avoslocker | 33e648333f7d85219d6b82e64c44f9ee849e99da8691deddcb34ee694c73c538

Resubmissions

07/03/2025, 23:57

250307-3ztz7szlx8 10

07/03/2025, 23:44

250307-3rm7payzay 10

Analysis

max time kernel
78s
max time network
80s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20250217-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20250217-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
07/03/2025, 23:57

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
Size

56.0MB
MD5

bf362ca5f9b4dfa01b0ca45937f0f8d2
SHA1

0dac7e77257f51ee11e04803874d764e8fa8ae3a
SHA256

33e648333f7d85219d6b82e64c44f9ee849e99da8691deddcb34ee694c73c538
SHA512

4b83fd771113cdfc2c4c4a58546802e8e8d115a546193b74a5eccd73a1420819a4f5c117b1a33cb5c715fad5bb3513b472dfd81af928a9c24290abe5fad39497
SSDEEP

196608:cmKu818v8SYdQmRm8Qnf2ODjMnGydS8GrNs:Gu81olYdQdF3MnG38GrNs

Score

10^/10

avoslocker defense_evasion discovery evasion execution impact ransomware

Malware Config

Signatures

Avoslocker Ransomware
Avoslocker is a relatively new ransomware, that was observed in late June and early July, 2021.
ransomware avoslocker
Avoslocker family
avoslocker
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047

Modifies boot configuration data using bcdedit 1 TTPs 2 IoCs

ransomware evasion

Inhibit System Recovery

T1490

pid	Process
4528	bcdedit.exe
17752	bcdedit.exe

Renames multiple (7658) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Executes dropped EXE 1 IoCs

pid	Process
2200	hack.exe

Loads dropped DLL 4 IoCs

pid	Process
2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	hack.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Z:	hack.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1252571373-3012572919-3982031544-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\AppData\\Local\\Temp\\130876199.png"	reg.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL111.XML	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL093.XML	hack.exe
File created	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\EdgeWebView.dat	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\tr-tr\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\it-it\ui-strings.js	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\en-US\TipTsf.dll.mui	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json	hack.exe
File opened for modification	C:\Program Files (x86)\Internet Explorer\es-ES\iexplore.exe.mui	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN097.XML	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\VisualElements\SmallLogoCanary.png	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\cross.png	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\AcroForm\PMP\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\vlc.mo	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vreg\excelmui.msi.16.en-us.vreg.dat	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-pl.xrm-ms	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Retrospect.thmx	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\fr-fr\ui-strings.js	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\de-de\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\PDDom.api	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\ru-ru\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files\Windows Defender Advanced Threat Protection\es-ES\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files\VideoLAN\VLC\locale\lt\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\uk-ua\ui-strings.js	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\be_get.svg	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\en-gb\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\fr-FR\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files\VideoLAN\VLC\locale\mk\LC_MESSAGES\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ul-oob.xrm-ms	hack.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\es-MX\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\uk.pak	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_selectlist_checkmark_18.svg	hack.exe
File opened for modification	C:\Program Files\Windows Media Player\Network Sharing\ContentDirectory.xml	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT.HXS	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Trial-ppd.xrm-ms	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_OEM_Perp-ppd.xrm-ms	hack.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\cmm\sRGB.pf	hack.exe
File created	C:\Program Files (x86)\Windows NT\TableTextService\en-US\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\mr.pak	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\css\main.css	hack.exe
File opened for modification	C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets	hack.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\bn-IN.pak	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\de-de\ui-strings.js	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\sl-si\ui-strings.js	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\bg_pattern_RHP.png	hack.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\MsMpRes.dll.mui	hack.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\PIXEL\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\it-it\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_history_18.svg	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Retail-pl.xrm-ms	hack.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_Subscription-pl.xrm-ms	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\ro-ro\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\css\main-selector.css	hack.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\de-DE\PSGet.Resource.psd1	hack.exe
File opened for modification	C:\Program Files\Windows Defender\fr-FR\EppManifest.dll.mui	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\it-it\GET_YOUR_FILES_BACK.txt	hack.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\fi-fi\GET_YOUR_FILES_BACK.txt	hack.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\ca-es\ui-strings.js	hack.exe
File created	C:\Program Files\Google\Chrome\Application\123.0.6312.123\default_apps\GET_YOUR_FILES_BACK.txt	hack.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
6980	powershell.exe
17760	powershell.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	hack.exe

Interacts with shadow copies 3 TTPs 1 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
17724	vssadmin.exe

Modifies data under HKEY_USERS 15 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "13"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
2200	hack.exe
2200	hack.exe
17712	WMIC.exe
17712	WMIC.exe
17712	WMIC.exe
17712	WMIC.exe
17760	powershell.exe
17760	powershell.exe
17760	powershell.exe
6980	powershell.exe
6980	powershell.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	2200	hack.exe
Token: SeIncreaseQuotaPrivilege	17712	WMIC.exe
Token: SeSecurityPrivilege	17712	WMIC.exe
Token: SeTakeOwnershipPrivilege	17712	WMIC.exe
Token: SeLoadDriverPrivilege	17712	WMIC.exe
Token: SeSystemProfilePrivilege	17712	WMIC.exe
Token: SeSystemtimePrivilege	17712	WMIC.exe
Token: SeProfSingleProcessPrivilege	17712	WMIC.exe
Token: SeIncBasePriorityPrivilege	17712	WMIC.exe
Token: SeCreatePagefilePrivilege	17712	WMIC.exe
Token: SeBackupPrivilege	17712	WMIC.exe
Token: SeRestorePrivilege	17712	WMIC.exe
Token: SeShutdownPrivilege	17712	WMIC.exe
Token: SeDebugPrivilege	17712	WMIC.exe
Token: SeSystemEnvironmentPrivilege	17712	WMIC.exe
Token: SeRemoteShutdownPrivilege	17712	WMIC.exe
Token: SeUndockPrivilege	17712	WMIC.exe
Token: SeManageVolumePrivilege	17712	WMIC.exe
Token: 33	17712	WMIC.exe
Token: 34	17712	WMIC.exe
Token: 35	17712	WMIC.exe
Token: 36	17712	WMIC.exe
Token: SeBackupPrivilege	17892	vssvc.exe
Token: SeRestorePrivilege	17892	vssvc.exe
Token: SeAuditPrivilege	17892	vssvc.exe
Token: SeIncreaseQuotaPrivilege	17712	WMIC.exe
Token: SeSecurityPrivilege	17712	WMIC.exe
Token: SeTakeOwnershipPrivilege	17712	WMIC.exe
Token: SeLoadDriverPrivilege	17712	WMIC.exe
Token: SeSystemProfilePrivilege	17712	WMIC.exe
Token: SeSystemtimePrivilege	17712	WMIC.exe
Token: SeProfSingleProcessPrivilege	17712	WMIC.exe
Token: SeIncBasePriorityPrivilege	17712	WMIC.exe
Token: SeCreatePagefilePrivilege	17712	WMIC.exe
Token: SeBackupPrivilege	17712	WMIC.exe
Token: SeRestorePrivilege	17712	WMIC.exe
Token: SeShutdownPrivilege	17712	WMIC.exe
Token: SeDebugPrivilege	17712	WMIC.exe
Token: SeSystemEnvironmentPrivilege	17712	WMIC.exe
Token: SeRemoteShutdownPrivilege	17712	WMIC.exe
Token: SeUndockPrivilege	17712	WMIC.exe
Token: SeManageVolumePrivilege	17712	WMIC.exe
Token: 33	17712	WMIC.exe
Token: 34	17712	WMIC.exe
Token: 35	17712	WMIC.exe
Token: 36	17712	WMIC.exe
Token: SeDebugPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeSecurityPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeSecurityPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe
Token: SeSecurityPrivilege	17760	powershell.exe
Token: SeBackupPrivilege	17760	powershell.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
8612	LogonUI.exe

Suspicious use of WriteProcessMemory 31 IoCs

description	pid	Process	procid_target
PID 3700 wrote to memory of 2412	3700	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe	84
PID 3700 wrote to memory of 2412	3700	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe	84
PID 2412 wrote to memory of 2200	2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe	85
PID 2412 wrote to memory of 2200	2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe	85
PID 2412 wrote to memory of 2200	2412	44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe	85
PID 2200 wrote to memory of 2980	2200	hack.exe	87
PID 2200 wrote to memory of 2980	2200	hack.exe	87
PID 2200 wrote to memory of 2764	2200	hack.exe	88
PID 2200 wrote to memory of 2764	2200	hack.exe	88
PID 2200 wrote to memory of 2444	2200	hack.exe	89
PID 2200 wrote to memory of 2444	2200	hack.exe	89
PID 2200 wrote to memory of 3372	2200	hack.exe	90
PID 2200 wrote to memory of 3372	2200	hack.exe	90
PID 2200 wrote to memory of 412	2200	hack.exe	91
PID 2200 wrote to memory of 412	2200	hack.exe	91
PID 2444 wrote to memory of 4528	2444	cmd.exe	92
PID 2444 wrote to memory of 4528	2444	cmd.exe	92
PID 2980 wrote to memory of 17712	2980	cmd.exe	94
PID 2980 wrote to memory of 17712	2980	cmd.exe	94
PID 2764 wrote to memory of 17724	2764	cmd.exe	95
PID 2764 wrote to memory of 17724	2764	cmd.exe	95
PID 3372 wrote to memory of 17752	3372	cmd.exe	97
PID 3372 wrote to memory of 17752	3372	cmd.exe	97
PID 412 wrote to memory of 17760	412	cmd.exe	98
PID 412 wrote to memory of 17760	412	cmd.exe	98
PID 2200 wrote to memory of 6980	2200	hack.exe	105
PID 2200 wrote to memory of 6980	2200	hack.exe	105
PID 6980 wrote to memory of 16100	6980	powershell.exe	107
PID 6980 wrote to memory of 16100	6980	powershell.exe	107
PID 6980 wrote to memory of 22248	6980	powershell.exe	108
PID 6980 wrote to memory of 22248	6980	powershell.exe	108

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
"C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3700
- C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe
  "C:\Users\Admin\AppData\Local\Temp\44000c80effa84d7b149003e07b9c73ebfdb73f21672f6beee69f6a298c226fb.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:2412
- - C:\Users\Admin\AppData\Local\Temp\tmpussvo5dy\hack.exe
    C:\Users\Admin\AppData\Local\Temp\tmpussvo5dy\hack.exe
    3⤵
    - Executes dropped EXE
    - Drops desktop.ini file(s)
    - Enumerates connected drives
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:2200
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c wmic shadowcopy delete /nointeractive
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2980
    - - C:\Windows\System32\Wbem\WMIC.exe
        
        wmic shadowcopy delete /nointeractive
        5⤵
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:17712
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c vssadmin.exe Delete Shadows /All /Quiet
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2764
    - - C:\Windows\system32\vssadmin.exe
        
        vssadmin.exe Delete Shadows /All /Quiet
        5⤵
        Interacts with shadow copies
        
        PID:17724
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c bcdedit /set {default} recoveryenabled No
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2444
    - - C:\Windows\system32\bcdedit.exe
        
        bcdedit /set {default} recoveryenabled No
        5⤵
        Modifies boot configuration data using bcdedit
        
        PID:4528
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c bcdedit /set {default} bootstatuspolicy ignoreallfailures
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3372
    - - C:\Windows\system32\bcdedit.exe
        
        bcdedit /set {default} bootstatuspolicy ignoreallfailures
        5⤵
        Modifies boot configuration data using bcdedit
        
        PID:17752
  - - C:\Windows\SYSTEM32\cmd.exe
      cmd /c powershell -command "Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:412
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        powershell -command "Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }"
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:17760
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -Command "$a = [System.IO.File]::ReadAllText(\"C:\GET_YOUR_FILES_BACK.txt\");Add-Type -AssemblyName System.Drawing;$filename = \"$env:temp\$(Get-Random).png\";$bmp = new-object System.Drawing.Bitmap 1920,1080;$font = new-object System.Drawing.Font Consolas,10;$brushBg = [System.Drawing.Brushes]::Black;$brushFg = [System.Drawing.Brushes]::White;$format = [System.Drawing.StringFormat]::GenericDefault;$format.Alignment = [System.Drawing.StringAlignment]::Center;$format.LineAlignment = [System.Drawing.StringAlignment]::Center;$graphics = [System.Drawing.Graphics]::FromImage($bmp);$graphics.FillRectangle($brushBg,0,0,$bmp.Width,$bmp.Height);$graphics.DrawString($a,$font,$brushFg,[System.Drawing.RectangleF]::FromLTRB(0, 0, 1920, 1080),$format);$graphics.Dispose();$bmp.Save($filename);reg add \"HKEY_CURRENT_USER\Control Panel\Desktop\" /v Wallpaper /t REG_SZ /d $filename /f;Start-Sleep 1;rundll32.exe user32.dll, UpdatePerUserSystemParameters, 0, $false;"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:6980
    - - C:\Windows\system32\reg.exe
        
