685fa9217b8e480a2ddc506ec923f5d
SHA512 42db273f2b75cbfac837f0b61245bf77e11606899f12a1f29d53c8ce6c4128e0ecc435eb4e128253b4582668102eb26ca1ae3be11ff2400b9b09a238cfd083f0

C:\Users\Admin\Desktop\DebugPublish.xlsx

MD5 31d99a977b1deb4dfb412843101d6e2d
SHA1 705355bbd9c1503e89bde4b0e8e4c2a1eb80acba
SHA256 9e899ae3a8e4c4f2d8a99f488255ceaf9572b8c625938b0943ff1ef5c54af814
SHA512 06f454bee04ca308206e70e7849efdb7422b4aed041ad2564551f61ed8b3951f2fdceb631c06d3d1624e61256a6d4d7f3af85a61cb1b854ce336099192222e4a

C:\Users\Admin\AppData\Local\Temp\Files\InfinityCrypt.exe

MD5 b805db8f6a84475ef76b795b0d1ed6ae
SHA1 7711cb4873e58b7adcf2a2b047b090e78d10c75b
SHA256 f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
SHA512 62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416

memory/3396-60-0x00000000007D0000-0x000000000080C000-memory.dmp

memory/3396-61-0x0000000005860000-0x0000000005E06000-memory.dmp

memory/3396-62-0x00000000052B0000-0x0000000005342000-memory.dmp

memory/3396-64-0x0000000005470000-0x00000000054C6000-memory.dmp

memory/3396-63-0x0000000005180000-0x000000000518A000-memory.dmp

C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 6cf5ffbf7ac6e51bb83d64b09b35314e
SHA1 6df1d0e223a9b867826414a12481e9c0ec0ae60a
SHA256 e46fdfdd61ff4b7fc899bc84eee40fcff28693cbfe08c6f40584de7e850b2ebd
SHA512 7cafbcfe39e378be9f1fea44dd3c24157dcc0f8867af9b7ac9b872d6eff70e48cc3698c00bd688c8731abbe5c22767f3096f692b59984b21e1f929e9f22659fb

C:\Users\Admin\AppData\Local\Temp\Files\MePaxil.exe

MD5 bbe6311c3e2fab459f729dc8cd6e3519
SHA1 b71993aafd6627e55657819826c67f64f764c77f
SHA256 95fb9ca82017f2a6bc59df0d72fc6f90043e135799d25e9922d4943da4c36874
SHA512 33fb4936db966d0f285a48b09700716eadcdc19212c3e234f34dc0e497e55f01f493956aa86de438a3c65ba8e112d6ee1f3cd0ff9aee3cda1f686cc68dc77a47

C:\Users\Admin\AppData\Local\Temp\Offensive

MD5 ba741ea1fd350411ba286e3807deb915
SHA1 885f5b96f704a4e5fbefbb6c8b82274ead6ffeb0
SHA256 adcf5ed9c2a1ab99e0e91306fa3e2d828902c989046d7cff497a4b864ffac5f3
SHA512 e4f9ea218752cfe4f8a4241c7bfa8d87f2fb0fcc1c5ca679105f42a4c1bb9c692b70cea3e60cfb50cc24af2eefc2bfe80bfecd54cbcec51ef523199251efaf9b

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c56fee77ed3ea097796dc21b9a45146a
SHA1 f96384986dfa61b4c35b9caf8221f4cc98df2246
SHA256 24168751d3eeb088556b2cd4820db577dffa4439fd2bd135039728c8a7220e4a
SHA512 09222a7665c9c2777eec8b7aafd54f65fd91b72c7ea301e7043c286c0fdd2eee3756fadb8a1cfb1fef66bf3d3d35657df9b2e5ce969db85cd739efa100b8bccc

C:\Users\Admin\AppData\Local\Temp\Bowling

MD5 1100e2dc0abbc946984508a57c2dcc6a
SHA1 a46249d3d6aebb480f6c948aff6f065ad3ce6721
SHA256 87cf4bc82402b0ee787dd23867496ee383cc24c397fe54372a0e2fcc1c6bf206
SHA512 c2c4cb619a76ee8f6ccefeb712b11a25c1c475db088aeab5dad6978536a2eca710f31a73d183062c83ce272cf0534b53c2d4f40db203a4b7a3b8bfa5e9390fd7

C:\Users\Admin\AppData\Local\Temp\Cafe

MD5 be7ece0a176b5396ed2e80dfd1c7d424
SHA1 ea19b37edc7d7cef563094860af09900898fe467
SHA256 4d448ab30a84c345178b92911192046923db0badece1146f0adda3f0af1417d8
SHA512 ef006bad40449dca5569f113d8eebcef718f3754a5455b1bd31ef61ab59c5b096b24663da60173edb1741bd045f588823144e63b2e62b681abd7e5b95f2c906b

C:\Users\Admin\AppData\Local\Temp\Suzuki

MD5 c4cf8fa43e79df7fa6259198175880f4
SHA1 e9097784729e777188629e9c7c59cb0a0c6c6cd8
SHA256 f40e0aa9ee1be08178cde5ff9c25253e70c4c08cd7311722a749be0ebfcb49eb
SHA512 786cf3a41fa4d55999fd15ce6b1f89c1189f3212b181e2e0f2b3262e24669453cc99d587b3c70ddbf098117d5b5d3e4b7bf034e288bec61672bcdc29a131642e

C:\Users\Admin\AppData\Local\Temp\Prefers

MD5 3800b719c54c939f9c41642d3f0c0dc9
SHA1 2f4e8b5ad282ff727f23ff8b98f82427bc88d263
SHA256 d2fafbf46e5741896ca37681386c1af4f847d2bae11592be569ed41d7e50702b
SHA512 b0f73c110f28091ae5c786ce9c5970ea2d4c728abfc4aacb926892712d04a0d5bb0d912ef5cf27a19b529cfcae2bf5f63ddaa77f4e39e49f7d67ce240d9f35e5

C:\Users\Admin\AppData\Local\Temp\Sony

MD5 bbdea5ac69d32176c7cf0af7749cdf12
SHA1 39c66e4bcad18e9bb4400a579d44f177daf63ecc
SHA256 8d1c9abd9b4a2f0a19f9a003280e1ffaddfd4c55b3fbef43b4aa97c7d3d280e3
SHA512 e6021102ecba902d998601f4f857f973ff24edd7012fb1c3f9fef557f966a023ab241ac3f54aeaaf887e19560a805eaf77d593cfa7efd659a137faf4dbf53704

C:\Users\Admin\AppData\Local\Temp\Severe

MD5 af2b7ee3e48e5404c5b8e4af9767ab3d
SHA1 18b0119b67a01719b7e968e2296676565a273264
SHA256 5748c19741e9877d8abeb2f593a158bd39195c9c1433129ebdb6858381283aee
SHA512 2472c62e1c65d3a03a293daae3eb162b42bdfc536907f4b1bb63d86315e3540cc8fd641d2b26183cc230884b6cc74cafb805c913c09b991ba3d4699ed8ed4129

C:\Users\Admin\AppData\Local\Temp\Invest

MD5 2650bd0e98cced157856b15c55a48398
SHA1 b8b509ad22f350d600cd4ac612a5eb3d61db3f02
SHA256 f6b5de9758a1baa8f31e584bb5e5427365a7d08679931328d6ae9ddf1b6c99ec
SHA512 db3693cc106df3b097b8b3b97236819792bb04afead5e13679fdcc21765fd348502dae64eade646815fb7cd3745f190ed8d8a071f6d5f29cb36ffd08c9193e14

C:\Users\Admin\AppData\Local\Temp\Major

MD5 5365ad26fbf55fbb238379160f3819ae
SHA1 6e33efe060d8fc424f5c850107ad4794c66daec1
SHA256 5749f6b429f9fbd508b810c6e99504e19036a93374d83eabd7171cb625627ae6
SHA512 861b76e0f60d055c7cf2b51d5a4aa21848664b57fa387d83e9c36c23dd0044bacb0bb8e5a8630062604871197b7050e82101c91dd2b809e8c5208eb86fa22e52

C:\Users\Admin\AppData\Local\Temp\Tit

MD5 9ff7f4f0f216def9dd325d9b667be06e
SHA1 f2cc8a82c99dc8bc38624e7aaa31fd29047f19dd
SHA256 7639decc3f03f22ed96230e5bfb619419d2523a56cb0b6cccf6ad6c66d5219e8
SHA512 83984918784fb08d6392d5a565578d9caa60218aba2ecfe255e3d809e0f7a48f36da68aea87fbca19a12d6bd83cbcc9aa24f021b14bafda68a2b90fb58ac4b30

C:\Users\Admin\AppData\Local\Temp\Adjust

MD5 35e5ab29f9dc36806b7db16d46ed7ede
SHA1 527d6aa79dca3a83dca41245240507996a1b0ae3
SHA256 c6ab18d27ef2d0e9b01a3502b9ef292ac9d5a4bd045db792d8d3b4188c30f8c1
SHA512 754c57e8fcd56f149dbfd6606c029071cae23bd9d658961b853c03830cb8150d444f1e365ed8651ab5accf4b6e5fc1184c42f5e1d1cead261eee04268152309b

C:\Users\Admin\AppData\Local\Temp\543648\Legend.pif

MD5 c56b5f0201a3b3de53e561fe76912bfd
SHA1 2a4062e10a5de813f5688221dbeb3f3ff33eb417
SHA256 237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d
SHA512 195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

C:\Users\Admin\AppData\Local\Temp\543648\E

MD5 f8e0529fb48efca8c0eede34c01e0033
SHA1 85a42f025ae9a2227f2649df6652c929400a4aac
SHA256 68b1bbcf0f6f6270afb451b41f81f6f5691759493640f6e2735276877c024dcb
SHA512 b6192ad0efe9c04f803a5a14c09480d573ff94d6d50135ff85b2fa4e9ef52c4c04fcb99207be0e7fa4f3a2dba27b6d0b336e111cc3ae678a05761132dadf8f54

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 357fa5ffb192f0f5e531bbd84439a958
SHA1 b69dc0e5654524e1091ea90cad0b0f201045a2e0
SHA256 1dc7289e2383fb38d56a818f2393c84a29e7be4a50b7d675d9280ecd54cfa6d1
SHA512 09e0c44ca7fb3ca505fcfbea565c4ff6f3a2c8c40c08e84e866fb4ce7596cfbd2e6b03ae2b6e0fbd72b1c4d82ab8651c7cf9e45afadb40dcbdcb64416dcfb508

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 5d8d1642b7da9a21e7d7aa6284475888
SHA1 9c8e170108b9531c2c7fbea6cf080d2054c76241
SHA256 8858b98a922ee9cb1a90491afe33f1a707ebbab1a930c15e8ae4742905b655ec
SHA512 99d3498ea50251eb30edfed3fd02d92b87deb05c41daa803b1124a230483f9cac40cbef0ece4484875761c90b451f0a3a068ff4e8f91d03769933f2d14b2891d

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 1b67e2ae0ab9301ad2e6eaa371f5069d
SHA1 c03b8e0badde0fbb94d439cc1d6c5655be10034d
SHA256 721d1dc1de422bbb2e46ffdf72827d6ef8242a58704ab29f8ca505802be1e4ba
SHA512 bad30a8975ab6550b26550978c1257baeff3bbaa57d947b92ca60fe780cfd79e4b9220d7e75474fec480e5b07b976f36299c82f6844555cf8482472ee765bef1

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 ae6947287d8d5a699b08282343c23bd5
SHA1 e9dc38246b69f06ae2f950f29089fdf9577682d8
SHA256 e9168c2c276fec31ef6ea31550c82955a54cc195c0463504369f8afd1539982e
SHA512 87d59c47dc87919d2cff180a21bf4ad4544e7d6da29ffb805601018fe38034d13be325ed45e46eb4982e69414d4aa41ac2ec358b7c17de36f5ac152a74325b2e

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8e7d5972a1b37d78ca2731dc79cbe21b
SHA1 00def6c7949ac9b5dee2fb5466651a350ce0068c
SHA256 2fc264a628bdba0e6847c14c5dce3d3861f070197764883ea852996cd9723820
SHA512 d33ea54e336dd176d5763f94fb1554e9690f3f9949bafc67a47840c190bc493267862237161667abd8746ffd98e4581e16ba085a5c8acadf790ecc8560da8220

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 b8bbe52671d67c6fe78d75f6b48eeabc
SHA1 e6dcac72f70e2b50dca04506925f03b930de9069
SHA256 8b4e5652c3858e3dbfea1b7217f6fc10515f95483cd5e73c79277383668f45f1
SHA512 edb6b2c7e378f8e33b1a86ca1fd81233e68ae45bfa833e7f9cf728195bc8562fedf46ee8f41d4ffc762f8378161ab5880e227f23bca4ff91e1b3bd5f059c41a3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 339c09ab0cb90e429ff298553c1b914d
SHA1 e82efd2359e028fe0a30d7f9a4a2a182164ceb67
SHA256 2efb894fb79db3c07af0a5f0532c4da4c6f0e702cfa698020234e22bb0eb90df
SHA512 a488293a967a4b2f77b1922efdb32e76c0a174fa920a5c60d6fe9da257c8b93319a3214c6cf7bdf60ee4b681c059105b45b5d862a562b6b02bea06f27bed6903

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 14f6ef65c730bed62a44b2d119fa5d2e
SHA1 8446bba6043ef1b3bdf1391f687821cb7db879a4
SHA256 a5bada566a23e444a62e13ac1cbb90f1f276cecc3ea7dd5077fa0284f8454526
SHA512 71474817040d9ea62a7d68e359010e7816e60cf191f0ba5ba498c8177a0523834f49f740beb4583d0b2b1abdcfc8a1a79c23883a6dc93cf3f858ed946d874bfa

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 895ca80905bad08414e707c5b45db93b
SHA1 1ce8e9d87be622358d6baa2e35cea316da8f9491
SHA256 14ebef0a516816dd1c451741e479431be4c18f7d73a2483b09c5c880b62fd797
SHA512 94c05fc75a10818e457a42345136fa9b166d22a25de60f77c71d0fa7a80e6b03ac45f2daecc9ddb03fa537ac65b7a897b44984b091848ad2f50dff872efe07ec

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 792efc1af9a8ced70229f06ed67cde4e
SHA1 4950b1dd93d819a6ee72b51e42e4f0c4d6dee3db
SHA256 b9fc7c6738ca94ad8990f6fc7e812a93c0e6faee175a1f5b2319b1245fbbbeec
SHA512 d5c21679c101cae171158f175e9029c149e1e9c9a6ac8b0e4ece78ff8fafcac2d87bc2b51fc26b9b9c5c20041d497d1deafec5f8c348b55fdb7f3dca22348fef

