Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
69s -
max time network
71s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
07/03/2025, 23:57
Behavioral task
behavioral1
Sample
44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
Resource
win10v2004-20250217-en
Behavioral task
behavioral3
Sample
44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
Resource
win10ltsc2021-20250217-en
Behavioral task
behavioral4
Sample
44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
Resource
win11-20250217-en
General
-
Target
44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
-
Size
56.0MB
-
MD5
bf362ca5f9b4dfa01b0ca45937f0f8d2
-
SHA1
0dac7e77257f51ee11e04803874d764e8fa8ae3a
-
SHA256
33e648333f7d85219d6b82e64c44f9ee849e99da8691deddcb34ee694c73c538
-
SHA512
4b83fd771113cdfc2c4c4a58546802e8e8d115a546193b74a5eccd73a1420819a4f5c117b1a33cb5c715fad5bb3513b472dfd81af928a9c24290abe5fad39497
-
SSDEEP
196608:cmKu818v8SYdQmRm8Qnf2ODjMnGydS8GrNs:Gu81olYdQdF3MnG38GrNs
Malware Config
Signatures
-
Avoslocker Ransomware
Avoslocker is a relatively new ransomware, that was observed in late June and early July, 2021.
-
Avoslocker family
-
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
-
Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs
pid Process 1924 bcdedit.exe 32320 bcdedit.exe -
Renames multiple (8954) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE 1 IoCs
pid Process 1868 hack.exe -
Loads dropped DLL 4 IoCs
pid Process 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI hack.exe -
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Z: hack.exe File opened (read-only) \??\Z: NOTEPAD.EXE -
Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-925314154-1797147466-1467878628-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\1634818644.png" reg.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\ja-JP\PackageManagementDscUtilities.strings.psd1 hack.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sv.pak hack.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Abbreviations\en_GB\List.txt hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\themes\dark\rhp_world_icon.png hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-36.png hack.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\intf\modules\host.luac hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\en-il\GET_YOUR_FILES_BACK.txt hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\hu-hu\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\OutlookMailMediumTile.scale-125.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Retail-pl.xrm-ms hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\pt-br\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\AddressBook2x.png hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Edit_R_Full.aapp hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ko-kr\ui-strings.js hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_backarrow_default.svg hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Redshift\lib\OpenSSL64.DllA\openssl64.dlla.manifest hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.scale-100.png hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fi-fi\GET_YOUR_FILES_BACK.txt hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\TXP_Package.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\Configuration\ssn_high_group_info.txt hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\ca-es\ui-strings.js hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\he-il\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\index.html hack.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft Help\nslist.hxl hack.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\osm.x-none.msi.16.x-none.boot.tree.dat hack.exe File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\Java\jdk-1.8\legal\jdk\dom.md hack.exe File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.123\Locales\sw.pak hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailWideTile.scale-150.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\cardview-checkmark.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ppd.xrm-ms hack.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\calendars.properties hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\index.html hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\[email protected] hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\ExchangeWideTile.scale-150.png hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\es-es\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\index_poster.jpg hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\da-dk\ui-strings.js hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\Doughboy.scale-200.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] hack.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\gl.pak hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\vi_get.svg hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\sl-si\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\LinkedInboxBadge.scale-125.png hack.exe File opened for modification C:\Program Files\Java\jdk-1.8\include\jawt.h hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforcomments_18.svg hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdXC2RVL_KMS_ClientC2R-ppd.xrm-ms hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\sv-se\GET_YOUR_FILES_BACK.txt hack.exe File created C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\de\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ppd.xrm-ms hack.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\security\policy\unlimited\US_export_policy.jar hack.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-de_de_2x.gif hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\Doughboy.scale-300.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-180.png hack.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\GET_YOUR_FILES_BACK.txt hack.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\eu-es\GET_YOUR_FILES_BACK.txt hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxCalendarLogoExtensions.scale-48.png hack.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarWideTile.scale-200.png hack.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Fonts\private\BKANT.TTF hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT.HXS hack.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms hack.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_US\hyph_en_US.dic hack.exe -
pid Process 63404 powershell.exe 46948 powershell.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language hack.exe -
Interacts with shadow copies 3 TTPs 1 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
pid Process 32180 vssadmin.exe -
Suspicious behavior: EnumeratesProcesses 7 IoCs
pid Process 1868 hack.exe 1868 hack.exe 63404 powershell.exe 63404 powershell.exe 63404 powershell.exe 46948 powershell.exe 46948 powershell.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1868 hack.exe Token: SeIncreaseQuotaPrivilege 63412 WMIC.exe Token: SeSecurityPrivilege 63412 WMIC.exe Token: SeTakeOwnershipPrivilege 63412 WMIC.exe Token: SeLoadDriverPrivilege 63412 WMIC.exe Token: SeSystemProfilePrivilege 63412 WMIC.exe Token: SeSystemtimePrivilege 63412 WMIC.exe Token: SeProfSingleProcessPrivilege 63412 WMIC.exe Token: SeIncBasePriorityPrivilege 63412 WMIC.exe Token: SeCreatePagefilePrivilege 63412 WMIC.exe Token: SeBackupPrivilege 63412 WMIC.exe Token: SeRestorePrivilege 63412 WMIC.exe Token: SeShutdownPrivilege 63412 WMIC.exe Token: SeDebugPrivilege 63412 WMIC.exe Token: SeSystemEnvironmentPrivilege 63412 WMIC.exe Token: SeRemoteShutdownPrivilege 63412 WMIC.exe Token: SeUndockPrivilege 63412 WMIC.exe Token: SeManageVolumePrivilege 63412 WMIC.exe Token: 33 63412 WMIC.exe Token: 34 63412 WMIC.exe Token: 35 63412 WMIC.exe Token: 36 63412 WMIC.exe Token: SeBackupPrivilege 14812 vssvc.exe Token: SeRestorePrivilege 14812 vssvc.exe Token: SeAuditPrivilege 14812 vssvc.exe Token: SeDebugPrivilege 63404 powershell.exe Token: SeIncreaseQuotaPrivilege 63412 WMIC.exe Token: SeSecurityPrivilege 63412 WMIC.exe Token: SeTakeOwnershipPrivilege 63412 WMIC.exe Token: SeLoadDriverPrivilege 63412 WMIC.exe Token: SeSystemProfilePrivilege 63412 WMIC.exe Token: SeSystemtimePrivilege 63412 WMIC.exe Token: SeProfSingleProcessPrivilege 63412 WMIC.exe Token: SeIncBasePriorityPrivilege 63412 WMIC.exe Token: SeCreatePagefilePrivilege 63412 WMIC.exe Token: SeBackupPrivilege 63412 WMIC.exe Token: SeRestorePrivilege 63412 WMIC.exe Token: SeShutdownPrivilege 63412 WMIC.exe Token: SeDebugPrivilege 63412 WMIC.exe Token: SeSystemEnvironmentPrivilege 63412 WMIC.exe Token: SeRemoteShutdownPrivilege 63412 WMIC.exe Token: SeUndockPrivilege 63412 WMIC.exe Token: SeManageVolumePrivilege 63412 WMIC.exe Token: 33 63412 WMIC.exe Token: 34 63412 WMIC.exe Token: 35 63412 WMIC.exe Token: 36 63412 WMIC.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeSecurityPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeSecurityPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe Token: SeSecurityPrivilege 63404 powershell.exe Token: SeBackupPrivilege 63404 powershell.exe -