        "C:\Windows\system32\reg.exe" add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d C:\Users\Admin\AppData\Local\Temp\130876199.png /f
        5⤵
        Sets desktop wallpaper using registry
        
        PID:16100
    - - C:\Windows\system32\rundll32.exe
        
        "C:\Windows\system32\rundll32.exe" user32.dll UpdatePerUserSystemParameters 0 False
        5⤵
        
        PID:22248

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:17892

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa3a2b055 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:8612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Management Instrumentation

T1047

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

C:\GET_YOUR_FILES_BACK.txt

Filesize
1011B

MD5
c92c2b70fb37f84aab38412ad9226aa8

SHA1
14f2e9a83285612d0a7b2c83b8f89bccfde6c154

SHA256
d64639e873c0873b469cd856d1ef4bce7dc14a80fac6fe2bed9d629f05acc77f

SHA512
04f9dcb3cd49909712535255b6eadd7fafcb2902bf1abd5a25e9bb5f5c4dc032611aec0a5b0ec89cd7dbc65276b935c54b906b391507d2e3e3aa65466b15f848

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\132.0.2957.140.manifest.avos2

Filesize
916B

MD5
d09a6ebb9a2793c24389156992c51e6a

SHA1
cc62be2097f774e1bc6e9e7382a99fe1885143aa

SHA256
534f28c9e6896940336151355d17f8f9a060abf4db8ffa9720771e13b3a36f7b

SHA512
420e0c56eb1615549f47a879d18f1b323d88dbf602db6d677b2d41c9f1425d3a1d31278226ddb356ff899ea4f2b0e3636fec24c8bceaa42be8462e0f6ad9327e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Installer\msedge_7z.data.avos2

Filesize
4KB

MD5
d19a0c305acbb6d8f34a4cc4cdf163f0

SHA1
aad3808b40e46336990d96facd8a1be2d6d23513

SHA256
d6df9c128b4910df755cb224b5620b2a93e8e993589217a84db586c7e6ed4488

SHA512
e60bd4b060e34d8586a6140120e2e45b2f16af20090c269f872f85762abbe6bd317170d06d1e4d9389759d6d0fc8ec1d6d4f0ad0379a9aecd1d93e7e4e90e915

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\beta.identity_helper.exe.manifest.avos2

Filesize
2KB

MD5
728390e936988a04bc4d71800886f8c1

SHA1
ae7f7719d955f70a729196112d55bf2573cee0c1

SHA256
9be44d156f3a49002ee804cca9f52dc8514e33910ba70980b729525676019996

SHA512
ad6a6a595f8865fe3176f3a5b214154654e19ba77ec6e7dfdf1c22cc7e81cc98ac637e59ea485767e12509cd0f8a1c941c127e03a4b84716d1c537072c06e6b0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\canary.identity_helper.exe.manifest.avos2

Filesize
2KB

MD5
fa084e761f1ed3427b1e1d82b10f4b21

SHA1
6bfcc1cd049676b59931da8c66d44b2d7ded4c7e

SHA256
6614722ff6bf860ddbf6e423f7fc5e45370f031e1cd25829bfa570e86a0dacd5

SHA512
7c779056375a62a7caddd966b2742d627ad9b35ed6e2dd2b60abac2583dff876a254c5232a525aa28d57dce33913fa726de5202114692a40ac6c510461d6594a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\dev.identity_helper.exe.manifest.avos2

Filesize
2KB

MD5
5c3318e41ca83facaa8f3424765749de

SHA1
3183e0dfaa4024b6a0ea4e91fcd1e70150ac50f6

SHA256
c44395f3436db124c96108cd016978ed512de34f55c25a06ffd29bf6be1ed7a9

SHA512
6951bebef2be75721fbff12d6c5e495d45f9a9ed314809016b9fb7b431f55a1734f86d6e756e62cd41f732a971c0e5be29304b42b63b1a8f1a1316dcfd81cbf5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\internal.identity_helper.exe.manifest.avos2

Filesize
2KB

MD5
b60fdc7cc5392d564e2cd4bef2b019c1

SHA1
688166e55aefd3d1fa2ee5f425e00390e2b937cc

SHA256
ac4b2ac31ff4d299f8032cbfc9607df4e1cacbd3319463369a1290063171d021

SHA512
3b14d5e17b03c3e1c21b8846bbdd9cbe838cc9b16ddce5e535d451f45c1a2f4eb460ac8f1b64d00fbdec3b063735e94c3a0b27bbaed0ec55572990e9d55212d4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\stable.identity_helper.exe.manifest.avos2

Filesize
2KB

MD5
8ebe5e6cf66eec0b0bfa1a97450cefe0

SHA1
b1d0573ec280625e1b84c6716571836431a10ed0

SHA256
26d1bcc3e63c0512e09a349b05b5b03425f170049bec31cdebae3b68fefc688d

SHA512
4e091ca1fd832e90c92b7d3ff6ded7d7825c8b4a2a16ee83687adbc8f8af59c2970a49932f3c8d4eb0a5880f7b0885e4c524d69a1ddbdca377589ff864097563

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat.avos2

Filesize
1KB

MD5
94ab5cdc33949e901a0c73be7b01487a

SHA1
fb57326092cac9886d68b15fc9b507e36ee39a2b

SHA256
9ecc298bb8926c718e916372e86f0a51cc7d7cc7965170113ea4b56786665115

SHA512
28d6e837c9093193393585091f63e7b76631008c385f4b3ec6e8182d61c28f3fea393e5239d248be2352baeddf90403fb9d34e6dc46dff11bd981eb14902a2a8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json.avos2

Filesize
1KB

MD5
df5663c682ef94361b1e914037eeef85

SHA1
8c2052e238300b7bed0a9fba5a24eec9c4e351b4

SHA256
de352d3cf03123299a80ae087005213930cb544128deb0800696a895dc1e2d5e

SHA512
4b8ad79edc57f773a005db69bfea7aa2c50a5f178ac3b5e721626ba07a361b77dcffb365ebb06a25152974c9978be738540681b69c7d8f85e5325b21e2e99fbf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Extensions\external_extensions.json.avos2

Filesize
1KB

MD5
992f9c3011b831a83dea0b7f85c85a76

SHA1
17e58e604fda08fa9700dd80ebb270738a67ffd2

SHA256
12839fd1d46b9eed6455fe38bc5c0ed38efdeb681eae57ca5cf661fd6ba02989

SHA512
60e35b6abf898654941a145908360b2d40e5959b304a20be677b2daeaf041b8514e5a052cee4dd4fbbdb876980af633bcc40ef64d10ff853b808f2a763216dfa

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\af.pak.avos2

Filesize
1003KB

MD5
055fc7a221eb55ab0afd4ee6d09a1c1d

SHA1
511dade0d587e2cdeb0dc10f54e4ac2cb05766bc

SHA256
3c145a3b99ff5023c3c054e0447fa1616c91db557e6477c7bd5fa8b810c98f81

SHA512
f12cb0db0a4649cdbedfa346d617f463b1af3a0283e999af2ab759e512bad07081a53425874dec0facdbb3671be0d20eb183000d2ed525483ee20bfe9b19f6c5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\am.pak.avos2

Filesize
1.4MB

MD5
4a10074516566d2521c2bd56c9558a71

SHA1
63be6d462280f31169f3446fc0301492aff63c9f

SHA256
e5ba250e84d427773111dc86df96da454a8e464d7086793801a26eebe4fd0bdd

SHA512
f83d9b5acc774800fa649ab6679b060cd814e61f9d106d69ea4ebf8505da2568895a3e62e7dc6f35b35fb33297c0bd9447c46232b476f91351fc57aba992165c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ar.pak.avos2

Filesize
1.5MB

MD5
f91239d4be27fd77f31e845d0b449962

SHA1
9e0d53e3fa912deddb06877b8f5eb22695f4132d

SHA256
aaacc086041c1f2ded9e46f65ae0c7655ed7eea68ad79f19d82a7b4e589f3e86

SHA512
c8ab710dc1516b62c7befe7f661ceb5ab98f80a5d6b9fae60224fdc40fb645f8db307b9d99ce7ae9055780d65ace6458a74f60d7b387f1d6d90564ea20a60ef6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\as.pak.avos2

Filesize
2.1MB

MD5
5eeb3cdcf2b5f79a199139046a0c2e0a

SHA1
c0da689c805552c703e3741e72d801068162317f

SHA256
7b6dd1af7bfbf711b0d2fe0ebf18f06ffc1b6b47b96ac51b9aa692dd719e80b3

SHA512
8f658febedde743d3feeecda1603080c5bd34c2ab65ccd1330e0f2c478c4c9fad5fcafabbe1afd145376644ae630743db9dddd4743d61cf20128eb618d032644

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\az.pak.avos2

Filesize
1.1MB

MD5
a46e811a6d95d22bc520eb4a4d687319

SHA1
846a610e96320ec885b67e5a111d05a053836fa6

SHA256
6d996cb960fc500bc89fe5950539fa1d71392757d48e99ba366cb2a50938054a

SHA512
e13425afc824adaa96e25e687cfbcc7d5089038838d591ff96e8b76009a3254c575eebdbbdd201b96ad9d41e25d0c5a23668336af3ca7a7199622d40bbf2ccf6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\bg.pak.avos2

Filesize
1.7MB

MD5
82c248ecabdb471e8bd2c64fc9e1e0c1

SHA1
13335f11b64a03305fd087941ef8a1005f9a637a

SHA256
2e92eb6bf2ce84174aa06f2acea8079f29d3b89419e76ca5d347627a40c4609b

SHA512
1587f291de9eace619907bea6410326bfc58c3ffac39818c559aa9bbea85381b22071f1a90698c5ca6f79bd723e4e67006beeda27b2ed5caf99cfb8d6f1179e0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\bn-IN.pak.avos2

Filesize
2.2MB

MD5
94d682bbd95cd0f9a7503e49b3513e93

SHA1
52bbe07ed64f3ac57476003458f8164f45bdf430

SHA256
69e99f3538831169f6c17655b6fcb7a4ddad276d8dd2e8a0007173c21e77f6eb

SHA512
7780f7ed4ad9480496d221eb7b8d63bbb01a7c6a56882ae454e48b277891590e9f2b06eae3fec567e7a2580e101c79a2f3fa5aaf58f82185562787169af0aba2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\bs.pak.avos2

Filesize
1.0MB

MD5
67b04533001dda12d65fa282fc5f9bb6

SHA1
bffbf83163aabcfbf6575cf72c594ea2c373429b

SHA256
a7845d2f07bf5c03e154f8c5349c62220156b7d91ef708cd408985a56e5cc3ea

SHA512
eb33300ed40f501ac53c53b47b482c6c309199448ef095f9d0814c07b5b5151dcb34890cd13501166253ccc9b7c8c69bb297b78a2f231460416e034680b8a957

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ca-Es-VALENCIA.pak.avos2

Filesize
1.1MB

MD5
3f4697b408d85b37fae765f7fcfb137b

SHA1
27557a7198738f0f2943f0e5b202f7af0edd65b1

SHA256
50c909008cbc36ef5b033b1ba9f306121c6613fb4c4371deab17b948936e0ef9

SHA512
116a1df592a8c860e7d1a73f1e06d6eb5ecd08c7deaaa0c14670ab0d4905aaf917c184b5fdf82d6f49b68814bc180f69aa531e37de4549ed58b762eb871f15f3

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ca.pak.avos2

Filesize
1.1MB

MD5
7dffad9c2c6a1ec29af602facc5fe691

SHA1
5cfa863dc0b9817d7a3a190d8d814eae0659c08a

SHA256
524dd627e4a1fc0325f21f83abdcecf90b9587015a6e6bf823adcb8965c2fb39

SHA512
dc218cab9cd141dfb1df600e32f7373ea951952ce62ec2ed0c1dad338a32bdb5812e914e2740243d7f10d7979dc5c5b24090677414050e6aec976654500cb27f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\cs.pak.avos2

Filesize
1.1MB

MD5
58428a698258719d1d97f33327e0bc8b

SHA1
64659e68745ffc0d53f02021315968cc0b914436

SHA256
c173dcf57175d1016c11e44ef6cd909b31a9779f5da8bd0982b62c7de9a2cb6a

SHA512
33a2303cc169c7ce8daabc21b9e19868b4f3c846096f1ec756c102a350a398bc780f73f2200e76bdbd72d51562c201daee67b790000ef7c677ec7d6e19b871ba

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\cy.pak.avos2

Filesize
1.1MB

MD5
0f35e4661cc116b3afe9ced20059e434

SHA1
aeaa187b9e5b60dc3fe42141ef8fe5613a04a2bc

SHA256
0df8e5e0ad4d51877483c9402e797ba937e0f080f089ac7ea999c3621ec76a8f

SHA512
59fdffc7bc523fa5b05c7e5613674538817f04569642894d70ed84f287b4b88038e9dae628aac48e073467866d31316c7d42b0714b6a804203a0ed822bee2d61