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 aa122eeb9aaf82691545f73f47e7b5ab
SHA1 17bfeb4b75743e0b113f29d3d55e3d7de355c65f
SHA256 eb9a44d11255e4ed6222655b2886f9128c8277ea11ed16b62422b6d54bf760e6
SHA512 82058e8fe645bc644d9ac48e940f138fb8abf7df07be221ef636680b8f19363df6b3b7be9ed5a75f073e366cb31747c37d2b337a2d006848d43e169df7bcd7c2

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 e07fd72885109e96b6550abe763ab3b6
SHA1 0b2f6ab1394a6ed57bcb7cce65b3630b85f65f6e
SHA256 fa5df91287df0b9981c491ab194c9dbd1169db4c510f551c208e77835f3a552d
SHA512 d479e97d88e3f419fcbbbf549422d15e71f70cdb8f239473bdd4a6a383d6a6daccf9c4007339d40e7bb704ad402e01b50b352eec9ef4265c1c066404e6e78ac9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2ab1ae83a0b6ac8c1506f924d3ca3f8a
SHA1 0010391c493a72d7862bc13aff3bebeded87d62e
SHA256 ab26ce247284119e61d3ce2be2e31ac424b59652638e501b2c92dfd3cc99647d
SHA512 42312f8deab699600937fbe8d0af0e3e0e7dab46567c31c6908c9ef4ee9d27143e2f5a1182676c9e406d2d9e632f3e1d1f32e34f240950bea59596d4b3212ba3

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 285ea82f3cb37c4bfa172f9ad26cf5d4
SHA1 f047be540b1b2bdc65847ba4e7e7b050d576ec8f
SHA256 a0c3e1bdb8a263a40c418841a169411e6ceda0c2b463f79d00d8a93adfff8c8d
SHA512 8c374fac1191d5b0b7af3139c272d1aaecaa69ac70e00500a881750edade4e2ee0529bfce4d50c412024aade5968195955fbb7251dcd5cb0d4e605eb63f5479c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 936c25bc2677aeda32416e00c3680559
SHA1 998796703b98810510ece385fed2dc89f85d8a7a
SHA256 447faef97c34cfff64ed1af0e3c52604a079575ad9fb6fdde0ec01e8c4db1099
SHA512 4a586723e022a673b874ec06bd157de8838ae8a0d5e45d7494e1f5bf79772b7a2ed1fa8ee37f011af07c441783b9b4c806b898fea0bd6865b09477e28a2fb9dc

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 81291897ac92699120753ceb4a30c860
SHA1 69842e148520dba5c4e2c5bab4d410c64be0d2ae
SHA256 e7b28ef96713f57d721f4cce97fcd9da441c239fa336bc9f8da7bfce91694838
SHA512 1229d66a4c69f6618568dc7424d06440f327859323b40239846a4a39b87ace42399018fe918e54ced41a41882b67e9b29c19a6d4aaf6e863e3930729fda24837

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 50a7c42496157a068d69bee3c97f81c2
SHA1 ecab3a4043e1da2044a3f7b3fa2256895432e414
SHA256 a03a703c3354b7081e74ded33d7c8c058dd500a824092cc3604afa2d94bb256d
SHA512 1eb242b807b7d74fda538ad6dc57ec14b855ce0462cb76fbafe9b8950a396a8686c9ce53a3200369b7dc961b8d7ab9bff615acf5425bc39e9b019e66d6515ae5

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a3b45e1cb7c307ded30e7db36b1fae06
SHA1 612b5671b7333e3baef8d5877cf63af32503b157
SHA256 3d68afea35d470f8b22a532faac432f35ad8c020fadc4cd76273bf4f66fff7b0
SHA512 42c6f7cbafef3debdce74796e75a981871a309b701ec9bf637bbe119e7fd569a3b49f68f8106c65067cbf7cb5adae2a4eb6defa514a56f2dec091b9d0b1d1724

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c864673263e1044cf5ceb31fb6c80f89
SHA1 50b40bba4cbb6fc27bae44f6edf9c8e7081fb14b
SHA256 6cb0469fc58094b8cf3f97bd3a7298c84402cffe6369c6a81bb33e9bb1491152
SHA512 9c83a1795339ce7a290df373b9c824ab5d62c54d440a76b7ccd1d2526456b812a6578d360e8796ad5ec96525ba750d0c0d71e70ad636d7901cbd6ee48e3d817c

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 198de575e7b6a05aef53c81a30d61bce
SHA1 09181a1f86232fb9ad13acb291831e4a3c462596
SHA256 025e5a5415e35f58856a2c663960dc5f198351fc6db69ee7688d8d09f62a02b7
SHA512 21eb7bf04c20822623b9603f0144cb26c5df83ab7688b9117b6aa91c2473d40b3607a1a436f9853bda61159e364cd2e8248d1b9cef8b328f6506da7d92ad9dc6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 4e6d5b7aa32d299002edc7e1b4f26f91
SHA1 55bdb2bbc855df3901a3b0871a98f6e4bc7d6197
SHA256 fefd5a12f382dd8da0c76d917334c11bea226330858f1c3387e1c617197a82c4
SHA512 ca98e1bcd68ecf1fd001a1df0ccdcd1679b979022a516729cfc530481f35d3e9b02f6b5d05b08bf612df5aba548fd211433141be52e0e340704e4835afb55e18

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 35222d700bb6e0fc13c7fcca92e3bf0f
SHA1 c2c1cb200d1e23f9d2ec2bbfbc15819a9d792086
SHA256 2edcbac6d10531f8337cbcffcb73c6bebc2b52719c35d4043b3e0c7591f1474c
SHA512 6356d40413ce1b74d7081e39d8a7ce6052680d08d8b664b952b225c9bb97e8f31d08c9ee0dd6b339fc52e53e5c648d2cba10387b6d1f60f3837eb038877feebe

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 1591d6116fd074f8876bbe0a067e556c
SHA1 e133ddcba12ee1d73cb2513ca41902c41b9b5c40
SHA256 c7a8c49c08b34008087dd02930d0b44babd5d18d83e0e0f7aa3f139e9777b1af
SHA512 a8769f121c4b882ce28fae3e0e15006ca2220e024f9721a5554d01eea422483e14746b44b926da32ebad553ed17868a9bc52c17b1aa641b4b5e591a7eb15a956

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f53f0f756b74b9248983bc00f28acbff
SHA1 22819ac96ac6bac6b51819378dc38d4de7a0c007
SHA256 459b2de2a3e3aae61068e0a561e677fffdf2b996aded4db7f4b422b6fd063a3b
SHA512 d43e995132bc572f96e495605195e9ff17d2ad3011ee01a7ec33147d8174dd2aa83e5da8a37d70df5ebeaf1663c7aa08952e6aad121aed68cef56f6813fe55c9

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a393cbeb0b91217d5dcf5ca277c13808
SHA1 e4101fb17c0ca05c9672b1ee37c38072f25336e4
SHA256 e938cd64791774bde675c15e364b036c0182a34b0e0ddf6c708cb604dcbfbefb
SHA512 f23164af0eab76e118589342c44625ee0d299fdbe3218afbc2a6755e3899ddd36e76d3da9bbba57f668a1d2ed82cc7dc36be9239f8ddabe0520a0b363d05676a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2f52c3137564bef3ddd6f241f4112d8b
SHA1 41c4b1ffd09f67c719c537192d8ceb431cce94ad
SHA256 cb8f78287772d37e91b7b92669d1aa3679f6f6169dd9b6451516e7f26534e9fe
SHA512 34209f18009f6d8aee4f538658014c5c8a09eb58149a4014fddca844a66aef7c931e23335485184bc6f5567023e65c67e3ff34ccd40d247f64d835ae4309c5c7

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9c957ffb27791a15bb9be8aa0bb1b727
SHA1 878dc86c9aec678039d4abf655a2db71ff2e4632
SHA256 055f70fe5936269a8c66f372905a175b7419c941246a9229ccf0a7bf180d928c
SHA512 5ac5279c4c8f0d8ac6a9663a7c26050b6e2be09cabaced56ea3c29fc23fbd9208b9933707124285141719136c70ef74f93128218cf609534e48e47b96ed35837

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a59a7a53ac5448f565c123f2b818a8dc
SHA1 1c662b3e2efed08391e000acf4db762ab02a4e6c
SHA256 8e24ee99d9db7886e3e723725b7ff2f782cae130522c8d58acda046813b91b29
SHA512 8741320788f6de1d3554c825925c89e7e85524548bfe48d9b7c982ee8b2924098313947489447b44aa1aaaddbd4e40e76c6784ebc81d7dbae322b68261d73c50

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 353f2db923973e7c6526047836c729fa
SHA1 082d7d37034a1ba949dc55965f2ff975bbf1be20
SHA256 6409b269633adfd378b586beb3705d1101b4f1cf0cf4222edced9d9a5ec8dd51
SHA512 2130adc29d66ea9b450ba2212dc7e0d3c077935370a7f72a68f3dcb087df9149e47324ef0d9b93f8378b366d738f69da88791fcaaaf4af021baaae768b13fbf6

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 592e2f9ab843247e96739ab3dbe2fb6e
SHA1 e544a1b051a31278b050f988107aa07cc4e3fafe
SHA256 56d21beb63c329529eb0b4e09062e3c8882cfc528a3e5bf146da8a8ef1e24a56
SHA512 59f64ff841124949ae1904b0e4a605a5fdb2f1730f6400b4e71df9d1f8d92ac8b98d6b9c78f1388fb3aa2756daa3e13bc3fccd12cf7a963714547a18b7a95b31

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 292d15b011c91f8e2fde48ce3b580ea8
SHA1 1f144790873a6ffcae6ba583ac4a840176568043
SHA256 69ca7f1798bdad05245b85a1e631c6fe2dbc8a09b6939bb8d6c5174e33ad8fbf
SHA512 b95325cdd4137fa32cb7908f6f200a24256edea2a2d6341fd4301aeeac7ab954c775f7acfd98d46911672824b39b60f234760b68beed9b973419c7484d6060f0

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a573589a21663a57610a63535230742e
SHA1 2e5f49e9798441803748c2956be0c70bd3eec015
SHA256 ffb60c1f8741766dbca1c1e996ab5fcb3235f985f9e94f12855bffb102063255
SHA512 87516e55a7534aee98d36b5dc6ba0bd9b8453a1092ef619a13472a78e6ef519713c973198853891b509ab6f776d5c9d683c6eb643846b82ad5ed8f489313714f

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 90266e2939dbb8b293c5e02291c2f9d8
SHA1 c4a6adbc8b1a5b1b548e1741dd31238723cfea0a
SHA256 3bc0d4d78c646a447c256cab3cacf8528e8248bcb739f9f3cda8b62b55ebdab3
SHA512 c2773b0f4c8a3a926edeaed931400c8901b27b03576a428f5a4096b2476d07b3b176c3668f97aaa5fedef91d0c60d9bbc83b0c99fd58a23ad11bbf7f0b7729df

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\db\data.safe.tmp

MD5 999c6d35783846828d90766a8f3b9177
SHA1 821a3867df82c60cd11f4fbb28d57dc7c86d17a5
SHA256 c7ed0984a01d98cc276c932b9d467a07b951d5b89efe43602731d487b61661c6
SHA512 64a14fab4635f5c3ec10e2cd319ab86d1e783d772fe56c2d8915c7ffc5afe494e97f39a5121f3af2e9948dddbc8226b14767eeb4da101b606877e1e5294da463

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\pending_pings\de67f04a-70db-47f8-8284-104e815b94d6

MD5 ee70516b556f6aacb6f8c79a0dd7ea15
SHA1 fb5503ee3ccc8326aa6b995a10c7f889cc3675a5
SHA256 d12c638795c0bf6413f408afddd1db57b8066f2482cbeaf2589f00dc1a11787d
SHA512 8f493a63e2ff2e0c15094a4608c263a09f9b4cda9a08c466625c82e6bf1790a19fe07355d4125d2a9ab7dce0198d6b436add8f2e80bd60854d2ca036b72bb07a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\pending_pings\0f3fea8d-3624-4f51-81e2-0d29ef6b92e6

MD5 77abb86768c3acd271d5d2a7c659b4c6
SHA1 1afc80480485d9c33887ddf128be0b945349a79f
SHA256 cdaca38ea53b03bd0d99d7fb6a41d75045513dc55adcee4269fd20041ad42221
SHA512 063100bb5dedda007bb0008df55d90334e869f0b3610a0c7bb552cf39d48a7414ecfa82bf41f02ef0811373d092df2fd1ed094e68b2ee18473c6cc7e9dc29fdf

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\pending_pings\53eaa0d5-47b7-4594-bf42-a7cd384168fe

MD5 1b2e061343bdf622aff6bc3769034500
SHA1 7d64354ca7c04c966f7da33c3ba78bf5ffce3453
SHA256 62e5b72e86cbad20431c1cc03509f28f2186818c87d7f557ce3258c10ac46721
SHA512 f036d6427c962aaca9ea2a7ac93e2319dd48f77eb01ef1e0ee8fd0fabfdadd22abb60c52fb6f2838d59a068b3630cf81695ee43ac966ed2f99f6c82a8457f0c3

C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\jj59r4xg.default-release\activity-stream.discovery_stream.json

MD5 abd19d453e243309f8b4ce55be9db2eb
SHA1 e768dcaf18cd3f7c1c96c1a1133d4ce5d8f900b8
SHA256 bb2a0dce090dd3c7109f3307262f26a21311cfe66538a4ed77071e6a711f7766
SHA512 0491785f799f8d5fdf59c9bf81ba9da151c5f96d7352215bc5c24539d1339a1703fe0ec58d3172e0cfd0e536e040099028449e4620a9a9de4fb3bd4cf210422e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\db\data.safe.tmp

MD5 b17f454957d895f2e39d28ee47c4cc74
SHA1 ac94dea12b40bd3be27645fc9f1988a14792eb89
SHA256 e721078562d64ed64970990fdf3bc4aa8511b8d2a0471d965ec512747ffc8e6b
SHA512 3f922694d540f3c76f8b22f2bb973d594c43e470c386ed36af41ed343ecaf2cff2b7680f275c9fb3af1d5d33ba1258f7c0a044aa7a549017230e63128b39ec43

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\prefs.js

MD5 96f2c046dfc6f33d83adc65498d9a8be
SHA1 2a190c291bd13e39d9255e05f9fd7c5d2b40cce2
SHA256 702ba2883ea5781223a345cda2f57fec96e2fbfedeaa19b05b43496278c6f43a
SHA512 aef0866fb74c356120fab0ee196b0fc321f9ea315693dc40aa5c653c850d9185302b8a5ac99245670818f82e3538802708e89d26a57f404499334f43d4c47f88