Suspicious use of WriteProcessMemory 31 IoCs
description pid Process procid_target PID 4848 wrote to memory of 2588 4848 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 89 PID 4848 wrote to memory of 2588 4848 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 89 PID 2588 wrote to memory of 1868 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 92 PID 2588 wrote to memory of 1868 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 92 PID 2588 wrote to memory of 1868 2588 44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe 92 PID 1868 wrote to memory of 1196 1868 hack.exe 94 PID 1868 wrote to memory of 1196 1868 hack.exe 94 PID 1868 wrote to memory of 1296 1868 hack.exe 95 PID 1868 wrote to memory of 1296 1868 hack.exe 95 PID 1868 wrote to memory of 5044 1868 hack.exe 96 PID 1868 wrote to memory of 5044 1868 hack.exe 96 PID 1868 wrote to memory of 3512 1868 hack.exe 97 PID 1868 wrote to memory of 3512 1868 hack.exe 97 PID 1868 wrote to memory of 3408 1868 hack.exe 98 PID 1868 wrote to memory of 3408 1868 hack.exe 98 PID 3512 wrote to memory of 1924 3512 cmd.exe 99 PID 3512 wrote to memory of 1924 3512 cmd.exe 99 PID 5044 wrote to memory of 32320 5044 cmd.exe 100 PID 5044 wrote to memory of 32320 5044 cmd.exe 100 PID 1296 wrote to memory of 32180 1296 cmd.exe 101 PID 1296 wrote to memory of 32180 1296 cmd.exe 101 PID 3408 wrote to memory of 63404 3408 cmd.exe 103 PID 3408 wrote to memory of 63404 3408 cmd.exe 103 PID 1196 wrote to memory of 63412 1196 cmd.exe 104 PID 1196 wrote to memory of 63412 1196 cmd.exe 104 PID 1868 wrote to memory of 46948 1868 hack.exe 108 PID 1868 wrote to memory of 46948 1868 hack.exe 108 PID 46948 wrote to memory of 47328 46948 powershell.exe 113 PID 46948 wrote to memory of 47328 46948 powershell.exe 113 PID 46948 wrote to memory of 47556 46948 powershell.exe 115 PID 46948 wrote to memory of 47556 46948 powershell.exe 115 -
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe"C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4848 -
C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe"C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2588 -
C:\Users\Admin\AppData\Local\Temp\tmpwv68_khh\hack.exeC:\Users\Admin\AppData\Local\Temp\tmpwv68_khh\hack.exe3⤵
- Executes dropped EXE
- Drops desktop.ini file(s)
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1868 -
C:\Windows\SYSTEM32\cmd.execmd /c wmic shadowcopy delete /nointeractive4⤵
- Suspicious use of WriteProcessMemory
PID:1196 -
C:\Windows\System32\Wbem\WMIC.exewmic shadowcopy delete /nointeractive5⤵
- Suspicious use of AdjustPrivilegeToken
PID:63412
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /c vssadmin.exe Delete Shadows /All /Quiet4⤵
- Suspicious use of WriteProcessMemory
PID:1296 -
C:\Windows\system32\vssadmin.exevssadmin.exe Delete Shadows /All /Quiet5⤵
- Interacts with shadow copies
PID:32180
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /c bcdedit /set {default} recoveryenabled No4⤵
- Suspicious use of WriteProcessMemory
PID:5044 -
C:\Windows\system32\bcdedit.exebcdedit /set {default} recoveryenabled No5⤵
- Modifies boot configuration data using bcdedit
PID:32320
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /c bcdedit /set {default} bootstatuspolicy ignoreallfailures4⤵
- Suspicious use of WriteProcessMemory
PID:3512 -
C:\Windows\system32\bcdedit.exebcdedit /set {default} bootstatuspolicy ignoreallfailures5⤵
- Modifies boot configuration data using bcdedit
PID:1924
-
-
-
C:\Windows\SYSTEM32\cmd.execmd /c powershell -command "Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }"4⤵
- Suspicious use of WriteProcessMemory
PID:3408 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell -command "Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }"5⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:63404
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell -Command "$a = [System.IO.File]::ReadAllText(\"F:\GET_YOUR_FILES_BACK.txt\");Add-Type -AssemblyName System.Drawing;$filename = \"$env:temp\$(Get-Random).png\";$bmp = new-object System.Drawing.Bitmap 1920,1080;$font = new-object System.Drawing.Font Consolas,10;$brushBg = [System.Drawing.Brushes]::Black;$brushFg = [System.Drawing.Brushes]::White;$format = [System.Drawing.StringFormat]::GenericDefault;$format.Alignment = [System.Drawing.StringAlignment]::Center;$format.LineAlignment = [System.Drawing.StringAlignment]::Center;$graphics = [System.Drawing.Graphics]::FromImage($bmp);$graphics.FillRectangle($brushBg,0,0,$bmp.Width,$bmp.Height);$graphics.DrawString($a,$font,$brushFg,[System.Drawing.RectangleF]::FromLTRB(0, 0, 1920, 1080),$format);$graphics.Dispose();$bmp.Save($filename);reg add \"HKEY_CURRENT_USER\Control Panel\Desktop\" /v Wallpaper /t REG_SZ /d $filename /f;Start-Sleep 1;rundll32.exe user32.dll, UpdatePerUserSystemParameters, 0, $false;"4⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:46948 -
C:\Windows\system32\reg.exe"C:\Windows\system32\reg.exe" add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d C:\Users\Admin\AppData\Local\Temp\1634818644.png /f5⤵
- Sets desktop wallpaper using registry
PID:47328
-
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" user32.dll UpdatePerUserSystemParameters 0 False5⤵PID:47556
-
-
-
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:14812
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" Z:\GET_YOUR_FILES_BACK.txt1⤵
- Enumerates connected drives
PID:48204
Network
MITRE ATT&CK Enterprise v15
Execution
Command and Scripting Interpreter
1PowerShell
1Windows Management Instrumentation
1Defense Evasion
Direct Volume Access
1Indicator Removal
2File Deletion
2Modify Registry
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
916B
MD5913bc09dbeec360a4bebc2548e293c9d
SHA14c167b49760dd1e0fa40e9070342507a9813c59e
SHA256d545c9906b61ebb7c19207e018e98bb788f93431de2aea6f6b89ea05b7d5b357
SHA51270eba5efb5b226f8d96ec08dade83998339b4a1057c99946f9fc8ab004b7a222c77bdb9a7aafaca2fcf2211c7fc9ab18fbaa800de9c3bd090bccae6fa7e8bc66
-
Filesize
4KB
MD5e7e840bf56bb9fc8a6367f922ea4ff41
SHA1e110378036393148ca03b39a1ee037882ca31283
SHA256d95f9088ebb1a7adcb1078507b58886319ece118ad823db0217abc2b834ac734
SHA512acae6596707319a9bee17d85cca4934487c0947cd4c45dd3e29762c7c2ac1a4c2afaa5a722433700f989da9a87f8e6a98f2e86d5d725bc0681bb0b6446520f1e
-
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\beta.identity_helper.exe.manifest.avos2
Filesize2KB
MD53020c9efa44746731d8a3de5a4fa18bc
SHA123b0eb88744363a9a6336d2330d8aaa7d60e1c37
SHA256da5bec73963f9c0abf5b9f1758e586580e267fb1ad4a8b2b89377a1edba7f14c
SHA5127f55dbd8bb3c75eb1c5784255775882c0a4e5dd6697c7ccfa72f0cd54e664434c619bf53554cee135a790432da1285347c3ebf464f98e5a55064bf526e2ce192
-
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\canary.identity_helper.exe.manifest.avos2
Filesize2KB
MD58bf04defe3aec6dd78798695fb825170
SHA1f330555e2d6ec628d22db99e43bfbb3608167002
SHA2564c7f987e3459a910ca11a1147681d0f465cae2aa3135d8eb16d70f5f6d7618cb
SHA512a8c2ee65f37b8de46e9f36bba2fad3b9c2bef870afca00e5151d3261185c370b2733d085545f2732300ce892a8d589167a88892f4a10d48cbd4c5055b26dcfdb
-
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\dev.identity_helper.exe.manifest
Filesize2KB
MD5ad2b92a8d86a2f7c814618683527d35f
SHA1264f922c1c714e4da23bbf4a683da75dff119226
SHA25646b8583c2fecd810c891f6eeb995cbe1b1460cc10825bae1662b0fb3e65751dc
SHA5129fedbc4e6b7197c384ac55bcc2b21d442f92214daccfd1d0efd012cffbbedf203cc42797caedf082a6b4fa47330164c8e0e60b77017aa06371755c71ef48e7d0
-
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\internal.identity_helper.exe.manifest.avos2
Filesize2KB
MD5b3f5cc46b28225efbb0ebef019635f5d
SHA1da019548cee647a10d186e65dc90cbdfbbb8e168
SHA2561baa9516b2e707120e3e17a69465367474644a0c56674edde6e5fc22e593ca26
SHA51238794df97cec13218b498f1bb0d6354abf165c401c4d6e2ada46eb866585d6a33f82f8cd479dfbd65363977f711b93b84b66f8af669579eb062e6b8a2fd5a5b4
-
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\stable.identity_helper.exe.manifest.avos2
Filesize2KB
MD51f79eb9908297481cab3ffbc6932093a
SHA1bcc82cf32985229d20c63e58dad486cdd81730bd
SHA256f0a33dbcb97b1dec66a50739255286f78de3d1e4eae636db6dd90f0f476478c7
SHA5123ea11339365303c27733c404cfa3480e0cbe3b02be4c266209efdab9c3617fb580e863654c9599cc3fb302b3fc7c13084cb8917800311769e6728fda80b5d1f8
-
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Internal.msix
Filesize57KB
MD57dc44e01656bbba9d9d7204918c42b7f
SHA10fc69e0bb8fd3a91d582b14401eb4a8053c7bb27
SHA2569bfcf3413e534388735dc4e9650ed323e5ce573d39dfc02317cf1d0611f7aafa
SHA5122729cfbd7aca66a8f49048e463bf7cb68d6a42dd94351e1fa4017b0127ef7b5cade7cf9104282bcd860ac31c53beacb251bd7f43030aca02a2511d99c75c37fa
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat.avos2
Filesize1KB
MD56071db12ab44243191df5a55002c0b1d
SHA1e02a8040e55ca8a3b8e596efe79ce9141d6d4003
SHA2562ba2ccaf11a8b812279cf89cbc99a7b78530a7a9e0a9fba556d166102ecc83cd
SHA5124458dd0dce3aaea51b403f21bd1c12ced8374d6965a1e1266f0414536c5d71b281d61c0b1a47bebb135e452da8372fd9869c85507e62f42f4fb5b07d048b0449
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json.avos2
Filesize1KB
MD5d381876b01db1cd299e2f445d15eeb47
SHA1e05cec21fb461b2447be052a3b599a48565a638d
SHA2561dd8b9d17512299aaffc638be24cada6c9f93b6d3b7147222543e3660711c53c
SHA512588c48cbc1edfd2b918eb3615ca015232ada76213f929fed8478c6bbad9e2be4c10eab65b1769f0735483a2e5ac0abae782cc92e26a25da396cde60964d7f2e3
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Extensions\external_extensions.json.avos2
Filesize1KB
MD5a2f6a6f772214843e17a25066f61a50a
SHA123389913a2de30c87451a300601a5a1a9b77dde0
SHA256d5699426587fba5845a988d699c914fab9e604e98e3fe9441301343f11a5299a
SHA5127a962e7c1f475955bad99f805b22e9e98a8791a5a85692f885bc3948ff1961a9f902b97c7f8d57d2e145399cb36016057248e2547e518de77ec37742825b50b4
-
Filesize
1003KB
MD58124eb83902aaeb4a7cb0561c7bb1c62
SHA10b2d3ee0075e4b15d1fb3dcfc1609eb5b0644f1d
SHA2563a4ac5adcbeeee47051fa55ebbc260d059bdd2c72a5888143b857678e005c358
SHA5124432820c341de71071f75875cc52a69fac9fa26bb7889f1551be0f2dc5064b4d42615ab8765d9c7676c930997cde191b0343536ff9bc053b09f7e771239a2cd2
-
Filesize
1.4MB
MD5eb129ea4235d6c7fe8cb94c450ee169d
SHA10a78c3bc698e74588624bdfcff03cf0c9c576728
SHA256d67297c8155b15fac39e2f5519acd9ad5ae66eef44215d3476da7b8101088f3f
SHA51239680337989b37239a828366b8db1ce276007053129676a6c038057e65d16a476bec185c253c79639d8353ac0d32033af7e22618dd29c9478fb18d9d5a0b3965
-
Filesize
1.5MB
MD5d1e7e009735832e2d52e35abf50d07db
SHA1ea5d37a2d7b6a3a794d7fe15649c6eae1d0b96f5
SHA2569fd447c2df94cba956ffdd26430ee6265124a5c334fde731dee26e125aa8e5b5
SHA512e47175c8304572ad79cc2b204142a6e1305385be02505c6cc9fb048c9695a972aa4c272047e7d03aa1bff90af07910bfb3ed14dc08c6870783b1f3c8082f01eb
-
Filesize
2.1MB
MD51f588d45adc7ad190afa7c2b90153f8e
SHA10dd341b4d55579ca716334f4b96308a1948ea3e0
SHA25696da67b9fc3e92dc900dbd31a34c77eb2971798c96ee2085c247e6c3b20c76f4
SHA512c13066a37828806d3e9e60864714c6f38953ea9cd0c7222baab325488d2345474e3f7b3d0a005c9af26cb258d08f25227d990e06de696e5ee676604ef7e59628
-
Filesize
1.1MB
MD5109fb7cc27cd23166432d4bae705305e
SHA1a4f028f210c60f9a2f6643e9b7b1881d1ae3b58e
SHA256bd43dabbfb527406b4e93be6ae07b84dd41662b634933077b7f250c823681c04
SHA5129078c912080e618d99c6a33e97b1f164266f65b50aa0582f46c3e25bc37b7ef4915e4e98feb1b332685a4f5eb141ecbfc594a86c466a27ac08ddd156839878a3
-
Filesize
1.7MB
MD5ed4b270e1e3f85e49524437f22735f90
SHA17a6e3c99b8d3efeb74b594e3ac38c115480859c6
SHA256ef6e9ae4812fef900a4d10b8c545f26ff7746842aa98920c73c98908233c3bed
SHA51211c5ed5f9b4d92d2dcf261826bc9930721af263b248b353832ac25c005c8b5826c5a717f1ca33802ceae19fb10068f7c9cde30eac196c6fc1c23ed62de88c437
-
Filesize
2.2MB
MD5c73bb6fbfe5aaaab44f74a4d65e4eb27
SHA133efbce416a0ae804fcf3c58874c10a4fe9d7753
SHA256d836abd6a3dc62b2b051ada3b002da697799caece5bfcc35158a0cb3879a5436
SHA5121fc2f6bf1ae7ac0cfb15a8b47be622af840c70b4b5f2b474ed448a279e01cb877a8f3b710913dcd92107663fd36dafe629f45d8eb2ccc558cf790ab04ced1d26
-
Filesize
1.0MB
MD545a3ebc6771b9768058dc1a4d9578ff9
SHA158aef630b86dc5b9b4e0a96cea311358a30ec6df
SHA25676b975009d5b4d053aee3e486f63bc45e62b2eb634e68287940cac9d34ffdb09
SHA51218db99fdf5401ccdac51f3037c50ff71b41c62462c7045f7518706b598f4fd9c547cb375cd68e7b48fe64c3aafc9d4c0c09d9ca1b6338397ac3783ba794315b0
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ca-Es-VALENCIA.pak.avos2
Filesize1.1MB
MD574d3128e048f95a539e15111b6928c63
SHA10575f3d75d0c05c1b86acd0aab94d786d960aea7
SHA2566d3797522deb8d726138307541e86f692ade6cf58c680ddbd51f120f88aca980
SHA512208defff9df8116bd02adfca7727351919549aa3b4708f3c6033dc70160c7a1944f623bfacdf2c01d317d05943dd9fd67c29f11e5aa56ff51fe3da8a838cdb85
-
Filesize
1.1MB
MD56a6cb5217e1647daf0686373ac7155be
SHA1dfbc73d95873be5084368c3268e1036602af912f
SHA256148c6320bf65ef96d254eeb74a1220cd80c7d3e42fe7f1f1996af218888cc29b
SHA512493c1e79f1ef263c755bc4b5e3e211555f6f10594cf7e9f164707a473a07d30191e80fc90440117ae4b53b3b22b2199719e4f3b53643826b0a599f1be9a0174e
-
Filesize
1.1MB
MD56cceb4812385f3ac6aa6e636ec4ffcda
SHA1861cd2d0c945b48f9fdaabecd2862294c5c1a78b
SHA2567a488381211e07e5a104126eb8941e7a5c7b919bf5ec98ad8fa74329e8eeb9b8
SHA512a6a471049a3de35976d01ff9e973572d640b71d9786b0011ef4e29dcf8c3d0eb7704ae6956fe461f67feeeccdb11e149639bc2bfd0ab3b14bc4f7b410924b651
-
Filesize
1.1MB
MD536304ebf7234208d34ffc384328db287
SHA119333130d286c79af6d22bdebadb514a26229243
SHA2565bed26f752712de72b7860a6af13aac105f9221da5b2b6ed33c6a9fdc37ecc07
SHA5126bc4716e76c7808486bcf4757fa7130466b40c3c1c6e54910c2a0b34c720088910b5f397b8d0be2720a35d304d2f16ba41c02793b15606f22640919b32a2e81e
-
Filesize
1002KB
MD5f541c2b0125196f9efa27eed39ca4e77
SHA17d6e8d7e987616ada13dbe651e7c84e9ecd55352
SHA256ca4f32b8be297ca71c8403235c553d7afe71a5c7f0f9b96f4ec732c3de983469
SHA512740b8f9efbf1ae47df49901c0892040d47343bfaddc5ccb4bd00423b7ba7e388b61788487210b7073965b0db763a1fba89b32d5da73ad7016c6a0693f74a6d99
-
Filesize
1.1MB
MD53b221d19e22180cecf535a2a6383796b
SHA1f02aceef671857499366c7261720ec471601a72c
SHA256d8ab302e7e5bf34bc1b1170e289218663f08fe6e832773a495509a5f0531ad2e
SHA512aa14b7a0a9d477116f74a02417fb7097680e4e0cd9ffa821381aef5350241ae47cf18d4c608181060d000f8e6c97002d94d2efc00949ea8b51e6e3aa32dcd71c
-
Filesize
1.9MB
MD5b27b187fb949dfc422b5886cde58ad5b
SHA1bf6bf7980f46608de5313f45599d7b3e9874746d
SHA256c0f86e766ef3b6fa5282f192ab81a4110bc5eefb76e0cf7964e20c8039f6f2ea
SHA5126c49db4b9abd827416ce38b2c4932c31b652ce71c6b39228d9094478db9f28be018b8fe2528fbbf81ce6ec563c8e3fcbbf2b30cbace4775288556eaf95f563de
-
Filesize
914KB
MD5798d3012a462a7b4e77bb1ce07a89cba
SHA157093f5d7d00e7dc884c56ad66ba28d7ccdf6469
SHA2564028476701b72be81ae317ed27063ceb5c3b26214719878abc8d9989b56468f4
SHA5122c1298375479de93a1a98890da3d74e81492e74d63704cdceb3b4728c29102087e112dbaa29553ae5383f7dcdb4b356246fa6ab52a94f4a6ea90c323841473ae
-
Filesize
902KB
MD56c93c6c6ba20eb28a9ec2c318bf72c27
SHA183c796cb8b577909d875972e92bc2ea7f94c43e5
SHA2566dd2aa3c897e01eab9d1777d83d89a892beb5ea1283e129bef9f0625bf72dfe1
SHA512c8ce2b4fc765f87b92f5028fe98da31ce1e9359772b4ff52504aad692a545b08426c0c566cfaf58e3111b45a7862de4d932bb48087331796f2110aff38995268
-
Filesize
1.1MB
MD5104bcf33dc213edba4e3caf34f92ff7b
SHA110934fea69ea81b7be6404ac610b696d8929e40e
SHA256eb97617b50bd7137d3f61015e0c587fcd297fc90f6db985c925fa81adfc1d9a8
SHA512ba67f5e8002015ee9193c2c945114c18c336b65bdc4d1614b2c38c61e41b3fd93863b05891cd35eaae2ee3aa757fa22c6078ac86066bc07ef0ff9228050e4c0f
-
Filesize
1.1MB
MD5411e5ab941a82497aae273c2362c78eb
SHA1872ebc07011660a985159e12c13f8cb7b7d82420
SHA256ab765e7750074444f140d6b12be1510f89091ee3f76566a01f7208939db12911
SHA51202eaa7eab561234c0e30ae2e27ae7152f4e5c721b0ce24a97173933624fda237da4e1d9cb3b19e5a4449cba06bde207537e38b0fc114cfb5499c331bc146c234
-
Filesize
991KB
MD591f079437ace6309a7c7353ca4eb83a3
SHA1e73f8872920c7555d38e3d5c478ec650a0012813
SHA25697903967d5c57dac99a94f053deba24f5e61a8e89c861de8df660ffae670e79f
SHA512297fc2d111c1722c877db9fc9dffc152d1556e6a4b1f0a0a7678913a9d5209d03a17c153e45b1b177c7398b16c7f5080b82fa97b0cad0f2558d2fb7448e85fe8
-
Filesize
1.0MB
MD5e6b0201958d7308ed1b99c8acb5cd156
SHA128fbc67bf1bf53fc6f1055b6b2651266aec9d8b6
SHA2568dfff4a19c06dce43e2e836ea6eeea61e6f7db99abbe54b5b5e546d88e7e2f5c
SHA512ba398a29f8cb0ce5bab609c71f9cb816e174e844274b8dbaf63c802d2d1c503dac5d7a41bb6a6517b3c4fde52a8d38a1427d2371322af1ba6fd3a996893bfb08
-
Filesize
1.5MB
MD5ddb43a60ed28b7b289684132325b3f12
SHA160208b4f5d9156736bca2b75121d33c5877bc6b0
SHA256ab3dabf24de5a11c903884a96641db8634be0352f8002a10957c19075d97182b
SHA512167f1ea2758845a173026772e82d47ad66fba42a1435b3d783b72a36f420d9bd265d6f78bc7e3859a8c87a9f2cbf0f289757b666493f825d52cd0178f54aff67
-
Filesize
1.0MB
MD53d22ff505f6a243cbd1b96717e1753cb
SHA17163f4441b538518ca07a0862214b6f548377868
SHA256453b314df80a27cde94cea1f34606c6cf6ed060f6d5636fd070b8845520e1688
SHA51247e6960c2b0657316fee5b9e14ed726e151f303d41f10ad7bf8f45afc1badb5347a277ff305d3d5046fcb4785810c42df632d3fd80fc1f29e738b59b4230a26f
-
Filesize
1.1MB
MD52fe18de4eb4077d982c0d957fead30dd
SHA17f87ebe6a8ff2991aa43a8c2fac875f2fdfbd5cf
SHA256fa5bbe83a02d44e0d7abc8cf9b484faa1934cbcb1c6d6c3b82a85d26902a6708
SHA5129cbf3e9a164e8a7d751267d89a8dd66806e0c5d19de79a50af29e788f4037f992703ccb6518db0a2c7899257edab48933fbcff84eb76616c1cbf7af262f8f04e
-
Filesize
1.2MB
MD5c7116dd0ac15f27d704b3b554afe20a4
SHA13d0b23a75641da5384ebcdd41185cb38f597f35c
SHA2567558517f141265a94bbd28b44fbc9441f977b19736e6ad1eb8f4df0aa1decac8
SHA5124602a968953042cad8c9988fee6d34719499750c8e82270ca0ca971c7e4fcd6c0db2b9f3a6f96913c2fe216c4edf1641130d8ae57f9e69827944d939f45b7f83
-
Filesize
1.2MB
MD5a96edc50609d068ecbdb7185bfb5fdb7
SHA174c56c12aaf8c834820c2228e3f0e0d43051cb17
SHA256f32f1b03011d64250aa961a32ca98c45fd5efdc7f5bfd5ac84b04ce1ec789dcb
SHA512569c5af62f0f345f9b83596dae823faeffcac28807162ee3977607011b9224f1b79fccd0862c8ae6b210ce0659c021be2005b135969fc3b5b1b3864f4c7c5132
-
Filesize
1.2MB
MD5a534a3de97f22bc6e52395d2b91caad9
SHA1a2a006ccfcf47aafc59f18dfbceedcc1ea90f5c5
SHA25687bfe0ad6926c21f7a0747f7ebf00fb4e194a255ab573d8b63afec28cda62700
SHA512f06da29cb02592d9af969e3615983561667b81a7f67f37ea8a5a707c673549c241e9d619bb1836fc85ecfad0b169098c1c597622c74c15e5f9e8ecc6bf301805
-
Filesize
1.2MB
MD5bd6e54204ee1084436c7c015e4cde2cc
SHA18277f76c26025d091263585531d5c6711873917c
SHA256316b48ffe44de1910291a21840eb5b59ceed6274bf03a65c2428b1f89b3dece1
SHA512457bc728970d278de9a317750f93c6558f0b9475656847496a3295cd1d815d762ee7010da1ef79458cd0718e28f0258953e25d8c5096703615973203bc1f3c87
-
Filesize
1.0MB
MD586d0009b81184c719c1f1910ffcbedb2
SHA199b19ea66eb986f524c901b2ea2486b0f8817715
SHA2561ef6ad5918df8417c6ad648fc87d973fad3c5581b7d685b6d8f5daf6805b36e5
SHA51239cbb50367fa8b986f9f392a6ade892420a83e93c4950ff363b2fcc85e1c6c552fd5f5b8cc1d155b687a3fba5595ad54182194221cc1eee58f8ebbb1698340b6
-
Filesize
2.1MB
MD5cfcbaba878172b81d9cba1c4fd576987
SHA1cf469161c1e71a755b2813cf0bf045b5054d097b
SHA25672f6f6754e27d635c1f61b27fe4970f7e391cce1212791050c57b77eaefd1f78
SHA512ac666117f3df779d3b5f985be664e7e738b7121899abede76fb4c1ac44ffcdb8899060b91e2290e2b6054fca71b2197fbdfca776ee4f6d42f040af53d822c269
-
Filesize
1.3MB
MD5e0603db8f756dd60fbbcd196a6431a93
SHA1ba3d9e2a5c2bd71db37fc68212c3bb80c85c711c
SHA2561924de325e9ec19ab543c768ccaea7d8d495e1244b5355795ec75f6739e21ffa
SHA512c269394b89309ed4d38e3bd35f456ddb1b505cbfec7e999075bfc3feafa1ba51417fb9683c3df0e8f61f87c8e57fffdf5b1e9f1fee8f8a41ce70a405c6cae901
-
Filesize
2.1MB
MD5a78c34e1be360b11dd5bdf68e3d2e80d
SHA14296b598c628e3deaff567a6a0678cc9e93af62f
SHA2565b5e272e1c66d45f94892e916ecc342b7c0af018fdf9869ae28772ac5571243a
SHA512ba5417423a87c3f0d87052aee5cab81f68b9e48fffecac5efa5c185d52aeafc1ce9974c63bf7a2444d6acdc9653a69e9e2becae1e9505e1acd3374b821cd85ab
-
Filesize
1.1MB
MD5afa3a34af1269f6f413d8af04ecee509
SHA1b6bdf49cfc4eb09e0c5463fa8dceb4150041e683
SHA256ff267a8bfbd1594b9a0d938b150fdbd367b8424460f6391d095772a3d536e05d
SHA5129bbe6dd25804a081dd5b38525669c29bb094905fda0f90f83dacf854155a7a0144e287fcdcfb5ee647d7802f19c476edff73cea4895c9ae4aba953f320ef0ed0
-
Filesize
1.1MB
MD5301f3ab8fbca760b5daf255a45b57c12
SHA110174154fdce9109c6a9d3171ac201ff9a4ca99a
SHA2564cf8cd119d6a3a3d2d6d674cbc0e033073543ed3eb8f3d74981de9d5755aed1a
SHA5129f971e459dd937812b1b1f8cb60579190a461f9a12e0cbdb83aa93609ec8cd3bdf89c7cdc5bd74a31a878c39337a48919029ec817a79a85f11550adbd4343a40
-
Filesize
984KB
MD5e48e334fede9a4f621685e1f6d57332d
SHA105627a7a650bbe0d33154af71296bb39b25bb923
SHA256b8d3371cbe491bae15397b8926d6b166ce233225310ddad79f6fc2b007a17e16
SHA51245588d6fa58e8f120ca55ee3ae958eb7a8e8300dd83297963bd76a5d1ab95bd705d5c2d55e2b880f1bb03235231c04966e6cad3dd72757918644c933c75f002c
-
Filesize
1.0MB
MD5637fb6c63a20b487bcb5f9e66c340fa4
SHA1bb042eaf0ae04ef596ac79f9a54aaced7360f411
SHA25650527d2f7e68615b1a54a05934dd472d8b15aa1055bf0f1c3f3f5b8e4fe4afa1
SHA51217539333644b81bde8388a2aa69621fbe64d5245829ace15cacc9a4e8a8d8b21bb86ee2f43928dd6f197de2808282627c07e2fd5cdd854fb3103d5c082d0359e
-
Filesize
1.1MB
MD5c646b9279153e736b4825c4ae90bef4e
SHA12d119757a94e79fd255c4335b3d1e60ee75d301e
SHA256ea09801f44c2d0d3904949290f5be674d5363548fc88701d1747b9437d50e2a1
SHA512eae1e8cc0ecbb4ef3c775205edd2157a11bf54f40797be0662527c1309a796f0d4a6850ac4ade7d2e803cf715be1894cab5874641a616cadc9659aff1d0de678
-
Filesize
1.2MB
MD5046141e88887dced83b48b70973ce00f
SHA11a8c5239a7b1ff8092b8faef7281af3579fd4998
SHA256e3b62688af39aabc8469f4f72e0b80a032496ba8340a7de737c30f76db6601cf
SHA512907b5a2f523175f91fd424f83e74af1f35888aa964d0a49269df72d20e6010f330fa17cd7cfd1b9ee2e13b5202a16553811457285a79d77e8815f31efccdad96
-
Filesize
2.3MB
MD5cbc8ce8847e4f3fa7d4e54f54c2fd870
SHA1cc0fe36a038faecbd60f41e5b2f0d4f83e32829c
SHA256607f03f8e74468121aa0da9417226be2a43a18e6ca154e9eba0e70f04a3b7ea0
SHA51284381f99c30fb34479729770103e14ea1f32dd3cbadee9d77b2e073c247a45d5d991dccfe72b3d7e2ee5ea04070d0813a21a5dbee7372faaa267454c4c3b11df
-
Filesize
1.7MB
MD5d6b34c4cc31dc2cada1aaf785fc1bd3a
SHA1c7ba4546546cded0364b574d684346730c77ac57
SHA25626360ba791109e8f0ecf8e55a9922274a0381c4b379f39fcacf269794d0e4ea6
SHA5127c06125f12a849edbc0669938778350ad300daf0b4112854e6668801480cddfbba0c04cd7a037a7444befdc9d7053511c71f62b8f75f5a9e5fcbadfb708b9b87
-
Filesize
2.3MB
MD536459ac63acaf88732211c8798041566
SHA1082aa28ff934d8e2b1e2fc8126ca1e358f9808ae
SHA25686da5a1b2ee4b90a92063a4be4111271be5ed569db2ec426443e13945a829a02
SHA51211804123dda5f5360d4fa63295c08f343b5780a40d600f9224e6548dfa8e62928617197c490ab8fef3e464385aef2c9f683e62b3fc37a107f45dcb7e95a902ea
-
Filesize
2.3MB
MD5e8033793f5305eb52f1d1d5cf38a2f49
SHA1b468053c06ba3e2f50badd6d5d1d6d08428f1302
SHA2564ef695575fd28c2fa4606a237a8073a9ddf942b2023f5eef01ea40dd02b89066
SHA512d44b5d3bd7e38e60147fb6ba350b6fa157aa4db3e966da6e2fabbc1e0b8f3eba00496f6970fdbb732cb72d8d81054f57bae6e6440ebfa64afa3553877612bf05
-
Filesize
1.1MB
MD529f0ee019b71fa5298034d65147613a6
SHA126b92b28b83524a602d4e003bc9b1b621c2628c0
SHA2568ec966a44c85c9842b0141ecbf25e45c93213a6133c468732ad99ff3c7fed880
SHA5122b65b8f6249a2423132a202899a8d7ddf8051baa4b21694c17808916cecddef17cb8d6f28fb22699ecb28efaea76a8b85c95a2d82204cd542a7764047aa1095f
-
Filesize
2.0MB
MD5af7414c7508144b0575c0af154704db4
SHA1f2c59cafee43ee6f4eb8a5e8ab4cb685f2b382be
SHA25629216d05be67a6b539afb2b501f6c6f6102ccbd75012080d74b07de61e9d4863
SHA51296861f9b97350cb2988f9c9797cb2e9361779a7630611e9d79e747ec53c801ef4d143f7896cbce952a9afc10de24b3c07808cce6fc7c671d09a4caff7451ee90
-
Filesize
1.1MB
MD54720785c468b8fcb3cdfc13f2fe0af08
SHA14d0c8f1ea2a8cf0e643ee575501038cb90ffca85
SHA25679bdcfba6ab37fc3bced8c2fbeb58eba8b1bddebe667241d4538582f9fb12047
SHA5123f6682e7ed099fb18cece474944530827efc3efd43274292e49a54985e602940980691ae02c18aacba40d3aa72f7cf1e7fd2d90e76153a7d30a96f0bc1434910
-
Filesize
2.0MB
MD5a6b73d3f7a711a118763f58274cbfdab
SHA18a0c961a9ee9a76b8bc16bb8ef3f8648fd30e91d
SHA256b5e7039621b1e7a8494a46ee222385c6bd7df044206354bbbd107fcc27d6eeed
SHA512a92dc66215050942e1e722e4278275e89015afd6f6bef0be3f469cdcf8e8e9592fc46ee2352587624adad58dcd20659a1a44fda762952f37ecedeaf88eae0cf3
-
Filesize
1.1MB
MD55bced9cfdd507a35314add7da8f49a4f
SHA11d6bda926a902e0e6f96e05540fc4910f9188bfb
SHA256d3f71a48c28b05754dcb3a9abd1d729f779e040f3cdb39942c5f40d0d112ff28
SHA5122e12359d788aa58bcccafd8b38234e300bfc9294ee000a7eceaeb2e7633b117a479fbb8dd4904e5dc4de86f70024d54808200ef83be3e7adeaa685c0a0d787a2
-
Filesize
1.1MB
MD5ea8174713912172e61dada4f4d1c9c52
SHA14926c1343a539a1b5758b48873d188901a47de1b
SHA256058c0775b50a72c1188c96c8da366f1cfe10d1c76d6c20485fee7fa9b6d9f3c8
SHA512c440179e4ee8af0f16af03eb548be8568fe91aa39f479098344f4140f14aa1dddf4ddc73663e0a3d6199d30402efd749a01c7d1ade74ee696bd3d5be65834857
-
Filesize
1.1MB
MD5d433c94848cb4f2126196827a6de3030
SHA1d0197f0add2aac0f23b81c335ed642478364a28f
SHA2561edbfc954e41512e67e5b22c9a6792541626c0c1fcda253ce3e824a33d6e4796
SHA5129608ea041285147f83d9846a5b25bf0560a064f26e0f52864b385b694c37cbc2218c0589c88269015a87276eac9d1c972a3069f6ed502e8f8ee6173ff3d484d4
-
Filesize
1.7MB
MD575e3e68f8e8fb6d633e52701efd3bf8d
SHA16d9fda97b95469a2c79778c1be2cc44befa6d6ff
SHA2561f0f625e078e6ae981a00bc1b87ef98ca6011192866d9a3701aac75004b22d94
SHA5122403944ab07c696e299f5675fa3ea9e098ce773127bb9cacc576afdd6fc88f1d25b5493e4ef21947f425bbe9194924ab1fc6a77d7744eb1abedcb85b693b93ab
-
Filesize
2.5MB
MD583e21e2e171eed2787e4a7cf8b668cd0
SHA1d194ec90565a74d21f4d96a9ddde81a1de074f80
SHA25639f2a179916c9caeedb61baab552eda0a2a52267088c4f8f14e16ab12a6581b7
SHA51271d8920403c05e84bbf9bebb4edbfd3b203eae018dba712ceb9fca49439e857ce2091b3dedcab0560106e67b54820d391add9f978ada146611da5d8a910707f7
-
Filesize
2.1MB
MD5dc46b94bf4050c456925533aacc203e7
SHA1f2258018b0f5cb85b6998d2eff8c8dcddbbe4ed8
SHA256e0295088f2696fbddabe38537eef39fcb45e4e2f03154366f562cb26b8f10e71
SHA5124c934c09a7992086be7d552c81e950f2bad94429bae604fef0b0bb9cd54f16438fcd0d40a1779c3b735879be9ba4d38603a905476d7c3711b7948bfc5b2ce8a6
-
Filesize
1013KB
MD54ab820884d4a0ce631c3588c02dcd120
SHA1265bd08ce964287f946626e9eada4e2d99cd435a
SHA2566bc9f56e11baf2f303313bfe642827f69249c017c00185ec04891bf8044836ab
SHA512df3be85493be760db23912bcb186f2c979aab6bb0427bc41183923c8bceac226d4624b11be1d1284ec59b81eadd6194e85964d77edbfb75c1229b20e04447bdd
-
Filesize
1.1MB
MD58469197a402766c1d276062b6afbbc9c
SHA11f7899501d9ee4689badac25942bb459763a18d1
SHA25619c1c684e1a00daaaff4a9e55c5ea8eec83bfdf4fe506ba12dee3cb771bf65d7
SHA512e860028f72e4abec6aedc0c164e73ab2886b79ebbf982f4329f52678fa830f80363595aa7950b0d81e2e3752d5091525581eed4300c61d9fdb9ab32efb45f783
-
Filesize
976KB
MD5310d621215c16a57f86611a6182062b0
SHA143c0c475d9a8f5ada32c2e83d91ffe2fe27d0f01
SHA25697eec0b10fb18e8085467d72330489e74803a667ba5d737fe65b60c01a0325e2
SHA512a5d89b9181df87b10f65038af434a3e56a0a5e9d25532c75b8823004d4aee194a3a0d9768bcfbfc505b652b8ab08030b9d01215479cd1213ee9653a90378ef30
-
Filesize
2.2MB
MD506de6eb3ad29143d7ab4ded372dba1b5
SHA1eac9f6e56d1ad56ee50c4149fa691e44348aeaa5
SHA25683612e02b6d9b72115c24370c2f37932e20f34892bbf66d83af07d75b65e84e7
SHA512213b1e11ab6ce987231aa3290e808c2193f8a8233bc90e2bc15eaa3386a9e7042c99454e322bd102607272531f1babe89b3578b5b23b817eaf1e92678a7735de
-
Filesize
1.0MB
MD5b91b0132b47ffd1f69eca5c96a6637a6
SHA133313edb73cd44b20271213cff1526734637feaa
SHA2568daadf42ece7175140cf23c5ad47895310d638106c4f0d4e20dd1791a75cd42e
SHA5125d252d24f2b3ec2401e118599235eff02dfe0213b1e27c51c4607c2d0fd4a9e1a098523c1023f36e34efcb8ba85d005515cf5de8873ad29f4a9dd32931da930c
-
Filesize
979KB
MD590ba93f3b66673fdac37faab97726117
SHA1fa14beb8e2a2776d6450bd4336aba36e787ad33d
SHA25613ee4bdd73be7d144940cfaefca00d3af586fe7278a3b064ff53abd3e403cafe
SHA512d29b849c02b0ba1152ce05f6dac385384af5f6400ac1b6fda956ceb5fd86d064f5ccd1b7800939f207c3fd1afdec56165f1a2db1bad7153c5151c94e7b80f6ec
-
Filesize
2.3MB
MD53f86af8c721b7e306a174b6a9c8c2a6f
SHA19b543432abfacd858314cd0c87c6c845373cbe6e
SHA2566fa1c4ead8349a5295c5859fd0968384421476f4a9e527ccee736e32f63e19ff
SHA512b548dcbf3184e5edc488f64e98aecd66bd56a5f0866b45113ad2b500e2a1bd309a05f0a7cc30895333b12886c03b4f833f77ec03a79723be39db8210cdc04b10
-
Filesize
2.1MB
MD5ddb839ea24b6c64a48e72c8dcfd1a318
SHA11a5a52aa176a3c27d15edb1f5d8ba025267eb559
SHA256a37956f132fd453e5f8c93c9a6b8357bd4550cfb76cc13bb26c7af9fbd6b69a7
SHA5123cd3d8c1fab980f12047891bdacf925afd01b952e6800ccb64d8d414ec9eebbc95c3b3974664210af0962a9bd8c761195449d2549d69c3842b368314ced9d61f
-
Filesize
1.1MB
MD5befcc31b7652786d4b66353788fd3429
SHA1a6e55ae413d8e69337d144ca149c7222ec635e9f
SHA256cc4bdb549db1714870d998e2fe583fd40f1d0dd67d8dba634d232bd8e8b9fb7a
SHA512565dbc4a1c3e4ad111c7135ed823b58a29bf6cada66400b78c86287d338be639cef7f7aaf48f8bd08ec1f6ec92e285ca85a3ac852ade24538d07ae9e0b9b151f
-
Filesize
1.0MB
MD584fc5583bd00f339e966a8e0eeca751d
SHA1d4ee0f88b328d4a06266e44d8aae7abc0a4f2a8c
SHA256e021479ea80d94f46ca9ba42bafca87f71364cd40e52dd7fe4ea22731273d58a
SHA5122529c4e82e72c5ad47ab679a6115211a218f57c4695ef63272c393df9fc5145dbf24e3fec7adfb47cd1b0ccff7f36f15bb5973b19e7005a9af3f833930745d0e
-
Filesize
1.1MB
MD55a8588998c18cc8d65c7fa335ba917c1
SHA1d0c0af7c0e7fb773fcf127d71838aebc35418df4
SHA256357a6545141f4503f0234694849568523c5e3e980ef32970c667cdf4c23df8b1
SHA51285f3088a53e829a6e3f3d798b49e2528ae64f64bc7e9e4fa967f7e5fe2694f428b905aa39076f778c11124459d817bb9c848e0d79abff37d9c96c906aeff1a55
-
Filesize
1.1MB
MD502f6b4dc84871c31bee7db7e8bb085d2
SHA145fd5f70c91feb4d668aad31f37811f41954d0b4
SHA256242817fc55914125ff64d30e7ab59754267ff2f1b954eddc905cf498ba936d97
SHA51290d2dafe524014b45d2033d43f49d2669d96e1ea38dde74cf5218ec0c4c3eb3c89e8a8dba61c07ffb7779e48b5a26c6a502ac8359e6e5f2278d5a6a09ba752c5
-
Filesize
1.1MB
MD562ccfb123e4b4e142491d772389840fe
SHA1f025f5faf3e6eedb8d3a031d523b1dc74fa542f3
SHA2565d58ebe4e3bcadb663e097c2d2c295d163265e009fab3c2043d545afb0e674d2
SHA512251d1483aaf109cf6a98a2dfbb8b12f586435d414bbf7dd7df356a534a96beb4680cd2f7df421f0a349486b802be0ac56be4e1ea0730beba4d05b489bf5bd8d5
-
Filesize
1.7MB
MD58adcd30b9b83bc1880ab69f991418145
SHA1ad24491f8a2f2e78ce78b9d190e27a37e9cc8c58
SHA2566dab8e8533fbc73e2d7bfaa60cccce289440f572ff2ff0c0bd38eedfed754331
SHA512c8dee35d6d46447ccd2e2ed420937d939e7f523f3bfa1e9884a3b0b0d39fcd6234769655354e668326882c7046d4147a3f85909de08af5892637ba64db84d0a7
-
Filesize
1.1MB
MD5f2b8835e3dabb220a066deb61331859f
SHA1cbac911476ee323fb3cd6c6e0e2b172978c071b4
SHA256aa6fa8f59f29d8ce1e19ec461e54273c9a6e2ed7af09389389ba0b277055fc58
SHA512fc405e6b55a57181d7614d36f5a63a4d7f5be0d409dea8138bbfdead856e4d2a7f5383b3cb95b4731413fdf1b822f0ba9d8951cbca1cb4c858a7223730899f2b
-
Filesize
1.1MB
MD51387d545a3931fa0a82f850dfa5280da
SHA1c3f7edbe89addad3c35ea0ce41a6b9651580e77b
SHA256d226392d946db244a2c5e187b62c05613821a9312fba672ce0d8698b0bcd69c4
SHA512c197bace81b72846a985b9cbda27693772e320c3d1e9bbd34730d7c56e430f58c56b206544edd9fe06da27131f2120e6e1fd8d822cc9586852015fde4a176e96
-
Filesize
1.1MB
MD5c64985462d1ab66456937290477c640d
SHA16884195b4ed3f84c00805279110e9c58a22377bb
SHA256d792a7fb6cebfcc1215b169b09e3d570f408a5880ca852477602c1de8c143686
SHA512c24116f5d56b416fbdee36cb0b7e38b17b5f4775d5bf858df32c4364ea292229fc92a68a99a0e3beb3337e43cdf870501e6f6e9af9e2a5668d3b932b190daa76
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sr-Cyrl-BA.pak.avos2
Filesize1.6MB
MD552035f6fcde1a245ebdeec7e070c46fe
SHA13a65b71a2b7603bb0e403accd32129e23b657cee
SHA2563ed8fbb8d28a6d0b8da313818113fd22e9da410f9e6dfe7a13016c24bdb01441
SHA512bbd452acc50942f04ae1fe1cee277905de8a95a9894966cf6fe462754a8adc7c4600b94189c3987a7cbb897552348f0d7bef6734ff4d3f2fb657bedeee235354
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sr-Latn-RS.pak.avos2
Filesize1.0MB
MD5abe29fe69d0e63d0ea379983cc5876c6
SHA142da33899522b41d26fae4a4ad8b00d5d411e923
SHA2561639d676e57a88d4c699c6f956afaf46e60c39ca26c06de3f613aa3de0cc0842
SHA5123205ebd8ee9a503ff4792f6c1e74a7feba4cf9ecd8baeb4209f000f43f3f833c47dc7e9e7135af0ad581c89574852cc0b3ab1fc619da43c7fffb753a56c8486d
-
Filesize
1.6MB
MD5b28d80cf1030025d1780e272a9992632
SHA155cb590d11ee0d48911994d292c2d93d241b2fc9
SHA2562d654c2f9c9faf2fa042192cc960a540f69819f0062f946a9a597066119232cc
SHA5127e5c751236d87cb0ab2955f9567f60bbad863e71b1de24e3d5f447998ab82ac745b262cefab181ce589c347e6d5c0554d1f8735c10f9496a57b930c1421ac7cf
-
Filesize
1001KB
MD540c7c1b35faad43619412b58a052844c
SHA199a696c027cc79bb3b47e278dc221c85f1ec4dbe
SHA256c26daedde49bc888282caa8b8f559b9f5bdbfb7a6aba9e24dff056021bdef20c
SHA5128ae8bb3e7f0ede17f566370e346ab4f82d0f7f8ae7973f6f7b6c0218640d12eede1cdaac1a258229d6539fb600c063e9490f6778a63e4913548f491454eda997
-
Filesize
2.5MB
MD5913ddc5c18cb3c2de4baadf80e0202e1
SHA1f8739346fa28eb911de8a44c9d25e98b7c4d51a0
SHA256c63049d1a553c354a97f540cc521a3ffbfad9e76747bf95dc8e2ab7e72b1a33c
SHA512e4a3526faaee2bd3e7d9866eac3d199784f52be21cd2252e232abda29e9c6e784f86dc9917a4f1d573c9a1c86170f47ad26ef6be664f5d110eae0d07ce400ba2
-
Filesize
2.3MB
MD5639475a619edc4bbc88b311e17bf7d2c
SHA125c407fab153b95662ae15e8fe1ccd4bf82cf03d
SHA25610857ce533b13cd884e2460474c6d15468e71dd597e058f05505a00814371e25
SHA5125b07ff21425a2c90ab6e7397283571cae2ec14434741f0672c37d3c14c1fe14107b7c02c87731f8413152d43ba1cb0470980dad688bacec3c371316372e74042
-
Filesize
2.0MB
MD5739129ae766ae463f535f8969c0f775b
SHA1394b4e3a82fbb96a741dc6d23fb76d6c12d654dd
SHA256bcd614fadd9c12750955891947b6bf176f4d2dedc7b1b636ccfe673cc8a0c329
SHA512b3c7510eff033ba5df7e9d2db289727435b9ecb43c3a9c380371289d0b0cf2a9b523382e14f4e731bdb95eb3abeead061417956f2412d424546c7f4d17258476
-
Filesize
1.0MB
MD5a96a0e66fb7d1203d0c6cda18746e22d
SHA146ef920a96b3bd4716b52183de6d06a25300f6bf
SHA256606cdf62511907fdc65a0b2c05f0d516688beebcdded0e868d32b24b21d3a5bb
SHA5124b3e05500a1f2189b815754a83fbb1c6de528fe94abdaf4b9e46e283dc7e2717f4fbf9af4e6baa242234c4351617b7ffa8cb20696ce271e70996ae05fd91bbe3
-
Filesize
1.6MB
MD5042f7aa486100e58e43ce602c747dbc7
SHA14c2ff7249df689ff87252a4e200cfd62930e0fe1
SHA25639d3787a943000f9e68d30ce8453eb2069128005c35756c4ca8dafa2b6b430ca
SHA512ec69905e2bdeb5d370cdd5950d6ea1f8858903c0d5403011bfd4c81a5377ad8c754b38d8a7294551510fdff2fd206209d4887ab14a49388603411ab696c66db7
-
Filesize
1.6MB
MD59566a3cfc0835e1794cfd6ee8f513804
SHA1543983784720363145eb7763cd2d108f2854f0b2
SHA2567ee6be7093cf5d0b7800df13f35528e783c25e7dc15cc8171f75dc635045f00d
SHA512fa8fb72c35887896ede446daa1e5494238bbf728e307b11ba07c51a7cbe541a317fd1cde73ac77d70f1c46a61e8761886a6a7314a0e0d5ee8402ba25953b5ebc
-
Filesize
1.7MB
MD5b66452a5f5bcfb5eec9b12f777b8a52a
SHA101c036ac9b90d8026aabec14768def60b25ccb57
SHA25617bd6889d092aa16b810385cfc5cc7a20cd18d04f00d07cfb80bfa769f6af1e3
SHA5120d553e86e089cd85a32c0467115af38f874901ed410c4eeaf10ad223f856fb46673e4b1c4aa5c19d572097e96bc1c44b8ffe87ce65d0f1c7f3e30878b74172fa
-
Filesize
1.5MB
MD5b1391479036cd422fb17dd4999dbb11f
SHA176f7239375dc76f0ba9abb12561f71569e57d690
SHA256e758b61f4427f5025716c212934463d2fbb2648c30f9d3e35ddd6fbded8828e1
SHA5127f72ef19cf28ba08908464325800b70c16cf3f220f5a42edbd78b5b92022cb94bb8e2c84464b0256e56049d0e35347b731f32aa7956b3d60a2717b938683a7f5
-
Filesize
1.2MB
MD5a9e3391b4af7ecb5cf35df583aff096b
SHA16dbeb220fe2dd9d6361866b74fefd5d287717e98
SHA256f993dfb4897b66abe90c14b12d5830badfb50450d2693d74d3459e27270408b3
SHA5124e6f31c963188a4da2f829fa9f7fb4e8aaf7df5f10cbf3dea5270bb3fa8a1cfc9f8e30d043783243207f3c05a4ce5e9c6e1dd92715241552cec6db8d93bbe0aa
-
Filesize
860KB
MD5738d8faeb143155b62246a6a998c5ccc
SHA1ffa43fa73e06d4a32068460d2f4943ba470fb712
SHA25662c364684d14ebcd5d339da91b37239d848dc8bff6c5e0e98e2413f86c3fa511
SHA51255fa0cc5d94e04e6aaece0910220341ef706f58df5ee8b204136ec2f7222ac8b9e90749f03aec960e2a009c4e00e9876478ea3a0452f02acc9874aba3e45b37a
-
Filesize
887KB
MD5843a48e91d2bfb44d683469a6d4ca3ed
SHA110b1ac421a8c78763f749cfc1846be1435ed2a97
SHA25673dd2cf987e26ffc70b75f6765c1d52f46222c57f49f1b7f7da8eac117e3a3b9
SHA512258ce2cba4cfb4e4515d3d19b3c1b2337851380be53ee2c57f2dfc751b0291b23d621af224563e471d69a49aeb0cd7d63f629e335560d0e674e8d4f08940dc4f
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\manifest.json.avos2
Filesize1KB
MD5c997464a4d7db23aa9b154fd6499e846
SHA15087a41c5c21fcbfa53dd9140a0a2162bc0f69c1
SHA256b530c4969d536649fb4592342680f54903f4a41ee32ed78db3dddcff2a0c35fc
SHA512e773ae9e1b9f8778b50c1bc3fdfdb610be28c065a8558bb637c20366781358b47cce7a733d7cce87e9ba5b19356a96aa8b5801828ef5d40b50b4ae8eaa856a7d
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\preloaded_data.pb.avos2
Filesize9KB
MD520db7351e967bbb11f92659aa1c1e257
SHA1aa9b2bce5c30a9b9e58097a3c469b2cefd9c089a
SHA2564833390a55fcced29f642b921569f2afc4b31f7821247fff4addd9c48359b0ba
SHA512a53296b641f96abaa417d7c8a6f90095a3e3c4600260952f95ccec13736722effe6d7e66677abc23a1d2acea66ebc7c505ebe53b2eca986fe0dd1cd1bd62ce81
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Edge.dat.DATA.avos2
Filesize13KB
MD53df25e40c54b851e361e003d800c6d4b
SHA13920675c5ab8e848c3c90690ac8df83934a44508
SHA2561d65043954c88f4f704698141f311ae8c3edf5cd3057265a418a4aac40235b54
SHA51216d5fcd67d660564fa3e23bf4697bb3fcaeea2d52088a2824a79db010a2e97792c8ab1cd6615e4172843afdeb19dbb623047e68a6c036cd69492ff598e955d1b
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\EdgeWebView.dat.DATA.avos2
Filesize9KB
MD5cefb4535ac204afc924a0d183ac2ad16
SHA149175f826367173b711954f6e7b52bdf28b14516
SHA256a56e1907d1d86b3c4559ec3b1260557609fa5fe827d44a18e8122185e4e2e048
SHA51258ace17e4da0ea54ea937457e21f58f15891020cb44096f27f2338cf09efe67bf3fa1df493c28ea53f8f4ed85e7eefe2f06dfcce2feafca072fafadb81ae8bc8
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Advertising.DATA.avos2
Filesize25KB
MD53a5ff0b274a07b2e706c58276b45e730
SHA1e845a520e32b25d677be90d6366472066e0cc9a7
SHA25616787570c9a3b54dbd727f6d9233869d28d6020a3f3613510a7ff3039c1b46c3
SHA512a7d2ce32fb15f2c67829b2b5c73ae61fd70ae36bca7daee584b6bcc09a450b9fd30dbf7976f5360b84a82b4ad77c3f1c4c9b9afdbfae24531017238a330f66ad
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Analytics.DATA.avos2
Filesize5KB
MD5b4a8996cdfa8a5d353f15f9a1c9254e2
SHA18f6d322cad86bc7875821b91f9735db15cfdb7bb
SHA256f5218d2ff3ca0ab440dbd7c33b89dc73b56ba91f460edf0c0bb9a61a399463bf
SHA5125d193c8dfff4989a2cc6827573b6c685af5be53cea9c98f248251c38b7b9c5bb409caac975d55d92e16127014aa2d030919ec6e112c379ac8248e036b5b6ca1c
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.avos2
Filesize1KB
MD587e9b154262785e7b919984122989549
SHA1b81eb78fd05b6839ecb1cabda03645c8b14b3097
SHA2562878ecf9a095d1e87a7557022ff9e084df3ea1defd54264aa3b089ac5d57df89
SHA512a7b5c9d0526c9d0af6ad9da7036df51ec6f020e22bbfec5d115e3e6b8f7e1748f1f787bf4ece42409d694fd876d5380ad17225175921077bbaebc181c12fd0da
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Content.DATA.avos2
Filesize7KB
MD56d2cc7cc800eeec90fbd85727811318e
SHA128c8d9216d5a91b89dc7f5229f864afc029a2d03
SHA256bc75dc269b4788a132b00d0eae88acd81e97f086ec595c935be3b4e65e00aad6
SHA512be8126698a7ee9ca4a3771d3013079518c90c3740d2cbf0e14bdc36cec3706a04e914bdb976544cfcaeb0e9f0d2a1d3084ebe3a6671ac7cbb31c0614d101738d
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Cryptomining.DATA.avos2
Filesize2KB
MD5e476e7c68a423a450ac5c2f0165b0759
SHA1b4da7f91795a098bf0286630a4861a68fbe9bc84
SHA256284db6c157cdae60d8783680b081f5ebc9c10992bed6fc3e8953ef2740655e06
SHA512fb08cbe8fa4850e18d1ddb122fa26a6035bfd5d119845f1e1c90e8cb0004e1e112dd23ef0f3c0ce9e22dc1824fb3d9a410d128d4f1a393a985fd0a9f0fb17bca
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Entities.DATA.avos2
Filesize69KB
MD5e790a5ef8e6db47895fed12f2d75570d
SHA12f902d68cb5f989732d7f79d8ef4341f81b7c845
SHA256d3c0c3fa1415814df37bc31ce886874175c5aa7e5c365588933c15e24b0ee130
SHA512e94961e6794475fccbc540f2495e429e4e8ae19d4e363001ca8747e32d08afa99efc16840df2cd9708776affbcf66cae00de4391069c06b8b0ae9910b2d1e7cb
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA.avos2
Filesize2KB
MD51d189926427daf7e6eb9a4376e2d3999
SHA1eadbc79ffa46375ef6e6fd60ce78b8b2ffbe5fc2
SHA25657af4832ddbc2ecb38f31123b84851ce21e19df5bffa020245a4c72075f590eb
SHA512aa4500232f5db41f27278b6bce364035af3792a4f949bb5ad98ba606c4175339414cfd359d0c689db9255cbf34238ed8d70c52fffdbc01a229a5c9a364546b19
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.avos2
Filesize35KB
MD57bbc5c5a3f58b4c9aa37b29e9ab58fe3
SHA1a16251c4b32d05ea03843553e7e40e5bc4f316c3
SHA256ad173302b01092d45e3f5cc4fb7599d362cbf1a08c8392a82ec30b72502782a8
SHA5123b37b0f32e2610963213e65c989ebb289a0497bc6db43bc3a53fcaa18b41be3bec39604889a3b67773e76cc164d9c50585a639c1078c3ad7ed63dc5574b3de88
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Other.DATA.avos2
Filesize1KB
MD5ad69f3e513f1cefa1b8a6c90474ffebf
SHA109328f4a77ca903c3761b4fb1ec13177ef6417da
SHA256cbc140b4977226709c18569e3fd1d179d653f16b693ad3fbf75ad284e4c2ec84
SHA5128c08ae338bc4c4d8d9793fb0f1e486ef004f44fc8fe3a1f53beeddce80acef7a7c33863b63ab43829a60e57ae6a6e6d784e8063540f564c0d85be20549d0a5d4
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Social.DATA.avos2
Filesize1KB
MD5204e8819528c909a4c849d40da51b999
SHA15f7f67debf8a9945ca8505c0d22f335bbb29f912
SHA25698ddcf81e59d44f7fb3001ce269cc4e438a232f8b104926d444d14ccfacc2cd1
SHA512de43f6832a3d587f0331bec2c4b28b2f332f6b923914b3c7e23620c5a25d0235b85a31fb529e31d62d6ccf18eb7cd829b3f89fa3aa40a0230413d5972ac5bd90
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\TransparentAdvertisers.DATA.avos2
Filesize1KB
MD5bef36aac03ca8a31e4003c843b38319a
SHA1a5ef0438f7fa482dfda598e1a7a8f8e471bd51da
SHA256894bd84100cc9f529914bc64966e23ae743cd4088ce53bd4f03768b6c4483882
SHA5125bc5f5eafdd77ef82dc8479dcb8231ea349103408b64cb00a8b2c5ca730d347b30b539c20a8eaabad84fedd19029531dd2f0a86376261e044ebd7eb16d081ca3
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Advertising.DATA.avos2
Filesize3KB
MD51c00f8707bb6e482aadf93ead09ba5ee
SHA12b747357d300d08c1fd1c1a7577d298d3ccad0f6
SHA2567b3366aaea6094590d745a4cafefecab65fc6ecbe4f38c5850d35a6cfac86475
SHA512690c9ee194e95d82816cb1b5277b38857791bb911f499c5030e7be5b20636d76e8f6479137781e4710ba4b725025ef9c86920ac6df6ad1216873c30e1b88ef7d
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.avos2
Filesize1KB
MD5ec4318bfabab82a6bf093273076b8695
SHA1ef4d3a19214eafbbf047fff069c4326a6e64d9ca
SHA256012cb83552c38bdb78c4831ceaef0cbd602cfb835ba7e62f48ddb5d66bb55ef6
SHA5126472626bff7953dd569753c2e691c15b62727c0bbaf9623e6cc25e64ac08e4e8ea0b35c57cb43410b9927421603dffb96476493b361236e2191c6a43f6e9c147
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA.avos2
Filesize1KB
MD5b1c208b4eaadce719ff3dce7805e68e7
SHA1e3b09b6200dda2499cd03677ace135faf9ef9cec
SHA256a5ea12e4cfd1c5c140b12408ca842fcad735459d35c7eaae102ffbb03057df88
SHA51272b85e298e340156222c6cb5ffb0ac1abc044f486d3243c2222bbe1ead4868cb2c2ab08f567fcd9789ccd8bf88f0bae86e827525ee051f469acd01d3633b21d8
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Cryptomining.DATA.avos2
Filesize1KB
MD59a65fbf9913e68a85a11127036b759c9
SHA16526e44075957a4bce1ccb01a21ab87c1934caf3
SHA25687188cb7ac07f8ba61a082ac61e9cc0f936b0fa15a5c60ae1ed69066243ba6f1
SHA5121e3eaf37352203cbb9ad474e3e890f6a941b7b3581ea7b7e236a727e8676e7e81cebe48154c8d2c904314704f77f67623b696eb9b2dbcdc56741435744bc69f9
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.avos2
Filesize43KB
MD5d3a582a45c19197e3eba084b167f185b
SHA1cd05907f2b1b06f19a544d6a6228bfb11c124ba8
SHA256ee20f4bbc530afce3ce22a683aac8b8c59c7c27b20c10cb1aac3eae9a481e3f8
SHA5125cb1fc2f2c778afd2541ca22b4665b22a423b884e996c60e37f2ddd42cc2edfcd866ad9089c8f6f9c8630705377cb5c84436035c92ddb7a74161d252240cdbac
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Fingerprinting.DATA.avos2
Filesize1KB
MD53ed8735d3148bc2f8890b50c29edad54
SHA148989f12c64b225bb55a4003a201aa7b2f09b827
SHA25664eb52bb8737bae8e0893ba0713536163f71a52c227552ea71beaf1b2d9a609e
SHA512d0d40ade0e1986131089a6025c6c340ef0e77478fb8f1eeddcc34756d0402baf6053a9d9ee63378a0361358a147a3cdef7f3f9b27a85cce3306ead61418d3351
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\LICENSE.DATA.avos2
Filesize1KB
MD513c9a8915ab08f321a1192c219a34f06
SHA1bb3e11bae402c00541e259103630d2df3543edf1
SHA256711ecab2bf85dbf95e82608c9e237b55dac9c4af17581d3fc3cc3fa59bd8e386
SHA512ffc234e8b3f59a32cd9aa50c8b7f9af4e760bd76ba2b715905f7c3f6ad1832e6cf3579195c1e4dadebf1769a76000809ba547c8311c2baa6bb59fb46b774f965
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Other.DATA.avos2
Filesize1KB
MD53f5be9aed2d850cc0535073e02beec26
SHA1b0b6cb38f1cc934d69154b5f05ff1fb318b2871d
SHA256a21ef2609dc1871daa6f389286edaf78a542ae46a00f1fd738cd2b886ca97770
SHA51245f44ff297c0501a0ab81add36c9632bf2df889dc1824843e820c55b46aa794984d878dac780289463ac5c6ee3054e8e7a614bcb75cda95eca1e29b6e25c389a
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Social.DATA.avos2
Filesize4KB
MD527a38d9fb89bfea744a5520cf86dc04b
SHA1e750d17507a07751d4612b1405e89a2d7c725371
SHA2568dd8f5bd9a1b4778924c1d6e0e5ace3ada6a4297c306b3f7fd4aa985b57e5059
SHA512caf0a3d2ca9a6585b4a367da8dcd0f020c7f54d01aa1fc388ee87b4d698e7b55977e9efa16a30661615def19f89c8238d1e1c63c65fa5cb7cd671a3803aff1d3
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA.avos2
Filesize17KB
MD5253ad3886a8808eb415dfec1a66379cb
SHA1d2ede96aeddf48f932f88e16531339e5bd106964
SHA256be750dd5d3f907c1ea7dd3e84c7569a2bb516b5da3019264b8e65f001d5b4997
SHA51220aca6ae4a2911904a0799dadf9697d6bfa6c839cb5fd7777672a8cda92edbc85e712012afa4646e747c002a451c72b64f2f96a21a815c24f07f0e3850c2fafd
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.avos2
Filesize1KB
MD56ba6353886685f21f231cefef063e9b8
SHA172390a700cce1f4eb674c7e8f6d9438119996a41
SHA2567b9465a4057980a9debe8fda043bab765a0d07c8406f505e939d7a076df00e9e
SHA5129bd9f937fd4dfbdcddbff78d5927831bad686849780ed66078cc81c9bd93ddf22d6af51ef962b0956214f4737367e77020717c67abb36b5852406a19df116313
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\Logo.png.DATA.avos2
Filesize32KB
MD58371b6d767cc3a6e4be91bb99aeb81d2
SHA1d53ab6b771183b17ef73d2ac45862e8763e53cfc
SHA2569e20b2cfdaba169ac963a2f9c7bcee106409fa0d4474b5f24918b5ac994d4ea3
SHA5126c284b5b97dd76f7ab7e281f61a28a1fe58eda6a2054a208c8f88b6c2b478f2e6fc406bd4266249e3da878f8aebdddb2c05cd3d3d2fc8d339df407eaf31bc6a2
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.avos2
Filesize30KB
MD598cbeab8937d8fa9b99ff057d6515a19
SHA1ca6a6c6dab91b8006aaea664078168f8a847d846
SHA256b7db7ac650190700fa6df5b19a5ecf93950b9bc66a1d022489e39b37328a7c82
SHA512ef582403a96066aa646338e3f4227a2f37133964c49efbd70856b68b8930d813ccdf7493008421e39a0f8bc0a371954ee3e3027e2d8bbd1ebf5083e5680f159a
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.avos2
Filesize30KB
MD539bee966b221972bd8214c1588a5d75d
SHA1926a2461553aa88dbfba72d8ff56b248770083da
SHA2567e05f7ca3776dcdc15c9b488e068d7eb9fd9c1ec9854b7c63e38b7a007784933
SHA5125b56c70f24be4560af29cf83a93474d9dabef7034fe19586e0e25018be65fd3712c91f0942d94fbd3596aea6be841bc74b966b87233fc470013281088ea3c6b1
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoDev.png.DATA.avos2
Filesize30KB
MD568178bd95f9b92a5b8cfdccdfafe4cbb
SHA1163b94173fc1708ad2bcb1b547552db71f927f01
SHA2566c2953b5e171ad3e2da64b4ee383ac3cce10207308333de373fcc337164164d8
SHA5121556fc8722c8ffe0a3367a5ece923df19270a2c0a76af4eeaa01d6f2c03aab26e95d89604fd2f3f1f69134e172b1db7344c749460202e2b9988d1e3898949c55
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.avos2
Filesize16KB
MD55a33918a60cbd5a015959c1d2d233cf5
SHA1306fa7cff3a9e4a37bce86606e93ccb92a1f1dac
SHA2567e94e753cfd94ceaa1ea57097e08d3ad8dde1fe749865b179706293ed343e830
SHA5126a29948c3c453aa112515499ee6f3212539251ef4bcf1b2ed15c0eb8f185c4ac3874cc285bb8b6d11ea9679c62609eff1f9574c29925fb54251035f96ad87660
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.avos2
Filesize15KB
MD56e1159339317bb485d64f78b1c3aacf0
SHA1716515a0faa112e20598a427146dbaa3640eabf4
SHA2564dc84e8ecd9abef0eb4fb55706d5b7d1fb57c16f6bb0de23171562ea04e62794
SHA5124ddf9e132b49b864c24c3e003c4912f7f388da04bb80f6fa3781193cb0f78fbd40b666d86dda1134842d8b4b8e6044c203827203fa5dd05a31be38d5f2c4fe7b
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.avos2
Filesize15KB
MD59c4be029b5cb2c2221ffaea2871a840c
SHA1a9af32ae1421efb5f297888042e9c3a3482daff2
SHA2563dcd48858432a19b44a448480c41e7d4c5491c82468fdfc24c61f969de75f900
SHA5123cdf354f6358709a6b0ed3bcdaa6d0dfa9972a91b844e238f13e339259e1587215ba22528b2c1270a61823443e32061f22432ec89d541719551ac8f451c0dd36
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.avos2
Filesize15KB
MD5ea8c4fc03f59d462d1a7cb2df629d727
SHA1f50228c48914d84432cdecb591ba2dad7c7f769d
SHA2568e87bf16a53d81bdd34b258135f7bf8c6f18c9180f7989cf25bf277b194d5e97
SHA512f0b66e1499618ac2a5e9570d15b85bb78b3d06b70232457f8a3f32712ff9d5b37ec30d2146a97ee6475b508e6ad501c0763a7907ef370f8dff219bfc45d04f11
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.DATA.avos2
Filesize2KB
MD59398952b814e37b14d65bf53409719c1
SHA108fc4704becc4d24ddff44a8261b87282838a675
SHA2561cd0495ee9602e24c017099477e009ab744ff39b9025f1e3b4d8d56109bfb14a
SHA512937e8654ae1503e4c515d8b90481ebf0790c40c77045ca736f0606dc719ccf700b516b6be71ce24912d2750a745ca292179bb5061dd1d1181429d041f134a3d8
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\WidevineCdm\manifest.json.DATA.avos2
Filesize1KB
MD5dfea8e87a7d7928eff126f1e0a94e6f7
SHA1da0b03ea7365c620e244cf76ea3e6339b443ad4b
SHA2568e34ed36bf53debec743729a242aa2f369c5d19806dd3a99eeae6ca876d2c1ca
SHA51216a94ebfb93da12d520cda80a4210aad325122d7f9b8f56747d652fd8223e9292814442700507a1a536c39fd1bae54690d894916b7cf835cd136ac10a5740ea0
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\delegatedWebFeatures.sccd.DATA.avos2
Filesize18KB
MD5537efcc9fb6ac214b6d3971ec88144aa
SHA165896f7ab0e5758d9c9cf9533736f88318a43210
SHA25642b595eed37cc99d21d39a60fb0963bc161e8077bbad4450ea5a5597b253c07c
SHA512a7ccf050b7b6d5173cd12565398977a58258833fb8739e741af3343bfe38499644b35c73ad1739f489ba34fe09675cd32882ee7a3402a18b0020ec700ea117e9
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\icudtl.dat.DATA.avos2
Filesize11.4MB
MD5ebbaeef09dbe5beaa6d74b6dc1a3d7c8
SHA133d94c047b287c331578b8ff5935d7a5a402498e
SHA256b4239d26bb86f911f64a787285a1588b178bd7d88f2a89695b8c9950ddb3b3e0
SHA5124d9f36bdaaa771b29dfd44c02cc6f27e164c467d8328678c51cf1c9e9e96f1966ecdd9bf25bdb1ebf459ce10b958a834f70a95f65cdac5af6794a6c99c25f9e8
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.dll.sig.DATA.avos2
Filesize2KB
MD5259fbf48f84ac65d36e1a493cd025230
SHA1ad48f30d9bb6b4a8d578e19eb97161d403caf0fd
SHA256c22a07e09363b3a491a571e9aa7d60609690e65635b3680af8dc2e5fce8a2a7d
SHA51214d9f4f3145676c524c48da5f31f4b9af9b086eac336f861791f7dfb3e306482997e8ebd649b065586a0ff8993bdc55b9daf84e25f25bbffeffd75efc39163ea
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.exe.sig.DATA.avos2
Filesize2KB
MD512e9b4aff4685c976cf753947b4613ab
SHA14a8674b1ea286ed0f6a5670f4be07dcfb68caf3e
SHA256d4f581927b6e3bab8c77e1d00180bd452520f7c16f291ca822c31d3a52b95497
SHA512497349a124368fa9e93ad32fa922eee3bb338606f1bf8bb9e7bf6319d7705efb06dde54ebde0198b9ada7bf5285d89015de7bc0fbe08503ab47731be12418db0
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA.avos2
Filesize1.5MB
MD53e014e9198769a8dddb88bf3687b7da4
SHA12735f887ff6041d5c9284748790f3d5dab2f753c
SHA256dc31a225d0d52073dfec3dae4d422d47f9e7ece2e6f9ad1e941d9eac2102d04d
SHA512277674d5f6a793c2fc735b984b5c1df228dedaa5a292c80aa8a74968f12bb0f120f24f752f1f2e07338d3d323ef88495fc34d91447fdf4175bb0b69e9c2762de
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA.avos2
Filesize2.1MB
MD5e0b90220a0b9f5e5efa7a028bcc4e45f
SHA1130d4d07f6bdfe2c156e3ce810245986be84150f
SHA25682b43ed7304d128ecb9e65b710b5b85b3d7fb982fd33e5680180787eb8d3dce8
SHA51244193ef253b7e3c87633a9a67dc7426056386f0a439a0deb48278d6e46c559787b15c03b35036c4b792cad80d172bc61daa7070c89999fe8dc4b7aea0701d242
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedgewebview2.exe.sig.DATA.avos2
Filesize2KB
MD52d853fe49a2a6371f2fd9fff38fa2e3e
SHA163b535eee4f7d20c615c3ebbb19282cd30f95586
SHA256fe522ba2b5af905513d1a4279fa83962f9f7f2cbc6e9940cb97ec90784f30e13
SHA51200367c1afa5cf02eda8e445b899155f2c890622f58e55cac905ceadf01e8e4b5db3942f7c989915096f038fd0a97e46d2206b9d66f10b521bda7ec4a46312619
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\resources.pak.DATA.avos2
Filesize26.1MB
MD5e99505f0631d9b6ea9735a9ac4a4ed4a
SHA1aae175dd36123987902d7efbc558e1b69312cc18
SHA256895e651eaea2e88845483f0040058171a678b219522cc788f3d45b2b1e3386fe
SHA51295275ba6888d764091ddad1a081662c1ba6fa09f83c348aac55723e0fe70914dc2f78998a092f6ae2fe6dd5127abfaca3c7e06c02d0e0d6111a13cd6753238e3
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\vk_swiftshader_icd.json.DATA.avos2
Filesize1KB
MD55463f46f2d3b948e113688da53417f82
SHA18401c278151fafedf60dcf6dc5c59dd54fdf7365
SHA2562856b40c8447e39b0649491a19d4dfdf85fe1dec8e6df716f1c696b039049abf
SHA512d873ad2d05583a5244ff7b6dc7fc6372b589450a26f3d02be6740f3641a9f84afa75934546f8107a96f20c17ff2eeabe7e0147f88c9f099612c671f2bbd6a873
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\camera_mf_trace.wprp.avos2
Filesize25KB
MD511cc42ab86ce0ef7204797410c5cb863
SHA15179fcc0002d6520ed99ddaf4a1aeb212e754982
SHA256b5c61664fc3ee1d15beb8063a0708b836f55bf277216a96926cc7f02b16112b7
SHA512bbd9eaf9a56f9396dd38ffeea94a13fb31ddb1316185ce6ad78203223ef17be9379e2647cf43e02f726856a0bbaffc9a16bb64920a403550567ac65ac5d7b1fb
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\mf_trace.wprp.avos2
Filesize13KB
MD58810bdf7cf9b58782b44e87c20bb2f53
SHA1f495e7b0fb6132ed1c29478be06562bb81787893
SHA256bcc17efa54a638f46d1caee0e99fd79aed867818aa7fdfef999ecde28c878ae6
SHA512d45399b2d5fe54801d6de2e129c63a9c8027480c5d0021d370f4631eb4f62d95eff25b3a886b05ba8ab263cdd6287e6e1a34e3868fb140d3ad09382e7aa9a6b7
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_game_assist\EdgeGameAssist.msix.avos2
Filesize1012KB
MD5e90a918e12358a1d4ca5f0bf1ae8ac1b
SHA16bf8fcf410a2647dd5430f1f93371080ab8997b2
SHA256ea57cc2f1353903ed58feae2624a3a7bcd0f530f9c9ab1d5215be39ab47fd061
SHA512192c1406e413729bb44defc6bf95f259e13081ed3206bc1a2d6cf47a5b86688485e215fa618c956d57d79602afd771d685487d7d0fe43b636e1102f49ccecfbb
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_game_assist\VERSION.avos2
Filesize1KB
MD50b9b8b6a63a5229c407ca24fc9bfd911
SHA19adff2ad4beb36442b5b9fc131b095fac1f41814
SHA2569efe9dd440d4fc2637d409ed2f0807388f7acc3b863f4362abdf8a08267622e6
SHA512215229bed78ab8b9478812df17aead3aecf3da79293dd5e7806e9766c8087e4cb3bb948a2c1367b53e6c0fe96be857942033abecff9384fb10bd0b7902e3aeba
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\resources.pri.avos2
Filesize4KB
MD5cbdbef2d477f6eed417a83c8d34d3017
SHA189d8cadbf65b8312d6c73b9745bdc0b2bb7ad709
SHA256db2f506ba49a8dc75bf3e39eef7d393f65814819afa2de988c99477ae1b2c12f
SHA512cd4f214b0977f7c227c187d15cce7f4fdf2d58c0794556450940bc57bdfa805c4c64991f339e8724ec260f633ca65d150b083ea153e7aa7abe2c088950488624
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Beta.msix.avos2
Filesize54KB
MD51e0be8a993d524d856239b08ff092073
SHA1901f84580a1ae48f0e3c9b4553783ab606a56ffa
SHA25687ced589e3f3978ea567dc6b8942cb2c50ee91ff1e7854aa91817055d0d6c6ad
SHA5122e50d4df5e020d9baf70f503719a4bd7edc139ce11a6916221abfe22be238ad95cbc25c51502f8605a736ff1399ca2e7af2992570ab2a6e5f3fa7f8bc72da545
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Canary.msix.avos2
Filesize54KB
MD5e0981335e96db4fd69caaa1383f49bb9
SHA1d86cabf7aac098d09ffaa7fa219e470b29e84a1c
SHA2566f3dacf02cea5b3d968d22e9865701d8c4491908bcfa962e5e3466773cbf5366
SHA512bf93bd24129083e435992025ae28a285a5b51dd55c25e11e7688e53f45125eec3fd49894a4ba5199affb09d9ca60616043a4eac16aa680a190227c06e150433d
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Dev.msix.avos2
Filesize53KB
MD58a14cfcc39d155d769636e9a6ef82303
SHA1040594d3cc4cbd111957244582c8908e6eb6f532
SHA256cb43a5c60cf0a22157810ceeb6be615238f65528a70fd4b76da1523bffc79436
SHA5124e9faabf8ab12ecc4ce3d989521db868f5c63781ba73ba9349a298bc014213a56374674f9791b8a263133c6f764fb0e9016bae39b38aa77117e3b0604e4f3b4c
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Internal.msix.avos2
Filesize57KB
MD5d40e14b62ced560d62a27391ef1fc80d
SHA18c35c6b3d467731d76cc408509ee14325eb9d403
SHA2566b685d8465a91ee9f5a7025697da6579a5deddaa7aacad8dc88d4393e60f5442
SHA512acb61ccaa9b5bbffba19e78595d26c7a827a4a2db555cf12081c4cfb87fe05cae3634a024422ed06d652ade65c0c7878b07217272649b1009590cbee42a6e0c9
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Stable.msix.avos2
Filesize57KB
MD549543983f66d7c81bb7e5ef21c1a02d8
SHA172fd296806b77b77d9d92e8454db5844755969a8
SHA2567a96637d991d1e1d965ca711a1e648fe3a4fb9b477e7d7f90178b33f7d7d5c69
SHA512a0c6c8a57e8fe0ec468e8b4a835870a0e93a5eb51c13eabb507a91bf3dd4ef4d9ecd6ff28b42d34c76758cb9ceab14ca8893e70dfd119bde0e1d40f5c10fd00c
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Beta.msix.avos2
Filesize54KB
MD5f6992461ed13937d225bfa581e9f2ac5
SHA1af0cd74242a036800fd07f6f27b3f4d01e75fec0
SHA256fd87aac7126d628b4033ac2632b7f6b2cecd6531e950797cd12e502a1e17f6fd
SHA512e677d6e12bca45b520f2c3fbc8c854d81d2b21dde0508f68e50b66620cf9ff3e76a783cb8bfec12ab944fedc44ca277ca7aed8aa842213884238a6add35235dd
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Canary.msix.avos2
Filesize54KB
MD54f9b9e6ac39e84b2bead49232126a7b9
SHA1f1abbc660a33eb6c722e0934071cc4c8735783b5
SHA25629f8b21048738609850a661df2d56e7713de3e553986eff1969056f24d9c0dbb
SHA5124f38850d7cf3caf0a02e6853b6357404dede6aca6cf4c022a722e3da72ff9905c8d4169f41e6640edd3a0757390fb4d99e2fab0f664f1bb9201d08ffcc364ae9
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Dev.msix.avos2
Filesize53KB
MD59baceca523e943c4053eefe216b1716f
SHA1b523022b05acd0b3eac4b9da40a9adb889d68f5e
SHA256113837a6ad98ffb7843cf8233b28b26323bc0e253f91a959500e8e68536b9d93
SHA512ac5f60ed528f292516ccd76c8faa5250d94ac9617bd924e3bd57cf97f89243ef5dc073d5ad26a44d3e81b1e4438cd8a953470480057156780d5c6e901b728bd4
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Stable.msix.avos2
Filesize57KB
MD50a4af7b5fb9593e52bb0f74e0c78127c
SHA1c13ccbc2f8e1b9b07b7cdafc313b04db307c6586
SHA25655e640a85916eb65feaab27087b23f52736ee906ec2e84dc1da79efd3373c5ff
SHA51272b4dd889efb78f273dbfff9ef41aeb63cb639508e57823281b5856deb6f82ec8a441bf1ad0af55618cdaf3a1f404291702be2dcc89e7e6f892a40b87b0b5f11
-
Filesize
2KB
MD56cf293cb4d80be23433eecf74ddb5503
SHA124fe4752df102c2ef492954d6b046cb5512ad408
SHA256b1f292b6199aa29c7fafbca007e5f9e3f68edcbbca1965bc828cc92dc0f18bb8
SHA5120f91e2da0da8794b9797c7b50eb5dfd27bde4546ceb6902a776664ce887dd6f12a0dd8773d612ccc76dfd029cd280778a0f0ae17ce679b3d2ffd968dd7e94a00
-
Filesize
64B
MD5eb6332ae9e8fec69c2236355e2638f9d
SHA171500d57fb304979afd6756f06d4b9a59f995eb7
SHA25688e5ffe18fd4a772efce68f1b0db839846cafc42d36415508ad5356a44d38f32
SHA512e87c864ba79bd7a10a62b55ad564cf3acb090e7d85707a6967497deeef5fcde1f0b4608ea8791bf81363ec583a0101d470d8f3cd2172ced8d4071d7f6c674aed
-
Filesize
96KB
MD5f12681a472b9dd04a812e16096514974
SHA16fd102eb3e0b0e6eef08118d71f28702d1a9067c
SHA256d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8
SHA5127d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2
-
Filesize
81KB
MD54101128e19134a4733028cfaafc2f3bb
SHA166c18b0406201c3cfbba6e239ab9ee3dbb3be07d
SHA2565843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80
SHA5124f2fc415026d7fd71c5018bc2ffdf37a5b835a417b9e5017261849e36d65375715bae148ce8f9649f9d807a63ac09d0fb270e4abae83dfa371d129953a5422ca
-
Filesize
245KB
MD5d47e6acf09ead5774d5b471ab3ab96ff
SHA164ce9b5d5f07395935df95d4a0f06760319224a2
SHA256d0df57988a74acd50b2d261e8b5f2c25da7b940ec2aafbee444c277552421e6e
SHA51252e132ce94f21fa253fed4cf1f67e8d4423d8c30224f961296ee9f64e2c9f4f7064d4c8405cd3bb67d3cf880fe4c21ab202fa8cf677e3b4dad1be6929dbda4e2
-
Filesize
62KB
MD5de4d104ea13b70c093b07219d2eff6cb
SHA183daf591c049f977879e5114c5fea9bbbfa0ad7b
SHA25639bc615842a176db72d4e0558f3cdcae23ab0623ad132f815d21dcfbfd4b110e
SHA512567f703c2e45f13c6107d767597dba762dc5caa86024c87e7b28df2d6c77cd06d3f1f97eed45e6ef127d5346679fea89ac4dc2c453ce366b6233c0fa68d82692
-
Filesize
154KB
MD5337b0e65a856568778e25660f77bc80a
SHA14d9e921feaee5fa70181eba99054ffa7b6c9bb3f
SHA256613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a
SHA51219e6da02d9d25ccef06c843b9f429e6b598667270631febe99a0d12fc12d5da4fb242973a8351d3bf169f60d2e17fe821ad692038c793ce69dfb66a42211398e
-
Filesize
76KB
MD58140bdc5803a4893509f0e39b67158ce
SHA1653cc1c82ba6240b0186623724aec3287e9bc232
SHA25639715ef8d043354f0ab15f62878530a38518fb6192bc48da6a098498e8d35769
SHA512d0878fee92e555b15e9f01ce39cfdc3d6122b41ce00ec3a4a7f0f661619f83ec520dca41e35a1e15650fb34ad238974fe8019577c42ca460dde76e3891b0e826
-
Filesize
1.4MB
MD59836732a064983e8215e2e26e5b66974
SHA102e9a46f5a82fa5de6663299512ca7cd03777d65
SHA2563dfe7d63f90833e0f3de22f450ed5ee29858bb12fe93b41628afe85657a3b61f
SHA5121435ba9bc8d35a9336dee5db06944506953a1bcf340e9bdad834828170ce826dcfb1fa80274cd9df667e47b83348139b38ab317055a5a3e6824df15adf8a4d86
-
Filesize
3.3MB
MD56f4b8eb45a965372156086201207c81f
SHA18278f9539463f0a45009287f0516098cb7a15406
SHA256976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
SHA5122c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f
-
Filesize
5.5MB
MD59a24c8c35e4ac4b1597124c1dcbebe0f
SHA1f59782a4923a30118b97e01a7f8db69b92d8382a
SHA256a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7
SHA5129d9336bf1f0d3bc9ce4a636a5f4e52c5f9487f51f00614fc4a34854a315ce7ea8be328153812dbd67c45c75001818fa63317eba15a6c9a024fa9f2cab163165b
-
Filesize
28KB
MD597ee623f1217a7b4b7de5769b7b665d6
SHA195b918f3f4c057fb9c878c8cc5e502c0bd9e54c0
SHA2560046eb32f873cde62cf29af02687b1dd43154e9fd10e0aa3d8353d3debb38790
SHA51220edc7eae5c0709af5c792f04a8a633d416da5a38fc69bd0409afe40b7fb1afa526de6fe25d8543ece9ea44fd6baa04a9d316ac71212ae9638bdef768e661e0f
-
Filesize
1.1MB
MD5bc58eb17a9c2e48e97a12174818d969d
SHA111949ebc05d24ab39d86193b6b6fcff3e4733cfd
SHA256ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa
SHA5124aa2b2ce3eb47503b48f6a888162a527834a6c04d3b49c562983b4d5aad9b7363d57aef2e17fe6412b89a9a3b37fb62a4ade4afc90016e2759638a17b1deae6c
-
Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
-
Filesize
807KB
MD5e27b5291c8fb2dfdeb7f16bb6851df5e
SHA140207f83b601cd60905c1f807ac0889c80dfe33f
SHA256ffd933ad53f22a0f10cceb4986087258f72dffdd36999b7014c6b37c157ee45f
SHA5122ddbc50cd780ffbf73c354b9b437322eb49cb05bb6f287d54e7dcafb61dc4c4549e37ae2f972f3d240bfa7d2ca485b7583137f1bf038bc901f378cea0c305c6a
-
Filesize
1011B
MD5c92c2b70fb37f84aab38412ad9226aa8
SHA114f2e9a83285612d0a7b2c83b8f89bccfde6c154
SHA256d64639e873c0873b469cd856d1ef4bce7dc14a80fac6fe2bed9d629f05acc77f
SHA51204f9dcb3cd49909712535255b6eadd7fafcb2902bf1abd5a25e9bb5f5c4dc032611aec0a5b0ec89cd7dbc65276b935c54b906b391507d2e3e3aa65466b15f848