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\da.pak.avos2

Filesize
1002KB

MD5
c529d05d74bdaddf4cada71407bacb10

SHA1
5c7d996094dc7b95029475a9ae08fa64e51ab1bd

SHA256
39346d9f05af94dacdaffc34699b4684c589e1a9bde5da5a7eb91522d51847b2

SHA512
1bd26f8dadc0189c4fb63de4955cab61470d2335c7299cef4c223124197a07577025c29e9adf90d1da2a41ef15293238a5e91e9d24af73d47077083169579cb7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\de.pak.avos2

Filesize
1.1MB

MD5
e4e30c22411249059d790fbc995426c4

SHA1
134acf05bbb31ed4185df89bd90caac9012e14d9

SHA256
e001132ba8153c56ad458ea11e4b4f84b90792cce2e79d184c3fc3ea9e89d968

SHA512
173579f86e42ebf69cd264859ade60c61b69ce13cb40dcad76cf4837fdc68afc988de742990208c38f55b5ef38b273dc06debaf19251b5136e0a69f22589af42

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\el.pak.avos2

Filesize
1.9MB

MD5
6dfb86d09cd32623f0b5ca509d31393d

SHA1
1cbb33b41e433f665339a1fd0a58c98935da41af

SHA256
58055e24f3d4a5036ad9c7485f3c75264eaa4ea3fa4c39a4662a90d85978ffc4

SHA512
a8d90dff87c0bf80362f66913be0d50730dda63ecb515f7d328c2c2811d694051dec59b477983cc417afa04d3d320ddbb0effa4f4608c6fe1d360697e94e7a52

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\en-GB.pak.avos2

Filesize
914KB

MD5
963f9c8aabf5fff92b108d4261658f52

SHA1
1bd65fb3e07845a661a5af349220c052473e393c

SHA256
cb6159cc02cec401ee8f3c6f825dfe5e4824c38356d3b356495d7e458ce9f66b

SHA512
29dfe90851f5d9de62500dda60500649c437cb71785a6051cf85b2378c3f101b68da25eee7af69ae7234b92dafbde328ab5b93d45b061addd55b8115c6220e08

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\en-US.pak.avos2

Filesize
902KB

MD5
69292196d916ec42990c93c281003784

SHA1
88da087a65a821dcb0f5b0513a9db41531ca5bcb

SHA256
b8922f5707ec9d7b52d706c32177a4ca97a75231235065d9a9ebac06e4411afc

SHA512
fe18856e86cc52802254482152504a51905a2bfd09abb02dfa1fda2a6593621b69457c2150e1b2243784f4dd118f14fd2af7764c8a216dfdbdb5026316f08223

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\es-419.pak.avos2

Filesize
1.1MB

MD5
26aa96be45b08d4f8105c0405f99e812

SHA1
b3c23ccaea56a2be3b09bfbd4f1df7b9aa80ea3a

SHA256
42d52c7107f664190adeed05d1117c4f565f25f8bdea79c73871d1148d935733

SHA512
04ab95c91d68a243f28189541964c6f6f5e4f7c52a2208dd3d77484ba5ebd7db63e4e2d1aea276e97fb619e250e2f641adb3b06be8c4fb79067b4538c21e8c11

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\es.pak.avos2

Filesize
1.1MB

MD5
1cbc987d1610533f3a9dd5038ad5c960

SHA1
f83ffa20a36d8c4c28e833f8688f4351edfec550

SHA256
d0fe55843f395782e24d44d662ce94b6929f3da34b5fa6f9cc5ede3972c58525

SHA512
8f08ba1db155dd596e1d0b9e5b4ee9a93d4ac96092ef7831c42c3e92bbf8595d56470640b20671c468c189e1ea5200d281eda44055bf46c7e2afadc6f57d6416

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\et.pak.avos2

Filesize
991KB

MD5
c7c89e4e4b00b30a8ea2e6e5add66b91

SHA1
d8a78a3bd4fca9b4d074fafc41380a6ae66d3e25

SHA256
9275f1ac31fea00dff512d3baeae6eb9c567496397a30aabbcd4352ca59b709f

SHA512
164c4ab4eb9e870d414672e8f067eca9a9c1535834d2a949f3e29ea63b3306341e7317b8893f8e83f5cfb40794b3430a435f6e6fbefe567ae317c0e2cc76249b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\eu.pak.avos2

Filesize
1.0MB

MD5
19c9c19cf4e3de972b090b3c454b6b66

SHA1
58dcea9afedb370df8cabeaadda80e15f3977628

SHA256
90bca3d182846b0d1cb86c6def9470b2f17ca93a8cf8ad6414d67d18886db279

SHA512
74a1418afae6b3e6e2cc599a2486e39331141ac3bdf71813013b6eec8711c8927227036d74c8b313c5c69ec5496b8e769ebb50278f77c3b31bb49c3a7e912792

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fa.pak.avos2

Filesize
1.5MB

MD5
3ab6610d1634ce1ae8221f5454201e01

SHA1
91de5bcbae86c69106a4e4a2021fb803960045b8

SHA256
e645991538730d07d12bec22e6f12a191a0ca80557caf7350084644aa59ab4f1

SHA512
c2aa2d3e67a7305c14f69910663e0092c4c28b21216fe66201c2f200f0e286912e3dc0e9791d7b8a683ec834216cd59575b8cbf3b1009cf521220895406c61f5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fi.pak.avos2

Filesize
1.0MB

MD5
e9fcc916b2ab869eb0fc587dc66a400c

SHA1
a687eee2bf013ebb9ea58c9e02a5595437f2b3a7

SHA256
c202304866ed657c23ff644bd324db3a0cc8ac8fff4b3c2dd27b51c24006ee37

SHA512
952ae4e2ff2bab777a02682d58a4ee43cf9be31c960040ca9f97355135f942b67d85185b63d907287978745bef2293b8ab0dabb716b8888305fc99014d9e9664

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fil.pak.avos2

Filesize
1.1MB

MD5
3e534417e7cbaa8425c7cabcd8e3d982

SHA1
8a8cea62834f5975f5a50192b9600ddcf6194225

SHA256
4417180c2f62e29c87af4c3c18f9456ac99178f5cb99e00fb75be2a87a526e1c

SHA512
852fc1cc82667059f9382334d40bb53e2d49f9cf4bd405634d95d9ec66a690d403ed400ab73f9f8f2f4579dc2fc8a492181220ccf247494b1678f6c0346a653a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fr-CA.pak.avos2

Filesize
1.2MB

MD5
1b9bbfab6f77d116cc52a98718236564

SHA1
a4a385d543fe04d4ecacc18c328bc66098709845

SHA256
6ac9bf6d882e0a9bdcd9ee2e4d4822414115783c47acc6461f96135d05a1ae0d

SHA512
781eab61182bbd7e6a2e7855362d5206b6ecde87722cda913852e823341507a454fd65adf742a7643915bac67ca543e2c456736422518bea9c352459b3b9e363

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fr.pak.avos2

Filesize
1.2MB

MD5
eb932ae89a2d16f24b0035c342c7a3fa

SHA1
32f30fd33a4a370873055c4cbb64cff0523418ef

SHA256
803dacf27d9e57f439ca86e1b0a592e50beba224cb3355b24ef5957714087e15

SHA512
6c4c6ad3db473fe46df2e0c8de01c99b5fde920cb39427204aa1a9830da3a9932f9fb57def4c6ab7c71eecf12847b6616fede761394122e661d4b2a2bb9953dc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ga.pak.avos2

Filesize
1.2MB

MD5
7e0c2c5270ec5a797a33a59acd2ec1d1

SHA1
9af44d879fb8e9d21ef7a1c6517583515299ac7b

SHA256
8199b3d55d0a4b86a10dcfc77da63a080822a115fad8d65bfc46ee5d9eeff272

SHA512
4289a469c41d97298f5d2ac3f3dbf4072bbbe9f21828726699dfc434f89fed34a02aeed9dcb0df8d0e64296b3e14532e6af96ff6105cf5fe2524ac3e69950609

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\gd.pak.avos2

Filesize
1.2MB

MD5
0507f2e2b54f14a8b3fd591ddab5f247

SHA1
2113b535e678aefee345ca9e4b4102fdb1afbb65

SHA256
080f7f4cadc9f34b77261b95e698d3090a1316d02c718e9785a89da04318c24c

SHA512
e2f5e5e59cdc45f98ffd6642a253d339748c0f4daeacecd70d461c044ec26f6d8c5a3c55008c670e87f5950b27c3101e5c118c26c39894402483a81000ca59ee

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\gl.pak.avos2

Filesize
1.0MB

MD5
a0ab15523c64297dc915158cef579918

SHA1
135cc2e77e9791d56e9df5f5fedf312979463971

SHA256
57459c0209f1190a5f939185665236b1a8049b55b8b46e5790bbf7f903ede5b1

SHA512
36d6d89bc357456798b39e93075db6100ed2e865cb8f23ef819b0ad5643293c3786e527431de2f4e50d73522d3bacf98bc86ebd613c7e685d74fbca9a59037f2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\gu.pak.avos2

Filesize
2.1MB

MD5
efa548318b5c11f8ae6775c5854823e5

SHA1
53e03193e0966cb8f66548eb14aa336701385f93

SHA256
a365eadc2988b24c0e28330c39928f5267ddb0de61e13d6d9788d9d326355e09

SHA512
618577a48a0d04ad9ccb4e1ea5dbc66585226977436dea1c887b9e4d8edf825e61b3991c51676ac41f531593431fd0bd9edba987e7a12d5d96bcce6ed4e63586

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\he.pak.avos2

Filesize
1.3MB

MD5
fb31ff45a0ae686f8204066a402e0b3c

SHA1
c9779921b8cfd5f61f4239541f89ab4ba964513e

SHA256
f5156e445a7e732c10785b3ea68fb46ef26459fd52fdd883ff200279eefd4f42

SHA512
1335633828a65e310ce58335a9bda766b2bce0040ca1bfe67cdc7732a5fe611bf7370ed5b42c19f05cee2783839c9e1352c67dbdc2f7335c19d1de87dec86ef8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\hi.pak.avos2

Filesize
2.1MB

MD5
58916359dd20fc1ff6d4aee72263f779

SHA1
48bcefb6b6f9e568017f9d3c54898c6c779fd941

SHA256
80ec5922a1fda632f893dea2e0bc8a42f34ce1b4692ba7a9c38387fd3b10e855

SHA512
59df1aee4f7b4cc474636586b9f3d4d8b124c819fcc0f093570d8e65d4328c9a7be0d64115db87a08ebd1daac17dd7288efdab0a4542d6a861d8a70d270fe620

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\hr.pak.avos2

Filesize
1.1MB

MD5
d81e6cb422e463cbec9ecfdf115181b1

SHA1
f09d3e58fa5505cd92389620cebc06de56e65e1b

SHA256
48e07d303ed79a4d8f504f17e5f8c0a4a4910a13b916b683b1fae97b77938a0b

SHA512
4b28f1df4f4c4b3519f0393812d53c2ffcdcd2181a88c5943077c636d7876f572d2cd84d96db356fe98217e33b81cdccf44292ecb022a997b3e1ee22a4db7264

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\hu.pak.avos2

Filesize
1.1MB

MD5
a5dd424d305018780a9f66d43a62cff5

SHA1
b11cd2d312f6b6f5433db46cf8bce5eee96a77e2

SHA256
a25fe8053f543e812c1ca7b28aedc49578402d2c5f4f88af6953dfde114b09e7

SHA512
89d127088ee9171344c36e34880971c393b29986d95f8ea55206b8716483f4c0eb723034b645a48f717a1ab3e42a6ea5945615704350b5567c7e061ba528836f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\id.pak.avos2

Filesize
984KB

MD5
b8bca2a83b2b0246398439e6a830928e

SHA1
b7b7d31a8a9f502479eacfaa5f77e672ef34d08a

SHA256
9dc8a37c738fd23fc4f7227bca6636991080d6e792dff2a58890bd603ea8ef2e

SHA512
aac30a0eef924d5172a3e747d428fd7d474b3320af4b3091992a6fb65236d7352663f48fd191a1a4f81c4dc87663f91406fbe8e4c3ee5bc7fdf0055eddaaa791

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\is.pak.avos2

Filesize
1.0MB

MD5
ac6ab4d3dcdca2f25005d97003c681e8

SHA1
90a539ce05f381ed5546b44d3ab6742ec0878b59

SHA256
b173ae055cfbc259fc3bcea75cf053164cd7f917c16380bae9efed64d01e67c1

SHA512
0e1d9f2d56859306c408b474d39b0902dc0c80b394d1046736695ef16cfaf2924c154abe3be407d02edd0c998b3630b9b5c9196acb77850f585cfc37bf6479f1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\it.pak.avos2