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\prefs.js

MD5 968f18caaf30484bc3994d70f21170b3
SHA1 a974de0ae57ba95f598eefdb16e85c72e6d48b58
SHA256 7ac80e8425f800d86e6a7c67da3b59db153b9d8d91d34cee260057d48ccbc585
SHA512 28a62a8059bf6df5f9c1c9e9e5b9c7b3c8bdfad0ba95ee3a504f52566cd1a793d7b586a03c4a78f5bfc602ba887a25e9cbc0a1953f7d0370d685b6305e666673

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\AlternateServices.bin

MD5 8a433a919f4ab75844bfb7abb073deb2
SHA1 e11ca7caf93ccd4543fa3f4d335943ab4b35b556
SHA256 660e621d6d8432d09f92be8d16ff14e475efe73bec1efe0b02807e03bbde6ff5
SHA512 100b11fd2e1d84c1fa1df99179c67f4044bbe73bd3f33ec8597fabcfba95605acf3f978b3f5fd11fb24b3db33862c1d45815293ec7d36c2ad54ee772809b0ad1

C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\notification_helper.exe.manifest.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9f5bdf6ee5e1eabab46aa014606b4ca1
SHA1 10c1a47329ed8a9b1b0473a6d63b22f673dbf036
SHA256 9b99f44931cf7e49abf7ba84b701cbd6d7c42fdb8a9d11786a75493cfed1dd83
SHA512 7fd13d40c8a277ec71e4d5be5e23a80c49758730a40cc663c56a6f59b4463a808e1655bbf481ae6fa3abc35884ee04a1a58706bcf247746004b85668a08125a3

C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\identity_proxy\identity_helper.Sparse.Internal.msix.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 beced5b7a555cc859ac41cf4903c5ad6
SHA1 afcb8d08b918aab08636f8a85ebe55f749b041d9
SHA256 f5adb21793516dfa9ddd80bcb11b91157247bfa6a713b7c7bd089a4556d25ecf
SHA512 75dd2e2629e2b132f415eacd51f292d5a868c70bafb7ada6593dc15587d0f3fdb8ed1d0a1f9ad1b619b8a41ab8ded07f318b20bfa81ad65d81f674b65a175425

C:\Program Files (x86)\Microsoft\EdgeCore\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Other.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 7c8e227c42fd761edf2a353ccd8a2cf0
SHA1 8dce9dea06b64440cca8bfacb33d80582e8722d3
SHA256 1ae01e842ebfabf0c59f490937529fbd49a4d2e3b8a899557571b90e29190d93
SHA512 a96b0bf150e695660f03bd58cab1880414bc422c5e360e30546eb32bdc301286d166a8c3ff0a711542682088dbf4cdf482750d10d31afc9cc708179e702aaf0f

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\EdgeWebView.dat.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c6c34c855382da921488e0ebec1780cb
SHA1 16cbe549ee0de0a8f69d29cab016b39ca4a4a9f5
SHA256 903345c48043a8568df305734782a2930f5db6aaf7d6bb7adaa4256e184291d7
SHA512 a810d80d8620b616622d3d7b2383d76401f722a02853ddc00ac64904625d9758182c51fe0fe24054e7538cf0c74e33777f8c933240791897e32082167a62d9b4

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Edge.dat.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d57acfccc1c4da2d350e5469651f0aa8
SHA1 4d46716b10cafc62ac4c5431e32af41665183af0
SHA256 ef3c4e2e1c4f25093178346eecc1ffe389427de599ac14d89dde82ea518be0af
SHA512 0b3c5c0cac2be813b58467323941a5425b40885c7b62d75bc7de1513fbc1a08256e3aadc2fccef7476d8ca17d97c6d38925e2a1045019e7154a30b91de5e0bba

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\icudtl.dat.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 621bc965f3ce4bd27ff80c98a290ce51
SHA1 60a21d9d5d47dc719be2142b11c55a0107b28907
SHA256 5c7f6e3c75b03755f4ccd0379cb22454f3b3352d98a7c074d99ad4a529bbb06d
SHA512 6b5f27d4e6553c27334d222cddac8451085c99428b85100546daa067d3565464ebf60554013fe93db7cd0155a39d8477c2a4c50444c6c62b55adb3521f532df4

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedge.dll.sig.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 4946954722d4629763ec0db16671b04d
SHA1 7ce2f62540c1c7b79b030c50d12338d82700d428
SHA256 e862615c8efba6f03f96f3f9653c3dae46b357a7ebfbb25cd55ff796f6cab0a4
SHA512 c30c12fd935ea7b62fddbfe04562ee8179a40bd6e7711d07d3c75709b4f09fd0ea91ea2b17b7f1d895c3fcee5635a41b6d4308974c41883b70053758e46378f4

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedge.exe.sig.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 5c859f3df32913cfaf847c79d835c4dd
SHA1 ef26684f109ff51600d089a9455ba22ae4e99033
SHA256 f64fb606da0a3fb2d61c9889d1715ad782a0bf6582462f6409a5cd75009259b9
SHA512 08e92b3ff32c21ac9322b901ed9eeff265e10cf56b3921f3a9403ae35ed55d982320abdbc493a1616b756b3f4fa24aae676e3108d42e7308527e11878c895d68

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedgewebview2.exe.sig.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9c20d04e5233dc4c411e67dff0b35879
SHA1 b15747014f2dee7a4fe309bfb1e80c3ceb7000b4
SHA256 60129db704291d31b2aa04932ca13dd662f6364c1d72e8390b905113ae49f372
SHA512 6aca0bd7a5546b8904ed3a128c40be5cdad108161fa451fe9839d61e84acc6ba5d8343a3e7b91da1ef5b248c34846cb8e88e34cad2add753b808b52e713c42b4

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedge_100_percent.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 1dd0f3e08a0a59522571f574f7a3de5b
SHA1 5b000fa1fc228e30ef0e11d7d0f3c736dd9ae384
SHA256 329db0838a6baae3057756298daa533a06fc27b68331e990d62e81c6ac34c1af
SHA512 b67da3b32b511ee293c71726634c88fa78c12ace2a240aa65cf01e01233408e3de5a87af3e355e2b5479d1d29ba6c792d9e56d5c063a3511aa6dd3a6169b97c9

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\msedge_200_percent.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 010ea9c91c1a0cd81ba82a7ae9fc487a
SHA1 949389ca913fcd86540016d70d32e16cdfb853af
SHA256 156624e524b696d44e4a118bc2fd6a1fee7dfedaf87e0302f2102f6804f2ef7e
SHA512 307c6098b9119e3d00166ac4701c659c70fb9486119bd344331cbb144af84432c6a37d18965d9fd9c569ecbdb9b6e71eea0987197b6e2985484c91d70a7574ef

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\nacl_irt_x86_64.nexe.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d70b85f8288c8fd876fcfc659ab81f1d
SHA1 5dd06bb263d2e919a739afb2d6af5a62eab1ec99
SHA256 ed769905bc62a2ba25e00a407991af1da405c1a6d3ba5de3187df093f589c001
SHA512 733d2f2f42b78dd653f5cd09340f1f1d8ba2a72bf899003ca06582001c5539b226cd3bf90155151b07321e09ade02151d183afa1eccadbc40ac9adb722d1da21

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\resources.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 bd554c5eca180b01a431c3b68b3fa508
SHA1 97591a268d336a5af3cccb01f705b5ef7042ecbe
SHA256 5f82ab00ea819e29f6e58b036c22f51b051acd4ecab5383be2a17253a9e2f965
SHA512 5b993c5280dd69e57df01069ab3451b8778437144e8d57d3150465d665f226d3d2dd3f5ca7fcbf00f1a0126b24b5e7d51bf94fc545b627faca596f2be844fb93

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\v8_context_snapshot.bin.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 6fa84c9813c69e0613ba9db1f40a91e1
SHA1 c5c895667f47227a1fd278574479f898d76368fc
SHA256 e444d4c432b3bcb998dcec3d8445ecb59f2cc3ebdddbbf389dbd1ad66dc94261
SHA512 3ba95a6105e219204fe10b2b98352e186d6291acbff4298791cabc810cc66206efc57adde8ab84a6e83ff15b99d045540a30033c6aa03229410f305b7cc7c16d

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Extensions\external_extensions.json.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 4a17112cf5cf522437d82d08eb5eaadc
SHA1 733fc64f71f2e845aa58d3a0c3fff76bf7b4b2b0
SHA256 78b73859ba47807b75964c109e8de30fe2f9ea6a14b9e38bdf51dd0e144b2213
SHA512 00e64e9905a3cf21ce330d0df91f76658dfec1c1c4ec6fed4a95b382e32798c1b3ac0dae2bc12c63e651c6e7a3791df09da3c554200f0db3ded4b86eba9446ad

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\identity_helper.Sparse.Dev.msix.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c2359a119108c8825df1e2303c1f68a7
SHA1 23f822cd25bba364db098f770d8a0c91009cab8c
SHA256 f1aeb6f6b63341ae0c445ca84a7b6e9d73eabff4d9804eb67c1799680744a82e
SHA512 7a662efdf93a95c3397eb61e95159a6ff0aaaaa37380731a3a6b31fcbb2dd3b57ff4446cf540cbddc124d4a339771cf084ffd734711b7288f615d003c986d43b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\resources.pri.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 bbcc1e8e972bd7635b0fa9ad19e2363e
SHA1 f8b4ee62a2a04ef14e455235ca1c0d95e9dc00da
SHA256 9acae24d8445df9e6a6969903e384ed1bf0f09fa3395952d47e3c2c09cb2b698
SHA512 82afb74d7222bebe5f686605bc688f24bc4157f0869f297fd0794107e17dc14b799639b14d751fb57c0156b2e62e5982baf0ddf58d19d4b5c7b29965bbe4e3fb

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\identity_helper.Sparse.Canary.msix.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 720d695243234759d6aa82f86ad6d78e
SHA1 cc056ee3a9aed4dfc6f37810361e735245262f52
SHA256 cbb1aeb04535f937f2a57b0ea8d3090f39f7c047a11fddb39fa3cdc2efc16eef
SHA512 71db2ee8174c875a52adcbfb57582031a75207050a16b75ce28dd060dd3f1a11f0368b6699ba50ba51b6e77ec05c0739e0056e2dd09156b68a965ebbf36f9ad9

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\identity_proxy\identity_helper.Sparse.Beta.msix.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c11e3a0c6d560e211d3f363c8edd7259
SHA1 d99a35ff656633249040bf1d2ae8eadab7344657
SHA256 7260efa1decbee3d90429f2acd6a907a9bd66acc50f7cde11caeef131cf59891
SHA512 f650a31abf143f6739ecb6d8d3d37089bad9a133a2c12a6f3e32aeba9542e58885be343e6bcaed960682753f2eedc38c85909c0039dfaab901e5e522043ca3db

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\af.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f312ec1127598b64ffd7c7c6138425d2
SHA1 22ba1ab7cc85bab407d65abc00b8405040e5dee6
SHA256 24ed6858f26b36e3df2b2d2edeb3eb109e76ecf13c6015fca95235e364e6af79
SHA512 fbfde9cf4e590dfac7079fbf02b105592bec3b32ca269cdbae32add43f455752a1f39d387d53eb12a4dfb0b5005bfec2b019e4c5cad74dafbad98c9c7936e382

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\am.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8c757d40eb08c0a61c24b06e11aca0fb
SHA1 96a7a43a2c212cdb97e37ec4d7f9b45ccbe20942
SHA256 08c0eba1f902918acb0c8555c4d9f0e0820b81aca512a10eabe839a44dab2903
SHA512 c3104e04ecf41fa2d23e6b1acee7fd4d4eccfc1be57af03cca03b673b6dea047052c5c7b619257bf4cb42c787354a7d451974cc20db5f4516b810dd1102dd742

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\as.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 dd2c20c28357004dd3954b9f5667775c
SHA1 147a7652c15ca078749d501968a4536c45e965a8
SHA256 0d0bb4af694730e53201680b3bf8a00ea460e5f7e3fdec594f5a74b5541949d2
SHA512 3c1a94246c1f27e2a66b4611492cc31bf92b8b0467332a1eb7767a1b1aa27be525c7883e71b4581dee7abf371c878b782e8a95a7e86a88f4b547e03be5736c3f

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\az.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c196acc445df43c8dacf50794908dbd5
SHA1 9d85f550cd144bf92492bc2aae97d163057405ef
SHA256 fa6b0a92a8e30c36ef15dc0df2e3335b8207d4e4d6197f20c4765cddcaf56e38
SHA512 a9ad0e02a8adb0a37cb245becd124143e591e931af8b30c3ad0f21ac8eb11d9b68dcd61be32e7b070d0e6bf13352b2f6b5036838fc8a4ff19eb153e2cf044522

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ar.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f80a737add7856ca7bce2ef854c1e2ae
SHA1 d0fb0cbe5fa7399bbf9bc0b0699e01b877a07b42
SHA256 090c333cf1041a76769a1b6d14444fd29a24fb3b419fcef3eeae2f0f69d4f307
SHA512 3431f9b8a61a5299b2194f5448696ba2265753f77d55c527973367bacd1a8aefbda6ea4f40c77cec547935222f050b6cdd14ea852bad783a09e521ab1bfbc4c5

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\bg.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 3641c984177c872d9ee951db9bb2bb4a
SHA1 78579991805119ddb27890f9da4e5316b23e31a5
SHA256 86efa97a972acae1daf578419e382d75d1f1f7a9cf120a067f15dd5aab02defd
SHA512 cfcf2dd2906bc5c91bacc4e1e57eed57c71db9dfaebad209b0f72853d75832126fd21304ce8703af44c4744d6618c410fc3fc3a4370710ed9dc0519ca2092cd5

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\cy.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 e663cd2e69b505972e6ed3d24eececae
SHA1 1e95c24f2b8deeaa04ce14cd0fab5875ebafec39
SHA256 f7a5bc350ad2b9903f73fc55d624226509af0d83b4a35aaae897b09ebee1da37
SHA512 e932e765c33fc094b554ab4844ce97122ece57c12bc84fdaa63708336c08465fd8e03f010a9b6021f043a96668bbd953e5dc292ffb76903329d322a7456186ea

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\de.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 0589bc8296c1e4663c8dd245aec76eab
SHA1 1a7ff3be18eda01f0bb5ba18815701ab43e73cbf
SHA256 fe7d90b0ea752a4df5c5b4ac76ee0d915787c2dce692e970829aca6e8ce6bd86
SHA512 6b36d1a7c1a7f54325f52fb81a67adb3a330cc01c5cb43ef656a1bb3743fc9a1f6b311cdc0dfc1dc7c216007dcee1cc95df1816f21afd7c6ef8047c9fbfa1efc