Filesize
1.1MB

MD5
d6c336e6e1d0b1c3d551cf4fc495811d

SHA1
7efd488291baca421138a6180714130e8697578c

SHA256
59738483bb1f6d716dec92bd81cc334db490c3bebc94e2f7501ae2cb46a02f21

SHA512
76ac6d69b67c93e7c0657eda040dcfe7178c8e2dba4ef4a7ea6c5ed4411222daeec35b2f36e907809614618063b98c8c6ea9a759fc57b49adc6bc65098cb09cf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ja.pak.avos2

Filesize
1.2MB

MD5
ed4c45f081105491ccbf4983d5ee34d3

SHA1
0bdec6873ca45333e2a31836835819d7afdf5dd0

SHA256
d33f154f3ee8b02dd1e2703185569045252a0207570fe35098a8e5c1f66b84b8

SHA512
000ce8e3553f1e7b91f8e3e9e7cf2611dd6eacddb7b52562bacbf9258fdf7889058b447f79e55ead111e89feb08b217741c937ec50381560504eaaded5819322

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ka.pak.avos2

Filesize
2.3MB

MD5
b6b34e959a7e96627ea80ffc9bcc970a

SHA1
f98d3e49836544ff322c665a2ea8de0c3a6588ed

SHA256
5c8ebbcf3582e2a4d4a1f40b918371b4d4fb51953ee0df99564d7d15401c4e23

SHA512
15f732fefad61ff0139a378bb46cf384dbb497a0756d851e106f1f15cc527a56ce17a1cdc593a5659cea734aac1acae4772208927e0d383ce6bdf8941bb2e1c6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\kk.pak.avos2

Filesize
1.7MB

MD5
f932d205cf6097e96916862112c8415b

SHA1
91541a881983b61e67ea2983e77217675b1502a2

SHA256
566cc0dad1b19e3d2633b00d165cc47a4f5db7445e5deeb89d87be46b3556bae

SHA512
4281eb5fd9162af1ff2c57d266c64edea503d869e17472ac6a2dd1a77c72489feb50b9f8b8bdc58eeac3be4ca7973ed26aad42b3741d26425551e84fb16e9461

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\km.pak.avos2

Filesize
2.3MB

MD5
8c77cdbc080f817487194010d657dff0

SHA1
ba41d645726a7051feedb0bf04a642e942f7e799

SHA256
b41c07a7adfb648c5169898ef019fa0c0a7d02617048e4b19b5bce77d5cc356f

SHA512
71909371d6ac373b7434112b3bf1a71a286d794609de11d61732e8e50c8bcee796d45ebd6efc672d3c25f513bb7566b02bf39cf706f4e0a7aac4d948570a9c1b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\kn.pak.avos2

Filesize
2.3MB

MD5
2d5fd0c12b92327a3616679c6b14298e

SHA1
e42022b0bd8ab1fe12d4bd3d6375ae9808b28324

SHA256
0a75ecc9dd5cc7c8ab6a229bddfe705a0535b4acb1a87ac7318ed52147c2d3a7

SHA512
92a971c100679a1506ac41f6dc902cbd57853f452dff9b6bc13f25646529cfd087fc36537026d8fb04ecc34e607e6d6bd44e601c0a214147978ecb02c1c010e2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ko.pak.avos2

Filesize
1.1MB

MD5
e109f71bd575d7aa291aa71d75ae1eb4

SHA1
1e432b89a3b79869e4e1b087bce38b50fce84b23

SHA256
b136e0b468647c76c4170debaed2405576e66ccf149ef233f4c16af8ba1ebc9b

SHA512
f2df4fddfbdf1c3e45deb845b0f7f406239fcc498fcff2a80372d2c9ade85774f2a1ce55c1f764cc52681b7f69d2f20fd2f4d083c4c8eeb7478c91a4d3ceea33

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\kok.pak.avos2

Filesize
2.0MB

MD5
60c2751fb57b0e3b009d559b872319c5

SHA1
75a65472cb2316ec1dc254ab365d37d426435324

SHA256
001974d1ddf31dbd61c8889fbed09c7af5fa45dbf06a5105c6d64e8dd179ad65

SHA512
5edc10d568c5deb6971ad80bb3f686bc40588f446e2d12cc0429153ac4ffcee7b077d32cccac6969698ec6d2ed83f6d8120fc328f2ce67055486769025697897

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lb.pak.avos2

Filesize
1.1MB

MD5
bf8be3b58b83599719d5125d504e2c4f

SHA1
08067c0ba8eba248fea2f4e0d77be3bc9cc24481

SHA256
3f04251e0805057f675d6ccf3d53f2e1441e138c8a641a8e0b9246a80867eb5b

SHA512
d1544b3cd257005e20fb70cd4637fa443538ef47f1e21e4c6fe09826a1bc39bf27f8520898ac2bdfeac8e53f38ec033cb22b40ea0f526d96e01b9d254d3a2e55

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lo.pak.avos2

Filesize
2.0MB

MD5
36fdb9de8e7125248cfd349a48ff5c12

SHA1
d30cfdd7206fa4c4fa5307b2b3fae588b76f3d2c

SHA256
a8b18d1da4181d961c0d64cb97ecbd3dcec524ed5428aaecbcbb171b8b9b91fa

SHA512
d0b4af30777e421d3cb80d5566c9c6257cbe267f18b3ad12f9e5ba4d000923d804d5c5a6fe715ba56115af9377a806c5d57048420bd645d7b6df4bb595fb1594

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lt.pak.avos2

Filesize
1.1MB

MD5
91d5f663ea41c5c1d977283d45d1b7b4

SHA1
6bb66229978860c62d9aeccaf133acb3a1674993

SHA256
6ccf6fa30767a7f09838675a58561bea82e0d2f9a210fd1960e0af854fd48daf

SHA512
9088ab4e8510b5e9bcf3026845dcf1d924f7749e8ea0d27a9f9dc8488c9e065dca99a89273a8d1a6d61eeb5c1710f162dc8b05986900465279ac9356460b2f3e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lv.pak.avos2

Filesize
1.1MB

MD5
94c671e7076441ae2cc4305b74518188

SHA1
cebfc25332f674d559dcc9bb48c83f022cf1977a

SHA256
a6df94735f5dd6b28c931827584968820c3428a71cc655fd69d74c53913e39a6

SHA512
8f539c1ed8a313de9606877b36bd44da6bb9d3117e33bb1edb4265255ac685e41c6719fb6e57be3d28271be7b86fce820edaddb09a0fd7a76d45ef2d7185edc4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mi.pak.avos2

Filesize
1.1MB

MD5
d4570d32089f0459d4acc7ff41838a8d

SHA1
6fd075e159e9a201f61f2e35bd8a0bc484334872

SHA256
5eca5fe54f9644b37306066d025a4de127169c8b2e046c4954e44c016029c170

SHA512
562a5d3b6c98171d0a8d4d33d388dc096a423985ac422e8dab85f043f63a32869b537023aaba786d3444b53cd7b7d319d31b130df27297f95708bd709e893e7c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mk.pak.avos2

Filesize
1.7MB

MD5
56db38cd452e269d4b31a44bba016623

SHA1
0e25b1281de252fe8a596ddc9e778939d0295af5

SHA256
23e100efc6670b3642819e7704bde09e2f71818701a072fbaa647e476fbf63f4

SHA512
d27643da3c33dc3faa2d6f551fb2dba351d77e1195327bb036efc41595de30e923cf79df2000417deda17877efe616c77a1afa7b662df37d7d6f2dcad0d049b5

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ml.pak.avos2

Filesize
2.5MB

MD5
64f959b516930f336620dbb66feaa92b

SHA1
e38c456180866df3bb48d052bb5ae0e5f758970f

SHA256
2af1d2684a4136d2df038c417617b1db157280cda604198fb8ceada3f517b419

SHA512
4be30c738d66217c7a9c9b91032a75133026c1ad126019fcd81c12aca5fd5f7cecd29c5d67413b06d8eeb5f80e6d035b4db2dff9a73f000fb18fb3fb1d368262

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mr.pak.avos2

Filesize
2.1MB

MD5
4dcc09cf902cce5392ccae4e6aebf67d

SHA1
aa918728ebd0159cb8b041259ec533959ad6ed80

SHA256
d5a6d442a390347d5eb5235a6a352c3150f84a8f14fe710da1710a8f53179323

SHA512
fead78ea3e66074cd2d055cd8ab0b75c589ef5b5cf3e9e637784ba4432c340b5945e499d9f063996d66d1ff09d876ccf4c7b84d8e1cc4b4f5921ba710ed7a590

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ms.pak.avos2

Filesize
1013KB

MD5
2f9f51ebd5167efe88f7636ccc2eecc2

SHA1
8b13985ce516c9def8dc0fc799a176c391dc0782

SHA256
04db12bd863d0fa7796ea2a37b437124df69a06f1ddedb0381ea5a269a8e3479

SHA512
765dfe89f6eb1f6a3325227b960daff180fcdad2f689c0a411b318ca6eeb0a52e71cc49fd4d1bc269c751b88261185f7816291add0cb50c91fe501e6d5c32118

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mt.pak.avos2

Filesize
1.1MB

MD5
ce1415ca37b313bf59b725025d770725

SHA1
dea07afd9a1406f4bac071b3ae46b24a39a86204

SHA256
c3506a6bce57f2eb60007fc6b1244f1a4b8577e746d53ea1edd183ac2a9a7ad7

SHA512
10f80a27306c9f0fe7f489f4c7102295e8ab7e1caf2b3df819a1cae0b6cc232763fb207d0ba09c9eaf3a4639cd76654a2e90f6aeedd7af92cf21465ce708c2a2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\nb.pak.avos2

Filesize
976KB

MD5
6dea8a015ea3f8b911b48aefc3df1f61

SHA1
061e47a7e135c01022a0c2e6cc6e37f81764a408

SHA256
7821db14d6eafc02005e3bc143fdbc648988034e7fd0c2fbf1f1642e5be600ef

SHA512
88e865a8b5e5cf71b4bd64cc97b91bc9e66a446674c12cc4ca8c2be82eb0d65386dcc70faf092e89258c505693f4ea0a9d9f4838c5a2bda854ccded6d41993cf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ne.pak.avos2

Filesize
2.2MB

MD5
c0efebf1c7ffc4f3807bd07ff7b4c5e0

SHA1
09024df658ed7db0dbe012138086e7f7b7415144

SHA256
c9cb0b3c6dd4b0dadace7fbe389dd9f52c465ed3fc5b355ce39b8f95214205c0

SHA512
0913836cd0b3de57cb763b70d4fe017a7efdccd21df679bf13924391e405684fcf0d2b659354b092e8a7b6b1dcfc84892bd7261b4913190cc15d42e8805ab2fd

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\nl.pak.avos2

Filesize
1.0MB

MD5
9695354cb0b6a3bef36a7fc1cbb1ddb1

SHA1
389af43dacdd188cfd13423cc035eb84ef510865

SHA256
83fc8691ea7c1ddd97ecab999a1cdf701e6fe188fbe84626afe8521c443a352f

SHA512
56c6b459302c05d9637b2bd94e8ef813faae70cc601cf720cb2e4d8a09bca8d7ffc1e05300a102b286fdc71bdb6c830417380b120a79e401bc921e34755a9d8f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\nn.pak.avos2

Filesize
979KB

MD5
445da42724683ed1d1fa449528dc14ac

SHA1
26b093c022046c3a6f7db2c11f50182c7c8f47e3

SHA256
a908bb2b37c9243af96886380169f3bba613744ae37620cbe44ff01acf7d6869

SHA512
4bc7de2234370216acb299b2aacca901b2ed3eb5dda89e2f98f16252392a2dd40ded5949b0cc19036bf6e53eb54e3f328ab9194dd0c071212595aa71ed842bbc

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\or.pak.avos2

Filesize
2.3MB

MD5
99250fc6022279f0ab24117f6c0f2c80

SHA1
49b64920eb1d79fd161da551ebbaa9cff46982b2

SHA256
2883b9f5a6438df2a669d8c2cf8eb0dee06654b5cdcad4b26e9b520bce7aad23

SHA512
f11bc9e15ac4adf0c05ee7a48315e7742b6eed0072ae92f6f812d8cd2281992673fcbda458ac2bc474c0a277c009e1d585feaa41e1c2dbceeb0ef15f7d01d9b2

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\pa.pak.avos2

Filesize
2.1MB

MD5
594eceebe6a0443f32a591939ef45e8a

SHA1
a072c1afcb5b7b36ad0b25bfb78be8b04935ae4a

SHA256
c837ff06458efb8b66ef611f69e19b9ce70272bdd41c104ba4e82c8d1df411c3

SHA512
3e66c957b97a5a1d0207ea83ba83ec1c96655b80a8e807a97224ec32e8b8305e4b03685535b88f2d50b1d16a81b09fad18ec262a69a6fefc0c228a8e1eee7a76

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\pl.pak.avos2

Filesize
1.1MB

MD5
dc54796093c3c40b217e887854b3cd7c

SHA1
1290d25b5393779855d1ee8dcf45f5222446f00b

SHA256
86d5258518fafe50b6016232d430d07db1b0a7bebad7546f06b732ae68756bab

SHA512
0c166ed09297e921d318c67ad4c5f0a593419f9fe7f5d97c42cf56ce445f29f6cc090c142bfbb7a54b1b38c38366805963c609789d324cfc97b08483fa87c268

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\pt-BR.pak.avos2

Filesize
1.0MB

MD5
ac02e7c3d4d4a9830190dc6da52a2038

SHA1
33f8ff7a5f1df7dc8a358c105e64edbc90a16bf3

SHA256
4e725e2bf86890327986a9c53a73d75b5f526871dccf78af77f25af6083874d3

SHA512
6eb0332fc1500d3b146a1396d846fc303d727c48b454949951e90a1e958d3ace03ddd648d1c4494a029fbcc3a5b8257eed5e18e22bf2edc6ef35bf77fd2eaa0f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\pt-PT.pak.avos2

Filesize
1.1MB

MD5
db134d429041a9f4f704eaf33e8a120a

SHA1
d008f0c83f8f5cc0c8fb6c13e7969acb9d413638

SHA256
85e43bc125396cf1223d65842f9232243c4a0bea20d4719c8861e0d2ef20d627

SHA512
f1eec951aa0434d20bf09dab92cdfef7d97dc845a4feee51b8f9fc72d9635ccae2c614c732d73e302370592b13729b5a3cbce2f05e9fa4481ccbaeaadf5d4a84

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\qu.pak.avos2

Filesize
1.1MB

MD5
04c2ddfce9af9dc752943c8d8108368b

SHA1
fb41c76c3809543aa9ca86199a1d8cb91f153439

SHA256
74edfe03147ad21be897b9c335d732eea746f7467cda859ad05450b4262ad31f

SHA512
2e87755abec239e5602835b470fb5878ab917b845725c8be237962bd3845788a66f7ed9776b81822f40c92e62f916df3665b7d5b1a203c98da37d19296430fa1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ro.pak.avos2

Filesize
1.1MB

MD5
b5fdd035aeb5602d4d5120ed044ffc57

SHA1
c2bbc3c45d27aeca0c97add1d2345f0cc679bc67

SHA256
361d827898b05c20c1f65adf768858b62b96fd2599a774d40def1b53e4d6b2cd

SHA512
6f2040ed4f6a0a22764b447c4b3a49bfda133e6fb1dda48ec9e2e599b92f8d806c0d902d9d358b6d8a12b9ff88e2b86f68273028fd9fc1c88e5a236c5db8e234

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ru.pak.avos2

Filesize
1.7MB

MD5
a336c0e6e60c3c89d4d5039bac6a4e8f

SHA1
826b321dd566a18aa578d4ccf3fdb7adeecdb07d

SHA256
e6b2a01ef5bbedb873609b520270fd10df74141a55aae71d1b95e9217044d3cd

SHA512
057f0182d096928ae8564208227293a1b9630cf4dfffe8d39cdaf24fcea2c4b0e3b1f8b9517d185b36c0dd13d869c46022c119a815f0edd810904ffcf07c3e96

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sk.pak.avos2

Filesize
1.1MB

MD5
cefc46b9379af67f07f80fea327e0aed

SHA1
8358e346adbbfd630be92fb2756e5c530ca37039

SHA256
6421066e57623c3b6b13c111caf234a046f9de94be955336e50196674de11f82

SHA512
2d90bca2e69f574ba6e56df4ded6022fc7de3b737ccbe9f6bc843c44ad36b270a4745029fae059797849838f2d73d03b9be601ce74083fb2cd88b24093b70b13

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sl.pak.avos2

Filesize
1.1MB

MD5
5ac694d007c558170b59551890b56bcf

SHA1
dc8c8818df203854c1163721c3b9744eb7b4ba36

SHA256
bc6b88706255f4de80bc4dc34580cb8bc22858196242076d940959f68683c639

SHA512
9aad4f0d84d83bc83160a39305f5047b905470e6d46fe55f5a65306276cbdc1de5d458a811f1efb6b7e0c7e030b6a17ae5c1fb35907f88047aa5f0a3bcfdaa27

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sq.pak.avos2

Filesize
1.1MB

MD5
527be97e47ac0772f9e85502125e15c7

SHA1
6e32411a9156a8d0d066e9acb7bec13740ae9458

SHA256
e1c068e33ad919f827021c7f2bd17c66efd63241081fd3ecb4dbd9ca62414476

SHA512
4c7230955b7e6257a3b5221da645c6e81046ef6e125c6971a394a9c6b1e1a0b26ca7e9d8cdd0c2a01afef1c43300ffa8f2ea835f3c71a285e928a67d745506e4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sr-Cyrl-BA.pak.avos2

Filesize
1.6MB

MD5
904f9853604e99ecf501943a83fa1ebb

SHA1
36377303be28e6a2a62f9e29d71bc0243e2fbdb3

SHA256
648e8d6f4447f3501f0d03b249c639feb56bb187b9faad46ca94b3cee9ac9d55

SHA512
59c1f5f1ca286140bcfb965b6b19df57ecd167647b4baa09131cc7534ebfa3ff1113b78e4154b8f4b9ed087b7efb86ef1118f9ad6c59ec2fc6dc2b622eac11f6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sr-Latn-RS.pak.avos2

Filesize
1.0MB

MD5
9dc9020aef39381a0c3c80610cc8e18c

SHA1
6a54da09f543a60a6c29cf41c107e4f159dd1c96

SHA256
a8df40606464b97d27b94f0382116d31afc32620c516c2f483c87f9bd961968d

SHA512
22d873a87fab165a8aa4fd5237f8afddd503bbb11b381f98d710ec33b028e0544195124c8e01c0aa8df1c62ff63723dae5c0a64c4e938652ee679a099e1c7e7b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sr.pak.avos2

Filesize
1.6MB

MD5
924bdd418e946e81a7b48cfbf49e4d32

SHA1
cde744f516faf568788d5120aa5851db75399be9

SHA256
18c22e0b513b578618ddd3e1e7d7adf5ab9fa72b27852d893dc13256307a0a99

SHA512
573b30143a00f0179366c290b2777c67e738fd6ed4d71d01b71efdd2fbfca6b61449cb60e3aa898fd7cc8d9742415d3809128bc440240de26a906d857b021a5e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sv.pak.avos2

Filesize
1001KB

MD5
c10ee162c6da5a1846eab9591db5936e

SHA1
88e9a71872246db682df1dc080e9155189fc3b16

SHA256
f1296286973ddf646b821c2b7c3b3e8ae77d76dd81da8a9c59d90a4a24716f2a

SHA512
e3d9dbc48924fa400ffc8acf342962fffecc30815becc0f32fb2df01136b1bff24cdfae009b7973e8c0bcb763decff3c60a4eebe34ee43c3663aac20a71bc974

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ta.pak.avos2

Filesize
2.5MB

MD5
6449ac659f9d8bf5440227b9d783faca

SHA1
76385276a95fb359fe294a4e7d0a03dd154aed5f

SHA256
f5cf12fc8b290f85ee1912e54962cb40e5ec25a8a2e4a1b42ff12d8d053654ad

SHA512
6d8fcd1f93f001d6748fe8a2a10baad62cbc31e0153e27fac373d21e54beb1484fc6d5852adf0e355b4d998f5b6fd7e4e8f7a7d64cf86f7f13a4e350408575b9

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\te.pak.avos2

Filesize
2.3MB

MD5
ea2b98af08909398148426068cab7a97

SHA1
24201f0405aaeff66d2f63502ae67f2a56e02e0c

SHA256
e4c79c5a67ee5c1c4e67bc57fbb4a1acd21ff5cbac9a3e6285981f132f633c61

SHA512
275025d0200505755745cf926ba0692fa128d8448091b868c056254655e7158b666fd7d61c004b29bd8e344eb6c02a3f8fa2c51b7aff9e1e3fa72f1b33c484f8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\th.pak.avos2

Filesize
2.0MB

MD5
d7ecddff857dfb0cd54a2876932d4d6c

SHA1
5c5e81ff3bd06d183f2c6fd91462ec0081bb689b

SHA256
d8b0f46b382700d42d5b8afac0a68f33fc3c678dd1e433b81ab6129ee6790e35

SHA512
163ef56f3ab2a1042137595c8b1c84fa766466e7282126b8c8dead81d31138b500dbd94e2f12ee4d560e041f352b9b0946f164dad0503cd6a885e7965dc7faf7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\tr.pak.avos2

Filesize
1.0MB

MD5
af54b0edf548e97ba4b43a182a157355

SHA1
da263b914617873fcefbcde67ba6233e015a8f30

SHA256
7f7fbd65ea5422e35e14902869ab491177fe078d1fe358c4470885e999866d36

SHA512
bc16b34ee63ee0fcff0f1e93c76c60a4d3f10bd692e9321c8114f4da32ff48d7af9e7a764a4d3eb9267a09b0cfc4d57fea33759155f84292d742074abe1164c1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\tt.pak.avos2

Filesize
1.6MB

MD5
b2d5e616d6ad239533d89707809de3d6

SHA1
372adcb6497b90be6b6b7c14c2bf30f66e5b79dc

SHA256
a53bb9137d445e21fe2a99b6d58b700625813cd122a5d208bd2bfa4f2b125043

SHA512
0c129de8a9f08521fc1cf23c4fe0068a25f20a4b73c12228f69657b2632d12371446c28e51af4e84cb52c30ea07bbf9f240a302251b93f78e3fbd0310004d6e8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ug.pak.avos2

Filesize
1.6MB

MD5
8181fb5d7eaf1ce262dc866d31a3252b

SHA1
3edd1eda847d4ca56dd7fdfc63d38b0f263b2600

SHA256
63270c68d3df75628c93cee5932d0735966e4b8a4ca83b1ee820b71804788b5e

SHA512
6c31b3f39c624113718f85fd38a9f94cefd5ce1333eed163c576b4e8cbd3fa0f61a8773e033df04a34800d1f7a44f07a7dc8a187ce14ce44f66b0a261a501f4a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\uk.pak.avos2

Filesize
1.7MB

MD5
1bb0a1aae4679877fbbf7214892ececf

SHA1
d489af28fa8020fb55a30d2b98877386f1b60f68

SHA256
efe03876a2ca440d02ee5e4e42cfc5622553c50ebc9b020636425256a449d376

SHA512
ce9696831510d9699163044ae911938cc4e2161a4220c2a95bc35ca7f55d4f06716ad85e351dfd707bab061a0045c30a3d03ea0bf47e071dbb6f10acdc4d589e

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ur.pak.avos2

Filesize
1.5MB

MD5
6746798bedf4167fe324739e6de35232

SHA1
208237d32993baf39f42a855e5b9f005965224d5

SHA256
861956fb985c56186ab7e1cdda87cdde863276a950a76809bcaef185da6a4921

SHA512
8717af7e2054cdea573bdb7b234989ab5e8b00c48736fbec32be0d42ae3e45996fecd76d19910020e00a3f17ec4aa8084751922ee5564f79b9624b0af536fe7b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\vi.pak.avos2

Filesize
1.2MB

MD5
81ab9770e74e3cb9d2923d2c36c42540

SHA1
b991c9ddf232058d73601bd329b1618a7666f6ff

SHA256
a1b0e910f449bc83d013eeeee6618ed61a3f2cb3e19ead379dece1ee95cad91c

SHA512
dcf5484e49952f823ee53ba8f552ac165690d37584c07f57f345cf8dc93230faffb4a9ba786df7fec29d71edd3687d92797d95bfcb428d0420d716a17f86889a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\zh-CN.pak.avos2

Filesize
860KB

MD5
20bd954794188b2c1963a390d178bd1c

SHA1
4cde308c5bdde4b541612a6703cf335dc14c8557

SHA256
50c5ce5af2f83584309d2258eca4765d359ae2af82aa6a1528cee7ecdda264da

SHA512
bbf1ff9fbc7d31bac0e5ba1ed6c4a9d3b4563c12213e8a84ac08798e68e3758347c2dec2d7c640050412f55d46c3390d4e6c1b1691c0cd55159e7917f336944d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\zh-TW.pak.avos2

Filesize
887KB

MD5
b5cb22b41189cf6135d61b0e4fd83995

SHA1
0efb0d54615a645194c39e1bab55b2d358fccd9b

SHA256
fbf56939f63136b187737b0462a620b48529f00fc2dfbd046e8514f33ad30344

SHA512
5704b6b3795d7af15a1e6b554e24a779375e8e119f81014de3d573c1dbd5da93eb5e7f3d967cf7896de94b8d6ec2b36033d300eaa8e2ff1a0915cb794932bbc1

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\manifest.json.avos2

Filesize
1KB

MD5
ab4e1c9bcb0caa614d94583ce04a22ee

SHA1
50f5a9693e74c18509b8a9cd64ee62a64b6c25ba

SHA256
38450ccfe65b92a355e5f1317cf03344e8787da3e4e2f1c17e3183065dc0b21a

SHA512
70aa78fa79c77554edc6324f373b9fe8306f31408a70b85d5b165fd12ef2e90a7f25d9b8a2089fc74cfd50c53789a5193246be28ee9e65a914722080fd95b2cb