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\en-GB.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9be8b59fc223a3bb80b1e3c8daa47379
SHA1 f10be449859a98070f09b36cc7af64ddce790eac
SHA256 f83c3881d2649facf46b610f5ddfe71749853c8079a0aebe39e289d962a79662
SHA512 feb56f110e76737c59309223f159a8571fcda94fc8f2f44e73329a858ddfbcb44576090dacd25b7e5ccf9589edba1b6dcc12a9fc7a8d721d091695d8662db86b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\eu.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 07dd8a06a9fcdaf9a862ea3e4a513b78
SHA1 ef9368cd6019cbb2154a58fb4b7061055808f527
SHA256 e456e8963a9a9f0b7f00c55c8595de564a1c5f5331bb1c2c3d66e353c8de0bae
SHA512 59e84dbe2ca69736719f89def35cc91557ebe99b68e76473257fbeee5451d74f29be71508e91342159635a20dbe9780215268a1d58a28e9e033a41d9f5991c66

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\fi.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 aaa0b2095c4d2be3cf6459aec08ae55a
SHA1 c87bb16b2a8b30c8c770c3d16ce381846050c14e
SHA256 62e30481c5c8fbf3df08b4c1428dd6e8367d135528f8fecba4088f1525c8ec8c
SHA512 4bff47695a1b0809138fe0d5250a4ba06dd3d7350edb0200ab41927b0a7ffe9dfbf2395a5100a7a6f3c2610b295cb274a055f107c1219508ca8f60c75654a2a9

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\fr.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c37b39f451f9b2bef45f6ff58de9239d
SHA1 f781cf54b06e9e27e9230fdff0f10b435a8c5398
SHA256 3273ff22b734e754578b449884942aa6a741ab841c89b27053e27f6f719fb2cd
SHA512 166604897258b11819905295dea08f1c89a8be210109355ecdb98cf27cc8bd3edd260c1d2b9d5d08f7bd7a06da9ab82cf056bfb08c466834700db2541395f73b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\hu.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 7b019b4eb13f5d3389d6dd7b1a8aa2e3
SHA1 0042e6535118a55ceb8c7451f2c14d5381a56788
SHA256 92eafb4ab2abe770d4a610ff16fbe5de41e3ae1922ced76474fabc79ba6e15ef
SHA512 70a323c0f0ff9256da442027e3f7dbc7e9310ac6d1938a52a18080f57b064fec976d89802df62213a8ea8ff0d9f0a5b0012949c8b9495f5fba8d9cc69cca2c00

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\kk.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c1d96b9df752db91fedfc00e063210fc
SHA1 724458d8580a91e78e8bf6ee0a0249efed7a973b
SHA256 7291b3147d2a52393b37f6b396a6129f11e120b599322afa636593527562bf12
SHA512 f9b023266f046afdfcf6b9e3f20bee80055576652d4127fb0d56be628bb52ea0880761fe9513f21dbafb4090f1a79c962995c281297d5da14d89db4310a01553

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\tr.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 bc9dd7703cb0857906bf3e45a05e1f79
SHA1 c7a3b586b9199f46d07a1c002bd6f3a61e8fc02c
SHA256 a17152ed09cdad338be5b01eea33393e0046f3ea9ff4729cf16e5272fe47e528
SHA512 9ded5803b226ee2ffb35788fcdd966e0643bc539cc5c23254d72bc9eff801449f05ad609634c8acecefe75b6f0cc033d261a3e3e7ede7692ae8d34c644550f6d

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\tt.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 5f13b4452d1f1da94872e8fa4e79cf9b
SHA1 59c9bbe34c5571db3f85993ff224fd90ea6944a4
SHA256 fb32654e89408b2df5830116b0677a5eac76f2ac5ae88ab84b2aa6ab8b301df6
SHA512 dfa29e939942e65365f66c027b471d4866d31da69f9aa850009d487e5e3bc3e8469d9ec489fbfc66fdb080149f747ab98c545f57f561f5cf869dd6a611b83816

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Notifications\SoftLandingAssetLight.gif.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 0decc667d963a671c671814b0c3a2442
SHA1 d74b9a1ced6cea3d60f147e1b87e9e842e391a37
SHA256 0b76ffe1a7f0a75408127a3744f00bac73d4c4239ba548d00425467fe330ad24
SHA512 37303cedbb4a0d3b5fc0bd8fe05e8c3c22a6b4a766fec59426c16d0aec7d972c6d357829be38adbd59237efa1568d278ebffcbd147b827592d2fc8d7bfb7a861

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Notifications\SoftLandingAssetDark.gif.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 de302ff170e7d6378147bf3c92196476
SHA1 afaa55d2bf22388f460fc6c2ebaaa46f18dd75e6
SHA256 73cd71b5536426c8c19f07d87f362a9533cd335ac546b12ed624d5a0a9c9f3b8
SHA512 97eef7c84d05ad6e2673c270395f61bcf163b52b4badf6bf881af6508eaa2131197668275f64be9621fca6a9b911945af9baf8656309a21b53ae9ac8892d1720

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MLModels\nexturl.ort.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 751a96622632819cc0191c45de1bb353
SHA1 53fe2ef1d86556b3964aa3948429803bc0476323
SHA256 e2b9043b2290a495c41974f0a89f0c18326723503f7b7b39a121d75f066994dd
SHA512 4a9a5a73715032583a9fc614090ce5e3c410ad94c592976fa2f9f27771ee1e643dd97b4d4643781f4248e2e1d5dc0021a09bd5fd4ce82b7dd4681751912f2c64

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MLModels\autofill_labeling_features_email.txt.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 242bdad2cd6ab09ad29cdf506e7bc799
SHA1 6bb4b2dfb5167ab75d2228c3c91f327d722b74b3
SHA256 afe5ddc2b37dffcbd112cca9d5f85a81343cc350981987304bd80be153392e99
SHA512 90e07dc5c5f8c2c694dde31d35b34c9879506a89e62b4ac6c75b215f777e6420c38ea8b4ea59595c531e9b6aae056cab05c627fca9715dc22ae9ca4a0bee8a2b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MLModels\autofill_labeling_features.txt.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c134feb2a013b4e35ea84d2ab0da6f9d
SHA1 8f1119c44938f94d24d6f27c11c508b02bf916eb
SHA256 ba2d619a61167a391657f8a7338cd2fe4edd8140569967353da97d9c23036d90
SHA512 0a0a5510e91083a1b4a72b4814f360d25efb2d98bf6a5aca6ec316e073dd4b7cceceb6d47f6c20e9eb0417db44844d2e29ccb09dbc57171cb57e8060c3d587d8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\lb.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d7ef68f8d844c593609b026a3794979c
SHA1 0b0a07aebca5b88b2d390a095521a33e962d7e96
SHA256 205d1205c2fa25bffcd815ad2da5d0a2513233255b2a15fa8dbae4ed22998763
SHA512 8e04e3f02d495a039f75f07d6fa0dd34d4c0d1115c2afd9f98b9cd86dfa44de8596d62303e6e6c18779bb9661aeab3c040c03b8c63faa1a982daa0323fa6d16b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\lo.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 b9c3677327811a645e50d85d542337a1
SHA1 a02e3a998c9dd3dec0b00a34e3148590979b733b
SHA256 0bffd3deecdc113cc4765afe57c6073b5b28c287da8db533f8a90b71c539e4a1
SHA512 b4233148a3175cbdd63aa14e427473cde209dff7ea60e7e98eaed05c9c269229b794dc6b7219c5d43b26efd0e7adef4358e591a4e1e4d24e69392eb69401ba17

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\or.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 837bfc6190327ae0f3fc5ded10464d75
SHA1 f71d4a82399ee60e9fd257039dab647874779fff
SHA256 3dfabb892900ad8ec7b5875c2e7e302f3cac5962e8e69e9e565610129a6ad251
SHA512 fb74bb8fd326e4f709289ec26ae61bff639725b6df87f442d00ebe9b79d6e6ec2b4e35a0875974338d495abcb33c11a134fa437b0723132ee2bed90e9f1af6fe

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\pa.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2c3496f0cb892eb48a2e8e1e743e5092
SHA1 a6d2e1d203696790a8852ea2356861d872b0c3cc
SHA256 d8f5a695b740df2f44a91cda1f06a570cf2d386ef9c1d7639ce22889ad454101
SHA512 a161b45e1abea2b322701568bf43042a5518a58f02070bd5bd52412cc2f93925e9e96e2f04de7dcab861170f862691ea94ce44f7fb4e5bd33ae27ba98730d3d6

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\te.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 1f2958675a11b1261de87938fd328cde
SHA1 c5fde026ddb1a080f8218b3cacdf9714b7116108
SHA256 7439fc789cb3eb85f1acca21e8f4288f90bc6831be045e9ff72c1199ac92c610
SHA512 4cfa20a7e4d14513293873966203caac2e6a642b15792c06ac814f27433da6fc2a1a536a2854ace4568c17cfd56b34292c52263395adf5f99d89a7218d8f9ab5

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sr.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 61f795aaad8f3be7da216df9c007603f
SHA1 f39f545e687e26875287a263aa39f39bc3ec3f93
SHA256 e98d9aed205912ee89ebeca34396eedfc837ae34797e3680dcacb11fe2c6f850
SHA512 f8765b77a6157189b5eb9a584cb51666b1807b7de29272b47998bc47bdaa9d0dd5495e82598d1ac4c66ec72804e60230739fbb1c84ae88916a80bfc4063d8073

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sr-Cyrl-BA.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 370e9568cc36c8f7dd0aa14326ec17e8
SHA1 eb07b32fe8e1285bcebe34a6e8d57ea5e7892eda
SHA256 ab4cace5fa46e11cff90674d215c522cf77d7ae3cd8eed0eeb8e7672ff2cbd0e
SHA512 9ba5369ca44ab7682de52496d5ea183d1c4164d905757c5973038f8ee8e67d23e412faadb11b998da24b91779f9bc3210d38ee6b204fe8e8155ab08d17aa7b80

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\th.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 1e07aa47e449242e37b6bcf4a7be3bbf
SHA1 63a4bb97405127bb79b9395c8debf9573676eb8b
SHA256 ff0e56c66702f86e5756e1e1edde49186e71297d8ee8437ae97f1c611e9f20a2
SHA512 704eb7cd342ce8957b053bb21a4f851d3babdb3a3f1dc1339b759a336e184e408983a1abacd912b1cf500347928def7eaf6811ed7b3770c3d99450cd787e9495

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ta.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 6b9883e2e2a762aeeaf8dcbe5a00b51d
SHA1 1c0bc6ed0a91dcca4780a479e55415dbe4763669
SHA256 f835a63f4b1e2b995a0ab87432d8bebfe5164e0a6700d7a6c50d4470838117c3
SHA512 9536ea698ec2962d7cfba5cdb64b2f174646fcd91de2786c0c3ac31f900cae4c8cd112c8b63c7ca8a1c89f5375d9475b8fbe96ce3d11e7b71facc7a525d015b2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sv.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a4e90b06d264a9b28e33e3f5b059b74e
SHA1 abaf81927ddfd731723eb602df8b65246480e070
SHA256 168dc1a2b7177bca21bd0baf1c5a0a24e58d9d9f6a23f7f4695f45da826a1ef5
SHA512 25b3438ca4f71c1f45fe5a8531b86f0d8f4efa406c4770cb38dbf8db3ae33bae32ae58ea11fa46bd7c6d7bec5fdacd1a93d45665bcc205f348224233ed1f2ee6

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sr-Latn-RS.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8eac78a1396b601a8b5f7d56ed826d4c
SHA1 9619ca56db6f021c6c23bf59461492ff188b88b5
SHA256 df972807a0772e45db00278752a1c06c50bb7aa10abafe6c3dadbe54e4b6c688
SHA512 11b75e24be879645d4cf85951779aa6241cb16fcb75b2323de42c37a0fb7eee015483264d4edb056c6b1ef8b6dac268d4f585a1d025be422123c061491f9a8b8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\pl.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c66291c86445cfc61541af923f285575
SHA1 be54f6a3bccba3301ad480c01f294d83ba872b27
SHA256 90eafde481567dd88e132475b9f057c27d983600c835153e5d0a761f80362b4d
SHA512 d0739806ea47c0e48a556b115414511e91673ad65e91769e58f1a9ac425d76098b4d1e0d9149f0ca701adc7525586076975401b69346f71e0a59affe30cbb8ee

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\pt-BR.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f7b569786ca92ae3b910af7f994ab2cb
SHA1 2528eaa02a0ae0519531f9ddeba0e2c400c1d1a5
SHA256 354889dc54bbd9dc2c1fb491a47de8be71f35ecd29834a5760b445091378d131
SHA512 b54c2cc744c7a9f7f7499f5574ee610a1e031df0a2a389cb30db026e69f967c6a96db6cf89b276ed9658d01bfd99573d6ed3f270a66495d5e49eaa9a4328534d

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\pt-PT.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c1db472807edc240378598a529e36834
SHA1 79ca7a88afd85c372c10dc4f4f633f5eccaacd28
SHA256 2f2a23e5a47b60b6ba9c434b3de0c25dc0560b8e2527a1a7816ed2adb43ccd2a
SHA512 1ceecda9247ed093f40678dfa34c6a29f650379c7371ef48bc6d0ec9056c4dd22ccb5cb9ab2d9093741586e4f38372cdacb405f13b05a86b4ed51b9b5995d0d2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\qu.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 92d673a75c6d65eacea55208772edac5
SHA1 91587a3bb76f9022673069116d64968387731ed7
SHA256 fe87a285f4f382079d31d8bea44554cebdc93c7656018a27492e51d563e8f315
SHA512 4471896d5a2bf50649b360cf4e2d3335c1b089bd0b9595cfea63bafde472d0d03792b756ebb48b1bdd41eeb1b1686f1939f3eb204a0993adbced40e09d9868a9

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\nn.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 e8cfff5d161f17b906dfbc60c13a2e44
SHA1 b045a8e2c577c83b99aca86db424756924af6d23
SHA256 680ba41cf951254d366f4331bd9ff6ea4061caca89d9abe1875f0b09da53d3cd
SHA512 b74940f3c9412f4999bdf61edf3852bf0bd0d37fbfdf90890df37be1f82307f803ebd4fc22e04904adb7d06b932b9b47475427d45086f08186076ef9ac013c5a

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\nl.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 718e833f08748f006aa23fa41f0decce
SHA1 3edaf5672a499b3ce277c46b5088eceb6dc528c8
SHA256 ca5f5aa34fbdc10a4b50937ab458f0c791a09cb271124e70f11924c3fb534af5
SHA512 830c6137f948cafb940e51e1a1077d3d2a35051ef331aeb207a36a5b230e04988ef149152fc4ef9f2933a61214fa4f3f74df18e834c8dcf73ffbedf799b90f77

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d2a66d8b7e30bc3a911784a16a1879b3
SHA1 8934e76895d730b0543dd3591cc2d163edeca41c
SHA256 26b7e87eabd5487116d417a69166a33eb38e115ca5cc52882fcf2c4191dd966f
SHA512 0cde149b6c18a283b8f87e9379f7e52d324dd5dceae441a5b698e9ad6c370025b79d17eed8f505a06c983b935e3b34af546ef0325e42b93f37961acd2d80b800

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\WidevineCdm\manifest.json.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d17b42cd48f4b52e29fef0729a452a2b
SHA1 f2dd0a46927fbbbf06ae2bda43004e51cbb1cdf1
SHA256 4d20c33a292a6519e914674a947844689ba0fe6ba64464708359aaea7fbf6fec
SHA512 74eebe3d47eadf25b1c307f595b142ab8077b8c9a285149fd9f45c29163ac859021bf304662bdbe5ecc8c768a300d6ad3f5760f9a774f4165e0e5a789794ec9a

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c66d9743c57cd2c7755278870d8c4e94
SHA1 74b1fe42d9027b2d549a7958b072ca6c71f319e6
SHA256 22d1e78a901a2b96e5a4922cea73d94152d0d6874015b3b89fdef6aca51db912
SHA512 56cf660d4ec315d1c57981764bb5062e4061016d6e8a68969419836484c4932cd8ceaa67c44d55c7205bf3d2d00bde05171107493c7cc8d1c91d4bba49f834d4

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 de903cb7c9c006b477bd41e2f2f76dad
SHA1 4c7bec6f5d0693347f91d21ad5e5ee367d23fe6c
SHA256 a2ff2a0db8f48dcb31a3293b3039b1bf4459690a8d1f17ed03d18f02fb4510c2
SHA512 8b338b8bd22d1c29e8fd2c825a4e6f85a0fa361b918438e78362a29240cbe96da8aa017ed99d4d2aa8e8e525f460a9dfc1525be69e2fe7ea9f875caa19248c7c

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 cca7d1a49e9a5124ff0b10e70188c465
SHA1 495e8755559d598e8deeac6c5f0b584a3135172b
SHA256 d4b1916d2ac70511c072f9d4d1ef393d8e84a232be65b369d9d536dfd245326c
SHA512 cc081a92ff4fde0a00bf79b75c775e58e799d46180f2fc508a1161288039de5a759b70cbe6be07819372a2088e8f8a83465d6b2b700b8d2dd5015c59baf80963

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 547ea24671bbcd63d709ac99b4be9cdb
SHA1 14ffe671518d9e17c62a5c03778cc57c4dc874e8
SHA256 183498042444fde42fd1c4c63fc2301cf3e023de1eeb7f40a0ff3c720f1e34ae
SHA512 c7ceb941cd1fea20e2bf8cce44a91ae0f5dc8e26ca488f5c8a4a25b61fa92b64934a3d1e1733fd0e79671d06a651158d662849ed243bb70c29586942df568052

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\LogoDev.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9695fc84ae949841deed0621a1ba1f96
SHA1 36fd266f3ba04967fe1258ad914ee143afb92992
SHA256 6b7bcb4699a3bfe0adad1ecfefe71f776040033df7c5b410e2aff70f4eda7877
SHA512 d358cb8786b00d085afbca6aeaa0b93b5a2048fd8c06673b46688558cf5aadbbee4cbb132729e5f609f7ebc0589c52a9e62872a267d55c2a9806aa9ffccced55

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 3fcc29ce3e39950adeb8524247662baf
SHA1 e1f192b7497f556cbc0ad225ed3437e2e7320d1e
SHA256 6e3da35432ad6c18053f279d795864c33f2ba3a4c6010cf99ae8e05cd7407706
SHA512 250395b6981a250eef97af9b70017d9daf404310eb34f7f55143001f60df51783ec2d888ea88f86171b138bae6d2d68ad5a7c31152e78ddd8d4709579741a12e

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 b30179ce19a13b1f3669227c4d75eaad
SHA1 657c5bfa56276d25bc1e0f94e4371162a74d98ac
SHA256 a5e8231af0e7009a7862da89c86bbf408f2e5610d94baade26d98d72ce634b7e
SHA512 0b0450b38147e73708d376879a6931193590a6049b1eab01c5f8992f299a93b8b41eeef48547f8cfdfd8dc18abef400dcc9c8e45fd62a0b5a24f3d308021bbcb

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\VisualElements\Logo.png.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 82122aa20d570caea7828eaf8ab5a423
SHA1 f24a9502d54657d806c7540f0db6ead8fb59894f
SHA256 4ab26442190a47484fd58d366d5c96258479300dd9b07be025b78601d98e7c89
SHA512 1f262e300b0728425159849fbf1ee27f461711d8eaef885a7b55008d56ff133c3633c99335dc3841d70b46ef2d2677a2c07ffeb6df9aad9edfe0a79445c325cf

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 513950408193eac5e6d258d5f5ac3ee1
SHA1 680fcf3feacca3425663f1a699609fce2391f1e4
SHA256 de4cb2331a1d1d02e4ad02f4f48d18ca88f1d2801148219d637f29928c5a6c7c
SHA512 4ac90d1339a75155b8a7f34a91a3e413692c0cdc90620bd81df507e98afaa08c575bd52d546a325f5eeaf34fe0c0694df9d0f6feb3dc2a6e9751fad4d68121fe

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Social.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 df847115878cc3100bf0ea83828a304e
SHA1 170d794198a38244e73f0069c99ed991a182cd48
SHA256 49a4d8db4bea71239a3eb72795164503cdaa2a98604676239e0c943b3c6f422c
SHA512 4594bb999f6742f6a0964ecb8ce6c184639f9f062828536fb868a71fd043f17920b444fcf24d7098f500e79e0fda76072fa557c696b658641885897b26a460ed

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\LICENSE.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 cc5ba8966c9460a42973f9fa341a22f2
SHA1 3e692486c68164e48a17e35322d5803c05b9a4a0
SHA256 e8bcdc401659095118d133d7e8836719c4e14b6174e9bf5ef3ae7c1d417f8e08
SHA512 a864fa924338dc1636aa4d9588a3c37bd9ffa5268ab22b2c988ad60672f08e9e8f097c3a91b1cf98b2bce9053769838cc08a346689f8897a93104ddfd751fc13

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Fingerprinting.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 59a13c75fa30d45329b1abd3f64008bb
SHA1 5a10f319561c9c2b4bff261a81f56801f4889dcf
SHA256 40c649b7e9bfb55ca110af024153b347b57a3ffcb9c2b4526f58533467725577
SHA512 c53b41c28681ef9d1b0e7ae1556f1d0b1b064ae0a71fb0966f23de6793411a08e47382706099705ba1147d79cea71aafa4358f35dad6879896645e0945daf58d

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a90bfe3a5b609a014cc22115f615d3b7
SHA1 1ff96306729d47ebd7b02f4c12906aef0b39d713
SHA256 20851622cb82682c8df06994acbec15db2beccd413ec6ca35416c4978d04f896
SHA512 23b5138eb18465545bc2651607e95f9fbb65e7daa8cc1d9710b1aea8cb8bd60413d24064f26f8e49060110654c26c2d67131a07343d640414c6703dca7030571

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Cryptomining.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8ee6aa6d74847038eb7f75656ebbdfc1
SHA1 01ac5dc8d26b4dbd3f629812fef13922fc76c7ac
SHA256 d79e22f65bf8fd7526c27c0afa30e65d0732ba2d0e6ce793a9eaf10e0b91373e
SHA512 046727f1c66fb5b41ae749a763a6f52b74451d42a9fe39ca0beb817d267ebbd2c44da0ca4eaeca1b5aeddec4084a098384354ce34846439e14a5fbdb95a80348

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2181464773deca547b71fc04cfbcf51e
SHA1 64130e290756c54cdd89d47f53a8a5e185e7b142
SHA256 fec0e196d6e0611a85c0a5b2aaefaa37dfebdad42b831bd398043ea891168475
SHA512 2de7d597122f2548053c53d979c474c92e85f76215851dcb3baff1755b475635e0077f2d19585bfa2411715775a4905cc4455c127844db3a6d72fa8c4836ef17

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 56eaff4f3b9a44143eb0a699805885b4
SHA1 de09a453723032ebd2aa19d7ce69e2a12f15841c
SHA256 18ffbd8dabec9299a8986ae9b3343a9e4a27092ecf504f4af7fa1ef4a84667c7
SHA512 69c23a0be940de644dff012aea49ba1377c424f2accfdac77f0072f1f09c362e891d45cb826f4975eca110307fc78903f6d2c57b1cd2d17b5523c195a92c80f2

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Sigma\Advertising.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2bc0b09dc4e78d0939d8419e8c29306c
SHA1 b9fb3c1f144c306acc9e1810e2006408f7ffea0c
SHA256 ef3456d8f3ea6a201aed5b50e2a5104c337d699f0e9bc0b1e2ddddd30cd7162a
SHA512 ba57b7c1d32c2e97164af23323aa4b3ae92ea8047eeace0ae859c0de710bced6c2813565f4c026d87416d515053692bca2c862fa27e1e20b2921473f3ba99059

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\TransparentAdvertisers.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9c1a942bec4b7959a509951db7bbb27b
SHA1 61e42d95e7992cdb3a799cc35f3180936030d64f
SHA256 2d2eda382054e8f270f312387ef63b7667b52fd9c37c361fa8b58033843a1d45
SHA512 2f84f0833b7af7a5f47afd2d5dc3965013bced47def0fdaa7feb16e60aa0122dc4c302fd1815ab1cbd050bd83761b59906aa661afb1ee3e3ad3c4cc596111765

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Social.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 b60c628077fc04ccd51d249d2ce0633a
SHA1 73ff3c0690d6902729c7fba5c2b39a0675f94aae
SHA256 f21001c2c609aebf901b82d749b0a5517fe556d500afcb74d6400ab2e163850b
SHA512 8c9887b92b0ebcc2b907db26afcc9d554b12cf8d299487303f0b6eaace35875bacccba8ca779908aec81e10a29894d10f912c4a13d06eede3d865017617a8092

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c1e1b111c432ac164e66e780052bd82c
SHA1 ba8d16a18ca7c594e2b476dcaaf0ec92d0833b3a
SHA256 64040554820a30618f3980375e3e9e123a527b128367589dce7cc5ff458ea48b
SHA512 e14fe59a81ac99e5639d4ce5c70545f7cd8798fe0a1731aa59604a507dbc04c7ee79345bfbbbdf9f467cc75b8181638b95379f836b45328f95e28b7b56da5933

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 05c6dd5a9221056b946e92e3830ac397
SHA1 992b3722a94b96f51b99ed2c8622d93874989445
SHA256 745371b751f36c858b2f01420dbf6a89e14369b4f7c8594518f22ec0a0a4dfed
SHA512 e65edff09472a0680ea30536aaba7408304ded3867a2883706f68d28fead38c6d3a6562d1aeeac0b97896c3816d9ab3b4e96e9efd6b4664085ecb1d9f4973a3e

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Entities.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 bc914e58270bbf6d76df7ed7297d287b
SHA1 63320531d10078f0c4dc61f09f6724eac40ccf55
SHA256 97e55978fa2748aec942edfab3decede5fb8f59dfd8a7f681d57c1597dc912cb
SHA512 55d54770c0c48d5900253ee6a42bca43b54bc2d0db30685dcaca0e7d26f16047922b31ae4f6829f93296542be2ad32532458f4610c1ab7d69445768dae26e8da

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Cryptomining.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 034ab4c8babe0eda21223fda7d1be351
SHA1 212b9dfb8cb6cd31577e87ae8a746fde9e228267
SHA256 c7c6793dd79c4ce6a312da5025cf0f8a59ac1ef0ea78affade793eef0edb2c9e
SHA512 4a73d16e1fe1b1580c44a2df108364b3aa9ab377c781e360c49589c328ceb9bbaada80fe3f71f8b59e6279165bfbf28693ca6e26b2b4021ba059ceb8bd254236

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Content.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 683ea0d2a997fa9d9e7591ae3efe7226
SHA1 ff50edfe5d6e3800d51e4c55a4fb1577d413d117
SHA256 cf32ab3426d96ddc56626b7b41f864b342c90cde4afc444cae8a442e8169a07c
SHA512 c8acbc02663a0a5510c5460ac84debaf98beb7634f2cc0cd035bffb909604f5cd995281deabd0b331fd9ed544822cbd05743a17420afeeab6c29145469c4cbd8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 694d4a2cb983152b9e71dae8e45b0a70
SHA1 f93c37adf130140da948f1cb97dc9d22a894a833
SHA256 1e5d2a852da29bddaad358bc3388c1c5467b09997db7cf1266f7306d60c68a7b
SHA512 497136ef91a8f4f3957b0fcad0b5c90fa37d52957daeb884b2e550739b12aff90d82b2279a6916f51b62adf420834abb5d2ca6cafc088d7bab85f844125148f4

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Analytics.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 58b8a924535df0bf1f2260160530ae9e
SHA1 8674cc6b295fa307dbdac0343f3282534f8eabd6
SHA256 b2ed8cff436c42cdfdd68d91b0051a7cdc0b83c0d68a9e16b8ff6f345425e37f
SHA512 80b0eec201cb5a717013b2b615852695609122947cd13a3b8d5dce7bfb8a6f36200f8ab228245836c933d2df9c50ef9d5508af0bc980046bd943d73559a17668

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\Mu\Advertising.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 ab003060440c6ef8eaf184dc2120adbd
SHA1 59783c1e814a8e60d99707754de551a43fb7f03a
SHA256 5785f8c603feabc148721c8060ee15df4b34526ea81afcb86ad77f761b296b4b
SHA512 f4096f6699bad47e0df6eab616c86c974a83460d3322800178a253df5eba2b06ec50c0b0440887ae92cc9eef1693ac8aa0c3844a6afade0f437e80a5b7543779

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 643d94e2ada92176eb01db39e7d20d3a
SHA1 6a831231f357b5e0c90712e1a4967604aafbda6c
SHA256 3ac240727823d91969eb29c79deb326e19b97f35b8c61c61faf824789c5cd6ee
SHA512 96af0c0cc8edb515ccdbd7e37701a45a18639bfb8156e7ee1f70dbea361ffa9dbc9fa791b309a522cf561089b1b8dccff96bc21aba6d868bb40a9ea691149aa1