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\preloaded_data.pb.avos2

Filesize
9KB

MD5
da1eadb62aa3c79ffbe4fa1832b576d1

SHA1
0b61216158d88c9ee3daacd0fd3e0117a6b97f8b

SHA256
9430e1461809cdbeb4a42be9abae70797b79b969b7a127d9c189d3c4c42210cc

SHA512
a6c1cf5789fb5eb79e86f18845f3554d1e916132d6b71bbf838aff406d5f0c3587d9139a344f9ddd745bfa67a1b623a278c6e900cf406e1ee52adf0e9d04c81f

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Edge.dat.DATA.avos2

Filesize
13KB

MD5
d5dddffeece153429b1a3e3c076acca3

SHA1
8a20c62a0b8dbb3ee56a5c61053c360b366b8f6c

SHA256
4cba8ed2d0604cd8eb9927fc8789efafd1f67a0a7280f59a01e5f8b8add9cec7

SHA512
c60fabdf6fdbb89d236e0b93039aadc67207dbe47b859462fd57ec0f320342a6c9bc9a7626adf095cf7c0c1616ab151ed77460b078a8f097227593ce77868950

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\EdgeWebView.dat.DATA.avos2

Filesize
9KB

MD5
86442a934f6394f6d445cdf3e106ad8c

SHA1
cafb8b5abf3c31a55ab1fddc994908e546c6ed11

SHA256
07fde65889916189f8425b5e66ed1611824bf23ab3a85bdb0b489c1ea0bd9916

SHA512
08e93ca6fa519663af2ae1249727ba10e1b9e2b63faa70f2ebebfbfb5bf0dfea6af5b5109fbd977fcc68b7822b396fd4c1c59ec0f658b8115c7ff7403bc4de32

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Advertising.DATA.avos2

Filesize
25KB

MD5
f98397050421048736088f4f82b8bf07

SHA1
c1299895bee7f72f6162c640a43a6451e2672f58

SHA256
5b10691e2abce19451680e69b404dc9eabeee0f1c120ab0a2eaf970d74ae2cee

SHA512
99b41f71ef0ffa12e76d24403e99e19f5af0fb2c2f9c8e5dea7a4b86ace4a2149d48fa5718565280b9129d571c6cfc45ce9a3503b5acf03a4eab49477d1bb4b7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Analytics.DATA.avos2

Filesize
5KB

MD5
db6de0067af4b2d76a8321f0c2e565b8

SHA1
9b7cd60deda9753ebf2307f00d1479d3b9a5dbb2

SHA256
438d3126be481c516e68d99a4a2f5efacc5e246461d5168665cc4e1ba30c9d76

SHA512
517207af88def2e15358ce7923fc48c40b904db02885abf57faf2d9d30d80e9b9ba2203b0a4dcd86fd7902194b074fa29a8ee7953aafa38364e038822df5a93b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.avos2

Filesize
1KB

MD5
aecfffcf2709bff8dc7f59e0786031dc

SHA1
efa28e3ddc03d31d1c113fda48558320f02c525a

SHA256
c9003a313afb26717253959410f6969dcd5d8eed27a837e36bfee0e8f656c96e

SHA512
b81d66eae2f65fb0a135e6a7ea050b1900fc26b39f374b4a6571e407ee896b571bcdbe895a120ef231f335a1bfec2e2047e77f3b44fb06851ea27274ab35cc23

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Content.DATA.avos2

Filesize
7KB

MD5
61f82949d59cfa0be04adef69bdf13ca

SHA1
4bef7a81c2ee40f3789bafdd056bd5859a6d6e1f

SHA256
d41e106efc47dfbfed49b90e7aa772d37cc61e0d7201a977ec829de5c49d0b7e

SHA512
3be929a964691c84e8523371b9f4cd653df7524209eee2bca061828b76f5d9e7b377c26a3935d7d5fe5900369bd47a9264780089afc0540612d735148432a033

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Cryptomining.DATA.avos2

Filesize
2KB

MD5
b01c81b32e148f944e80df372e84016f

SHA1
9f286f0ba3d51b90be75dc86a33e8cc40dcb114a

SHA256
0631e3dc7856cdcb3e8dbbae7fe0aa4eee98e2a89bd824c6f56123d1429f5622

SHA512
6456097ae0b5ad9e1df6547e61ed2dbe3976e8a83fea7cae057aa7ace2d969209d3705dde148ce5b564173c107e89505ce83c446d80b5d4975dc3eafbb5a232a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Entities.DATA.avos2

Filesize
69KB

MD5
31ee24d2482544d4ff737e9728c83efc

SHA1
17cc38a4b9aaffafbb666c7d3aca56691aa98a6d

SHA256
134970c244bd433e5b8ad9e0214b1440140838868aef2f2e5acf8c7f03270fd9

SHA512
142ed2571a712de91e1d02d6fa6ddba3183e003f8185686bd52fe5f2c2dd124424e48445ae1aed241385c58ebc20066f4cde960d499fa1ba1d6608100d3cd83c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA.avos2

Filesize
2KB

MD5
cb37cf7c655fce283d1163b79775856c

SHA1
b2a84d70e895a22e770f42bceb5c6bfc8cdd89dd

SHA256
931f41b0ef81c3b54bfaab5b95c4973392960fbdc1dd9477b43bc8a2ec47670c

SHA512
de2f8ef05795ff3784ac7af9847649d6c92ec8b0c2c2241be38f1218d3bd4561a8ac8de61b8351c61f34ade65c598cd10985e7644878d656f9e414aa11aed21c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.avos2

Filesize
35KB

MD5
d6c8d9c972e045469318b454042fff5e

SHA1
8655a3b1aee5973c6ae2a371e15f5a2211890856

SHA256
b36689b26757768b97f35508cf068595bbd0a6c505c08400055dd9254bb3cb56

SHA512
f8c757d47b533fc047153d85e4342bd76aa25eab2e7434ef5620da514dfca5d65bc09a1a9c1e5d53fb23c8e0fb99f0c40f28174dcdd145f4adb56f1ac46d2340

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Other.DATA.avos2

Filesize
1KB

MD5
ceafc20f2f2645840c3953c01499b33c

SHA1
f4809d1afb29f375687405ad0614040eff6450f0

SHA256
3ffe893e6f240d6b9b2d8a8c6292ed39fee59e7a84016abd1e6cd03ec16b7023

SHA512
90ef4a8b134774f7f909e53c92c8993eecd25d66d72f4a5ef441ec49e236ed1382c2e7896109059c0c056bd97450978b4ecced280bd3894a4678e92ee46a3f93

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\Social.DATA.avos2

Filesize
1KB

MD5
e944c5986bf9d2daafbaec4407ef5eb9

SHA1
934e0056722a476b03fbe297e31bbb1cc94f9925

SHA256
1bfc11b36146e0ee7f9d5450d42574fb83f06eb5586b844c1da1512abd4cdce4

SHA512
60fc746be8f5a8b72b0e2d24d3642dd6e483bc0b2e6a68047116c61f87d1f718d69987d7c8ed48d9467b52ac000982450d36670b68a54d13f91d98b1335ac334

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Mu\TransparentAdvertisers.DATA.avos2

Filesize
1KB

MD5
e62a9c647e199634971472a9bfcb2692

SHA1
bbc6e43308287e1977b28d983827e335b2310be2

SHA256
218cd4720a41ef3b7b325daa02b1e262a943bdbaa7156d301032dbe44168fa83

SHA512
3b9ce45218a9878600dabb656672b7c53348bf915d012d533131a6635cf9104967eb0ad8f3b6bb1f2f84065bb2d1ac60b7271baf3824d18562a073b9a7f215db

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Advertising.DATA.avos2

Filesize
3KB

MD5
20ebdf5fdff5cfa165394e402efe7922

SHA1
96ba78986d6d232f43e56f3e5de89429749eda1b

SHA256
f870608f5c545b973b73675d20a6ff4d817e8c616d289f4e1b1b69756237091e

SHA512
9fdbd76d818015ab5f7e7429b3ff0ab2927e9adde5783f016153b3d3be9583c3900593d7a460c0bf61a5d51098e1d9e644fd47eb754bd89713369ce5bb9c6d0b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.avos2

Filesize
1KB

MD5
61d272d078a809b7c1e85b61bf70458d

SHA1
e0e49e837f75ae69731873366c7157d002a12ca0

SHA256
cf45f859967441e9e050f5e16d2e24f0df174de00196a8f73fdcec657f281408

SHA512
a033f67be77f0d4a515e51aee06c2c3bb4cc419e441827b7a183966f51304e0195718150ef5f11b78851cc77c6e61366642ccbd02893a34d5980c5f812b9915c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA.avos2

Filesize
1KB

MD5
bbeacb518aa0dc96c7ec7a958dbae951

SHA1
14814ba9b245f42b1e9f7fdc12ae1bee63fb1388

SHA256
3830f932a8b7b897f60f847d75e6b3a118b81116f8e7da97b271f6f1e22e85d5

SHA512
1894131dc0874ebfc6fe096f4a6f81accfaad6ef8f4d39efa5e0ea419019a91ff3b87a6246346c89f1548579710d69819e0c930f8b6ae2bdeb6a34814a6b5c60

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Cryptomining.DATA.avos2

Filesize
1KB

MD5
ae709420e0a133a8fe42588d8a495b6a

SHA1
ac49630d1fbef4efa0bf64b2062a3d1fd5287700

SHA256
e098e82de7e09346c0485ee12300e4f2e07a9a2e012b3f38c5860d933a2de68d

SHA512
1404b2885d4deb73e7b679d29da53abe3fc168e9df8d8dbb779ce0b84de4a3fc69f90771c32fdebed169c314fcb336cf9f2c9438b010235e03e1f6375413d1a8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.avos2

Filesize
43KB

MD5
8e66396bdeb5b61a8deb20ce62fc067c

SHA1
33616f9a0754b8dc8cc9e7f5aad53b6e1aa1cb3a

SHA256
748b7f7b39b5d324aea845df20dcc2c1abf30bfec7a402349f71078e70439b29

SHA512
2f71ad7a9c93fe599229328a9e84b4d453f5e59888859b1f6b4a8144d6f075e66404f6496f56101723b582be4fb1114dcf707f18ecce940897b778147c630c1b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Fingerprinting.DATA.avos2

Filesize
1KB

MD5
2e57e8802eda8076179bcfae6c6e9841

SHA1
830ac369acb3e3968964e9d011fde73262711edc

SHA256
33cad837ad5e5f39afe504e460c720d1b6224f3bee316c3f25c2cd63d9dac7ef

SHA512
d3a71e9a65ea26a408dff422370ce0a979669fdc60d805638afcdeb319163d357abaa4cafaaeb6795c2d35da522942f583e5324b19113111a4049d99776e0699

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\LICENSE.DATA.avos2

Filesize
1KB

MD5
37b0e5cd6c7224f41acb77f39009f17b

SHA1
af00246095c20fa8c716ab9386aedb76a727c262

SHA256
f2d2d77285b23ce4cbb63104cb751be0c3e062004799f97d5ffc8dca55baa55a

SHA512
5ce2297cfc23bd449e3ecf62a9d0b84a3954b1d443da13af6fea85f21fdf1597ad3c609b4e8ee55d1bac0b2177b030da10626a1d77b9c04424fb324897683f3b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Other.DATA.avos2

Filesize
1KB

MD5
6948f14bf290b4182be9fb933208c863

SHA1
e4960da3e813f66bc9eea73cfc2592b9fe29ad0d

SHA256
ad63fa889aef40fd6b262b8687a0b2e9bd57c26cec35837da622cb9ce02e32aa

SHA512
517a8a7a168b0ca5109452c8458ab47fecba3e04ae6d3b8b6ab6d7c893ef0c86876106149514c54cb359c576df8abc9f3c7debc65aac1434091eaaee769c96da

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Social.DATA.avos2

Filesize
4KB

MD5
3426d496acd4fc9470d88a947911272e

SHA1
760c647b3f9a20fdbfd39500230bafaae4b7e6dd

SHA256
33edb5b41f71bd3a93a110fc28605f67eb75a815cf04fc389de88c993fc2413e

SHA512
b3f8906f6d02e054f43a51737614e88343a60da5201edcd6b3b6371da8f5efb105e8292ad511418f325da86edc1b2f2320d5e98a265931af87045cd26c021037

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA.avos2

Filesize
17KB

MD5
56a437a35ae14a7fe6990a6348c89055

SHA1
e9e316acac45e38e02b9e4b2a026efd39442f432

SHA256
0ddf08fc553254d0e9c896594dc07981891ac26ff272c61f6190dc79963b7745

SHA512
1e8eefff25a46f4bdc2d1c0588be97a624fe17c1b6039192e6beb5f53b695a98f0421eebc90b8829e0d06d92224aaebc189b966271bdc8a5e3beb284413ebe0b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.avos2

Filesize
1KB

MD5
1cda1b071fc000e5c23ac71fa9a4a7d6

SHA1
3fb74efc1fe95f48edebc0af341a48b2fca1df66

SHA256
15b95a356abf0d50f65694b686c8f3bf5282c71e2731c6b1f4bb97e881273283

SHA512
d0f81d9f786ecb8ed4fe1ce97e1d92af7d670bc7c606e58469862c10ab2805d151d08d28f27ab304586869fd1fad664fe8b8ec908c874c70a94fa7c8eef2144d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\Logo.png.DATA.avos2

Filesize
32KB

MD5
8bc5d95c2fe02f8890e9873fbd1de790

SHA1
3a14756907362c7a33d8724e2259cb3df5341deb

SHA256
68271e99fd87d230569c278ec3578a5278790ae5fd9d76843d7b9a8eade36585

SHA512
e02880697c4e7cf4c6fe64ddbe3464b5964bc20638c08ab8d75106a05438e0391e416d555ef2120995e814458b3a7d2dcaf279b6e478e323650a5261609e22b0

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.avos2

Filesize
30KB

MD5
bfde146641ba52e4a9c0925b26fe9578

SHA1
9a8e120561a4f8827e2ba6cfa22a9cbb058ff9f5

SHA256
bd9d64ae9c713560e7bd76ac0e5110e531e6ec8a5222ff2cc63c17e29de68c32

SHA512
9013ed1a5eb646e56291175ab59630e0e6483842d09baebab92cc5a82573e2fd804088f4c3fee452bca66752c6abb775a8d51ee8ec4663bf91cb2bdb33619656

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.avos2

Filesize
30KB

MD5
bda05a08c0767ed36d78ab2ee5bb7a31

SHA1
817ed2b2dda27ce7382db9fa7a9424ecf52a9041

SHA256
462f533cdea4a16bc0a2aaf85c86d850b430ffd35c6fd839df39006ff5ef3866

SHA512
e18fe7d7440a79c99d61c574563f2d602d9a4fdd447189ef83d397aa7d26defb62170e4fd90968d66941ec3683c4a228d3a4d637ed1fdca4f941725086f6db0b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoDev.png.DATA.avos2

Filesize
30KB

MD5
2961c6718ca62a064ae3db0f747e6707

SHA1
f7d67dbf76c9ee917cab087d728a2296f41533fd

SHA256
14c225c4a3f81c07c1872e0d8b46aeb74dd23939e931409397f8eb2362840459

SHA512
930622f5cb17ba975309b473d1bbff63b3c1a52ad05be22fd3723bd4c3b76302b82bd632764cc146f929160ec2894d18977480ada901ba96a5857705f355627c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.avos2

Filesize
16KB

MD5
6016375b333d18ca70b68b89fdc12662

SHA1
030cc24a0fc8872cff27ee0da5007f808337d729

SHA256
53d075ecb7ee34b3739cb71647a903252b6e700a8b661677ad566c2b21ee465d

SHA512
af94d9edcff7c72de2d4be4e72fe1abf789c931c97c1240ecdca3fe056c10398e71297efc7add2c70a819a12c07c5e2846dd1e71dbf72d4a6fcb372f3d577c33

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.avos2

Filesize
15KB

MD5
8f3e4196b15a1d609bf87f2666440bce

SHA1
1eb795d557ed6830fb3b9f34c4437c63c4284f3e

SHA256
e1d0784a83cef5cdda3e66ac23e2f409272596ee65d730a8ceb081bf86f7a9ec

SHA512
0a653c1c9d0f0a6454b67540b198327f9675737222ae1943c1425cb17d414249c283e34403cbc77441e493736fd30dea3805fa7337383c94356cbe80bb9fe859

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.avos2

Filesize
15KB

MD5
a3af7fa8f0c582503ab1be7db9a34f05

SHA1
08a883f5ead60380e4990d85dc86ef616718f4fe

SHA256
32bcbfc6f00f6052f2d7ffaad02a074228cb33b34f27ad921479ad479424e7de

SHA512
896d3be298160269f1320c8001bf7614bce24a6d0696677a1600c6da18c7e482f8d64abb23e9cb7667d1c7ca5d69055344d4a33709c11990c7a6076a5162b4b7

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.avos2

Filesize
15KB

MD5
ca4e1337808e9df3d0c996c311a9af70

SHA1
768ccb12008943101be0ab9ab5b3a592db58d84d

SHA256
25f234582aa50a1e7ee00536f8bd172cf23a3137707904462833e581957f58cb

SHA512
3ba66304943ff4778a8018edbbb1a2fc581f9bd305d9113a8ab39f56dcb759903e7494aed21ca7f7e2457f1ec9f0f73f2c5b3568a2f12053d98d7b82cde41d89

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.DATA.avos2

Filesize
2KB

MD5
b5609394a15820611a5928a65784e9e3

SHA1
49bfd558ba6fabfd90abefc4dd1c899c13f08085

SHA256
c252ff044db307f21eb8bb73c7ac9d6ffdb054b23d50f8ffad5723f26f320400

SHA512
a133bbc181c90a3ef74817420e03f730a014626c4a5489816e61c8472318a6fbca8eb9d912d3cec788371434fd6b321751a6fda6de5730f948dbf7f0d4420dd8

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\WidevineCdm\manifest.json.DATA.avos2

Filesize
1KB

MD5
21ae29daad10f89465fb20809568c580

SHA1
1d422065227864453375b41d49c367974e081205

SHA256
74c4445e027ac71173c1796968ded6f9975efcc63b856085e2fc5f66ccfc7c03

SHA512
d126cf1c356c5bc5b2d3a48ebf33b77b6959f8ce542cb49c02b3642a447d4dccca706937cf78dfe2db4d8e988793085913ea44e14e2f6eab31e60d29a5f29726

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\delegatedWebFeatures.sccd.DATA.avos2

Filesize
18KB

MD5
95383547afc86fd5a8823702321fae59

SHA1
538cb2843b24af2b170336c5139e149888bbb4f7

SHA256
04a79048fbc011daa578849b89ebf679441f565c8d6bb6b974b9e855d88d203b

SHA512
2ec089a059b16a37b09dd0e4f8c53142b98179c9bfcf772ab5cacc37350e9b77365acdce7a1bd3f993e92594b0fd73487d0942b0728730856eff4731a00b9f51

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\icudtl.dat.DATA.avos2

Filesize
11.4MB

MD5
efbd67e9ebc0df8d3de797cc39d5e24e

SHA1
cc38ac8b4bf8d5fbb709f0cb822d94cc0608e0e3

SHA256
34ca4c34a67099cc2670f5d462c21533ce749a1f5e3bc753ec0420ce7d667315

SHA512
a0c4b7595aa457e2194d66db59e36c9edbb5160d619ffb0e0cee35124c7fd502717c4b7a203109b4f080c0b0ddeb0481f96835d713a11f1a8df887c161ccf371

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.dll.sig.DATA.avos2

Filesize
2KB

MD5
814ddb68d0b2f35b6ec16db1d58bdedc

SHA1
6fc000e3e0943343e2031d8dba2b765befc26018

SHA256
106aa5443166bd676ab68753e415cfccf2c1f1ff61506f0e94429b728aaf1ca3

SHA512
d4da6db9898c1ff568610cad2049075ba804d09290272b92e993e369804abdb556b67a89784493e2e2551ffc2ca6cf94e1b24cac27218824495083ed78247970

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.exe.sig.DATA.avos2

Filesize
2KB

MD5
6723fd5d13b5beff525db0e237d5eade

SHA1
ed40d3fc8b34ca709beb695ae1e2fe31cf8cc9e2

SHA256
679a12106a528311a154e9c8e1d0da3626d814fd2c39434a935e6dcbf52ceb5c

SHA512
ada827926fcdabeddcf5f5499b2b53bd54204bd06db6726d3a6531022b51e0bea4bd456bab0dfe0d8c197053a74b8d95bc4c3ad950fc9a37e546cfcfbfb195a6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA.avos2

Filesize
1.5MB

MD5
7be196ed816ff07c67549fbe0af15a28

SHA1
d5d5bfac83b25432a4d510ceb54293e07ce6cb90

SHA256
f7dcad41b6c60c0d7494a082203e8209175885933a2261aa0cce33c1a15487cf

SHA512
d2a7b6b2b30f602405d242a49fb80d938783fd209dafbc5f65a5a99c84ed8a9d872b780afaf914b295327e0003f00455c38c4a440e1e6618a2bda988264fb44c

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA.avos2

Filesize
2.1MB

MD5
d72b4d0ce8cf940bbf5c8034fae3d7f8

SHA1
8453165c8484aa50eb39bfb8c0c5a999109d4bb0

SHA256
82ac5993ab0a1fa6e8a7a10d9da95b65a209f9d52c9b7cd36adbbc4206a3a2a9

SHA512
b61e5a34c64c15f2fdb8cac66684b1b54fb097c26eddf07f5b7dbadc8af65d3cf8cbf4f56924ac8e494582e44f6f1973a6518636094d64c64eefeb824d8eae13

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedgewebview2.exe.sig.DATA.avos2

Filesize
2KB

MD5
bce9876e3bc5f69137b8162bceff353e

SHA1
0add105f73f6859a7b495ccf8eb1d830264185fa

SHA256
34ea4a704837174740ac6849be3452276efa20c1394467c77d6c732271e3fe64

SHA512
ac1432446b09c866d95110fae3865c9b0459162062aa371f71d1bcc3e8fdb213ba136e6987e3af24300c891e61ceb3c8619d55d37ea879e866aca7ea01514e01

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\resources.pak.DATA.avos2

Filesize
26.1MB

MD5
e978923dbce6935473af6d15fb233685

SHA1
83572503f97222d0def3cbef5385b360aebb3b25

SHA256
a177c14a58271fae89da3a200c752d1faec0decc58f5e595ffb48fa0e0bc0640

SHA512
eb49b2a4a83bdf8af82aa3b1e909d6c1a9ae08160c535258cea706f9faa55a731a539bc61b247586cd856c0783d08c0eae973e0f0c9d6531b7f9c5558a8e78f4

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\vk_swiftshader_icd.json.DATA.avos2

Filesize
1KB

MD5
d8a3b23463139aeecf6652d01dc5e336

SHA1
d3e030843e9760c861e9507a38ef6ff95d843655

SHA256
ffc356c9dca0543afd6e15ab0e2b3bbe7cc9d9dce8477d5f727caa2d8e6bf936

SHA512
1389e77065bdd38551fb32be257351973fb9c6cde7ce1654888abe79e642f19c0b2b592a447ba45873ebb9c82fa8f0ae5b6770de7112e1cf44b0364e2666cc3d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\camera_mf_trace.wprp.avos2

Filesize
25KB

MD5
82c4a80446d4c3d41bf4c2dd62e62678

SHA1
42950c893f45802ea4b27833d8810925bc1731dc

SHA256
462be8346f8fd1237602693e43851832645064401765e75c644b41881f22405d

SHA512
eb97134eb55c4907cc2b9fe0e73b03b053327bdaca9a93e6108ef94a3a63a52683a986d0ee97b0e4c12f71eef52b508408859122e6906ebd18ff9d6197b0eef6

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\mf_trace.wprp.avos2

Filesize
13KB

MD5
4b86452007ce8421702baba6cdb2e1de

SHA1
69bc83beb2b3bbe40a9a086cba31eb10628439ec

SHA256
b2d8cb766dae29cec8e9f025b2f6091f2e91c003b6b44c1791a9acef8bd47df3

SHA512
f19fe5202c82377d5ec19be47357b37b83f7a5df4ad633f8d53cf08afa2da4f4a089cd27b01c855868b464c80f09bd9c8f6f2ffbb30ebecfba2a3c0df3d1860d

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_game_assist\EdgeGameAssist.msix.avos2

Filesize
1012KB

MD5
c2b368a8b67e3d9c73dee475f17670db

SHA1
9b738c0d36b324002987e771e7c9bd94a6ae2eba

SHA256
45a5dc30cb5081715d9f9e2297e1ca0c97961b0842d64b6c20ecf4dd869cb166

SHA512
81c9d988427719be250f4ecf3431ab9679209a6db3eb796c8f7a6a1a340c36c0bbbded748bcede087f881692143167805b35f3d2735eefe61db09807e4e19e40

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_game_assist\VERSION.avos2

Filesize
1KB

MD5
ccdfd7abd7c961d4aa90e2c72542a3fb

SHA1
3e5c056579e8a9b0608a4b9ad25a5904c2c8b7fb

SHA256
fc6b0c8534012aad5357da076895cd091c4169fb1d310e40c077ee929910a0ed

SHA512
05a1d1023eab93e8ec630850933ab85a7c412e7571de9be3551d2312d8590f7e2d1aec264afe30e40541c43f704b242bba4640717caef64ffa5ac49bd4b34559