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ne.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 55d46d729b3e5d9c786a1d6db5cbf467
SHA1 71461bd0555397e95ac9eb312e3dbbc65914a85e
SHA256 e5453b268c10bfb283534dedaf544d5024db324d11cde072d9dcab472572e2f4
SHA512 cc667ffbb82012d705e3cb19d869cb289b4fbc5d3cfadf875a62d434f7166d567078e081fee3e2cc4f3739990169789c8b9450596bed8fe3f0c383c283fe9720

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\nb.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9b47bc6ae5e1acd762d652d997dee25c
SHA1 2ab3916561a7bb2fc15075497122d4796978abc7
SHA256 bba2b42568feae802c0e8ed0d4364a12b26198e890985493236d44a883b0550e
SHA512 a54a66f452b4a8980e9e6b680c6ca955918da52abf055f5729e40b52b1b7132fba606c4c5ba28d223b18fcf410ea14a7d30d021527090a110e5253ed5fcb7644

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\mr.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 115290ab43f438a31fe3d0bd2097729a
SHA1 1a8b3bce3ba83ef003039e429ff1a0f40067695b
SHA256 6ea4f62f99f3036c64f9e9e98a1a0908740bcce42a0f2f5e2abbb635f67efcd2
SHA512 16aa0774295a1a9e5df3f2a804286c35c1d09c34bff50068ce6b2a22894ee3351f33f9ee1df597386ff522c433229f62e6c1fc8ea0849357536d4284afcf347f

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ml.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 ea6bbd2092deea564ba841e23a52dec3
SHA1 fcaf17ab97e257fd7ec8c64221bdbe07e1511c51
SHA256 44500ed36a33d154ec58dac16db3230bb6e4621afc8a05e38fce97290e62e818
SHA512 504138a7de9d8fefac78c419e04cbfc3b46d225b21da5416342892718e147bc689c70fa609f5023f9413d27f69c7029057d9ec5b4a171fc8afbc0c33a843b5c6

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\mt.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 71dd427c9cbc1164ec1d15c1b1cb0686
SHA1 e176659a354fc307ebcdc32f83a03d1af66c8b69
SHA256 afa12e8845f3f4c47f5ad4fa9ff76d390658358e58f157b707ffa29977e9bc06
SHA512 a38b2ee2996afc27aa9c8989b89b93aa18b1692a00b8fba794d286f69895d6a3f7999a18e188f18559f5a701a26e7fcfde3a4881f9156d94b4c2ccb5cd3ee740

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ms.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 6a24457ceca9582595e8fd19d1b9d9b7
SHA1 ce869adee424a41bc95042f2919639f19d133722
SHA256 f4a11ca9a363e8281bcf3183e071a48c004985ba4aad3e94d725c6133c584bea
SHA512 e1176ef3e651f1ddacb8b303f37a69fd773bc3a6ca252efdfee01ab1d063237cb205a9ab08b79225190ec6b5fc8582535c9de8f3023a3424af9298bb838125ab

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\lt.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 7976bcf115fc7010d8701d4671986624
SHA1 0f94173591fd25feccbadef3c730ea060952cde7
SHA256 0fdac62e1d74bf2b9114e0087bca5945853651aad46705da40662d6c233fcfee
SHA512 cfc2faf4a13876d96a3e91f31898a96ffe9e87fec5012721a999de0a015a2c6186b012c5cf16459056d6d8d4ec937503974ff29a08a6273fdf48cdf56a915b0b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\lv.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 49aed954ac4b87c03a4c20a37395d67e
SHA1 2e6df005e413687c6f4a844999d5b5089e142a24
SHA256 6d561765ebd7c7ed05344041cbadb5d6100bf71c4d83508a0113fe43cc6af8f7
SHA512 6c98340dd5940d46d5be5d41e31f3b56bd9c57629233565daf888b2e454292a74d8554804a424c205a6cae01c0e58e416a6c1b0eb3dd4398e657818cefbe42b0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\mi.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d17043659d992097eea4b31c58e8ebcd
SHA1 e915913786af87b64d49854060bb7953f1b6a775
SHA256 4783d08c5e56a5c4e7b63389b5887ba47f6b2619c1579ca175e5f2f7c7f4963f
SHA512 5e61b9a57dadd775b735320a99defe017fbfc482cd23b874e7db3ae263d827388ad723ee03c213cd0b760a78bf7f738fd1733362900d4ca050ca5b720429affc

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MLModels\autofill_labeling_email.ort.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 ed48bf58663d5ee4db0ffe5e26007910
SHA1 62c441de114e9fed41e8c30abe17c2d88c757154
SHA256 7ee223b43b8cd687ec825227d84705f0e5b90b4269b921f4cecd3eeee8c00a5b
SHA512 f33822f04415e3bb08a049827e8318a0da0396f2f5307078c6f9582482b3db985cd972786d7ca0d8d70a1ddc7dc9d8bcaec39367b73894cc46e81eaf1b113a92

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MLModels\autofill_labeling.ort.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 5d240db99400bebfed8ba66bb95181ea
SHA1 0a70ec34322569e1beec4fdd3e64dc1a3aec83a7
SHA256 a6af3cf205f8f2f1824494c6f2c5dfbf0c674c7af1a53ae78a4acce773de20fd
SHA512 8d623c86ee109f5e8d77f7645b6527ac238e0b317752924fd800cae668f59047bef9f177f5a379d3fb121d21f8beaf578067e77ff1e9cd05e4d635dfab543653

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MEIPreload\preloaded_data.pb.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2478e2c09075029876e1084881048e65
SHA1 7a328e416e2d2004e29a3e0e6d7a5044b0ee39d1
SHA256 17055bd513a2d8b542b9b3885639d970fe8ff0e14cf44f8c534e71383271ab90
SHA512 74251df0052ef61a69f7ff88f41fcb9606f60a2edf9a6b48d18623edfe103f8dbb3b9a81862d2e608c84fabf2943719440cd28c05dcd8bdf4116630b5c7283ae

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\MEIPreload\manifest.json.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f0ddf152bf2bd838741a7479921768df
SHA1 12824d9fa8e0540d2ab9236a4eecc36db6395682
SHA256 c2e6038d16908afba4216e5b6b3772286aef913e6d9ca3e8add28c4e78cb469c
SHA512 38f28f1e4f0b449622282daf96e798ba0304545cd8ae7ddab3a665c6179a7a8688a292158e23f614b025786b79fb13b64b1a35051c9b75d26bde8204f98f7910

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\zh-TW.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 523bd80dd264a3c0aebf5a81d2cf1053
SHA1 f979f40fb3827a04bad05cc3dc335946b960cc48
SHA256 a666aee2eb9f22925a918116f2e7ecbb1774901c2e711cacb1a0d73f33f29e28
SHA512 1f1fbfc9eb0881ea6da03c010c4f43980619fdc1a26186f6fcfc510ce381b66ed06d84a8597100c290addf8cf55ed7723ba629c0c97795ac14ba1f80caaea0b9

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\zh-CN.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 79a238156ecf46aff4c06aebc5da3a00
SHA1 89f49052a476674351eef1bdb08edf55ff59e84d
SHA256 accadceaea776a68d30222f31f122bbdf540201767ffab502acb264d1068cb95
SHA512 fa2299e77e1483c78af15c22ab81fda37be28757260e07a87dc69bf16d30508bb46c1ea2a03542e077f72c0db579747f78b7975e0a2630eed880bce9d44bc6ee

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\ru.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 c987e650f189b30bc28880a5862be67c
SHA1 d9135061b714729b57ff4d6f45ea0392c031e647
SHA256 79353e43b2570ff3c8eb77beb84cfd2888d668f0b1c036ddfa820dbac5d4f1f5
SHA512 80f673c79d20d6bccaa976343b3b0017d12c5dd110495bfc0dbc2e1f07afe32ee5def6c294c1cd5fda8b96f3bd49e5eb4a42173014a339103ef845d154dfcfd6

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\pt-BR.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 de052dd1a6c5f37d76bf7ed74f05e670
SHA1 8ad6dc5f042ebfd0703beb3992ba001e079eeae6
SHA256 7b9ffe62fb3431fe1022ef654a9e51de1a29498f2ab5ed0d44b8fe1a38d32c29
SHA512 2d3e937276334e8061dcddc51782cf8a959e0fbd480b0b1978b92186d7f4d171d29a6f75dcb7f8b654c0768ebadcbfc1e85a548a33d116971e297a0abb279cfa

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\ko.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f943c54de698ba23b88b0a7eef15dce1
SHA1 82e33a9f8fd4fa74af11ea705a59a3178ce4835c
SHA256 af9cb0f24138ca0718499b1962b0e895e970181cd179ff96f26a4bfcf5fd9de3
SHA512 5b35a30377805aafd74be8d461ab344b6bc58c5d4cda984aca3b88577b49a4df984ebafd556f72c44ee0e2a5416884d9c75f0a17354948df7f465da70b151b80

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\ja.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9b55829f11785fb981937f5f567893b8
SHA1 abac200ca1a1109c325b67a61342cc6c4485a245
SHA256 3794c51fa00112aa0f07e5a7a49266e81b5214877ce7136de92276c617972f9d
SHA512 0a12e44831e3fcebe03826e6ae842accaa2bb08ae8ec642bc4a6b129a37bbefab564e3245e786829043457e2d39dfc7456c642aa19fbb312d5e8535a2cadbebf

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\it.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 673c4c8ed44503e8d13e0917d4f7672a
SHA1 1be83d4929e5d65f6e8221d2d4e8995f56aa7058
SHA256 c510d8a792da10dd47136b81c022a5aed3894d57448559b405fa4f08f180ae90
SHA512 f1c97b93a74e672bd7918e13ac8e24850d329e70256e6645b078e82b17bc88434f89d6f2664956402d470d578e608903a545e54dfead1e7b1b072fffdb46306b

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\fr.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f16e32943a1411ac04a80723087791c8
SHA1 88bddeaf7a520b09ccba84fb5c0f475d3bf46f27
SHA256 7991d83b18e2b984298ecf6eef5c59bf1fc9cecc91e3d7a23942a483d3310436
SHA512 33e4bd9773a5c0506f39c5c9df55b6dac1bc4cfdab94d584f7f2cc30c1f6b11ffecfd12e1dcd0493f1aad8c0beb221a4a5184d357f6579ff88e303b07baf8757

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\es.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 af444c32a3ea662793c00588052f0114
SHA1 6fde2c5864bee127d92d685ea458952da70b58a9
SHA256 042e5434ef92672556c8d7b72c67fd0a07727ea921762c79f10b0db4b7147785
SHA512 fc9b8cd5fe4c7fd205af0a8cf137e5cb2d45149217589c51dc0682d4a1c0bd58f32306bfd668499441d459642de275efda1502cd7e90af36e98aaf977e088b22

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\devtools\de.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 33337ace3c656fda6370f50b161ce0be
SHA1 ef1a9efbaf5202d2784a653c57e9d5796bd90b09
SHA256 a2ef3056b8e18438ca92e23a893ab553766707a7888e56a380f8e06e49a41c12
SHA512 2d443cbb4b9b26cf12f4c3b2ece060fc358f2f00e4353b62d378fc16279fb345e83c3173cd19dc8af31af1b650ffcea0290c3895d8105f5307ac257245d79ad3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\zh-TW.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 98ce10736184713a57dcaea1d13c6a7c
SHA1 df3359678c35be1d6dc9d34f724e19482b3a2119
SHA256 ade13f576b1633e38496e3c25693092d8c246ecc3b2e638e959c4f9c81e78dd5
SHA512 2949ec426ad35b3b933bb71b3156b6f5798b3266b3cdd6e79a6cfd3727738fc41acd78c6d3df7a7da3f54c863add3f3aebd4ac1f845570603ecbb932a2ab3695

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\zh-CN.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 0284c41c242aab0b50337b334c601e8f
SHA1 b43677e971d1144b127538138d37827e18a2132d
SHA256 682e20682891d8a7daff31383faf06b28304323b08f6877f9b8e14ae0303bc12
SHA512 1f45e295e6e9b0b993772bfcd47d57d5200d42d508ff77c1f8aac1597e85b3a3718e4ca89602616475490ec0387526a27f03b1a3adaf507150c74e781fbbd196

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\vi.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8b573237887b911f477c04384be14081
SHA1 71a689d83854ff53c5e812e8bfd64fa75d0b4385
SHA256 286063a11dfaabe1d7596674336e4e5579ce9450a0130ae8ace4a9086281a142
SHA512 9d3dd5b3f8c716088b7ba47991e6a616423a5dda6b46986efc320d7e1e14f002775af1be512d98fafd67457f277fe81fdc307d26fc79f8b5fbd0968c0e6b49c8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ur.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 cae560d6e6c4ca9701c9f260be544e6a
SHA1 2e94f9e6c59ac8de12ad4513ea666af80e622a87
SHA256 c6c1fbebde97ec4fe6b458d78897308740eec50d6eb57963c8c9b26ffa41c161
SHA512 df67d0394b73d615921f4e3e4b6d66376461bfc561f782fdc12efbf7ee440c7eaed2521ee0636f44d167bc383822596d5a8559be1b4b28aefcfedb49478af1be

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\uk.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 3a5c1b93e2a3c3c188c37d7391ae8823
SHA1 e40370e83b951b6fb2de11de5823488cdea80d02
SHA256 d49069e86cea32fa349c71bae79bec8c62ee1488f4ad609eeaaf4bbca197af8f
SHA512 b2d1cd6e995c197a29d7b643e6c255be2035af5af1e904956750197cd09a052bf2aed1ca93e8187815871e09a9c95224c8b66a6f237883c083b0225ad9617a40

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ug.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 ef4b73033084c7b6a6161cbf9487c3de
SHA1 2dafba542493fbb2ca7d8890f476c0753adbc910
SHA256 b0e80c76b36cdfea136cdb1df0f97542fb6d12dd655188bc07b3ad2ada1b2e8f
SHA512 364a78c801b2542ca401cc47af0a683d4f4cf0bec6c92f831d301f506e3643c3d4c4786584877f2dfb65e128926e269fac0c900d0fc3c3fb4ab678fb12723cdb

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sq.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 5cf043238025e13aa69ab2d3fb289654
SHA1 c3bcc81102260e8f6b0d89fd9a85fc33df56105d
SHA256 b90193d77d20424d599c3d8f5d2127b0c5b418869fcc895e90bf3eb0bf213f6e
SHA512 3f621e0170e6f7c249ceeff2ab6d84299e03bdbc4095de41cab02818b0735b1196ff6c68055c661e70432b70535c2b9ea80748a305701a743687f763e82041d0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sl.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 de218898fe6129a7d4167fdd1860466a
SHA1 b82267e32d5945c4d6083421d0cc31f3a1ca9081
SHA256 d50d5160f965f93449a72eb95a927366a28a6cd404571c7570203b2291792ac6
SHA512 b058b0a37649f6a86874bb2a4615b8adfb050448bf72fc34c7e9513288e4d9663fcc288f92df643229fd2915cb57852decd98d9d3e07f25aaf259314dbd9fe0a

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\sk.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 7ffad67f8eab23eaf2ab3e69902f8f01
SHA1 8fcaec2c139756b98aec0166b865b9e8b1f19bb5
SHA256 a13947d226f6d66a13aed8e69e675c721e3ed3d5e24102e0011b4ee8c0187caa
SHA512 d3c0d76bfedad07d20f23d141ba1fac17ea8aa2a59c01614203f57368ad08cbf3cf438babf0d38b937d0f3167b04b3f31cd0663c492e9e39cc2644e7c01d6fe0

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ru.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 051a48ca19b39c09db4d3bc325c5b416
SHA1 0378703e14203167f5a0a034fcf2d559e105c588
SHA256 67c3f4ca8479f3b8815fcc7a8dac96e66dffabbe37f4c87a74f3419b77ab941a
SHA512 eba4bcd1d9f6b9c53c56138921b507f64b931272f85c5cdaa3f2b208e7db335612067e1145dfa3a08b39693378bd55f95c51eb65aa3dbb4db5503b59a4a10953

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ro.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8d856da2edb3b70e7599b0e4a1ea0058
SHA1 6e0082603dd669a5e8ab7bcadf983faf84cef9f4
SHA256 4a2699a2754ddc66aa1481c8accfc83c7ae471901a8d2e268b79f90a1f5efcb3
SHA512 fd486fd690edc6fb11f10adfa35acb8716fec26f3a419c56193c62044326670919bf0b46b6f253570a5a7b8cee983a66a3d19e78a2b94cb1fd06db6813a607c8

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\mk.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2aaae7fd8eaec0d486aca586f6350952
SHA1 0c1ae8fa08c7775bae5a5964aa84edb3c0edf485
SHA256 b3b6e7491950a930be82a018d21695c60eb170afbcca92f4b1a791e06a6ff931
SHA512 b56aab8d913eb22e93466965e265ea25a36a60271189d9d9de57fe0a3c4657ae0ebb862e4776464865b44472020e1aa12ceab49a4de873f58a3ca63dd2650ded

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ko.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a0429cf3fe17f66287f1e0ce4b73ba4a
SHA1 63fa03969d694bf648ddedba0f2339f7d2c47028
SHA256 58230c1c255225a112bb1ed1d89917e784c991318839be1bd64d89d776e9bcf8
SHA512 afe726a796d3133c2fb60be6d94312a28000ac296d29fab479dce0f442482305df1ffb63f5162c7a9bcf10ab72f95e9eb9334e8d18bdf0143fbcc097af674533

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\kn.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d974f152f860926f9c07c71e6e96bdb3
SHA1 244039e9e3f0c3608cc549bab9f21cd953c52290
SHA256 f8779ebdcb20ed8bebb1f7737fc95b2c7fc1a98cbb56c6d54e447326fa581984
SHA512 798a208f09e10dc70aadde324863ed0e07240009dc71d6521c4348e9c519b365546b7de9b1ec6e9846d638a73f5d553db330219b28d5ff74f45f80ae09b7e23c

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\km.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2435e8fa62c68fb78f4d5333c50db92e
SHA1 982beb196ab590d337107810e52ea7495ff4ecb1
SHA256 b7525bea6ef8327f976d3c25c274de4febd806dc4824c27b4ce19cbc2f7e02b8
SHA512 ff479616ee81c4194bed4810a8af53b5eaafb74d9af2d9d4fd6241c1583f2a2f67e79f94df5bb06b44df3d1a7b2e2377d42509b349a44fce0d5ae8c282647063

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ka.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 88af2e07d73cc5a5b7ef3a6cd6015996
SHA1 76192a53e888a798e3f4da2d522e63b8bd43b24b
SHA256 8848003ea84f3708618211b230878129a7fac47419c8b428f6317e14e7e81f1d
SHA512 41232ee800809ba5f3396c2f770a6a4493d8c124deb1293d4743a470104c78ded78d4a9c302b30f804339d8d3dfcc39c1eeb273888a1b806eb0875fcf5af527f

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ja.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 28f2be73474e4e37fdd85a06ead95cbd
SHA1 4e82d8e79765b46a479b4b7314e99e71c7df23a9
SHA256 9026d842c5edca19d84992edfc7dcc3df46816b57a72e6ccbee96d3510047610
SHA512 dd357582583c68a600b3ce977c7b1073678066034bc91630bab49b3a16fb5f600f56de9bac768e1603b99b32c144b3345e11c6abe3415ca7fea985f341a1d4e7

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\it.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d8232e3253d3c4bb8c679ff5c3c8a9fd
SHA1 49bc24f9c673124a189339e01fbabe5cc795b869
SHA256 7b0a94540396d1f177b7e62fb139517c9ea6322b2b7ee0b99557159e13685637
SHA512 408ebd7bbf7193c78f96642edbda9ab17f2339cc57eb4e54a3d6ce0359d75f11baf95b5c10f5a1897b149b125b294f3591ffb690bbcb9db768ccf880d73328f9

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\is.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d470cc3569786828b31d58901f47ccc2
SHA1 f9a1807c5370188530008527840cc8d0527e883e
SHA256 5dab2536dc475b619d403770b6af460744c0559f531b6ec15c588369b54902fd
SHA512 4cbf03cc6b79061a652b9e5af692b6fb5cef712523e4774058db09775a8b38cc4d5afe7db7ea18eca6b4d8ba46672737f2315ea92ab16c67f0bfb2a0a0458442

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\id.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 36b142cb228742051a4e46a686359b9b
SHA1 e3d2c07d4bcf114152455d964867370f7d75c401
SHA256 2680c6b158d700685398470ac65d6d6e1e70a96cb1a7c25665205000b67eadc0
SHA512 2beb72c4d4a2d38d7ab4df7d3efa1b0b23e9f321a36bc1397b63ff8aa59258b1c58d339e7a067d620adcb27991aa002d6d4228836706d4ac6b30d402fcf634ef

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\hr.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 b2c66a17859ca066924e97a464b26d3d
SHA1 13d3c1f28eef7d600be042a01413e19edac18ce6
SHA256 b875c0dac3d4e48d539e1df5c5c2662829c218fe25cd64ca36a18411646d7d22
SHA512 2ba5305cce2cc62a460df4362a169895bad0c19754300af93f73a13b9101fcbb988496810c7713fadf420499784addeb1c909f136134255af974f703fdf8342f

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\hi.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 ac0d832b05a634ce00093fde9eecd2f5
SHA1 703a3125dd5302606d610f631b8bb990e4972b6f
SHA256 b38910100f4b5fffde79245f5d0b9e02a43be40937779897871894e2ce2442f0
SHA512 b1113e96f89879c4b1aec87646445fff8b35ed6240ca21dacaccc92e953fce13b360e3a5306837718deae08d3756f56252349a5cbddeb961bd6c13059586842f

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\he.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 f3102bb2f5ac7be9e072cbe6df872360
SHA1 9c9052d450659567465ba68fc02bcb746187334c
SHA256 c09fa0ea45b8732ca5bd4a3fa1c16e94645b083f315f1a7416b9c506fb5ff629
SHA512 18811a0520136474f8e52b7f2350b497d9cc777b4fa59913464e8aa578940f439118824c1507b39a75a4d9ececad17443dabfc5c3edeb527dea493f24ad11db3

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\gu.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 12e0ee1be398e8c0b739eb662b6d699c
SHA1 f8073259da1dac82c9850a45379b3974653e44b0
SHA256 c45c1b70aa318e90803eee9c5b42799e7271eca5a66125963680907d201693d2
SHA512 478c2c3a37fe60c63ef50d6ef72fc6539ad574e9592c20187495b02df9627a21ef28e22a3bb3726a927ccb77c6423b0ff25e00b6bcabf2435d0085edb5fb425c

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\gl.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 9b2e24c5545622948af54c5606f88238
SHA1 7a6527fbe504dcf4e2d646b2cbc896ae9435d998
SHA256 c7a30c11e0eae925dc50ce2667901f5bb45a12324719ad7e2b741a60bfbceb01
SHA512 464de69debace590a1f4ff59fbc3351dc2cb565e9ee435d8c3614fe2c581af556e008fff8cbaf6af2807e15d739834a8e9599d0176bda1620e65f9848489356e

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\gd.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d9dc85c7d0882b486bb414ff52664337
SHA1 12e04a0c451db2a568748d409daf93deb1e2b864
SHA256 0a7196307903d19eab9a4cde05b68b7179f9fe0575d8b0ab738289204c0eeace
SHA512 455187b124275e4788d628f85d92c0c89031b7203a65ea5226cffa9ef6adc60c2421ab79f3b0fda8c7efa59a1680e3aa7c15a27c84d685230808493aeb6c7227

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ga.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d2a078e385a816e4c438045316b46c02
SHA1 41b574bf5b85d99a07363d8e6a3af481c4f0b753
SHA256 3299cba2d0fec2b78a9fbe23ff28b8543a42c667c62948545df8fd2128e161c8
SHA512 2e8b03f270970c80519a4bfeb40e86f5dc58a32cd56ac86fa90f48807c44dbc7bfa2e4cd32013b2129591cb60bd94d62542780ec4724805b77decff7e1976316

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\fr-CA.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 52bb3dea855c9307df6b9556d55d0152
SHA1 eaaef38688a6096d963ba013d92c9f36262518f0
SHA256 87c91f65fa63303deea9a75ae46a220bfc2992cb3f0d6ce60a050f759a7866d3
SHA512 1d88bf15161b8309daafae4ccf4b59059e7f3b1d9927a3004e3cce569361909f8af4e0bfb0cdbbf68a9ff7e4e1274d8d8ca7fa30234f9f6864ff82674ade551a

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\fil.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2cc3ef9c54afbb5d53c3bb0103b8d3df
SHA1 860891991c993ceeb79292fabdf6f4bab55f0edf
SHA256 f9e009730002e9ca40e562239bcbac742be9968c77b5adf734be74767f3ff9d5
SHA512 0c2062b082b00bda365c135d6e2fd5c2e6b8e3cd3ff3a9d80158828cc1bf67e59c176ed72fc9f149daf7b6d6636d618a002755e857ad6c267b47ce9e46b8f72d

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\fa.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 43763d17a66f4ed22969ac53d0b83ca0
SHA1 056384dabf561ef597ccb4b4c61a1df5f82aeb49
SHA256 7c936ad231e8abaffe9c5abe7b1ece131d28870aaa819e900f5242fbeb1ad113
SHA512 1ca688dc1db58e02a339c5119d19a930b8c6064e6e16e38d8cac6fe23a798d2a60fa8d3dd492ed77cfa255df900f668c998aa1a5ec5d15923ddbf728b077d437

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\et.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 40e0d837b6612a08f119b329f3289e5b
SHA1 c8f8d1efeea90b755dd2cb3269264adb178ff89a
SHA256 c836865d97b8bdca20f481cb0fbbb7352f81cde92ba62afff1f219308193993c
SHA512 0edf585652f38359a7ee2fa4847dee68157fe745a517cfb89f9b71e6be5324028df4bdb144b2ef923f070db8430ef5728572032e11acac70bb6e72a54d405ce6

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\es.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d73460a8ebe9fb4a719840aa1052e7fd
SHA1 a837d997a5f9b0509e19c2589ea2234d7b19fb03
SHA256 de7eecadd9599b62c6cd63b76f4601cfa022b7f704b3ffd4be81737db05e59f9
SHA512 f9d56e756fa42e3f7ac5fc89f1984b2b0e7a64e9344fb87bacdbde017bd9bfd6cf9524e98e1f8a0bac4ad1aa345ddbcd513931e497611c8928e668a9bc705981

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\es-419.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2f2e621d30ce31703ab59359b9f0469d
SHA1 f24f4b537b0efeadb66174e79dd65e3a79e1d471
SHA256 165912514ce39278e5c1c76f4bf4b1ddb3f8deb8753836da01dcfdf09a13b8db
SHA512 35e0776eb86cbeef87c4fe1d238d90bc65bf5d3ae7cbaa119d6ba0a4ce7d6ab478b49d8d73198707ca16e2a9f7c98d315712992c749a46b26be3706aa9015d18

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\en-US.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 e9c6b7a1a84a5aff914b9715e4a0c048
SHA1 6cbb44b993e17048f2b635238a1bb6db5e89327c
SHA256 1aadabe03b3568f67ec502e92dbf17c8db30bab1a473bf1b814f70a3c1132aa3
SHA512 e2bfddf631dc84cb6e7e61a0339ddd5b93a15b33484c0e3421cb32351f3830988bce41d689632f5d243f6decfca143134002641bb6d7a65286e3b3cc36178223

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\el.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 8ac17b8bbee8ac30165038aaa4c46bb4
SHA1 fe05fac578a08da1aadf06e7ab35b42ccfad8848
SHA256 2c203329b800a00fefabd528fbc476153a245c3e30f686661740f52b9673e492
SHA512 85d6bb3b78fa7893a1072864b7e5785843b5e18fc23f9ce7f94d8673257cb6ab0722b24d1a3171559726e74d2e460c6f39b0714c67d2651c5fa654284733d409

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\da.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 a57094b6944ebcdf4bc0271a1d62b794
SHA1 d2f0802ed784d0e60b888a7e3c494860da7c226d
SHA256 1f673969470c8b1d2ac8b6367a78c0f9e4350d52d76a3571fd5f669300e3bcc9
SHA512 2ab52f671585144bfc1461277f0da3fd294a892b2dddae6f2abb10a3ced0659183fb53d665be33e7ebcf9513751cf0fe12190697f67e87eb0e3ffeee1fcb823a

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\cs.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 623cf4eae77ace5a90fd0843b578efd6
SHA1 11026f137072c26e0e2592ba16bca0bbb770d23d
SHA256 48734e9b6dfe32b6e6b9ccb847cf71fba172084fc86dab7a213f6786858f4552
SHA512 3ea2548a5dc98539b16519fe1a6c782d44c6c64a2180b4a3aea89b3a27d58f020633de326985d024f71b491c3c83c9fd01fd6916fc77a8f2b4d1e0399f97c514

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ca.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d6b7a5cef1ff3c0e1614d1f78165ba36
SHA1 35a103a0bbf6c6f8792e4074caa777da43128698
SHA256 64d32897daf4def8d785e52dd30a1362ef55bf3ee939729bd10df259e39fa2c7
SHA512 14b21aa7b247adfef7d641a0fa1556db174ad9a22491ae8fac38da42bf16033aa2a74b79ec87fce3c076334a12d2976f5c1e73304451fc58e5b13daf6f60861d

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\ca-Es-VALENCIA.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 704a42cfe9e33daa12861e44a49e6281
SHA1 7c5580d1387a45d1b00c9902e6449035ef921cc4
SHA256 f4b8fc73247dc6018cc981e3199c92e425d28a65550250c18896262a5fc758df
SHA512 1450a7b2e9afba06eb2822fdc8a9e0afab787e15786a8ad31f83ad3d0c348de6dfc846277e9e978166813907e07b459562228668c32b1edac246b029b05b20b6

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\bs.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 2ca368f2c3fdb379787a0fd1118ce681
SHA1 6895a7b7484214a709d5f9fd718cfb599cb1f0eb
SHA256 c255295fd49bb83707e3763c4e04f41976f0d3379c96899a2f132005ca350452
SHA512 d1b55cb7e22fd3b99d82fae5f6a6d3d8d89e90b8320d0bf757c53f9914399677e8aab2f69e394efd189dd372f0076710632bb11ea0ed86dcd0dd90b22de95955

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\bn-IN.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 e426c84ff82ae3f7ec837ad7d29da338
SHA1 9ad62890849baf247c8e43332a0583faae90e5f9
SHA256 9922daad35c0141333e10cf8eda4fe5ef4c60c6edd09c1afbd314aa797ff54a1
SHA512 e11bb22557c6d89d1ca44f05e7df6167e4fac58d582b29f60438e5afa2aa072ed3ed834e35f242419e83056b61a4846c6c17a008a88ca129c1eae051fe962503

C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.66\Locales\kok.pak.C71F032DEC96286D958047E0E0E45F35435BBE6574769CCFBA5E5024D71DBAA6

MD5 d891c587d9fd9536b4a3bc28031a1495
SHA1 c03a05a9917d7952301d477511a23b33413469e0
SHA256 69e5e4cf7466d235538a3878f52a7b668ea4d27f27145eee49f14ea27f8ca9f9
SHA512 98bfd351f38bf7c6139531033f24f052783e8a8b231eb37beb89cb1a6b43627e59b58569ee9cb999e4a9f70dcbeda832ee5780bb38f084919b7feb626a0e0a13

memory/3396-4641-0x00000000067C0000-0x0000000006826000-memory.dmp

\??\c:\users\admin\appdata\local\temp\543648\regasm.exe

MD5 42ab6e035df99a43dbb879c86b620b91
SHA1 c6e116569d17d8142dbb217b1f8bfa95bc148c38
SHA256 53195987d396986ebcb20425ac130e78ad308fdbd918f33f3fd92b99abda314b
SHA512 2e79de2d394ad33023d71611bb728b254aa4680b5a3a1ef5282b1155ddfaa2f3585c840a6700dfe0d1a276dac801298431f0187086d2e8f96b22f6c808fb97e5

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\sessionstore-backups\recovery.baklz4

MD5 80924d11c10209ca05b7c579896e46bc
SHA1 29ba82cf79937149b9f90b50fb3e16a254b94c82
SHA256 671b1dbe4046f096a9b3f99f71970b2639060deef3f4483283cbe6ffb42df82c
SHA512 3d7eac6006857a2704d88b07066a3d5e50fbf32e09677a152350670ec15a3d0c3da4a622babac272c110cfb1e741227c1392aa45cf05027cefbe20dc34360d5a

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\prefs-1.js

MD5 43822d83e88accbe622611dfb49cec74
SHA1 eb3a5d238f1a16f2109db93b8fdf01f842b3620f
SHA256 abf253c339e151cfe4135519acf9cc162a9b8e159d115412be417e4883fa6169
SHA512 c20eebcfdcdbc10d65e857cc7463d872227036ef20994c1db738e399c0ab4707a546f6a7e5a3a23d1742df52b583a17e98854d85da142e231e2ec08f9ba819f9

memory/5892-4690-0x0000000000B30000-0x0000000000B82000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\tmpaddon

MD5 09372174e83dbbf696ee732fd2e875bb
SHA1 ba360186ba650a769f9303f48b7200fb5eaccee1
SHA256 c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f
SHA512 b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

MD5 2a461e9eb87fd1955cea740a3444ee7a
SHA1 b10755914c713f5a4677494dbe8a686ed458c3c5
SHA256 4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc
SHA512 34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

MD5 842039753bf41fa5e11b3a1383061a87
SHA1 3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153
SHA256 d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c
SHA512 d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

C:\Users\Admin\AppData\Local\Temp\TmpE932.tmp

MD5 1420d30f964eac2c85b2ccfe968eebce
SHA1 bdf9a6876578a3e38079c4f8cf5d6c79687ad750
SHA256 f3327793e3fd1f3f9a93f58d033ed89ce832443e2695beca9f2b04adba049ed9
SHA512 6fcb6ce148e1e246d6805502d4914595957061946751656567a5013d96033dd1769a22a87c45821e7542cde533450e41182cee898cd2ccf911c91bc4822371a8

memory/5892-4723-0x00000000056C0000-0x0000000005736000-memory.dmp

memory/5892-4724-0x00000000063E0000-0x00000000069F8000-memory.dmp

memory/5892-4725-0x0000000005ED0000-0x0000000005FDA000-memory.dmp

memory/5892-4726-0x0000000005760000-0x0000000005772000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\prefs-1.js

MD5 8fac11b6c7d28b8f2edf09890f9c9ae4
SHA1 f96489c8290476d655c1972058b7b65446a714c9
SHA256 f93187f7ae084f05826c6fd0b43c7a6eebb22fdfdf425dfa23b276ce91746170
SHA512 00b08b00605a3a96cfcf4989d380c19d28b0450cd7fe5b97e2be24cae706e9c16611d1a5110d215a91c989dec1564bb458bf0ca347b976a7a60a4cde88ec6b1a

memory/5892-4731-0x00000000057C0000-0x00000000057FC000-memory.dmp

memory/5892-4732-0x0000000005FE0000-0x000000000602C000-memory.dmp

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\AlternateServices.bin

MD5 01edfa965ff81c1156099078bb238753
SHA1 34c10fea37643b18c514b3d935d36d07c7607e12
SHA256 5cb596ee623fe57afbeea69a88b7fae547368ab0ebc8aaa3c2bd3269d6106d75
SHA512 7a558d5e5acc8fad270a8167c6afdcdc1c024e598e03a6ebb1ee96117ee11ba6505b8d7b27c55d7a819140bc1472dc7aec72f5646270df6e37a1347d5fe54e96

C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

MD5 0a8747a2ac9ac08ae9508f36c6d75692
SHA1 b287a96fd6cc12433adb42193dfe06111c38eaf0
SHA256 32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03
SHA512 59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

MD5 bf957ad58b55f64219ab3f793e374316
SHA1 a11adc9d7f2c28e04d9b35e23b7616d0527118a1
SHA256 bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda
SHA512 79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

MD5 daf7ef3acccab478aaa7d6dc1c60f865
SHA1 f8246162b97ce4a945feced27b6ea114366ff2ad
SHA256 bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e
SHA512 5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

C:\Users\Admin\AppData\Local\Temp\Files\ji2xlo1f.exe

MD5 9f8ca917737b3233abb943edc065659c
SHA1 ea6df1e154c02f0089c8f3c4b3acc69c01d30774
SHA256 cd4061786081eb01aa278dfff5adca5a80d827e456719e40d06f3dc9353bed22
SHA512 2ffbab3c1b8518a4a2f75a20dd475949ad326adbe34b7f20d47840ec925b60af886839f55fd8360297bf573e2590b268091822b6c6daf1d349476cdef68c3780

memory/5228-4785-0x00000000001F0000-0x0000000000B4E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Files\svchost.exe

MD5 84ef912e583e2085324aff1b1838ea02
SHA1 4cf9e83bb995c40e1b509090c2523954b19b31f4
SHA256 8ba3b9263bbf0baf8b955e53272b90dca4c7525fd42d1368386aa95ec71a434a
SHA512 b0b9fa353f413f1215bb8d49546a5914e80e96aacdc675c085371ea9f6797e332b77655f96abb99fff4105020f12f32a8b8ad36078a0f68de65bdb724995e56b

memory/5368-4797-0x0000000000150000-0x000000000016A000-memory.dmp

memory/5272-4800-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

C:\Users\Admin\AppData\Local\D3DSCache\e8010882af4f153f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 16846df493521e84fe47cd6b6451ec8f
SHA1 6d99eb017c5aec08d3a7e908bbd4a051ce250c02
SHA256 69f19f2ab2f3625faca623477864766ab1ef3a21712bc892d7b2b0886585b3f9
SHA512 aefa5121601b8273cff6b79b7f76417c71e29e835b66faf3e1a67d0d38fb9ebe90320b75493fd5c4a2d9ea3e3c485d0a84bcdbfb78c26a8ecee3175cd8bd93cd

C:\Users\Admin\AppData\Local\D3DSCache\e8010882af4f153f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 9e466b4837d8431be725d6b9c1b4d9ef
SHA1 3f247b7c89985a41d839cad351cd0fc182fcb284
SHA256 2f9a5eeb5ac8cec52a3e73621e4d392f501f5d657dfec3215ccd40eec317208d
SHA512 01de0fda555d63b5c38339b0f6d38c28de2a882643439679e63cf5d75f13516b57dc90e8dfb8c638bda328fc12342e58d1e501acec8f85b92dbd5589dac06418

C:\Users\Admin\AppData\Local\D3DSCache\e8010882af4f153f\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

memory/5272-4799-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4810-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4809-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4808-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4807-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4806-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4805-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

memory/5272-4798-0x000001BD5D2D0000-0x000001BD5D2D1000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Files\02.08.2022.exe

MD5 3e0762a3cb8bb78800749f6c5924831f
SHA1 adfc645e8a15110a1ee3c26cf6adc4d54d007aab
SHA256 eef56a170741e2f7542cf17efb5dc4245b652d6147c2e8dabf88aaa238c0c0f1
SHA512 89a5a443c582e1d6dd01c47629ad9d77636307871f482c911523b687bf60a040d53402dac119688bc03b05d4267c29ecfafa313eaf62cdb98498a98c7f307407

memory/5648-4825-0x000001326D4B0000-0x000001326D4D2000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_pgkxpt4d.rkj.ps1

MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

MD5 627073ee3ca9676911bee35548eff2b8
SHA1 4c4b68c65e2cab9864b51167d710aa29ebdcff2e
SHA256 85b280a39fc31ba1e15fb06102a05b8405ff3b82feb181d4170f04e466dd647c
SHA512 3c5f6c03e253b83c57e8d6f0334187dbdcdf4fa549eecd36cbc1322dca6d3ca891dc6a019c49ec2eafb88f82d0434299c31e4dfaab123acb42e0546218f311fb

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 1a9fa92a4f2e2ec9e244d43a6a4f8fb9
SHA1 9910190edfaccece1dfcc1d92e357772f5dae8f7
SHA256 0ee052d5333fd5fd86bc84856fec98e045f077a7ac8051651bf7c521b9706888
SHA512 5d2361476fa22200e6f83883efe7dcb8c3fe7dae8d56e04e28a36e9ae1270c327b6aa161d92b239593da7661289d002c574446ecfd6bd19928209aae25e3ef64

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 80b42fe4c6cf64624e6c31e5d7f2d3b3
SHA1 1f93e7dd83b86cb900810b7e3e43797868bf7d93
SHA256 ee20a5b38a6674366efda276dbbf0b43eb54efd282acfc1033042f6b53a80d4d
SHA512 83c1c744c15a8b427a1d3af677ec3bfd0353875a60fe886c41570981e17467ebbb59619b960ca8c5c3ab1430946b0633ea200b7e7d84ab6dca88b60c50055573

C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

MD5 781da0576417bf414dc558e5a315e2be
SHA1 215451c1e370be595f1c389f587efeaa93108b4c
SHA256 41a5aef8b0bbeea2766f40a7bba2c78322379f167c610f7055ccb69e7db030fe
SHA512 24e283aa30a2903ebe154dad49b26067a45e46fec57549ad080d3b9ec3f272044efaaed3822d067837f5521262192f466c47195ffe7f75f8c7c5dcf3159ea737

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AYFJQ5SUNAES59233CFJ.temp

MD5 35f3e4a10acfff65d5a34df8bdf380e2
SHA1 9c8307d8301b7e72178208b5390961ae6524bc44
SHA256 402929a2eb03649cb671b4ccfa7e6e7164438446cf4217e4b40ff81d1758fb00
SHA512 56d1dd09fcc21c7ccdbcac037132a8d0e4341e0d2748457cf23646653b6a500adccefd82d7feef19d585f72441e42d3ceefe413f6d970d32d1e25dedc25d56c8

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\db\data.safe.tmp

MD5 a91ce734d2ac474f949926e1f124ed15
SHA1 14f4d7c59daeecf75b839a447a7d704d4fe900e6
SHA256 c0373c7e288919be6f20622e5711343e7e0ecad4b9f332563868394e4f35c36b
SHA512 5b3e7235f1905b240592b29e1ab8637d7bc1f0ed0ecd919a6a8dcf835d39cc2e3d312dc85207c14970d00564dea8c9d70039086d1c5da3e4c72e4899b09dc7f0

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\datareporting\glean\db\data.safe.tmp

MD5 8f1904b9af2bcce5fee660f8b6706b63
SHA1 18da9c8dd8dede63556c43961de13d5eeef8b64a
SHA256 32fbe46151435a7c7196289c2261952d313ec8e133f5b82b4b8641929fc09d9f
SHA512 ef14ea7614c466b1ef0dd4aa15784fe4b1d5ab9de6eda929a8f052875f909260d4a80802b2ecb49a92a6e18af20b3c3394640e03c902979629c6c62def4fe655

C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\jj59r4xg.default-release\prefs-1.js

MD5 1463d5a5dcd114793cbb1688c8e3b930
SHA1 ba8da5c3f60e3a136c19086c3e6938e09ea12caf
SHA256 cdf6ea4ff8a73de2f77157a773d80774962ab98699eb052494ad628babb314a0
SHA512 377e2bf7afd2c16e6afb0949ec9b0aad2736891fccb0f4da9817e6dd8b57939af69508ab440505f884ad1fc0387266d1dc1e286507c2949451b611bbb2be2009