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\resources.pri.avos2

Filesize
4KB

MD5
10fce87c1e8b60ae73193c09fb077e39

SHA1
fc0d516269021b62c378860e791f8bc0dceadb0b

SHA256
feca12b8f230d715a093c39f0ba85752b27e3a753d4735ccfe2acb08d5b9f2ae

SHA512
4f6235266fb2188469d43648151a792883e428c5ddc03215b807a7fcda4d1a310ee004df758b4dd0754e44af930c22173c0c2d719c584500c5095e7103a24f61

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Beta.msix.avos2

Filesize
54KB

MD5
5aa6ec2bacb992969dd9d0f85eb25ba1

SHA1
476d4dd88f72ce73774dd7093c593bd5be4adf53

SHA256
e45a4664331e4ab38943ae8791b7894bf8b9a176b7518faceb277fb0a03280f7

SHA512
275f9ed7a84d3eac2bee316fcebc8aa8d59146a199caba4262324e39e522f96ac5d84c84b598645403376a96a21ef6aaa6d62f1c2d873b016f23a27619119982

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Canary.msix.avos2

Filesize
54KB

MD5
05804b47947cdef31d47e5614a6f66ab

SHA1
5c6667d30e104b5c83940c5333dfdee756102418

SHA256
cc315b9c095392312d29735e9be223f15690ffe3a4552d6bbfd4c99975123ac8

SHA512
51ae2fd399b635e2e00aa5a60a352fab7b0b72318460fbdabe1d91118d95e898ab705d18e6bb497299350135992820f9142ab714d87fc8d73d97d9b945d76b82

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Dev.msix.avos2

Filesize
53KB

MD5
9d498a7c145f5682f3629d2b12acec4e

SHA1
3b5a10cb866ca1214b73b6678b15479268c56ab8

SHA256
ce36f6e67db3fbc0edb75e96863c15a3095cd747bdee0545bb76268e5d53457d

SHA512
eefc2f451d958373cd84132d50230d75dc8d0c66afa4ca9a2f01681aeed8b6311bb014db7f3281cd6c3f0716de069f34ba83830af5bdc27faf6a4a60828b97ee

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Internal.msix.avos2

Filesize
57KB

MD5
ac66d6cf540be736f7d24f848523e12a

SHA1
6ce2f441a4de795bcd192670219d2fa42ef797ca

SHA256
3d7c304b1fbe097c5dfd1e18377ce6778bb496501483ef71a71a473aa5fac2d6

SHA512
4e6877f1db2dfb3dc6dca1e7c16b826be22cae335031e2fe857fdb6a2096101dca144e25d3d5ba65bc5d6a082b53315652703d85d537d7718d0b9011c6ab8e4b

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Stable.msix.avos2

Filesize
57KB

MD5
1d0a75cd8d931ba7bae86fdac33fe591

SHA1
34b446dea2b35499144d5b800919e04f295723e3

SHA256
4b3a680c8abdd7a0c1582b27714f1a42a89cf7289d486932599f1011a82a64d4

SHA512
ef2279fe28425acfadcb8a647c9dd4556153a857db7edf9b474ff789316dcc6c092a453af8eadb1db319163344287fccbaf8fddf2ee4c7b6e49fc1da04c3133a

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Beta.msix.avos2

Filesize
54KB

MD5
991086c0087705f283febd3d09ad2111

SHA1
194bf6aa1c25ae30067b27251a7911be2bdf027a

SHA256
7a5f392d410101247e90c7c39bc8efde670d4b37254ce36e9bd033ef25292e64

SHA512
e89e0fe8a0f25bef8e93f3d155a6d89ecb2c3ff932eaae397e39be1d9df0603501d71c36c67ac7d27cabf0a74e662b4ec53d5437e7d5d446804a47fa123789cf

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Canary.msix.avos2

Filesize
54KB

MD5
13142a364cb8040c4b78d05d8b524d47

SHA1
912a454312bdd7aea42c0f0dfa29f45a0145cb01

SHA256
8a8f76e495eda4eec4fe002c6a5d82ec6146949f66aac38dbb38f8205b552a8e

SHA512
fe06ee5693751b4b325b0edde59bc91e26702d040a61edad46237980551ee42d4707bb6b107df13c123722dcfc6314985aadad6dba8eca37cfc3ae69fae26aba

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Dev.msix.avos2

Filesize
53KB

MD5
1d3c35533407ccfe7072792d54c05542

SHA1
aade2fb41e071991e848da4754917a04ee92edc5

SHA256
e7999b4b0acd6b353e472f5328fd1b1eaca6c7c16145548a97944637fced168b

SHA512
852b54a5288e773438d48e6b929f747c4fd45c0ab2848336ed8121b337aba94a68640f22ee9ee2640717b8f1e2715f61667bbd43983ecc72143f25a39a1671df

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Internal.msix.avos2

Filesize
57KB

MD5
39fc46004c51a8113736a39693420411

SHA1
3fa41f115ba0c9724b132937ebcd75c48a86952d

SHA256
0ef74ece2d1bd88667598361a1cfd876269b875083972a9abaa278f5f9ac5581

SHA512
524ab4361ce67ad96f49e1bd94040a11da553c7ac25f1bfd39b52aa828007903bbde6b7ad9a1e7f1c9d1a7fb0ba90aa0417c0f219ded035484fdd91909e46c99

Download Submit
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Stable.msix.avos2

Filesize
57KB

MD5
a0b83a0dab80995e52eb3ccbce2453c1

SHA1
58231fd18ad5fda8b2aad44742580405f5b069c0

SHA256
dfd0f1d73a0945a7156b676199873aacaf0dcf1616b1a003c9f0fe9a906e5a5a

SHA512
02a4eb6d464416993ab20b9954cf032f0779b9f9adf568ad3ad0cf6452ec3f9768317b153823280ad17373530158716961d23bbc306b8c011f888cacbde2fe04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
2KB

MD5
713ad359b75fe6d947468ec1825202b9

SHA1
19dcd19f18a2ad6deb581451aad724bd44a592a4

SHA256
56572269ec031c63d966c6d3b4712600b908d38826c59c0f9a8225d0a783e9f4

SHA512
4df344dec422bed85b186909dc7f9c35126b3bb45e100f18fb95b4a9943ace242479adf5f0194b054d38b67032498f897a5a54b49026efee0c4797cb5a5e54e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
64B

MD5
eb6332ae9e8fec69c2236355e2638f9d

SHA1
71500d57fb304979afd6756f06d4b9a59f995eb7

SHA256
88e5ffe18fd4a772efce68f1b0db839846cafc42d36415508ad5356a44d38f32

SHA512
e87c864ba79bd7a10a62b55ad564cf3acb090e7d85707a6967497deeef5fcde1f0b4608ea8791bf81363ec583a0101d470d8f3cd2172ced8d4071d7f6c674aed

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\VCRUNTIME140.dll

Filesize
96KB

MD5
f12681a472b9dd04a812e16096514974

SHA1
6fd102eb3e0b0e6eef08118d71f28702d1a9067c

SHA256
d66c3b47091ceb3f8d3cc165a43d285ae919211a0c0fcb74491ee574d8d464f8

SHA512
7d3accbf84de73fb0c5c0de812a9ed600d39cd7ed0f99527ca86a57ce63f48765a370e913e3a46ffc2ccd48ee07d823dafdd157710eef9e7cc1eb7505dc323a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\_bz2.pyd

Filesize
81KB

MD5
4101128e19134a4733028cfaafc2f3bb

SHA1
66c18b0406201c3cfbba6e239ab9ee3dbb3be07d

SHA256
5843872d5e2b08f138a71fe9ba94813afee59c8b48166d4a8eb0f606107a7e80

SHA512
4f2fc415026d7fd71c5018bc2ffdf37a5b835a417b9e5017261849e36d65375715bae148ce8f9649f9d807a63ac09d0fb270e4abae83dfa371d129953a5422ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\_decimal.pyd

Filesize
245KB

MD5
d47e6acf09ead5774d5b471ab3ab96ff

SHA1
64ce9b5d5f07395935df95d4a0f06760319224a2

SHA256
d0df57988a74acd50b2d261e8b5f2c25da7b940ec2aafbee444c277552421e6e

SHA512
52e132ce94f21fa253fed4cf1f67e8d4423d8c30224f961296ee9f64e2c9f4f7064d4c8405cd3bb67d3cf880fe4c21ab202fa8cf677e3b4dad1be6929dbda4e2

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\_hashlib.pyd

Filesize
62KB

MD5
de4d104ea13b70c093b07219d2eff6cb

SHA1
83daf591c049f977879e5114c5fea9bbbfa0ad7b

SHA256
39bc615842a176db72d4e0558f3cdcae23ab0623ad132f815d21dcfbfd4b110e

SHA512
567f703c2e45f13c6107d767597dba762dc5caa86024c87e7b28df2d6c77cd06d3f1f97eed45e6ef127d5346679fea89ac4dc2c453ce366b6233c0fa68d82692

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\_lzma.pyd

Filesize
154KB

MD5
337b0e65a856568778e25660f77bc80a

SHA1
4d9e921feaee5fa70181eba99054ffa7b6c9bb3f

SHA256
613de58e4a9a80eff8f8bc45c350a6eaebf89f85ffd2d7e3b0b266bf0888a60a

SHA512
19e6da02d9d25ccef06c843b9f429e6b598667270631febe99a0d12fc12d5da4fb242973a8351d3bf169f60d2e17fe821ad692038c793ce69dfb66a42211398e

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\_socket.pyd

Filesize
76KB

MD5
8140bdc5803a4893509f0e39b67158ce

SHA1
653cc1c82ba6240b0186623724aec3287e9bc232

SHA256
39715ef8d043354f0ab15f62878530a38518fb6192bc48da6a098498e8d35769

SHA512
d0878fee92e555b15e9f01ce39cfdc3d6122b41ce00ec3a4a7f0f661619f83ec520dca41e35a1e15650fb34ad238974fe8019577c42ca460dde76e3891b0e826

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\base_library.zip

Filesize
1.4MB

MD5
9836732a064983e8215e2e26e5b66974

SHA1
02e9a46f5a82fa5de6663299512ca7cd03777d65

SHA256
3dfe7d63f90833e0f3de22f450ed5ee29858bb12fe93b41628afe85657a3b61f

SHA512
1435ba9bc8d35a9336dee5db06944506953a1bcf340e9bdad834828170ce826dcfb1fa80274cd9df667e47b83348139b38ab317055a5a3e6824df15adf8a4d86

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\libcrypto-1_1.dll

Filesize
3.3MB

MD5
6f4b8eb45a965372156086201207c81f

SHA1
8278f9539463f0a45009287f0516098cb7a15406

SHA256
976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541

SHA512
2c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\python311.dll

Filesize
5.5MB

MD5
9a24c8c35e4ac4b1597124c1dcbebe0f

SHA1
f59782a4923a30118b97e01a7f8db69b92d8382a

SHA256
a0cf640e756875c25c12b4a38ba5f2772e8e512036e2ac59eb8567bf05ffbfb7

SHA512
9d9336bf1f0d3bc9ce4a636a5f4e52c5f9487f51f00614fc4a34854a315ce7ea8be328153812dbd67c45c75001818fa63317eba15a6c9a024fa9f2cab163165b

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\select.pyd

Filesize
28KB

MD5
97ee623f1217a7b4b7de5769b7b665d6

SHA1
95b918f3f4c057fb9c878c8cc5e502c0bd9e54c0

SHA256
0046eb32f873cde62cf29af02687b1dd43154e9fd10e0aa3d8353d3debb38790

SHA512
20edc7eae5c0709af5c792f04a8a633d416da5a38fc69bd0409afe40b7fb1afa526de6fe25d8543ece9ea44fd6baa04a9d316ac71212ae9638bdef768e661e0f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI37002\unicodedata.pyd

Filesize
1.1MB

MD5
bc58eb17a9c2e48e97a12174818d969d

SHA1
11949ebc05d24ab39d86193b6b6fcff3e4733cfd

SHA256
ecf7836aa0d36b5880eb6f799ec402b1f2e999f78bfff6fb9a942d1d8d0b9baa

SHA512
4aa2b2ce3eb47503b48f6a888162a527834a6c04d3b49c562983b4d5aad9b7363d57aef2e17fe6412b89a9a3b37fb62a4ade4afc90016e2759638a17b1deae6c

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_bubb0zw2.kub.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\tmpussvo5dy\hack.exe

Filesize
807KB

MD5
e27b5291c8fb2dfdeb7f16bb6851df5e

SHA1
40207f83b601cd60905c1f807ac0889c80dfe33f

SHA256
ffd933ad53f22a0f10cceb4986087258f72dffdd36999b7014c6b37c157ee45f

SHA512
2ddbc50cd780ffbf73c354b9b437322eb49cb05bb6f287d54e7dcafb61dc4c4549e37ae2f972f3d240bfa7d2ca485b7583137f1bf038bc901f378cea0c305c6a

Download Submit
memory/17760-3335-0x0000021EE2690000-0x0000021EE26B2000-memory.dmp

Filesize
136KB

Download

Resubmissions

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads