Resubmissions

18/07/2025, 23:31

250718-3h1resar8v10

18/07/2025, 19:42

250718-ye6faatns210

18/07/2025, 10:49

250718-mwn2saykx710

11/07/2025, 15:01

250711-sdx5mafr5t10

Analysis

  • max time kernel
    214s
  • max time network
    216s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250619-en
  • resource tags

    arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    18/07/2025, 19:42

General

  • Target
    adfd4e9f51bcd27935f153e44b060b6978f55da9135f34cc62361dbbf2d2db57.exe
  • Size 26.1MB
  • Sample250718-ye6faatns2
  • SHA256 adfd4e9f51bcd27935f153e44b060b6978f55da9135f34cc62361dbbf2d2db57
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path
  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �
Wallets
  • 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw

Extracted

Family
  • marsstealer

Botnet
  • Default

C2
  • kenesrakishev.net/wp-admin/admin-ajax.php

Extracted

Path
  • C:\Users\Public\Documents\RGNR_B6B3FA01.txt

Ransom Note
  • Hello VGCARGO ! ***************************************************************************************************************** If you reading this message, then your network was PENETRATED and all of your files and data has been ENCRYPTED by RAGNAR_LOCKER ! ***************************************************************************************************************** *********What happens with your system ?************ Your network was penetrated, all your files and backups was locked! So from now there is NO ONE CAN HELP YOU to get your files back, EXCEPT US. You can google it, there is no CHANCES to decrypt data without our SECRET KEY. But don't worry ! Your files are NOT DAMAGED or LOST, they are just MODIFIED. You can get it BACK as soon as you PAY. We are looking only for MONEY, so there is no interest for us to steel or delete your information, it's just a BUSINESS $-) HOWEVER you can damage your DATA by yourself if you try to DECRYPT by any other software, without OUR SPECIFIC ENCRYPTION KEY !!! Also, all of your sensitive and private information were gathered and if you decide NOT to pay, we will upload it for public view ! **** ***********How to get back your files ?****** To decrypt all your files and data you have to pay for the encryption KEY : BTC wallet for payment: 1BKK8bsFfG3YxTd3N15GxaYfHopoThXoY4 Amount to pay (in Bitcoin): 25 **** ***********How much time you have to pay?********** * You should get in contact with us within 2 days after you noticed the encryption to get a better price. * The price would be increased by 100% (double price) after 14 Days if there is no contact made. * The key would be completely erased in 21 day if there is no contact made or no deal made. Some sensetive information stolen from the file servers would be uploaded in public or to re-seller. **** ***********What if files can't be restored ?****** To prove that we really can decrypt your data, we will decrypt one of your locked files ! Just send it to us and you will get it back FOR FREE. The price for the decryptor is based on the network size, number of employees, annual revenue. Please feel free to contact us for amount of BTC that should be paid. **** ! IF you don't know how to get bitcoins, we will give you advise how to exchange the money. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! HERE IS THE SIMPLE MANUAL HOW TO GET CONTCAT WITH US ! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! 1) Go to the official website of TOX messenger ( https://tox.chat/download.html ) 2) Download and install qTOX on your PC, choose the platform ( Windows, OS X, Linux, etc. ) 3) Open messenger, click "New Profile" and create profile. 4) Click "Add friends" button and search our contact 7D509C5BB14B1B8CB0A3338EEA9707AD31075868CB9515B17C4C0EC6A0CCCA750CA81606900D 5) For identification, send to our support data from ---RAGNAR SECRET--- IMPORTANT ! IF for some reasons you CAN'T CONTACT us in qTOX, here is our reserve mailbox ( [email protected] ) send a message with a data from ---RAGNAR SECRET--- WARNING! -Do not try to decrypt files with any third-party software (it will be damaged permanently) -Do not reinstall your OS, this can lead to complete data loss and files cannot be decrypted. NEVER! -Your SECRET KEY for decryption is on our server, but it will not be stored forever. DO NOT WASTE TIME ! *********************************************************************************** ---RAGNAR SECRET--- QWZjY0QxRTk2MWU4RTIwYkVCRUNhRWMzRjhCQTdlZDJkNUJCN2JkNDdDMzREMTYyNjNGNTdiZGFDYmI3ZEVhNw== ---RAGNAR SECRET--- ***********************************************************************************
Wallets
  • 1BKK8bsFfG3YxTd3N15GxaYfHopoThXoY4

URLs
  • https://tox.chat/download.html

Extracted

Family
  • xworm

Version
  • 5.0

C2
  • outside-sand.gl.at.ply.gg:31300

Mutex
  • uGoUQjcjqoZsiRJZ

Attributes
  • Install_directory

    %AppData%

  • install_file

    USB.exe

aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain
aes.plain

Extracted

Family
  • quasar

Version
  • 1.4.1

Botnet
  • Office04

C2
  • 193.161.193.99:43242

Mutex
  • 45bfb701-bea2-411a-948d-9a6abe001f83

Attributes
  • encryption_key

    80594967BC0A4839C316A44D62DE36E9BF18177F

  • install_name

    SYSTEM26.exe

  • key_salt

    bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Extracted

Family
  • xworm

C2
  • assistance-arbitration.gl.at.ply.gg:12152

  • 193.222.96.100:5555

Attributes
  • Install_directory

    %AppData%

  • install_file

    svchost.exe

Signatures

  • Detect Xworm Payload 54 IoCs
  • Mars Stealer

    An infostealer written in C++ based on other infostealers.

  • Marsstealer family
  • Modifies firewall policy service 3 TTPs 4 IoCs
  • Quasar RAT

    Quasar is an open source Remote Access Tool.

  • Quasar family
  • Quasar payload 2 IoCs
  • RagnarLocker

    Ransomware first seen at the end of 2019, which has been used in targetted attacks against multiple companies.

  • Ragnarlocker family
  • SquirrelWaffle is a simple downloader written in C++.

    SquirrelWaffle.

  • Squirrelwaffle family
  • Wannacry

    WannaCry is a ransomware cryptoworm.

  • Wannacry family
  • Xworm

    Xworm is a remote access trojan written in C#.

  • Xworm family
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (9040) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Squirrelwaffle payload 1 IoCs
  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 56 IoCs

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

  • Downloads MZ/PE file 9 IoCs
  • Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs
  • Modifies Windows Firewall 2 TTPs 1 IoCs
  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Drops startup file 21 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 1 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Looks up external IP address via web service 4 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Drops autorun.inf file 1 TTPs 7 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
  • SmartAssembly .NET packer 1 IoCs

    Detects SmartAssembly .NET packer.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 12 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 56 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 4 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Interacts with shadow copies 3 TTPs 1 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies Internet Explorer settings 1 TTPs 11 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Modifies registry key 1 TTPs 1 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 4 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: MapViewOfSection 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 38 IoCs
  • Suspicious use of SendNotifyMessage 17 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Views/modifies file attributes 1 TTPs 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\adfd4e9f51bcd27935f153e44b060b6978f55da9135f34cc62361dbbf2d2db57.exe
    "C:\Users\Admin\AppData\Local\Temp\adfd4e9f51bcd27935f153e44b060b6978f55da9135f34cc62361dbbf2d2db57.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4388
    • C:\Users\Admin\AppData\Roaming\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
      "C:\Users\Admin\AppData\Roaming\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe"
      2⤵
      • Drops startup file
      • Executes dropped EXE
      • Sets desktop wallpaper using registry
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2192
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h .
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:3104
      • C:\Windows\SysWOW64\icacls.exe
        icacls . /grant Everyone:F /T /C /Q
        3⤵
        • Modifies file permissions
        • System Location Discovery: System Language Discovery
        PID:3444
      • C:\Users\Admin\AppData\Roaming\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3436
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c 41821752867797.bat
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5240
        • C:\Windows\SysWOW64\cscript.exe
          cscript.exe //nologo m.vbs
          4⤵
          • System Location Discovery: System Language Discovery
          PID:4392
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h +s F:\$RECYCLE
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:3836
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h +s E:\$RECYCLE
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:3988
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h +s E:\$RECYCLE
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:5616
      • C:\Users\Admin\AppData\Roaming\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        PID:7100
        • C:\Users\Admin\AppData\Roaming\TaskData\Tor\taskhsvc.exe
          TaskData\Tor\taskhsvc.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:6396
      • C:\Windows\SysWOW64\cmd.exe
        cmd.exe /c start /b @[email protected] vs
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2244
        • C:\Users\Admin\AppData\Roaming\@[email protected]
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:6924
          • C:\Windows\SysWOW64\cmd.exe
            cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
            5⤵
            • System Location Discovery: System Language Discovery
            PID:9704
            • C:\Windows\SysWOW64\Wbem\WMIC.exe
              wmic shadowcopy delete
              6⤵
              • System Location Discovery: System Language Discovery
              PID:6684
      • C:\Users\Admin\AppData\Roaming\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:9668
      • C:\Users\Admin\AppData\Roaming\taskse.exe
        taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:9680
      • C:\Users\Admin\AppData\Roaming\@[email protected]
        3⤵
        • Executes dropped EXE
        • Sets desktop wallpaper using registry
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        PID:9688
      • C:\Windows\SysWOW64\cmd.exe
        cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "olbjgthmdfx319" /t REG_SZ /d "\"C:\Users\Admin\AppData\Roaming\tasksche.exe\"" /f
        3⤵
        • System Location Discovery: System Language Discovery
        PID:9696
        • C:\Windows\SysWOW64\reg.exe
          reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "olbjgthmdfx319" /t REG_SZ /d "\"C:\Users\Admin\AppData\Roaming\tasksche.exe\"" /f
          4⤵
          • Adds Run key to start application
          • System Location Discovery: System Language Discovery
          • Modifies registry key
          PID:8564
      • C:\Users\Admin\AppData\Roaming\taskse.exe
        taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
        3⤵
        • Executes dropped EXE
        PID:9064
      • C:\Users\Admin\AppData\Roaming\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        PID:9200
      • C:\Users\Admin\AppData\Roaming\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:5884
      • C:\Users\Admin\AppData\Roaming\taskse.exe
        taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
        3⤵
          PID:8168
        • C:\Users\Admin\AppData\Roaming\taskdl.exe
          taskdl.exe
          3⤵
            PID:11012
          • C:\Users\Admin\AppData\Roaming\taskse.exe
            taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
            3⤵
              PID:7480
            • C:\Users\Admin\AppData\Roaming\taskdl.exe
              taskdl.exe
              3⤵
                PID:7672
              • C:\Users\Admin\AppData\Roaming\taskse.exe
                taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
                3⤵
                  PID:11776
                • C:\Users\Admin\AppData\Roaming\taskdl.exe
                  taskdl.exe
                  3⤵
                    PID:2792
                  • C:\Users\Admin\AppData\Roaming\taskse.exe
                    taskse.exe C:\Users\Admin\AppData\Roaming\@[email protected]
                    3⤵
                      PID:10668
                    • C:\Users\Admin\AppData\Roaming\taskdl.exe
                      taskdl.exe
                      3⤵
                        PID:8064
                    • C:\Users\Admin\AppData\Roaming\Cry.exe
                      "C:\Users\Admin\AppData\Roaming\Cry.exe"
                      2⤵
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:1500
                      • C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe
                        "C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe"
                        3⤵
                        • Downloads MZ/PE file
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of AdjustPrivilegeToken
                        PID:1740
                        • C:\Users\Admin\AppData\Local\Temp\Files\Client-built.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\Client-built.exe"
                          4⤵
                          • Executes dropped EXE
                          PID:4168
                          • C:\Windows\SYSTEM32\schtasks.exe
                            "schtasks" /create /tn "Quasar Client Startup" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\SYSTEM26.exe" /rl HIGHEST /f
                            5⤵
                            • Scheduled Task/Job: Scheduled Task
                            PID:4720
                          • C:\Users\Admin\AppData\Roaming\SubDir\SYSTEM26.exe
                            "C:\Users\Admin\AppData\Roaming\SubDir\SYSTEM26.exe"
                            5⤵
                            • Executes dropped EXE
                            • Suspicious use of FindShellTrayWindow
                            • Suspicious use of SendNotifyMessage
                            • Suspicious use of SetWindowsHookEx
                            PID:4728
                            • C:\Windows\SYSTEM32\schtasks.exe
                              "schtasks" /create /tn "Quasar Client Startup" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\SubDir\SYSTEM26.exe" /rl HIGHEST /f
                              6⤵
                              • Scheduled Task/Job: Scheduled Task
                              PID:3120
                        • C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe"
                          4⤵
                          • Drops startup file
                          • Executes dropped EXE
                          • Adds Run key to start application
                          • Suspicious use of SetWindowsHookEx
                          PID:8264
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:10160
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'XClient.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:8784
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\svchost.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:11644
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'svchost.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:6536
                          • C:\Windows\System32\schtasks.exe
                            "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "svchost" /tr "C:\Users\Admin\AppData\Roaming\svchost.exe"
                            5⤵
                            • Scheduled Task/Job: Scheduled Task
                            PID:8532
                        • C:\Users\Admin\AppData\Local\Temp\Files\requirements.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\requirements.exe"
                          4⤵
                          • Drops startup file
                          • Executes dropped EXE
                          • Adds Run key to start application
                          PID:7832
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\Files\requirements.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:12272
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'requirements.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:12232
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\requirements.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:8596
                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                            "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess 'requirements.exe'
                            5⤵
                            • Command and Scripting Interpreter: PowerShell
                            PID:9208
                          • C:\Windows\System32\schtasks.exe
                            "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "requirements" /tr "C:\Users\Admin\AppData\Local\Temp\requirements.exe"
                            5⤵
                            • Scheduled Task/Job: Scheduled Task
                            PID:7144
                        • C:\Users\Admin\AppData\Local\Temp\Files\Opolis.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\Opolis.exe"
                          4⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of FindShellTrayWindow
                          PID:9840
                          • C:\Users\Admin\AppData\Local\Temp\Files\OSM-Client.exe
                            "C:\Users\Admin\AppData\Local\Temp\Files\OSM-Client.exe"
                            5⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: GetForegroundWindowSpam
                            PID:8620
                        • C:\Users\Admin\AppData\Local\Temp\Files\google.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\google.exe"
                          4⤵
                          • Executes dropped EXE
                          • Drops file in Program Files directory
                          • System Location Discovery: System Language Discovery
                          PID:11036
                          • C:\Program Files (x86)\GUM9D64.tmp\GoogleUpdate.exe
                            "C:\Program Files (x86)\GUM9D64.tmp\GoogleUpdate.exe" /installsource taggedmi /install "appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={F055F91B-BB9B-4663-B67C-722DACD82983}&lang=en-GB&browser=4&usagestats=0&appname=Google%20Chrome&needsadmin=prefers&ap=x64-stable-statsdef_1&installdataindex=empty"
                            5⤵
                            • Event Triggered Execution: Image File Execution Options Injection
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            • Modifies Internet Explorer settings
                            • Modifies registry class
                            PID:7304
                            • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                              "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regsvc
                              6⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • System Location Discovery: System Language Discovery
                              • Modifies registry class
                              PID:10460
                            • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                              "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regserver
                              6⤵
                              • Executes dropped EXE
                              • System Location Discovery: System Language Discovery
                              • Modifies Internet Explorer settings
                              • Modifies registry class
                              PID:724
                              • C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateComRegisterShell64.exe
                                "C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateComRegisterShell64.exe"
                                7⤵
                                • Executes dropped EXE
                                • Modifies registry class
                                PID:10552
                              • C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateComRegisterShell64.exe
                                "C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateComRegisterShell64.exe"
                                7⤵
                                • Executes dropped EXE
                                • Modifies registry class
                                PID:1132
                              • C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateComRegisterShell64.exe
                                "C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateComRegisterShell64.exe"
                                7⤵
                                • Executes dropped EXE
                                • Modifies registry class
                                PID:10368
                            • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                              "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zMy4xNyIgc2hlbGxfdmVyc2lvbj0iMS4zLjMzLjE3IiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0ie0M4OEJDMzVBLUZCN0ItNEIzQS1BNjI5LUM5NUJCMzNBM0M5N30iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiByZXF1ZXN0aWQ9Ins2NDYxOUYzNS0wRDA5LTQ4MUMtODUzQS1BNDM2MDlDM0U2Q0Z9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IHBoeXNtZW1vcnk9IjE2IiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0iezQzMEZENEQwLUI3MjktNEY2MS1BQTM0LTkxNTI2NDgxNzk5RH0iIHZlcnNpb249IjEzNC4wLjY5ODUuMCIgbmV4dHZlcnNpb249IjEuMy4zMy4xNyIgbGFuZz0iZW4tR0IiIGJyYW5kPSIiIGNsaWVudD0iIiBpaWQ9IntGMDU1RjkxQi1CQjlCLTQ2NjMtQjY3Qy03MjJEQUNEODI5ODN9Ij48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBpbnN0YWxsX3RpbWVfbXM9IjU0NyIvPjwvYXBwPjwvcmVxdWVzdD4
                              6⤵
                              • Executes dropped EXE
                              • System Location Discovery: System Language Discovery
                              • System Network Configuration Discovery: Internet Connection Discovery
                              PID:8108
                            • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                              "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /handoff "appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={F055F91B-BB9B-4663-B67C-722DACD82983}&lang=en-GB&browser=4&usagestats=0&appname=Google%20Chrome&needsadmin=prefers&ap=x64-stable-statsdef_1&installdataindex=empty" /installsource taggedmi /sessionid "{C88BC35A-FB7B-4B3A-A629-C95BB33A3C97}"
                              6⤵
                              • System Location Discovery: System Language Discovery
                              PID:6844
                        • C:\Users\Admin\AppData\Local\Temp\Files\njrat.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\njrat.exe"
                          4⤵
                          • Executes dropped EXE
                          • Drops file in Windows directory
                          • System Location Discovery: System Language Discovery
                          PID:9132
                          • C:\Windows\rundll32.exe
                            "C:\Windows\rundll32.exe"
                            5⤵
                            • Adds Run key to start application
                            • Drops autorun.inf file
                            • Drops file in Windows directory
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: GetForegroundWindowSpam
                            PID:7764
                            • C:\Windows\SysWOW64\netsh.exe
                              netsh firewall add allowedprogram "C:\Windows\rundll32.exe" "rundll32.exe" ENABLE
                              6⤵
                              • Modifies Windows Firewall
                              • Event Triggered Execution: Netsh Helper DLL
                              • System Location Discovery: System Language Discovery
                              PID:6652
                        • C:\Users\Admin\AppData\Local\Temp\Files\self-injection.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\self-injection.exe"
                          4⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          PID:11024
                        • C:\Users\Admin\AppData\Local\Temp\Files\Ganja177.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\Ganja177.exe"
                          4⤵
                          • System Location Discovery: System Language Discovery
                          PID:9340
                          • C:\Program Files (x86)\Common Files\System\klass.exe
                            "C:\Program Files (x86)\Common Files\System\klass.exe"
                            5⤵
                            • Modifies firewall policy service
                            • Adds Run key to start application
                            • System Location Discovery: System Language Discovery
                            PID:8116
                        • C:\Users\Admin\AppData\Local\Temp\Files\MEMZ.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\MEMZ.exe"
                          4⤵
                          • System Location Discovery: System Language Discovery
                          PID:5336
                        • C:\Users\Admin\AppData\Local\Temp\Files\IATInfect2008_64.exe
                          "C:\Users\Admin\AppData\Local\Temp\Files\IATInfect2008_64.exe"
                          4⤵
                            PID:8124
                        • C:\Users\Admin\AppData\Local\Temp\a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe
                          "C:\Users\Admin\AppData\Local\Temp\a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe"
                          3⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          PID:5516
                          • C:\Windows\SysWOW64\WerFault.exe
                            C:\Windows\SysWOW64\WerFault.exe -u -p 5516 -s 812
                            4⤵
                            • Program crash
                            PID:2152
                        • C:\Users\Admin\AppData\Local\Temp\asena.exe
                          "C:\Users\Admin\AppData\Local\Temp\asena.exe"
                          3⤵
                          • Drops startup file
                          • Executes dropped EXE
                          • Enumerates connected drives
                          • Writes to the Master Boot Record (MBR)
                          • Drops file in Program Files directory
                          • System Location Discovery: System Language Discovery
                          • Checks SCSI registry key(s)
                          • Suspicious use of WriteProcessMemory
                          PID:3684
                          • C:\Windows\System32\Wbem\wmic.exe
                            wmic.exe shadowcopy delete
                            4⤵
                            • Suspicious use of AdjustPrivilegeToken
                            PID:5492
                          • C:\Windows\SYSTEM32\vssadmin.exe
                            vssadmin delete shadows /all /quiet
                            4⤵
                            • Interacts with shadow copies
                            PID:5484
                          • C:\Windows\SysWOW64\notepad.exe
                            C:\Users\Public\Documents\RGNR_B6B3FA01.txt
                            4⤵
                            • System Location Discovery: System Language Discovery
                            • Opens file in notepad (likely ransom note)
                            PID:7240
                        • C:\Users\Admin\AppData\Local\Temp\Bomb.exe
                          "C:\Users\Admin\AppData\Local\Temp\Bomb.exe"
                          3⤵
                          • Executes dropped EXE
                          PID:3804
                          • C:\Users\Admin\AppData\Local\Temp\25.exe
                            "C:\Users\Admin\AppData\Local\Temp\25.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:1208
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\25.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:7652
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '25.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:5028
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10700
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:9896
                          • C:\Users\Admin\AppData\Local\Temp\24.exe
                            "C:\Users\Admin\AppData\Local\Temp\24.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:4680
                          • C:\Users\Admin\AppData\Local\Temp\23.exe
                            "C:\Users\Admin\AppData\Local\Temp\23.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:4212
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\23.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:7648
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '23.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:11368
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:6956
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:7212
                          • C:\Users\Admin\AppData\Local\Temp\22.exe
                            "C:\Users\Admin\AppData\Local\Temp\22.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:3940
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\22.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:7644
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '22.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:11976
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10428
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:6524
                          • C:\Users\Admin\AppData\Local\Temp\21.exe
                            "C:\Users\Admin\AppData\Local\Temp\21.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:1096
                          • C:\Users\Admin\AppData\Local\Temp\20.exe
                            "C:\Users\Admin\AppData\Local\Temp\20.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:1780
                          • C:\Users\Admin\AppData\Local\Temp\19.exe
                            "C:\Users\Admin\AppData\Local\Temp\19.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:1544
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\19.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:9280
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '19.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:11672
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:6780
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:7788
                          • C:\Users\Admin\AppData\Local\Temp\18.exe
                            "C:\Users\Admin\AppData\Local\Temp\18.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:4200
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\18.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:9348
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '18.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:6044
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10332
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10068
                          • C:\Users\Admin\AppData\Local\Temp\17.exe
                            "C:\Users\Admin\AppData\Local\Temp\17.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:2208
                          • C:\Users\Admin\AppData\Local\Temp\16.exe
                            "C:\Users\Admin\AppData\Local\Temp\16.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:3900
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\16.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:9300
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '16.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:11924
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10364
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:6288
                          • C:\Users\Admin\AppData\Local\Temp\15.exe
                            "C:\Users\Admin\AppData\Local\Temp\15.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:2632
                          • C:\Users\Admin\AppData\Local\Temp\14.exe
                            "C:\Users\Admin\AppData\Local\Temp\14.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:1004
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\14.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:7364
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '14.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:9100
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10432
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:7696
                          • C:\Users\Admin\AppData\Local\Temp\13.exe
                            "C:\Users\Admin\AppData\Local\Temp\13.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:5956
                          • C:\Users\Admin\AppData\Local\Temp\12.exe
                            "C:\Users\Admin\AppData\Local\Temp\12.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:5352
                          • C:\Users\Admin\AppData\Local\Temp\11.exe
                            "C:\Users\Admin\AppData\Local\Temp\11.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:2152
                          • C:\Users\Admin\AppData\Local\Temp\10.exe
                            "C:\Users\Admin\AppData\Local\Temp\10.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:3756
                          • C:\Users\Admin\AppData\Local\Temp\9.exe
                            "C:\Users\Admin\AppData\Local\Temp\9.exe"
                            4⤵
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:5996
                          • C:\Users\Admin\AppData\Local\Temp\8.exe
                            "C:\Users\Admin\AppData\Local\Temp\8.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            • Suspicious use of AdjustPrivilegeToken
                            PID:3188
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\8.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:10692
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '8.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:5616
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10260
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:7560
                          • C:\Users\Admin\AppData\Local\Temp\7.exe
                            "C:\Users\Admin\AppData\Local\Temp\7.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            PID:4880
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\7.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:7420
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '7.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:11960
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10464
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:9236
                          • C:\Users\Admin\AppData\Local\Temp\6.exe
                            "C:\Users\Admin\AppData\Local\Temp\6.exe"
                            4⤵
                            • Executes dropped EXE
                            PID:4076
                          • C:\Users\Admin\AppData\Local\Temp\5.exe
                            "C:\Users\Admin\AppData\Local\Temp\5.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            PID:1856
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\5.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:7324
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '5.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:11820
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:6932
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:7596
                          • C:\Users\Admin\AppData\Local\Temp\4.exe
                            "C:\Users\Admin\AppData\Local\Temp\4.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            PID:4864
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\4.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:9284
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '4.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:11836
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:10272
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:8880
                          • C:\Users\Admin\AppData\Local\Temp\3.exe
                            "C:\Users\Admin\AppData\Local\Temp\3.exe"
                            4⤵
                            • Executes dropped EXE
                            PID:2300
                          • C:\Users\Admin\AppData\Local\Temp\2.exe
                            "C:\Users\Admin\AppData\Local\Temp\2.exe"
                            4⤵
                            • Executes dropped EXE
                            PID:5412
                          • C:\Users\Admin\AppData\Local\Temp\1.exe
                            "C:\Users\Admin\AppData\Local\Temp\1.exe"
                            4⤵
                            • Drops startup file
                            • Executes dropped EXE
                            PID:4716
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\1.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:9448
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '1.exe'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              • Suspicious behavior: EnumeratesProcesses
                              PID:11360
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Roaming\$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:9056
                            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                              "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -ExecutionPolicy Bypass Add-MpPreference -ExclusionProcess '$77-system32'
                              5⤵
                              • Command and Scripting Interpreter: PowerShell
                              PID:7676
                        • C:\Users\Admin\AppData\Local\Temp\CryptoWall.exe
                          "C:\Users\Admin\AppData\Local\Temp\CryptoWall.exe"
                          3⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          • Suspicious behavior: MapViewOfSection
                          • Suspicious use of WriteProcessMemory
                          PID:5948
                          • C:\Windows\SysWOW64\explorer.exe
                            "C:\Windows\syswow64\explorer.exe"
                            4⤵
                            • Drops startup file
                            • Adds Run key to start application
                            • System Location Discovery: System Language Discovery
                            • Suspicious behavior: MapViewOfSection
                            • Suspicious use of WriteProcessMemory
                            PID:4080
                            • C:\Windows\SysWOW64\svchost.exe
                              -k netsvcs
                              5⤵
                              • System Location Discovery: System Language Discovery
                              PID:2052
                      • C:\Users\Admin\AppData\Roaming\tcping.exe
                        "C:\Users\Admin\AppData\Roaming\tcping.exe"
                        2⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:3880
                      • C:\Users\Admin\AppData\Roaming\paping.exe
                        "C:\Users\Admin\AppData\Roaming\paping.exe"
                        2⤵
                        • Executes dropped EXE
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:4520
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /c C:\c504f8bb\c504f8bb.exe
                      1⤵
                      • Suspicious use of WriteProcessMemory
                      PID:5784
                      • C:\c504f8bb\c504f8bb.exe
                        C:\c504f8bb\c504f8bb.exe
                        2⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        PID:4592
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\c504f8bb.exe
                      1⤵
                      • Suspicious use of WriteProcessMemory
                      PID:2400
                      • C:\Users\Admin\AppData\Roaming\c504f8bb.exe
                        C:\Users\Admin\AppData\Roaming\c504f8bb.exe
                        2⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        PID:3340
                    • C:\Windows\system32\vssvc.exe
                      C:\Windows\system32\vssvc.exe
                      1⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:4908
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Roaming\tasksche.exe"
                      1⤵
                        PID:10684
                      • C:\Windows\system32\cmd.exe
                        C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Roaming\svchost.exe
                        1⤵
                          PID:12156
                          • C:\Users\Admin\AppData\Roaming\svchost.exe
                            C:\Users\Admin\AppData\Roaming\svchost.exe
                            2⤵
                            • Executes dropped EXE
                            PID:11904
                        • C:\Windows\system32\cmd.exe
                          C:\Windows\system32\cmd.exe /c C:\Users\Admin\AppData\Local\Temp\requirements.exe
                          1⤵
                            PID:10740
                            • C:\Users\Admin\AppData\Local\Temp\requirements.exe
                              C:\Users\Admin\AppData\Local\Temp\requirements.exe
                              2⤵
                              • Executes dropped EXE
                              PID:10808
                          • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                            "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
                            1⤵
                            • System Location Discovery: System Language Discovery
                            PID:8156
                            • C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\138.0.7204.158_chrome_installer_uncompressed.exe
                              "C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\138.0.7204.158_chrome_installer_uncompressed.exe" --verbose-logging --do-not-launch-chrome --channel=stable --system-level /installerdata="C:\Windows\TEMP\gui23E9.tmp"
                              2⤵
                                PID:1012
                                • C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe
                                  "C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe" --uncompressed-archive="C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\CHROME.7Z" --verbose-logging --do-not-launch-chrome --channel=stable --system-level /installerdata="C:\Windows\TEMP\gui23E9.tmp"
                                  3⤵
                                  • Boot or Logon Autostart Execution: Active Setup
                                  • Drops file in Windows directory
                                  • Modifies registry class
                                  PID:6216
                                  • C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe
                                    "C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=138.0.7204.158 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7e0d225a0,0x7ff7e0d225ac,0x7ff7e0d225b8
                                    4⤵
                                    • Drops file in Windows directory
                                    PID:6196
                                  • C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe
                                    "C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe" --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=1
                                    4⤵
                                    • Drops file in Windows directory
                                    PID:9228
                                    • C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe
                                      "C:\Program Files (x86)\Google\Update\Install\{B05EC115-32A5-460F-992F-D78FF5169046}\CR_0577A.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=138.0.7204.158 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff7e0d225a0,0x7ff7e0d225ac,0x7ff7e0d225b8
                                      5⤵
                                      • Drops file in Windows directory
                                      PID:5792
                              • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                                "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zMy4xNyIgc2hlbGxfdmVyc2lvbj0iMS4zLjMzLjE3IiBpc21hY2hpbmU9IjEiIHNlc3Npb25pZD0ie0M4OEJDMzVBLUZCN0ItNEIzQS1BNjI5LUM5NUJCMzNBM0M5N30iIGluc3RhbGxzb3VyY2U9InRhZ2dlZG1pIiByZXF1ZXN0aWQ9Ins4RDFERTYwRS00RTdGLTQ2N0ItODFGQy0wOUQ2OEM3REQ5OUF9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IHBoeXNtZW1vcnk9IjE2IiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0iezhBNjlEMzQ1LUQ1NjQtNDYzQy1BRkYxLUE2OUQ5RTUzMEY5Nn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEzOC4wLjcyMDQuMTU4IiBhcD0ieDY0LXN0YWJsZS1zdGF0c2RlZl8xIiBsYW5nPSJlbi1HQiIgYnJhbmQ9IiIgY2xpZW50PSIiIGlpZD0ie0YwNTVGOTFCLUJCOUItNDY2My1CNjdDLTcyMkRBQ0Q4Mjk4M30iIGNvaG9ydD0iMTpndS9pMTk6IiBjb2hvcnRuYW1lPSJTdGFibGUgSW5zdGFsbHMgJmFtcDsgVmVyc2lvbiBQaW5zIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGRvd25sb2FkZXI9Indpbmh0dHAiIHVybD0iaHR0cDovL2VkZ2VkbC5tZS5ndnQxLmNvbS9lZGdlZGwvcmVsZWFzZTIvY2hyb21lL2Fkb3hxNnl3NjRqendzd3F1ZmgzcHJ2NndjcmFfMTM4LjAuNzIwNC4xNTgvMTM4LjAuNzIwNC4xNThfY2hyb21lX2luc3RhbGxlcl91bmNvbXByZXNzZWQuZXhlIiBkb3dubG9hZGVkPSI0MjI4NTA5ODQiIHRvdGFsPSI0MjI4NTA5ODQiIGRvd25sb2FkX3RpbWVfbXM9IjI2MTA5Ii8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNTAwIiBkb3dubG9hZF90aW1lX21zPSIyOTQ1NCIgZG93bmxvYWRlZD0iNDIyODUwOTg0IiB0b3RhbD0iNDIyODUwOTg0IiBpbnN0YWxsX3RpbWVfbXM9IjI5NTMzIi8-PGRhdGEgbmFtZT0iaW5zdGFsbCIgaW5kZXg9ImVtcHR5Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
                                2⤵
                                • System Location Discovery: System Language Discovery
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:7976
                            • C:\Windows\system32\cmd.exe
                              C:\Windows\system32\cmd.exe /c "C:\Windows\rundll32.exe" ..
                              1⤵
                                PID:6160
                                • C:\Windows\rundll32.exe
                                  C:\Windows\rundll32.exe ..
                                  2⤵
                                  • System Location Discovery: System Language Discovery
                                  PID:3856
                              • C:\Users\Admin\AppData\Local\Temp\requirements.exe
                                C:\Users\Admin\AppData\Local\Temp\requirements.exe
                                1⤵
                                  PID:6816
                                • C:\Users\Admin\AppData\Roaming\svchost.exe
                                  C:\Users\Admin\AppData\Roaming\svchost.exe
                                  1⤵
                                    PID:7812
                                  • C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateOnDemand.exe
                                    "C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleUpdateOnDemand.exe" -Embedding
                                    1⤵
                                    • System Location Discovery: System Language Discovery
                                    PID:6260
                                    • C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                                      "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ondemand
                                      2⤵
                                      • System Location Discovery: System Language Discovery
                                      PID:11340
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --from-installer
                                        3⤵
                                        • Drops file in Windows directory
                                        • Enumerates system info in registry
                                        • Modifies data under HKEY_USERS
                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SendNotifyMessage
                                        PID:9296
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=138.0.7204.158 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd195896e8,0x7ffd195896f4,0x7ffd19589700
                                          4⤵
                                            PID:7880
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1992 /prefetch:11
                                            4⤵
                                            • System Time Discovery
                                            PID:5072
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=1952 /prefetch:2
                                            4⤵
                                              PID:3844
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=2500 /prefetch:13
                                              4⤵
                                                PID:3780
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3280 /prefetch:1
                                                4⤵
                                                  PID:7784
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3300 /prefetch:1
                                                  4⤵
                                                    PID:6696
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3820 /prefetch:1
                                                    4⤵
                                                      PID:9400
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3852 /prefetch:9
                                                      4⤵
                                                        PID:7980
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3976 /prefetch:9
                                                        4⤵
                                                          PID:9960
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=3416 /prefetch:1
                                                          4⤵
                                                            PID:8592
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --force-high-res-timeticks=disabled --field-trial-handle=1956,i,2996777273858127650,7520558031060860398,262144 --variations-seed-version=20250618-180047.684000 --mojo-platform-channel-handle=5600 /prefetch:14
                                                            4⤵
                                                              PID:8856
                                                      • C:\Program Files\Google\Chrome\Application\138.0.7204.158\elevation_service.exe
                                                        "C:\Program Files\Google\Chrome\Application\138.0.7204.158\elevation_service.exe"
                                                        1⤵
                                                          PID:9636
                                                        • C:\Windows\system32\svchost.exe
                                                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                          1⤵
                                                            PID:9896
                                                          • C:\Users\Admin\AppData\Local\Temp\requirements.exe
                                                            C:\Users\Admin\AppData\Local\Temp\requirements.exe
                                                            1⤵
                                                              PID:8444
                                                            • C:\Users\Admin\AppData\Roaming\svchost.exe
                                                              C:\Users\Admin\AppData\Roaming\svchost.exe
                                                              1⤵
                                                                PID:8316
                                                              • C:\Windows\System32\rundll32.exe
                                                                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                1⤵
                                                                  PID:12252
                                                                • C:\Windows\system32\cmd.exe
                                                                  C:\Windows\system32\cmd.exe /c C:\Program Files (x86)\Common Files\System\klass.exe
                                                                  1⤵
                                                                    PID:11124

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        duplicate.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\duplicate.svg
                                                                        • Size 2KB
                                                                        • SHA256 37ffdf9537565726961c225edbc6772d969982bd276ce1fe1a14c438edb16ad2
                                                                        • MD5 SHA1 SHA512

                                                                        aic_file_icons_retina_thumb.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons_retina_thumb.png
                                                                        • Size 51KB
                                                                        • SHA256 a718b7e725573f360ac08caa587a562fd77c04432e503219f8e592fbf6a2c5b9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        remove.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\remove.svg
                                                                        • Size 1KB
                                                                        • SHA256 9dd616c488ef3178c9ce56831c07aef88f3a7e78dfa2f052d3921da662940377
                                                                        • MD5 SHA1 SHA512

                                                                        s_backarrow_default.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_backarrow_default.svg
                                                                        • Size 1KB
                                                                        • SHA256 f1b5437d580991854d13d12a51130e295703f6a4621a0f588b567e1bb5b66a4b
                                                                        • MD5 SHA1 SHA512

                                                                        s_closereview_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_closereview_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 caf05a3f49d316c20b49eb80f2e97aff12e3c694bf5fd9cd8feb5637d21778ce
                                                                        • MD5 SHA1 SHA512

                                                                        s_comment_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_comment_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 35e576ff7151c82d4580d36d5bb1852a0744f930de9b4cdf6aa02c74775159d6
                                                                        • MD5 SHA1 SHA512

                                                                        s_editpdf_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_editpdf_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 31f62c11528f1993bcf77f967c4d44f1d998e2ddd68678bcd5457c38c2c2cec0
                                                                        • MD5 SHA1 SHA512

                                                                        s_export_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_export_18.svg
                                                                        • Size 8KB
                                                                        • SHA256 675b0de89519b487ce8277c9501ab8036ea650c65d6d7a49460ea827d1b18943
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        s_fillandsign_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_fillandsign_18.svg
                                                                        • Size 2KB
                                                                        • SHA256 bcec515619cd5c638cb0e56a2b8cdd6e780e1c94043966b22eb79fde8b0df056
                                                                        • MD5 SHA1 SHA512

                                                                        s_move_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_move_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 a86c29e432d7d6b1d37fb1d49792fba1b8eeeffed032aeb950458be44a7db105
                                                                        • MD5 SHA1 SHA512

                                                                        s_newfolder-default.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_newfolder-default.svg
                                                                        • Size 1KB
                                                                        • SHA256 660b1846f4f21e6299a1744d45b3f8fe1f492e9a67979cee50d7e2146627fe76
                                                                        • MD5 SHA1 SHA512

                                                                        s_nextarrow_default.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_nextarrow_default.svg
                                                                        • Size 1KB
                                                                        • SHA256 3bf3a9fb73520847a8ea88bd0e8f03e0d66b384489851d352e73a23efdb1034b
                                                                        • MD5 SHA1 SHA512

                                                                        s_organize_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_organize_18.svg
                                                                        • Size 2KB
                                                                        • SHA256 339bf8da4fc4f0308c5e3398a7246343db3d8c26b728f2034c6cca36a131a05f
                                                                        • MD5 SHA1 SHA512

                                                                        s_rename_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_rename_18.svg
                                                                        • Size 2KB
                                                                        • SHA256 e4919e6580dc47b78519c7f0346e116a807056de2f1a3064aca92df0426df5eb
                                                                        • MD5 SHA1 SHA512

                                                                        s_sendforsignature_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_sendforsignature_18.svg
                                                                        • Size 2KB
                                                                        • SHA256 5011f07a2ec862222fb9f18bf7ff4355114502cb0626fd9cb3d75fbaf155b9e2
                                                                        • MD5 SHA1 SHA512

                                                                        s_share_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_share_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 1a55ab700396ce5271a8b89bd33273bf6a05e44eb972826b2b8a5d0d962fed6b
                                                                        • MD5 SHA1 SHA512

                                                                        selection-actions.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions.png
                                                                        • Size 2KB
                                                                        • SHA256 908d6122f7130a84eabdd116d75a28f73da96b82580ee8d2c98c7d3591290c59
                                                                        • MD5 SHA1 SHA512

                                                                        selection-actions2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png
                                                                        • Size 4KB
                                                                        • SHA256 d0a268413e514b2767f41ddd8f47f7eb667dfff0248122298bae1069424d83bd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
                                                                        • Size 3KB
                                                                        • SHA256 021d793f71470d25e153cca9ed7d59bdfa54f323810605294ddfb47f9f1174b4
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
                                                                        • Size 28KB
                                                                        • SHA256 3b69b352cda106beef88b90e42bef39352fdcd94932f309a3dfd81d2f2a80ce9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
                                                                        • Size 8KB
                                                                        • SHA256 cc0bea82b1aa88630fcd9eefdee8c65d3f917640b478b12b44d89a168dec0695
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 d12a5d45382c0057314eb889c790f3b7996c856cac871c6eba08f0bdd0c81727
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
                                                                        • Size 4KB
                                                                        • SHA256 3a1c6872f70ed6dedf366d12e8ee4f685929a4d1649713ab0d92aeb05e16d184
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
                                                                        • Size 2KB
                                                                        • SHA256 c0f65d05e57ef4be34eafec766714ab1bf85809bc1687ca17424121ffcd579ed
                                                                        • MD5 SHA1 SHA512

                                                                        convertpdf-selector.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-selector.js
                                                                        • Size 174KB
                                                                        • SHA256 b2ff6cbbbf9345fe2a8d34f0e485896a1283a20d5cf2e11ee138161a7398a726
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        convertpdf-tool-view.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\convertpdf-tool-view.js
                                                                        • Size 374KB
                                                                        • SHA256 1d14ed8c0daa3b06654aab4c2094d84c7ec56b027dcaa51ac0a10cf6f538cb27
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
                                                                        • Size 3KB
                                                                        • SHA256 c55f46fa3c01e375dfdc8a13dbe2eeadc561d24c7ae5bd75b1f59fd4b7089747
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 f24c9da696d0dccc1e3c1068b457eec3a9f9f0b5f0f923134a7485b476cef0fe
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
                                                                        • Size 966B
                                                                        • SHA256 1fa449c3adf90cc281fea22bdb87a23b7d66042e08c5c6fe335020f7dbb84dc3
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon_2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
                                                                        • Size 1KB
                                                                        • SHA256 c59266eb58af134a2c7759b9dae2739e47f18f56050cd100dba1d85f599605cf
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon_hover.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
                                                                        • Size 909B
                                                                        • SHA256 1f4794e393e585b32c5d67d7858878d522f83208170419befb77787af3b92268
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon_hover_2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
                                                                        • Size 1KB
                                                                        • SHA256 e34f07de14c2674e6ae0a66519f21b096211a8d62ef901a91f92dac8937eb0c9
                                                                        • MD5 SHA1 SHA512

                                                                        example_icons.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons.png
                                                                        • Size 1KB
                                                                        • SHA256 6ae1ab9ffaad9cf0ff56007810716c4ca92ccae2569ffc0793a1568ab3847421
                                                                        • MD5 SHA1 SHA512

                                                                        example_icons2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons2x.png
                                                                        • Size 1KB
                                                                        • SHA256 392cbe3d287fac8fe9e4722d4794cb6ff8efee306bfc7c29aab651b20bba1c14
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
                                                                        • Size 909B
                                                                        • SHA256 66e752169fffb6e6c2d9748d2fd6aa720d325dafc5e34dc09e157288ee42f30f
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon_2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
                                                                        • Size 1KB
                                                                        • SHA256 d9c835bc36bc9e1a7001614c5eee13776b8d8c14159eb64d2411e4bd5734f199
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon_hover.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
                                                                        • Size 909B
                                                                        • SHA256 f7cba68cc6d379c611cfb5f369446421c43f188d9cd52a13ad8c0499fce91bf7
                                                                        • MD5 SHA1 SHA512

                                                                        rhp_world_icon_hover_2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
                                                                        • Size 1KB
                                                                        • SHA256 4c6fbfa6e3f85a4a728204f346b9d353b2c69284d3af1c8dfef3e5807f5f073c
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 218dec94899379e814980df9caf94364907b0f66d702f688284c5614577849ee
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 47f61cad2a25345859cadf80c4c0a629938cc02d481c1935fc78468d9761eea7
                                                                        • MD5 SHA1 SHA512

                                                                        s_checkbox_selected_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_selected_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 a553a830506b0ac03d2316493e916a66fcd0fd996c26371abd0e500cef7c1c2d
                                                                        • MD5 SHA1 SHA512

                                                                        s_checkbox_unselected_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_unselected_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 58a4327724a96531ef04e009212ffc1d3605e4f135bc21c8bbc2295343c699f8
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
                                                                        • Size 9KB
                                                                        • SHA256 85f69a673f5bc5784d665187c3b673ea25062a02a9f72126ef7d55df44a46510
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 7df64d0638f67f1228ba19af6497f336f7c1315a574bde8b028003349a9fa60b
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 0bc132897cf84d5dcda4a2a9a0f11ee93ced125ce88d504550f30d0a4686a980
                                                                        • MD5 SHA1 SHA512

                                                                        icons.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons.png
                                                                        • Size 8KB
                                                                        • SHA256 d622b2018db0d18b431a6862cada231f09de1526e222d987269cc41bc737b357
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        icons_ie8.gif

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons_ie8.gif
                                                                        • Size 8KB
                                                                        • SHA256 ea6c3e2bdc952463f5e2adb19d24e640f11cf0f1137da26449fce7a71c3025b3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        icons_retina.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\icons_retina.png
                                                                        • Size 15KB
                                                                        • SHA256 f4200c09ef2333b01532ef52a43c282aa3f61bf97779bd89e2594216020b9384
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        new_icons.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons.png
                                                                        • Size 8KB
                                                                        • SHA256 14b5082ebd9a0bb54dccb9949db4745ba3bc30cfb4cec713fa6af74d3041f6b2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        new_icons_retina.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons_retina.png
                                                                        • Size 17KB
                                                                        • SHA256 e7900c5b861e9fe30b2d7d0f731c69e96afa6bd200e9b2b951ed505683eaf130
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 accffe5d91189dedc19a8a38569b6ea56b66ddaf72f5c26b58ac16d3d129d5c9
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 dc08b365b773ab94af495ed7bc609256410140607b442aeb4ead6d4e85d22dad
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 cafc529198e5cdf6f69322cc2d8382602153dcf6747c8f782ebc5f74806985c2
                                                                        • MD5 SHA1 SHA512

                                                                        bg_pattern_RHP.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png
                                                                        • Size 700B
                                                                        • SHA256 96e1b3e17cf171989e2971687b7f521e0033285d6c471a62845e7051b1013061
                                                                        • MD5 SHA1 SHA512

                                                                        bg_patterns_header.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_patterns_header.png
                                                                        • Size 1KB
                                                                        • SHA256 f6f71801e13b417ac6e1e3ccab01e8362aacdc4fe51bcc2531cfbc97159897fd
                                                                        • MD5 SHA1 SHA512

                                                                        illustrations.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations.png
                                                                        • Size 9KB
                                                                        • SHA256 e46a995b6722f1505d048afb0b0f95603dab6d699dca44dc251e0dbcfeca14c0
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        illustrations_retina.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\illustrations_retina.png
                                                                        • Size 19KB
                                                                        • SHA256 3dfdc3e585bafa204e6f9b63068f6d37ad83aa522e34e8036751a45eb7807e43
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 731fbe98db2aad11a5ea5bb85436793b9032f1a94196f795214b6a0dc57c142d
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 61b945919b8e2f42e90530099352bc1179a46f92eaf07e6d8476ac1b659ac9f2
                                                                        • MD5 SHA1 SHA512

                                                                        main-selector.css

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
                                                                        • Size 1KB
                                                                        • SHA256 b519e59e0bb52eb8f4bfc2d0ef2e30ff9ca622109dba72ee1cb0e4ea849eff07
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 bd363f2a9181deeca439341fd1d419a0afbb11f42426edc96d305cac45f181f9
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js.ragnar_B6B3FA01

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js.ragnar_B6B3FA01
                                                                        • Size 1KB
                                                                        • SHA256 670b4f44d02fa6b87c2b345f04a552c8d92a8b69d0ffa4b4aeefbb85acc0f976
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 d144371b4150b5ca5a3f4de09b08db7bd8e1ab9bf5b8fe64fe0d0ae8c41dff7e
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
                                                                        • Size 5KB
                                                                        • SHA256 1988de075893eb0ff297d78c87f000b552e4452093954a706ff5efe55054b0ca
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        en_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\en_get.svg
                                                                        • Size 5KB
                                                                        • SHA256 613df8c5fd96d3670b90683bddf2671af66d1063373ec57b9c739b8162e81a39
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\root\ui-strings.js
                                                                        • Size 13KB
                                                                        • SHA256 2451a510911e16c9cf2456c8ff4e6283eb4b4956b50c5d89d4f9052b4aae9813
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\root\ui-strings.js
                                                                        • Size 14KB
                                                                        • SHA256 fba5a4dbab90125974ed33e65ae1dc607decac383565cdd912d3fe1c150995ac
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 4549d973f678584b5e788aace464a01f9b494f4ef36fe8f26ac3ffb2c06100ee
                                                                        • MD5 SHA1 SHA512

                                                                        main-selector.css

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css
                                                                        • Size 1KB
                                                                        • SHA256 769f4b2cc10a2973c8740787bfb53cff0f5eba197501b5e4bb653226291b118d
                                                                        • MD5 SHA1 SHA512

                                                                        Download_on_the_App_Store_Badge_cs_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_cs_135x40.svg
                                                                        • Size 19KB
                                                                        • SHA256 e9cec0ed3f82f47a6a413248465ea468ac3cca9486941dfb3f2b65ead96bfd18
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_da_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg
                                                                        • Size 15KB
                                                                        • SHA256 ad287e333727ad36faeb0f11664c10039b6cffcaa20eeca3ebdb45d1d6787430
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_de_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_de_135x40.svg
                                                                        • Size 18KB
                                                                        • SHA256 dbabcabf571cd438b1afebc89c52c905ef8778b982f0d4a348943edc108afa28
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_es_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_es_135x40.svg
                                                                        • Size 23KB
                                                                        • SHA256 89a2c326f56227dfc633940afe7f9b56b27994717e9ffd9ee27ef506a1de5aad
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_fi_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fi_135x40.svg
                                                                        • Size 18KB
                                                                        • SHA256 2d4e277d5c6057c8c38db6acf919ef7d4e9ab7dfed6978604167434f0724dabe
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_fr_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_fr_135x40.svg
                                                                        • Size 26KB
                                                                        • SHA256 331c93483fbf4b300768df7fa1317b96e8d94a5e8ff234f0d0ebc2206bd63137
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_it_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_it_135x40.svg
                                                                        • Size 20KB
                                                                        • SHA256 16c8c9d5486df1189d06721e48c2f497c66991f7d86c7c357729a932ad94a981
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_ja_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ja_135x40.svg
                                                                        • Size 17KB
                                                                        • SHA256 5b90118f4fb1276448b30326e9655e03ed3aa55b88dbb77ca497ad8d299b3405
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_ko_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ko_135x40.svg
                                                                        • Size 17KB
                                                                        • SHA256 5ff7d5e0c09cd524e1f4612718f373ce634a4760d46c97c430fd46ddff828ef3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_nb_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_nb_135x40.svg
                                                                        • Size 20KB
                                                                        • SHA256 0f948d38696abcf519d44de5e32a5df4ef21ab0e338194e3d1c003a99e5f4967
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_pl_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pl_135x40.svg
                                                                        • Size 18KB
                                                                        • SHA256 795890c8efacfe3c2504f28755e0a470087deeafa3a9da2d067329ad80cf0b2f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_pt_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_pt_135x40.svg
                                                                        • Size 19KB
                                                                        • SHA256 0fc9be7d67abca7687244219750f6a7c754467256e8f36d4e579401f9ad3df19
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_ru_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg
                                                                        • Size 23KB
                                                                        • SHA256 d79636f8220bb9faf1b8fa36af61b5b56bb6a4de680699d6dad383114cdc08f9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_sv_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_sv_135x40.svg
                                                                        • Size 17KB
                                                                        • SHA256 cfcf8745ee7a37171d1587bf311c5d030aeca72cc6acfdd7d00c4bc8ae328feb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_tr_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_tr_135x40.svg
                                                                        • Size 21KB
                                                                        • SHA256 3d501a832ae0f57dac1312ad6889f1060c85a56da42b84ad8ffa84ce65632e00
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_zh_cn_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_cn_135x40.svg
                                                                        • Size 14KB
                                                                        • SHA256 ce7bb84731494f2aecaff476a4886fba58d671c9f2185a387a4e2dc1ded19f47
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Download_on_the_App_Store_Badge_zh_tw_135x40.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_zh_tw_135x40.svg
                                                                        • Size 15KB
                                                                        • SHA256 9115af63ae9ebae4b305a71c4291c8dade88997099eeeab75eae80d6b9ab2425
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cs_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\cs_get.svg
                                                                        • Size 5KB
                                                                        • SHA256 f35fbf90a06422e8353247f04c555eb76b8bc952705ffd60122dc933058f196a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        da_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg
                                                                        • Size 5KB
                                                                        • SHA256 2180bd099b589fdd298f1a0fb0be60a94b5862fdf5132de6c885761bc9ea8250
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        de_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\de_get.svg
                                                                        • Size 6KB
                                                                        • SHA256 0c10d97a3f52789044ce99f121dbff4361c2a720a4d9f1228ab31cb11c44bfd2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        es-419_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\es-419_get.svg
                                                                        • Size 7KB
                                                                        • SHA256 34307306274ec3a4a2ae9c87b1adbd85a82d0680f15bbc5fd1e2663b7a445bb9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fi_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fi_get.svg
                                                                        • Size 5KB
                                                                        • SHA256 1f024d89d23191959716bbd3ae3cdb9e8e7c1aa3924e6fbab897d24178b97dde
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fr_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\fr_get.svg
                                                                        • Size 8KB
                                                                        • SHA256 1c3263af8ea2d1e2f70d63720c6fab865997832a8de9f6c31fa8cae9da8377f9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        it_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\it_get.svg
                                                                        • Size 7KB
                                                                        • SHA256 a699e7f72748af760e5ca2422f15a1f3758142432363247f2a5e196448698c60
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ko_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ko_get.svg
                                                                        • Size 6KB
                                                                        • SHA256 74c721ca9e612bbdc0d50cc4092ef690d4f39aba50bc29145969c09b368d4c84
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        no_get.svg.ragnar_B6B3FA01

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\no_get.svg.ragnar_B6B3FA01
                                                                        • Size 7KB
                                                                        • SHA256 bd8e338fa1f26a48c00f48d1bfb7429c0161cf2c7a0903cc886369519e480e2b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pl_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pl_get.svg
                                                                        • Size 6KB
                                                                        • SHA256 753cb35c38cc8994e182d8ccc8faef09185b5f4f8606dc56bc1b59d80f6b8b55
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pt-br_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\pt-br_get.svg
                                                                        • Size 7KB
                                                                        • SHA256 005ea2b9c284fb3aefb26ed365e16f606a4b98d6d9dcdd5f40815dd627782d1e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ru_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\ru_get.svg
                                                                        • Size 6KB
                                                                        • SHA256 025cf6d192db7cfbc0ddfc208361e263bb6437f2ac65c9e61d1569f1c8c73439
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sv_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\sv_get.svg
                                                                        • Size 6KB
                                                                        • SHA256 7ff89ea6ced45e06f4f199b8f6f0f026c37e5ca1446284adf63a53c3c42c8949
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tr_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\tr_get.svg
                                                                        • Size 5KB
                                                                        • SHA256 fda340098b49e2c82655bb1d03e21fcba3b3ef0d1ac8b0b3c74eafd52588f4ec
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zh-cn_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-cn_get.svg
                                                                        • Size 7KB
                                                                        • SHA256 e21a21ee14292e8670c5a0239a847c2d7e04c155a964a8f761c2da01c71b9b47
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zh-tw_get.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg
                                                                        • Size 6KB
                                                                        • SHA256 29f601610585b0cb3cfe958d8f92548747685eb9ce52817783d1da280dd2afbb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 2f147967d3ff40d0d4405b330cc68ae5c073ce5cb1072fc121bc4261a72c7e2f
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 4530629dac178f11999a53ecab9981c998060da4ea219d4f37c96155d3d5b105
                                                                        • MD5 SHA1 SHA512

                                                                        main.css

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\css\main.css
                                                                        • Size 1KB
                                                                        • SHA256 120a9e8cffa5a9c630c479136b6b4becbded3815632355b70ceaecc3ec20f928
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 75b4dcc55e0c8c4dc52ef9a367a71761403cb2b59dadac97f7e5ea910bde0208
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\nb-no\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 c273cae0c9fb150b3425005315bf344cc1f7cc55469b9a16fda9c02d7cc5a1cf
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 36194cb23cd4e10c3bba3cd1c015d68df6d553689dd29c42299ddc1864a0d643
                                                                        • MD5 SHA1 SHA512

                                                                        main-selector.css

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css
                                                                        • Size 1KB
                                                                        • SHA256 7283093e20be70e2d68f34fc25beef2f3b842cb1b385991686eda1afe970f693
                                                                        • MD5 SHA1 SHA512

                                                                        faf_icons.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\faf_icons.png
                                                                        • Size 6KB
                                                                        • SHA256 3dd98c0346aee241a27dbcf1283bf0486dcfd30e5f92175c0b5ab6e31ceef712
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        progress.gif

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\progress.gif
                                                                        • Size 19KB
                                                                        • SHA256 7f3e346db2d2f2e2aef17f76b2c4add1e090c6070e9f2f08c03854a6420d8503
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\root\ui-strings.js
                                                                        • Size 8KB
                                                                        • SHA256 6dca9c620c52af54b9abc96d9e003b58d92b50bd100f4dfe857d2e16d0039a19
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\sl-sl\ui-strings.js
                                                                        • Size 4KB
                                                                        • SHA256 08c986f003695f3267895e151ad5dc17b05fe43eed9e840be91e9c499deb190a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\root\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 3d917836c7144f523f1da1fcb158aa2656feb3060c58ae6c46da5d4424d1b18e
                                                                        • MD5 SHA1 SHA512

                                                                        bun.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\bun.png
                                                                        • Size 3KB
                                                                        • SHA256 4e900b6883f056f1bf4965963703dce794b0c4f982f5bade0dd93cef06d754ef
                                                                        • MD5 SHA1 SHA512

                                                                        cstm_brand_preview.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview.png
                                                                        • Size 2KB
                                                                        • SHA256 d84c1c26b4ad1639acde7dde474963c26307a6338e398fda92aef8c63f00e38b
                                                                        • MD5 SHA1 SHA512

                                                                        cstm_brand_preview2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\cstm_brand_preview2x.png
                                                                        • Size 5KB
                                                                        • SHA256 fe725aedcfd8b5562ed34f34e9f9353b1db073054c64bc2c9404d21386517e89
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        dd_arrow_small.png.ragnar_B6B3FA01

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png.ragnar_B6B3FA01
                                                                        • Size 810B
                                                                        • SHA256 8f24d45a3bbbcf94b60b1a9ce2b1dfed740cc9e8fba707f9378a6ad9624b8243
                                                                        • MD5 SHA1 SHA512

                                                                        dd_arrow_small2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small2x.png
                                                                        • Size 906B
                                                                        • SHA256 d026b14be58977af81261fe5b7604bd521ea8fcb7f6e8052c663e820b324f8ae
                                                                        • MD5 SHA1 SHA512

                                                                        illustrations.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\illustrations.png
                                                                        • Size 4KB
                                                                        • SHA256 ad527ae83c6ae94f2556af450680850da07a2a63185e3aa3f6a1fc1a62186dfe
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nub.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\nub.png
                                                                        • Size 1KB
                                                                        • SHA256 9915c426f9ed7762269e8c191fd4ab12c8f25be7be6a72bfbec760a155815794
                                                                        • MD5 SHA1 SHA512

                                                                        s_filter_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_filter_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 386dce4642083a5accb0a466a8296043d4034e497a18fee81d2f07998e85fe66
                                                                        • MD5 SHA1 SHA512

                                                                        s_listview_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_listview_18.svg
                                                                        • Size 2KB
                                                                        • SHA256 70a2dc4632c5582e0ec7e55b84aad9f6f1c04680389135a6112c92605116d1de
                                                                        • MD5 SHA1 SHA512

                                                                        s_opencarat_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_opencarat_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 d2c71938d33bc97ea1a613aca29b08437e1abec0e433c0c79790cb4120a8a6b2
                                                                        • MD5 SHA1 SHA512

                                                                        s_thumbnailview_18.svg

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_thumbnailview_18.svg
                                                                        • Size 1KB
                                                                        • SHA256 ffd76cfb90f573bdef64795736412f2f2accb8423cbe985db5aab5417aa82376
                                                                        • MD5 SHA1 SHA512

                                                                        share_icons.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons.png
                                                                        • Size 1KB
                                                                        • SHA256 6fc79983d03be21080330756890f00f09033bceb344c41cd16c1703f2ad0cf9f
                                                                        • MD5 SHA1 SHA512

                                                                        share_icons2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\share_icons2x.png
                                                                        • Size 3KB
                                                                        • SHA256 a42a574d44c110e8e16b1d69c6b2c26c71c866add2032f4595f86594fab3cb7f
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\root\ui-strings.js
                                                                        • Size 14KB
                                                                        • SHA256 666e2cc4dc1e164756a5aebb68add01b53e968f776439b539449ee3c7cda4ff9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        adobe_spinner.gif

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif
                                                                        • Size 1KB
                                                                        • SHA256 671bbeddd32eda689e342b6a67be909d08b4070e04c9834e016159c712167e57
                                                                        • MD5 SHA1 SHA512

                                                                        adc_logo.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\adc_logo.png
                                                                        • Size 4KB
                                                                        • SHA256 1f5626e3aaff93c32a6d9342a6260e04c4bbde01c3ad46033e9e6c8fdadbe49e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        logo_retina.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\logo_retina.png
                                                                        • Size 7KB
                                                                        • SHA256 080fa2d4fca79fc28ae9098c10395a84f1e18ea81ce4172e32141d8b4b790eb3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sat_logo.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo.png
                                                                        • Size 1KB
                                                                        • SHA256 3292bf21d90813314480919d6f96b044781bee3c595bde8e9c17530f4c5a2663
                                                                        • MD5 SHA1 SHA512

                                                                        sat_logo_2x.png

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\sat_logo_2x.png
                                                                        • Size 2KB
                                                                        • SHA256 8786efa0ad5db6433f7ee89b8a3da2e912c8caadec52be84522b3e28e65c0485
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js
                                                                        • Size 10KB
                                                                        • SHA256 cadcdc8616fba97cb27d9ad43d72bc3d23be94e989573127039157daf6991adc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\root\ui-strings.js
                                                                        • Size 14KB
                                                                        • SHA256 01a3b65cf01b3bc7ac3b7de842c9942f05601194efb16dad10694df6542302d8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\es-es\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 198470d71b875fee8a2893a3b27ce3389816c7971342d614e2a978ef5c3253d1
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\root\ui-strings.js
                                                                        • Size 18KB
                                                                        • SHA256 77f435a1fb6f2928e3661c2b4d3c87703f953ec054098119f7c4ed5a72eaa854
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 97ba16058c25584d20fd491585aa1fb56501342c0ae325fe11cb0ba25e8bf746
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\he-il\ui-strings.js
                                                                        • Size 1KB
                                                                        • SHA256 cb5d96c8973f23435c7dc4e631df5e27e23578f11a5c9881e0236fe26005e3f6
                                                                        • MD5 SHA1 SHA512

                                                                        ui-strings.js

                                                                        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\root\ui-strings.js
                                                                        • Size 2KB
                                                                        • SHA256 e2fadda7ab9d04e0cb55bfb6adfb113600c097c12a49c791c745324f0c35ede7
                                                                        • MD5 SHA1 SHA512

                                                                        DisplayLanguageNames.en_GB_EURO.txt

                                                                        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
                                                                        • Size 33KB
                                                                        • SHA256 f39526ae6fbe24c71f5321e28581a175db9d9360d38947e385c5b291c2fb26af
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        GoogleUpdate.exe

                                                                        • Path C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
                                                                        • Size 149KB
                                                                        • SHA256 542294724926b0e156224b9ebd33e6354d79da4c828fb52f7f4233df45e3f624
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ad-selection-attestations.dat

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat
                                                                        • Size 584B
                                                                        • SHA256 da08a814a4d378fbab81da1fc14bf98ff0c05e4d68d3a723f551ee93dc56d624
                                                                        • MD5 SHA1 SHA512

                                                                        manifest.json

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json
                                                                        • Size 649B
                                                                        • SHA256 2e66580c1d6d47239e184d02ac9479132fdc0052cc93e4d7690a52e03c238b68
                                                                        • MD5 SHA1 SHA512

                                                                        Edge.dat

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Edge.dat
                                                                        • Size 12KB
                                                                        • SHA256 23ecf7dc69e0b028cbb8085ca4d066d6a7b08d4b96c9ff65dc778e32819c12a1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        EdgeWebView.dat

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\EdgeWebView.dat
                                                                        • Size 8KB
                                                                        • SHA256 d96dbcbbbdb74ce1d60cb7531bbf4e45c8ab9feddb62ed1a4078da98801abcbb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        external_extensions.json

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Extensions\external_extensions.json
                                                                        • Size 620B
                                                                        • SHA256 4ac4265fd62f5df1302ff44cb60ed6251de08b355ca783b5ec39be57826304c1
                                                                        • MD5 SHA1 SHA512

                                                                        manifest.json

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\manifest.json
                                                                        • Size 759B
                                                                        • SHA256 ffa5517499b65bb4a6909e9acc1a9bdb00b6b479e0fd7cd4f32bd5425a2c37c0
                                                                        • MD5 SHA1 SHA512

                                                                        preloaded_data.pb

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\MEIPreload\preloaded_data.pb
                                                                        • Size 8KB
                                                                        • SHA256 4e2afb87e458911a2be6099e303f2f803937942248763b6fa6fb78c370182af2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Advertising

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Advertising
                                                                        • Size 25KB
                                                                        • SHA256 d4b6e2f0c7ab8ac90c471dff245ded92f1d4cbc08b6599476188588ac74506d9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Analytics

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Analytics
                                                                        • Size 5KB
                                                                        • SHA256 45f6de5be0a57a7fba9a6ac76815bf11f93e69a5e21aa1f3f1e6f582ca71cb37
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        CompatExceptions

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions
                                                                        • Size 1KB
                                                                        • SHA256 21938109afa306ad9c2060b7df4d8e9f64367296da4ace6e8db3a931de6f0c33
                                                                        • MD5 SHA1 SHA512

                                                                        Content

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Content
                                                                        • Size 7KB
                                                                        • SHA256 37418d49691dd88da3dd41bc0ee786fa298ca415e646bfe5b1a399d864d0cc07
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Cryptomining

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining
                                                                        • Size 1KB
                                                                        • SHA256 02525797853900f289cab4e1dc274ec572fa7da53e24651ddddfd3be2fda3614
                                                                        • MD5 SHA1 SHA512

                                                                        Entities

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Entities
                                                                        • Size 69KB
                                                                        • SHA256 fd5009db747b60463b27987eb55823f9714c955afbebe6257afebe1bcf881ad2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Fingerprinting

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting
                                                                        • Size 2KB
                                                                        • SHA256 2e1cc050ba069fcacbd1cbd0eb0297b0575656a0187d2f24713af6872423d7cf
                                                                        • MD5 SHA1 SHA512

                                                                        LICENSE

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\LICENSE
                                                                        • Size 34KB
                                                                        • SHA256 856d27f65de3a3ce135c3b0af2d92af57493667e86b589730e834eeabe1ad6a8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Other

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Other
                                                                        • Size 555B
                                                                        • SHA256 92931801c5ca151fde710b939381e754878aed6f1ecf8239316f25f6a34b10f1
                                                                        • MD5 SHA1 SHA512

                                                                        Social

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Social
                                                                        • Size 876B
                                                                        • SHA256 d6adf217b59337e8ac54e3f28ea8a9132b909ead3802f76484fb7fac57f5ac11
                                                                        • MD5 SHA1 SHA512

                                                                        TransparentAdvertisers

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
                                                                        • Size 626B
                                                                        • SHA256 a8bb4cec544f92e7ad748db62196d5f358648f89144725c8c56e021355e47ad2
                                                                        • MD5 SHA1 SHA512

                                                                        Advertising

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
                                                                        • Size 2KB
                                                                        • SHA256 72eb933aff82d32aedfe0fec137ab6a24821a9422b7cce91371de7b831d3c11d
                                                                        • MD5 SHA1 SHA512

                                                                        Analytics

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
                                                                        • Size 953B
                                                                        • SHA256 49ef348bc948f02e2f603007249a11e9c2f3dbb6973c2c3190f2bb6b7ba3b31b
                                                                        • MD5 SHA1 SHA512

                                                                        Content

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Content
                                                                        • Size 569B
                                                                        • SHA256 f02c7498dcfd20da49e7c969c356ee67a8e1c4b0755facb0e98920b75297ec15
                                                                        • MD5 SHA1 SHA512

                                                                        Cryptomining

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
                                                                        • Size 553B
                                                                        • SHA256 9c4a908b82a438afb92138f498e5a32e5760d49439034e9fc47aa50f43545a09
                                                                        • MD5 SHA1 SHA512

                                                                        Entities

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Entities
                                                                        • Size 42KB
                                                                        • SHA256 9ae0ab68801f6048d7eca1ac0dbd61a5dcb4d58bfaed58771620b1e69ed1fd1b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Fingerprinting

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
                                                                        • Size 693B
                                                                        • SHA256 d555649b839c233f6882b4ca0b84ada5186f04723c63a694674c6db584c161eb
                                                                        • MD5 SHA1 SHA512

                                                                        LICENSE

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
                                                                        • Size 587B
                                                                        • SHA256 1978341c515ec60b4f7038a56da317d35ef389ab672a50d25420849522bc3d0c
                                                                        • MD5 SHA1 SHA512

                                                                        Other

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Other
                                                                        • Size 612B
                                                                        • SHA256 f950d4aa9259260224bcbff69a1f1a4ddfabde8a0a01db471b7b955e695900ac
                                                                        • MD5 SHA1 SHA512

                                                                        Social

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Social
                                                                        • Size 3KB
                                                                        • SHA256 e20613bc6a7a43a4a965c5aba246590f91659c0f576caf34c8886b250e124403
                                                                        • MD5 SHA1 SHA512

                                                                        Staging

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Staging
                                                                        • Size 16KB
                                                                        • SHA256 371cd80b969a435e90088b478fef8592325c7affc777271f128aa9dc73d1d251
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        manifest.json

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\manifest.json
                                                                        • Size 653B
                                                                        • SHA256 808d0554b67987d1791a287d13470a1dbcba5bf8421244a397365e5ee77e2b46
                                                                        • MD5 SHA1 SHA512

                                                                        Logo.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\Logo.png
                                                                        • Size 32KB
                                                                        • SHA256 3eeffc28f532845386a35b9363d3dfb19a46ec327f2cfb77ac60d5a4f298b642
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        LogoBeta.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\LogoBeta.png
                                                                        • Size 29KB
                                                                        • SHA256 c347a023f63903a6d833b704a84e3d52cc46c67af5993a0db4f6ba3475adde91
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        LogoCanary.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\LogoCanary.png
                                                                        • Size 30KB
                                                                        • SHA256 86075e3219a6a712f6f79c91b70ee41cb7700397f358f13bb2c4fac0afc3edbe
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        LogoDev.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\LogoDev.png
                                                                        • Size 29KB
                                                                        • SHA256 d8a4c6372684e8a22c1737425978a21623c75205fb43987c7bdd8348887a6b25
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        SmallLogo.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogo.png
                                                                        • Size 15KB
                                                                        • SHA256 3c3b75e5cc45c3db1f0c0543e44ac7eaeecda34a574ad4c274155b9a67c8440a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        SmallLogoBeta.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogoBeta.png
                                                                        • Size 15KB
                                                                        • SHA256 26b54fdb4bed959a8fe9c43f4ad7eb7fd67db03ca5f610328e8b0142164f5c3e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        SmallLogoCanary.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogoCanary.png
                                                                        • Size 15KB
                                                                        • SHA256 293e7398d68b35ef57226254f5b3a0ad4e63c02256a3ce4d3bb764fc42cbedbc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        SmallLogoDev.png

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\VisualElements\SmallLogoDev.png
                                                                        • Size 14KB
                                                                        • SHA256 a2cedf248d9d6005022a28673d79d361de13fd9b192eed2e7e133fd287f60d24
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        manifest.json

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\WidevineCdm\manifest.json
                                                                        • Size 1KB
                                                                        • SHA256 0660c3defb12117e8ce9c2ff061030fa92e86dc85c8c9215bba8a0fc8a4d20d2
                                                                        • MD5 SHA1 SHA512

                                                                        camera_mf_trace.wprp

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\edge_feedback\camera_mf_trace.wprp
                                                                        • Size 24KB
                                                                        • SHA256 811910ae2d3d8745c9da0ffcda697b78172d1d597d74a7374f6221f50550f8bb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mf_trace.wprp

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\edge_feedback\mf_trace.wprp
                                                                        • Size 12KB
                                                                        • SHA256 3d275fbf8cd63ef7b942ede4e28cc5766d88435306d88703595c5546943df57c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        resources.pri

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\resources.pri
                                                                        • Size 4KB
                                                                        • SHA256 87a81d47357a4d691ad4385a144c15a806969dcea985d38d71e9c2aa4208e238
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Internal.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Internal.msix
                                                                        • Size 57KB
                                                                        • SHA256 ac9185bda1bd1ccee9e4bf52ca954a3479e7192db4e1219ca5752a046a99c1c1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        vk_swiftshader_icd.json

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vk_swiftshader_icd.json
                                                                        • Size 627B
                                                                        • SHA256 8de1479ab837d180423ab73b96f1a3c3c875f5b5a83a1ad20966fa30936c4aef
                                                                        • MD5 SHA1 SHA512

                                                                        af.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\af.pak
                                                                        • Size 1010KB
                                                                        • SHA256 62965f60894c6bbf3c1176db91c660af760b34bcf5f50218b689b637cb7962f6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        am.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\am.pak
                                                                        • Size 1.4MB
                                                                        • SHA256 e681ba9b5f550c5ea387185370eecfff156244b0088f3273c9aba97858571318
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ar.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ar.pak
                                                                        • Size 1.5MB
                                                                        • SHA256 bdf1fa212685d7611f2a1cc811c90af620c28ed2598baba0e7361169767390d3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        as.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\as.pak
                                                                        • Size 2.1MB
                                                                        • SHA256 2fb1462f9f73485aab9823fef2f5852682c917be9b1e6f433ea53d51a71cd530
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        az.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\az.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 41f54e9c38fe534e82d371808c3d544ed212caf1c59226eeb2b93f12f848ad11
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        bg.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\bg.pak
                                                                        • Size 1.7MB
                                                                        • SHA256 f3532b687a7ecf8aac8eb27c273436680e940fab8e9d4631078e46c81f0a8df2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        bn-IN.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\bn-IN.pak
                                                                        • Size 2.2MB
                                                                        • SHA256 d0bc8b9db615e5fb17f0b85b5bc12d15cc7ed6907488aa3c779978b0bdb0fd17
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        bs.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\bs.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 fe59fd66712ae77b226ee2059511f94da4a7727e119c27842f910e5ef0b954cb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ca-Es-VALENCIA.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ca-Es-VALENCIA.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 58583c29d5773206fdb0e5085263976b2ee6749f3a85dd962c7afb8602361e11
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ca.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ca.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 60551ae30275d272d893a73af3b7b00ec3c3458e69a9f993f7cc462dd803c152
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cs.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\cs.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 d4aec48983060d38c427f3636db070a5a242f826c9d05075ed1ea7f738274ec3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cy.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\cy.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 cdd667c1987c728810907de4c2ded9be760dcd887d732a736d20649c706fb358
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        da.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\da.pak
                                                                        • Size 1008KB
                                                                        • SHA256 b002d7513abc89d475fa9e4aa7b039fe45466d2b1ff8f1ea25def0633af2514b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        de.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\de.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 fd28565c2ca4009f822d6fc6a4e57cc24478ed92c67c847ea2c4eab1ee6e067a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        el.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\el.pak
                                                                        • Size 1.9MB
                                                                        • SHA256 7d8b06479b38df42848c74c3882e30d7d152188bb2b7e2234cb7be22c1443104
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        en-GB.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\en-GB.pak
                                                                        • Size 921KB
                                                                        • SHA256 f6fc8d0899c07b798a0ff7b138f62b71c9db79a17fa5f6aed93faa260e5cdbc4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        en-US.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\en-US.pak
                                                                        • Size 905KB
                                                                        • SHA256 61d71224a56e2afdab280666b9e5d4f6176fbe52df7afe3222c05989d53f455d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        es-419.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\es-419.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 32cee36f2f55137a3d1443825ede63fc704abbfd4fd1722ff8130089f9f05941
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        es.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\es.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 51df604d62bce0fb399bb8833e14438131876a667c777ea0dc641e929a1144c5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        et.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\et.pak
                                                                        • Size 997KB
                                                                        • SHA256 966808fa6df5e106f9435fbee56fa1aee386203948dd090a83adb520e981a46c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        eu.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\eu.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 cc111eae2d526515f2cb82cf50cd8ba08e495699525fd0bff68db68e9acd1b70
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fa.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fa.pak
                                                                        • Size 1.5MB
                                                                        • SHA256 f0237faa7b9223176c43dc2ad09ecfa7aa32ca9a5c94707ea3ebedf69c47403a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fi.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fi.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 b0812dcdbe26eefabc44dcffc541a9a8d0797771a9214ef45db92efe52822700
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fil.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fil.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 fd471a698266263e2536b917ed125d658a9cb4d94ec26a85c45413db71872a62
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fr-CA.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fr-CA.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 c4d16d687f55f95ba07fe0a7348eb1d81fe01a8ecccb250fc34335816437dcf7
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fr.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\fr.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 006317736d96d1ffb94a2d2eb7cea771fdce4f18c328f4d2b7e3fc4b13052d15
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ga.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ga.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 dd48502f73403061223f70b991e709bd69fdce94561f7182922b3d375141f1a4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gd.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\gd.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 7d2661c9ab8019bb16b11605679dde62f896086750c7cf1d7bb167d6fc9510e5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gl.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\gl.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 c03eb5705274059d7e242c5bf1007b966bc90d3d58fd53d973382a60de6b86c7
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gu.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\gu.pak
                                                                        • Size 2.1MB
                                                                        • SHA256 0966576c0657f7d4a94287698eee0929a8a02883389fa00463eeb6e05a4096cd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        he.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\he.pak
                                                                        • Size 1.3MB
                                                                        • SHA256 e01fd9da523233d5a7ed5c6f781c345cd6f5e6d564576148faa0e2a2f2f15588
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hi.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\hi.pak
                                                                        • Size 2.1MB
                                                                        • SHA256 5cbcd55300c2ec1b376ea87dd9a374425d7e0bc769ca60f081f45798b8bd74bf
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hr.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\hr.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 fd405abb10a16de5048096637e851b49b7828f26e9301b35139e901269446c1d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hu.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\hu.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 4eddde4af3a3eabd4b3d6c05cc3b00ba3a44b1beaf27a08fbf1423d565576e9c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        id.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\id.pak
                                                                        • Size 989KB
                                                                        • SHA256 1a75976a7c2a528384b651f15a2ae3d83603f508ea3ea1dee693c42618c3431d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        is.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\is.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 595cc0f6419474ee35aeff62beaa70b2e803951e2d3223a73f85a3c17d75bf3e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        it.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\it.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 f63012debeda8421f0af980bc4f8ebe1af2f4bfb6cfed94fe7c7c53f47475cbe
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ja.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ja.pak
                                                                        • Size 1.3MB
                                                                        • SHA256 5cc3d6daed491ba90e19f55aa66395a93885e15689842d8ded1939d6cece08d1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ka.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ka.pak
                                                                        • Size 2.3MB
                                                                        • SHA256 a144c8bc82730d5d6bc7e276ac35a94d9411364d12ff10422dc1c499c04ed99f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kk.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\kk.pak
                                                                        • Size 1.7MB
                                                                        • SHA256 9f35ac52014a5c8b3c8bd2b38917c0e81672476180c4d0e2cd6064e7be16545b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        km.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\km.pak
                                                                        • Size 2.3MB
                                                                        • SHA256 b635e9aeff8221d8f6997f22ba58b17bc1bf3798854d5534d8db3acea736788b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kn.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\kn.pak
                                                                        • Size 2.3MB
                                                                        • SHA256 6cbafd0c9582bd2f0fe4d0ff8411e0def03f4a0034f13059a5981161fa467cc4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ko.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ko.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 d236b2bd44f3ab6f7e7e993a78f4595c3628d9bbcdbd435e8bce458dde5081d4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kok.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\kok.pak
                                                                        • Size 2.0MB
                                                                        • SHA256 a2b695abab458ca5857c2a16e886ff973a299a56676c0e3ce0d8ed1fc51a7f7f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lb.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lb.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 2297788f25e9bdd5758533088af6cdbf79dec2716fc80d5ced6df3a21fdc8cf3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lo.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lo.pak
                                                                        • Size 2.0MB
                                                                        • SHA256 1138b43125fdab7dd805d0837fbb85221879979ad4f5edbba789c063ba30119e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lt.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lt.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 64c0113e2ccfce20c2ce7bf7270e8848b1867626a7416c519922c77cd40abb8a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lv.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\lv.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 f3ecd9ad01638475b17fc8f6c25a4d55f4d6ca38c67540d0710f2fd290d5bb85
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mi.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mi.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 3e46dc2408406ea3010aeac0ff990ba56ce7b0190414a95ec1323a2e6e4bb248
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mk.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mk.pak
                                                                        • Size 1.7MB
                                                                        • SHA256 6116fb1359298b221137b445c4534762d933abcb312509ed0d119317d46ec501
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ml.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ml.pak
                                                                        • Size 2.6MB
                                                                        • SHA256 c353179eff0ec9cd437153bd8ed0fccf4bcec3f3f0aaf3b083cba16b10b20c22
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mr.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mr.pak
                                                                        • Size 2.1MB
                                                                        • SHA256 188fb3a9a3842ee12db1322c1f0a76496d19b53117d24eef75d84f20c20e795b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ms.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ms.pak
                                                                        • Size 1018KB
                                                                        • SHA256 bf20e9dcfec3ddf32a0cff9e6968de6085868012f85c0826794fe498f7fa43f3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mt.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\mt.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 f9e1d58dd90ee87edd73d388eca06602137cf1996c1f023cdfaacc0a6b835044
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nb.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\nb.pak
                                                                        • Size 983KB
                                                                        • SHA256 348e9f527c0b459b117e4c746068f19a6dff65c0e9e7e5f437857a629766b735
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ne.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ne.pak
                                                                        • Size 2.2MB
                                                                        • SHA256 94832d96bc1e2198b5aab1b62111271c90067b5d36c2fdee12279f22d9c9c481
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nl.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\nl.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 4e2b5b8d61c16f0db52eb2f8f293e5a17db58a0583c14817eb550c4184b082ab
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nn.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\nn.pak
                                                                        • Size 986KB
                                                                        • SHA256 dc1b3b1edf5bad5d7f33494b0b372acbfb6019769da85da7ac86d89a088f224a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        or.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\or.pak
                                                                        • Size 2.3MB
                                                                        • SHA256 5e093c3290aa99aa22babf9e9f497d91506997c27dd96c4fbdad73062bbc9c7a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pa.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pa.pak
                                                                        • Size 2.1MB
                                                                        • SHA256 4c8e5768ff275e3b30acb49eed0d5a3e4f18c8a65db72776aaeb30f13085477c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pl.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pl.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 9e75619958cad5160d917aec6aed7d7582fe67375843d91ace84e214304cffbd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pt-BR.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pt-BR.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 83ef767b80f3a71583a91d9bc0ecd9267e0f80d7f08157bab993628110312975
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pt-PT.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\pt-PT.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 79485a2653c84fda1757ecd699f56ff345ef55eb2fe4274088e6fdeb598a5b9d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        qu.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\qu.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 ad73b8465f439c638c57ebf9a0d99e229bcdcc28de879c7af52565425b6f2fdc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ro.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ro.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 6f5a3174d65a8556ef9250404f9d47d93344f22345c1227e8601e651668c68fc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ru.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ru.pak
                                                                        • Size 1.7MB
                                                                        • SHA256 afe059958aedb765fa4cc173c95f65b0d9b792632bb42fcf8889d1540615cb33
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sk.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sk.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 20ff4d08222cb82b9e2ac58c57806ebed2fa4c6b9d859423c70203253bc15da9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sl.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sl.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 2b48869c41fbebe2c91e06f971b9472dacf4aff5e5e400777a9ff278386f6e0e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sq.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sq.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 43832975d19201f638e3d6ce5d6b69caca34c5a3f041661079581ef06945fc3b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sr-Cyrl-BA.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sr-Cyrl-BA.pak
                                                                        • Size 1.6MB
                                                                        • SHA256 f4ef7873340a9d3301e9ce62c7cb95e542c8313d34cfb51c530d08c94c4bb388
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sr-Latn-RS.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sr-Latn-RS.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 a23bfc03375dda2afa293c547f574140bef149f15ad748cf97694813e4e0ed63
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sr.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sr.pak
                                                                        • Size 1.6MB
                                                                        • SHA256 510251299b3cff6a9939b5acfc148fdc94a45adf34d74f6f483ad3d3d079eb1c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sv.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\sv.pak
                                                                        • Size 1008KB
                                                                        • SHA256 b1f67309bd2486600941069f0c0d9d2eb984856d01c3e4a493e907017cb40dde
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ta.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ta.pak
                                                                        • Size 2.6MB
                                                                        • SHA256 48ae8e1ff1ff3863333b4b8f9d807bb3a3c463fc160ec0b6cc77cba14d943231
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        te.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\te.pak
                                                                        • Size 2.3MB
                                                                        • SHA256 7d0b239c199c22743303c2dddb576f6faccff1aa4fc12fdcb0f9be6f0b87f5cd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        th.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\th.pak
                                                                        • Size 2.0MB
                                                                        • SHA256 e3b93297eaffda4aa0c5556387d6f6f426533f57f29b1391885d0dc5540fff71
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tr.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\tr.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 67da8aa0e51b1e3171004beb6ec0ea4ca824aa6e653dc56d7672fba8b9525c5c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tt.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\tt.pak
                                                                        • Size 1.6MB
                                                                        • SHA256 2a1202e6e3a68ab10446d6cfed06feaf41b28c2f68452eb0a355e6e4b8e7a18f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ug.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ug.pak
                                                                        • Size 1.6MB
                                                                        • SHA256 c9712dee981231e2f95e622331c5a4e5bc727b7cb9d7d23fee2f4898e60fe52e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        uk.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\uk.pak
                                                                        • Size 1.7MB
                                                                        • SHA256 ab3fe9f115cd72500e91a352af53dd6c88c6b8ff1f3444a9710b84fe733126c9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ur.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\ur.pak
                                                                        • Size 1.5MB
                                                                        • SHA256 d22967f0c2eda7bdf33ad0633949da8d11b745610bee7187a57a4fd4ce910817
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        vi.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\vi.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 b0a223794b823d437aed01867bd64cc627cfb5e1c1ce7f5bd228c87beb6f66f1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zh-CN.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\zh-CN.pak
                                                                        • Size 866KB
                                                                        • SHA256 c369e8e0b99974f37abdea5148dba60e54e7fbf3c77bb300ba3d51dcc4bbd5cb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zh-TW.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\Locales\zh-TW.pak
                                                                        • Size 893KB
                                                                        • SHA256 f2727d4078425a3679a612a85d8671024b87180b0eb47a89d84439dff357567a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        widevinecdm.dll.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
                                                                        • Size 1KB
                                                                        • SHA256 56b011833416899951f2a74b50edc0c70d7aa8c06103106ab010baf857ad5e77
                                                                        • MD5 SHA1 SHA512

                                                                        EdgeGameAssist.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\edge_game_assist\EdgeGameAssist.msix
                                                                        • Size 1011KB
                                                                        • SHA256 e4fa61d16cd6c1f4451e5d0b8dee7761a4f7ab521646a0528eb80d3a249f16f9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        VERSION

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\edge_game_assist\VERSION
                                                                        • Size 531B
                                                                        • SHA256 4e10adb47b6e90ae614f1579eed87381290cf87d28cc24109e55d4c0023b3d0a
                                                                        • MD5 SHA1 SHA512

                                                                        icudtl.dat

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\icudtl.dat
                                                                        • Size 11.4MB
                                                                        • SHA256 d64b9c7d4559f07b1d749f085731018a9443c3ade2ccc0b6a3ee8d755f54c622
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        beta.identity_helper.exe.manifest

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\beta.identity_helper.exe.manifest
                                                                        • Size 1KB
                                                                        • SHA256 779790dc39df5c7a860d29a4ae20135625a946016b71ca6a06a7770db0885c65
                                                                        • MD5 SHA1 SHA512

                                                                        canary.identity_helper.exe.manifest

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\canary.identity_helper.exe.manifest
                                                                        • Size 1KB
                                                                        • SHA256 6ad1aa6d4286ca4521d6404edc2473cdafad9d67dc90adf23767d2dc633ecaea
                                                                        • MD5 SHA1 SHA512

                                                                        dev.identity_helper.exe.manifest.ragnar_B6B3FA01

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\dev.identity_helper.exe.manifest.ragnar_B6B3FA01
                                                                        • Size 1KB
                                                                        • SHA256 be9fef3a696842eb026f1ec1a6d40078b7a74dea430289cd1d52751f9160f790
                                                                        • MD5 SHA1 SHA512

                                                                        internal.identity_helper.exe.manifest

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\internal.identity_helper.exe.manifest
                                                                        • Size 1KB
                                                                        • SHA256 79f1ff53de8be1f26be2f1abaa7fc66acef0b28a4830e0022b05c28aa16a9083
                                                                        • MD5 SHA1 SHA512

                                                                        identity_helper.Sparse.Canary.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\win10\identity_helper.Sparse.Canary.msix
                                                                        • Size 54KB
                                                                        • SHA256 4c11ee3f353b059bcf2a1b9da54ef94d6d5ccf8b2a2e1a63e916cd1ab9cce336
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Canary.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\identity_proxy\win11\identity_helper.Sparse.Canary.msix
                                                                        • Size 54KB
                                                                        • SHA256 885aa0710432f2f065c44e00478e130919eb52bf9f402923ad2632df3e638e0a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msedge.dll.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge.dll.sig
                                                                        • Size 1KB
                                                                        • SHA256 9231cf765340e466dd66edd871880c8eb84da6902ae27863aa5f35b461f59aa2
                                                                        • MD5 SHA1 SHA512

                                                                        msedge.exe.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge.exe.sig
                                                                        • Size 1KB
                                                                        • SHA256 9669949dc4880b8e9da74c4032b3c40625df753aa2c149fb3f9bef9f412e60c1
                                                                        • MD5 SHA1 SHA512

                                                                        msedge_100_percent.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge_100_percent.pak
                                                                        • Size 1.5MB
                                                                        • SHA256 96793ce274c591a5f59225f3ee47c0dcd9da1168a2dcc9172d3ffc96116bdc51
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msedge_200_percent.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedge_200_percent.pak
                                                                        • Size 2.0MB
                                                                        • SHA256 5929cd155ee59f86b9c26bb9041b9ebfdbb2e6d152f3d24117113b1dc5e60ad2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msedgewebview2.exe.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\msedgewebview2.exe.sig
                                                                        • Size 1KB
                                                                        • SHA256 e88ef003572f53e3ff69f405b232787da09a75a7a436e2f9dd7a1fd80e756a8b
                                                                        • MD5 SHA1 SHA512

                                                                        resources.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\resources.pak
                                                                        • Size 26.2MB
                                                                        • SHA256 c0fe33fa28199187d5611fa5cc7eed9ec5b9bd672705c983f783611f6741fb94
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        show_third_party_software_licenses.bat

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\show_third_party_software_licenses.bat
                                                                        • Size 791B
                                                                        • SHA256 9db4ea2e1fcaa79093eaca63908a505442cbefd4d0ba7f922803dc16172d51e6
                                                                        • MD5 SHA1 SHA512

                                                                        v8_context_snapshot.bin

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeCore\133.0.3065.69\v8_context_snapshot.bin
                                                                        • Size 707KB
                                                                        • SHA256 39342c5656e744eb04ee4a6a85ea35a651618a34cf0a42aa1910c49e526e4b65
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        af.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\af.pak.DATA
                                                                        • Size 1003KB
                                                                        • SHA256 57c2d3430358e2d9a4737b950750f1a5f8e7112226a50f55dba90fb801bbb965
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        am.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\am.pak.DATA
                                                                        • Size 1.4MB
                                                                        • SHA256 e36473c50089ee894fde42ce842f70b050ce2ea0f5ce461099a639a5cb45fa4b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ar.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ar.pak.DATA
                                                                        • Size 1.5MB
                                                                        • SHA256 04edc0d3d6b344580400fd73a34475a4762a747ef1ef78c2ac9a49cb4a881920
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        as.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\as.pak.DATA
                                                                        • Size 2.1MB
                                                                        • SHA256 edd4bf3594ef36832ed87d1003165a6dbf9b5d3975b8b542661497d683092168
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        az.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\az.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 3cfbaa88fc95c6ab4ec665c36303e31ed1cf2210846342fb390bc45025f2e481
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        bg.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bg.pak.DATA
                                                                        • Size 1.7MB
                                                                        • SHA256 828e66512048d0cde08fcdc3e5c63555efcf4fed06a2ec3f50a536a7b789680c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        bn-IN.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bn-IN.pak.DATA
                                                                        • Size 2.2MB
                                                                        • SHA256 8a94ce4f5d3a418ad089bdf0cc8eb71e58cac0a310b1e7e48e2cd60e809d26d3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        bs.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 1c7bec9a9885fc4faef924cbc83a86de9790e79bdeb27c33a428a593b54a4361
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ca-Es-VALENCIA.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 0d0b86f8350c1f40a7812ffc5661b0e2b35c549cff23479cec78a95e62d7d3bc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ca.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 dad9f222f21899b0c572a884cbbecb5e820d6c940cf6eae15e4bb4acb4fff995
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cs.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cs.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 6bedc6937d2de000df6d43f41f91cf28113e1f9881f01b81987a4183ad15953a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cy.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cy.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 4478591f9978c9c20ac110932b3bd98e086b14fa84bb7a82881fc9de6468f835
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        da.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\da.pak.DATA
                                                                        • Size 1002KB
                                                                        • SHA256 b6a84ef3300237a32f36a024f0fc13b426a1ca5256e75011b8904f8ff6d16994
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        de.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\de.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 e4478f5c7899020c2695114bef89cce3ac8dafccac0a01c48eeaf6cc93791a1c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        el.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\el.pak.DATA
                                                                        • Size 1.9MB
                                                                        • SHA256 ce4a5d924c83b314a20bfe474b01d026473f01295333303b1292d45fa42dbfd5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        en-GB.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-GB.pak.DATA
                                                                        • Size 914KB
                                                                        • SHA256 182a23be6d958a45ca006d655690954d44e47b31e6513fe71ac06660d4a77cb8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        en-US.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-US.pak.DATA
                                                                        • Size 901KB
                                                                        • SHA256 d433e85139f3e1e6da6048ebd2d31edd53fd93bd8c0de31d05535327be9c0969
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        es-419.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es-419.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 1dc8baebafc12d51f6c05f6fe7af5437ba6e5318600893d4a70e3ca167c24254
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        es.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 ef0ca34b89d4e298678d1bb1dcedfebc2a0a1262c7a4340fddb8e948a7bbf0d1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        et.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\et.pak.DATA
                                                                        • Size 990KB
                                                                        • SHA256 10064cd008bd83033a73047e32d9c6ab5ef94be815917b3af0087ca4a0114f42
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        eu.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\eu.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 3ecb9a076f81682b868f8be5b4695c6e599c16e9952c8d56eea25d1401a90561
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fa.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fa.pak.DATA
                                                                        • Size 1.5MB
                                                                        • SHA256 9a6da836b1367bacf5563cc84567dc2948fe313752b2c2965f2bce5e9b3a7e92
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fi.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fi.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 d6c324df1311f798a3687a60d4ab5c23fb690b1a8e7d41dadb555bd9c7a98730
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fil.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fil.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 05559f79a64aceaccf5ac8b35e60191c5429868107ede2fa59e88cdcc30c14db
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fr-CA.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr-CA.pak.DATA
                                                                        • Size 1.2MB
                                                                        • SHA256 b3c6880877a7dd9cb6b0216351a1f4397acab1cad7a3deef4a63fca1ba7394c8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        fr.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr.pak.DATA
                                                                        • Size 1.2MB
                                                                        • SHA256 6ab58e97cc74c60041388b04d2ce53327ea034f264f404a3439210aaabdbfebe
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ga.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ga.pak.DATA
                                                                        • Size 1.2MB
                                                                        • SHA256 9811e356d0074ff82aeaf3f28dbc071da56d88ebede0db99fa91b1ecb84df6c7
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gd.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gd.pak.DATA
                                                                        • Size 1.2MB
                                                                        • SHA256 99cb361520e0796f80ee598ba3653deb36de9d777de2745ee76f552c8f48fd61
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gl.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gl.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 8ed9cc43c15441e730a836a5b6fdb9cd5317bab879719e69ed77c74b642250b1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gu.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gu.pak.DATA
                                                                        • Size 2.1MB
                                                                        • SHA256 1e83f15c56de15b78d6ad295ba52c1f12bbd5f54ddb9b289d8ebf7d8d45542b6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        he.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\he.pak.DATA
                                                                        • Size 1.3MB
                                                                        • SHA256 63c6559a284b8a1c19f1a894f9855806ff132f403d7651309921545cc54842cf
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hi.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hi.pak.DATA
                                                                        • Size 2.1MB
                                                                        • SHA256 0512ad8adca287165401aa0cce7075bf12b7e9448618b5eda0f3202e5e269efc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hr.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hr.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 6e885930a84eaf88bee4e4b960673723415b6b205a03d274a2fd2e0c09085a0f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hu.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hu.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 130b455b030c6f65bd65075758a7ef1ccae425210892e38eee8f37e3d5ae4256
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        id.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\id.pak.DATA
                                                                        • Size 983KB
                                                                        • SHA256 d8978b621f324a25d29db19dda7d804ce7c52369719888032522f67a6565bdff
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        is.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\is.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 d86b20fee291971a87709c2bf7c582991c9f82dff35b25302b15fbc1ef580882
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        it.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 e0fd6c9d4ea726ffa0af5ea55022ce5278ee8754e466db021b266e9b250487f9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ja.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ja.pak.DATA
                                                                        • Size 1.2MB
                                                                        • SHA256 67688ddfaac7232294b3f7eb6a65aad13c0ef9560650c06d24c6e5e8982a38d9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ka.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ka.pak.DATA
                                                                        • Size 2.3MB
                                                                        • SHA256 b8649091f46f10d28743213e70cd2fc4d034a0813207e6d2d94805588bea9bdf
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kk.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kk.pak.DATA
                                                                        • Size 1.7MB
                                                                        • SHA256 3b036b751d652a9965fb47023e31e192c33dd29350208706a15654514beab7c8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        km.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\km.pak.DATA
                                                                        • Size 2.3MB
                                                                        • SHA256 110d7a6d83a460b7a1321e7526822fe5e1fbdef7552b286bb5ef568482965a0a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kn.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kn.pak.DATA
                                                                        • Size 2.3MB
                                                                        • SHA256 8e75d979f67e7076d442f545576bac4a5f435c7f0bdd085b0d96bd039e3aa94d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ko.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ko.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 65d062c1b8b5204feca390c93da60cf4fe117ced86405f65e54c0c22aae94a8d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kok.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kok.pak.DATA
                                                                        • Size 2.0MB
                                                                        • SHA256 42d79585bea72dd6a39038322fa3ec80819883f1034bf7b11177c91c85ed0fcd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lb.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lb.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 7e02d5515a2d6b1e494c8212a595083733574da3c0bc8a97ea2e42bb2afe777f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lo.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA
                                                                        • Size 2.0MB
                                                                        • SHA256 9e6f95977e2f9f9cc95fa3ac9e80a4c00b42a30ba6c787a866fb72562052a727
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lt.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lt.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 3d0fe892b2aa32d8dda4831209bf63df42b5d682ab593a775e36928369037a3f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lv.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lv.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 d3f8acd49583faaed9385b7bedf7358769078a61b55f7369ef7790f33d63236f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mi.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mi.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 bfa171ac72cb531bb44b227248384d8c94ff095f5a7b07efb842e7cb60663ba9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mk.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mk.pak.DATA
                                                                        • Size 1.7MB
                                                                        • SHA256 6e5e59e68d79750fce33831c4ad280bd846fd004c6f07b95d061154d1c4c57ab
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ml.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ml.pak.DATA
                                                                        • Size 2.5MB
                                                                        • SHA256 722a7891ba01fb87b525737f7c05d3e68b8c806d5a7eef3575fac166b6bb8405
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mr.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
                                                                        • Size 2.1MB
                                                                        • SHA256 df67b3ec642abc72f1fec8601b099220413d2671c50848bb721b2dce16b23d7f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ms.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ms.pak.DATA
                                                                        • Size 1012KB
                                                                        • SHA256 f456c6c2ee55c286ac7fcdac3fd4d62c161de2fbcebaa92b8a55e9a2a5987055
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mt.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mt.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 c6f2c0e95213982e089021aa30bfd6d24ab7bb9a2a043c9f1fac0a29c9821cb2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nb.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nb.pak.DATA
                                                                        • Size 975KB
                                                                        • SHA256 02f6682f30e98cd6646fe0ae15c54da8a52f64efa90abf503b11a1ebb8485e19
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ne.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ne.pak.DATA
                                                                        • Size 2.2MB
                                                                        • SHA256 a9a1061bc3aaca25bac1629356d8da338f36785a7248884b3c2a9496f6a74e94
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nl.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nl.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 2f3aa1d4a57251291fb96982ad68b5ff092db9bd881cac8081fbf07c043b9a6c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        nn.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nn.pak.DATA
                                                                        • Size 979KB
                                                                        • SHA256 55ef6b39b16debb364c2c3e00f821d0bb27e52e71a7ddb9b3aca44ac7c7dca3c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        or.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
                                                                        • Size 2.3MB
                                                                        • SHA256 de1bb85d43ba843fae20e4799331cc3649d9014215f36f65b869285713f0160a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pa.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
                                                                        • Size 2.1MB
                                                                        • SHA256 70a154cb7cc41b8a901c950f6fefb53ea502b2f325786fc90ffefb37b73179ec
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pl.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 2ddeb8d882307a7a1da19a65731fb32710c6ad861c5779947d42ba9cc58acc5c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pt-BR.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 a70f4ab4e57788e0d2b5295f433c43cb5ce258fde0d04f8e65fffe6bc4e382a8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pt-PT.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 7ca8295d7e7c1632c9d707e1506f25386f50dbe23b89721237218e4388b5690b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        qu.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 ae684e6874cddeac4ec20680dae758296a413a4cd8359731fddbacac0f7d248e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ro.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 53dbf6c700b2d1fa950dd334101721593249b87b8d3da7c44c14c790dbc26d42
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ru.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
                                                                        • Size 1.7MB
                                                                        • SHA256 97c337534920234d8f046a9e37289cd07f21570bcc01e52bc6dc47ba8e3bb3d3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sk.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 466be210dabb6be72b185661bad1f2b66c48c1b90a50b2cb093b74090b1104b0
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sl.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 1b35276b28dc956deba295f2147c5c480ca7b9563e525c584abd376219500d2d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sq.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
                                                                        • Size 1.1MB
                                                                        • SHA256 ffc27be211650270b3d32cf9cbce85d253036739800a530af09969344bf79de2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sr-Cyrl-BA.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
                                                                        • Size 1.6MB
                                                                        • SHA256 0951f1da3077932af896407e682cb14a77be55fd62b3974844a229210d93e104
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sr-Latn-RS.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 9114fd7ef7d9f19d2c269e9b19bb2cf68aaad10adedf33d6295a7d8fc4680b97
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sr.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
                                                                        • Size 1.6MB
                                                                        • SHA256 efef3d8db930ea0a92bfd42035544b101a978ef56d3f76d9cf190fa3ea123edc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sv.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sv.pak.DATA
                                                                        • Size 1000KB
                                                                        • SHA256 1f4fdcf162f65ea275a2423e001b51e71b038cd106adb8c975686209ff348747
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ta.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ta.pak.DATA
                                                                        • Size 2.5MB
                                                                        • SHA256 c66effc31e130806d5350ef4fba25967bd4dd88a7d75622a837e0c820bb87fb3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        te.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
                                                                        • Size 2.3MB
                                                                        • SHA256 e37b314e16f1289d86468b099f9b1e101cd5fcecee39cea28a52ace6355a1211
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        th.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
                                                                        • Size 2.0MB
                                                                        • SHA256 20cb5e827aed0e69ab1b74cf7fa24215fc0718bc9c51c53770be88e58a46dac3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tr.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
                                                                        • Size 1.0MB
                                                                        • SHA256 7cbb9e5eabe14247ba2e732b88e315b80aa0e44bc66673363b061dfb4c2ff8fc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tt.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
                                                                        • Size 1.6MB
                                                                        • SHA256 960baf73c56fb5329f53c65c5a9c30c83d1e32b429069475ae9664bceaa7b368
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ug.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA
                                                                        • Size 1.6MB
                                                                        • SHA256 0a7f4fcb272231c10e5e3089d6458ca9d35782a5eb2d9e7f0fca3bbd4124e279
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        uk.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
                                                                        • Size 1.7MB
                                                                        • SHA256 b3c7b32231bf65dcd906b77f259442a1d0cd8e03d33be3455ee4f621efd8b569
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ur.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
                                                                        • Size 1.5MB
                                                                        • SHA256 e0a5915116abed226c4beb1bad70d8b2d7af83817b29284ff6fe9f29f4fdba0d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        vi.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
                                                                        • Size 1.2MB
                                                                        • SHA256 09c4811748240cb69a1644f4ec3f3a83238c3cba227f373c0109bf3a93014894
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zh-CN.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-CN.pak.DATA
                                                                        • Size 860KB
                                                                        • SHA256 4df4a5f45eb0f4585e14f08ef1d95fc855dc69396e623d53183449bdbfc19f35
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zh-TW.pak.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-TW.pak.DATA
                                                                        • Size 886KB
                                                                        • SHA256 c960fb8fe3966cfb7f955cd7744e1d17a5607d92690f7d19d5033afe98bd66d6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        EdgeGameAssist.msix.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\EdgeGameAssist.msix.DATA
                                                                        • Size 1011KB
                                                                        • SHA256 2e2b3e86c0f59c4b4a7969a936ac62c762947770cabd39e4bcba2702ba11b85e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        VERSION.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\VERSION.DATA
                                                                        • Size 531B
                                                                        • SHA256 22c63aa2e970ef0c79d21f30518de0b9b98e5d7238be35eded9f3da5f8226b7d
                                                                        • MD5 SHA1 SHA512

                                                                        widevinecdm.dll.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
                                                                        • Size 1KB
                                                                        • SHA256 c8a9000b545e35ae6f4576f7f2f1ac6c2cd182e5ad885beb249df59c755a0222
                                                                        • MD5 SHA1 SHA512

                                                                        icudtl.dat

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\icudtl.dat
                                                                        • Size 11.4MB
                                                                        • SHA256 6a14dcc03d1bd99e7222293d7b74dfb58565acfe3c5f356f575aed522a2f71f5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Beta.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Beta.msix
                                                                        • Size 54KB
                                                                        • SHA256 f7de28d50159206c555c2229924a19b275628c2fb1241e974e60904561ed5065
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Canary.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Canary.msix
                                                                        • Size 54KB
                                                                        • SHA256 e837732f23e55cc806d86ec300b966d0bfdda81eae90186164fdb2a2f3d112e6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Dev.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Dev.msix
                                                                        • Size 53KB
                                                                        • SHA256 c96f95aa854eade82320749179fecc4bcfdbd901ff35c2f849e2eeaa51f2d151
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msedge.dll.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge.dll.sig
                                                                        • Size 1KB
                                                                        • SHA256 6900e05dedd337fde5030dc4fd29fb07c1bdcacb9f9cea3337d4a0c4c2f3b0a1
                                                                        • MD5 SHA1 SHA512

                                                                        msedge.exe.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge.exe.sig
                                                                        • Size 1KB
                                                                        • SHA256 b0fa07c6e1ebbf4fa78f2f3c0532eb8fd32b9c142f140b2b0df711297235d73b
                                                                        • MD5 SHA1 SHA512

                                                                        msedge_100_percent.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge_100_percent.pak
                                                                        • Size 1.5MB
                                                                        • SHA256 987c08f18fdc7b624e51d987e73ee631d7d861bb68694194395ff4bbdec9ca79
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msedge_200_percent.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedge_200_percent.pak
                                                                        • Size 2.1MB
                                                                        • SHA256 00a108fa88a0e1e51642b01660262f6e1cbe2d539909533d2993397a3b0a915b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msedgewebview2.exe.sig

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe.sig
                                                                        • Size 1KB
                                                                        • SHA256 8b49e5c73a94f9f05439fa64b7d87f2fbcf750c37ba2b5aadae3c06ad7f2df37
                                                                        • MD5 SHA1 SHA512

                                                                        resources.pak

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\resources.pak
                                                                        • Size 26.1MB
                                                                        • SHA256 a9bcefdc77db73ddb3d042d294fe7c55c6a6511e8c8942e9e7637b6782cb4575
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        v8_context_snapshot.bin

                                                                        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\v8_context_snapshot.bin
                                                                        • Size 691KB
                                                                        • SHA256 7d9a140e674a93a48918c8bd92ea9733c75cb2a09cdcf41cad13d9b035bff36e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Beta.msix.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Beta.msix.DATA
                                                                        • Size 54KB
                                                                        • SHA256 950641949fe33281fee18e412f4a65c79236f6dc7a219eebf3aede1c9d7d8598
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Dev.msix.DATA

                                                                        • Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Dev.msix.DATA
                                                                        • Size 53KB
                                                                        • SHA256 691eb7bf555a286913f74ee888c0b90eb0d348f2b9cbc844ef0da2cf51bbd8aa
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        identity_helper.Sparse.Internal.msix

                                                                        • Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_proxy\win11\identity_helper.Sparse.Internal.msix
                                                                        • Size 57KB
                                                                        • SHA256 4cbdf094441f2ff7efffbb898758e70be4296027a23c8bdbb29176ab432e7591
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        notification_helper.exe.manifest

                                                                        • Path C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\notification_helper.exe.manifest
                                                                        • Size 1KB
                                                                        • SHA256 eaedacd00d79eb13077d0300279eb2a2cc65ad299b7d2e1d2c0fe96b60af010c
                                                                        • MD5 SHA1 SHA512

                                                                        delegatedWebFeatures.sccd

                                                                        • Path C:\Program Files (x86)\Microsoft\Edge\Application\delegatedWebFeatures.sccd
                                                                        • Size 18KB
                                                                        • SHA256 9fbe0d3b9715df0770e50dc99512b078bcb1b67c34b412af16d5205e2ab22d8f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\de-DE\MSFT_PackageManagement.schema.mfl
                                                                        • Size 2KB
                                                                        • SHA256 6eba2fea81d163bb64d44fbc9c44086f8855c6897b3025b4058103e70aedc524
                                                                        • MD5 SHA1 SHA512

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\en-US\MSFT_PackageManagement.schema.mfl
                                                                        • Size 2KB
                                                                        • SHA256 e99136d522a7a610ad616e58dae3714ba7bd91be77acc48d1f08a56509a7ca27
                                                                        • MD5 SHA1 SHA512

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\es-ES\MSFT_PackageManagement.schema.mfl
                                                                        • Size 2KB
                                                                        • SHA256 9fe45d545a31a4034ce4cdfbab14e721e0eb976b50b25bc78217c1f27963a797
                                                                        • MD5 SHA1 SHA512

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\fr-FR\MSFT_PackageManagement.schema.mfl
                                                                        • Size 2KB
                                                                        • SHA256 2ffcccf1730e8ec87fe2bc6cef574934d7577aea6a6403bc65cf2e62c5e535e0
                                                                        • MD5 SHA1 SHA512

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\it-IT\MSFT_PackageManagement.schema.mfl
                                                                        • Size 2KB
                                                                        • SHA256 2d84db7f6e1797f5ad939e32858ab388bfef21a255dc582ff3b1314f08fa4d8e
                                                                        • MD5 SHA1 SHA512

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\ja-JP\MSFT_PackageManagement.schema.mfl
                                                                        • Size 1KB
                                                                        • SHA256 a2dca614624f5b23521878977191cc8c5415c4a17871b796461801621fdf4482
                                                                        • MD5 SHA1 SHA512

                                                                        MSFT_PackageManagement.schema.mfl

                                                                        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\uk-UA\MSFT_PackageManagement.schema.mfl
                                                                        • Size 2KB
                                                                        • SHA256 9e21fff96e4526a34500422f88234fc49f08e14f5f3b532e69e5e30ca8e966cf
                                                                        • MD5 SHA1 SHA512

                                                                        chrmstp.exe

                                                                        • Path C:\Program Files\Google\Chrome\Application\138.0.7204.158\Installer\chrmstp.exe
                                                                        • Size 6.0MB
                                                                        • SHA256 9785aa581f439304641cc195f32d088fee2997e23c151ac645dd9e4ae1711789
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        win32_LinkNoDrop32x32.gif

                                                                        • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
                                                                        • Size 674B
                                                                        • SHA256 a355a9796b70ca31dc9c4a5360e871172b01ed5f0eb88278d0d30060428a9895
                                                                        • MD5 SHA1 SHA512

                                                                        COPYRIGHT

                                                                        • Path C:\Program Files\Java\jre-1.8\COPYRIGHT
                                                                        • Size 3KB
                                                                        • SHA256 ee4526cbed6afd32e6abe27fad37c90d948770c253021c4cf8d3de38a8ada09b
                                                                        • MD5 SHA1 SHA512

                                                                        LICENSE

                                                                        • Path C:\Program Files\Java\jre-1.8\LICENSE
                                                                        • Size 565B
                                                                        • SHA256 fef6546b018e5f55e361c9066c8e60aee19dea090252c4a5d675b4b8d7ff4f39
                                                                        • MD5 SHA1 SHA512

                                                                        THIRDPARTYLICENSEREADME-JAVAFX.txt

                                                                        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
                                                                        • Size 711B
                                                                        • SHA256 83a54186c8c38fd7945daf41aef1d98ffcc4eb892a911e26a5fd6dbe3c072c80
                                                                        • MD5 SHA1 SHA512

                                                                        THIRDPARTYLICENSEREADME.txt

                                                                        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
                                                                        • Size 711B
                                                                        • SHA256 3644f7418ed57f2343f8991b0fc8e027813629eb46292782e483cb1a7f282314
                                                                        • MD5 SHA1 SHA512

                                                                        directshow.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
                                                                        • Size 1KB
                                                                        • SHA256 a702f0da9cafe985b1ab4d89f98263365b897af6b3b1be8ecf6b283a1b889ff0
                                                                        • MD5 SHA1 SHA512

                                                                        glib.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
                                                                        • Size 32KB
                                                                        • SHA256 2421833b67c5e40732b0165561130557cf46b8ced9c5879a7d72ec0dd5df564d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        gstreamer.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
                                                                        • Size 34KB
                                                                        • SHA256 61942112112aa3446bd52b3754a000e49162e32a2e0b851ffaa00238d0ee8631
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        icu_web.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md
                                                                        • Size 24KB
                                                                        • SHA256 24caa43812c8c0ca0d64c3ee5aee0988a67ec3ebd119d33fb300dcff3857b941
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        jpeg_fx.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
                                                                        • Size 2KB
                                                                        • SHA256 893ec54a2b10f5b810b084143f368c491f3680c1aaf72eb6b341e3508a28e4d5
                                                                        • MD5 SHA1 SHA512

                                                                        libffi.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libffi.md
                                                                        • Size 1KB
                                                                        • SHA256 a2213ed71c9629f43090bce1ce256cf6a8b01d1e58b8e923fe8e46f6f72e121f
                                                                        • MD5 SHA1 SHA512

                                                                        libxml2.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
                                                                        • Size 3KB
                                                                        • SHA256 6059fe723ce00ebb465e2e39b848abcb4bb6161e54cc92ef7882fd482edf56d5
                                                                        • MD5 SHA1 SHA512

                                                                        libxslt.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
                                                                        • Size 3KB
                                                                        • SHA256 3a0b6693aee9138d534bb56a930c38fbc46e3a98e36a73c1ea104a58fb37c598
                                                                        • MD5 SHA1 SHA512

                                                                        mesa3d.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
                                                                        • Size 6KB
                                                                        • SHA256 741b16c865575602a73fbd33aa0e19291d8948dcd669e45b51b679ca8b8f7b8a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        public_suffix.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\public_suffix.md
                                                                        • Size 17KB
                                                                        • SHA256 e7803546ddd70831dbbf39e74cc704a1812eff04f67472aca5a6e77ee7982d95
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        webkit.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\javafx\webkit.md
                                                                        • Size 320KB
                                                                        • SHA256 6cb6c3600c5c6738e13c092bc53adfba2491468df98f1be7fcf4de1d8137f919
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        asm.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
                                                                        • Size 2KB
                                                                        • SHA256 6dbca8f09067bace8baf94d3ed99ae94b2ee7981c386bfc721538834506462d0
                                                                        • MD5 SHA1 SHA512

                                                                        bcel.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
                                                                        • Size 11KB
                                                                        • SHA256 13bb5d3202bb14537ee2d0a7b64820888811e1c23e65ef45329b21b97b353607
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cldr.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
                                                                        • Size 3KB
                                                                        • SHA256 64f1888145150e930aabb1412e44f91c2b93aefc30f0684cad04b3f8490f6dd2
                                                                        • MD5 SHA1 SHA512

                                                                        colorimaging.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
                                                                        • Size 683B
                                                                        • SHA256 6202275ec5d516fb58703793b91fe7cc601dc2abcbf508008933c4fb107b571d
                                                                        • MD5 SHA1 SHA512

                                                                        cryptix.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
                                                                        • Size 1KB
                                                                        • SHA256 65f40ab9d5f6bf6452647154a28423c6643f5fb668c2e78cf28f6ae70441ca00
                                                                        • MD5 SHA1 SHA512

                                                                        dom.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
                                                                        • Size 4KB
                                                                        • SHA256 b15102cb1c81c9579b5ba939551362e621ac3e2e40a15d3462942ffe23f37553
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        dynalink.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
                                                                        • Size 1KB
                                                                        • SHA256 72555d584ba82a06baf2b9fb972fe5c2429b83f5aeb15d9279a92921bd8b3f36
                                                                        • MD5 SHA1 SHA512

                                                                        ecc.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
                                                                        • Size 29KB
                                                                        • SHA256 ec977d70e07a6cc470ab970a8f28b004af792ffca477e437b66c9f89205436b8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        freebxml.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
                                                                        • Size 3KB
                                                                        • SHA256 66ae5d374d31ffd8192a91ab4b9bcb1118e4ad92e24bf5b86427a1270209275c
                                                                        • MD5 SHA1 SHA512

                                                                        giflib.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
                                                                        • Size 1KB
                                                                        • SHA256 730d1f0c769606ec97aaad1a652f1ed5a8a486c0573796688cb1194a7f0ff78e
                                                                        • MD5 SHA1 SHA512

                                                                        icu.md.ragnar_B6B3FA01

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md.ragnar_B6B3FA01
                                                                        • Size 3KB
                                                                        • SHA256 5be2087cdfcf3c8efedc8bd0c0707c3415422a01402c0bd7303eb1310c8d1fb9
                                                                        • MD5 SHA1 SHA512

                                                                        jcup.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
                                                                        • Size 1KB
                                                                        • SHA256 d047681acd27137cc9ae25c89ae3799466b2706150cca2a228f8cfa1c06f7c72
                                                                        • MD5 SHA1 SHA512

                                                                        joni.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
                                                                        • Size 1KB
                                                                        • SHA256 1681b4fc43d5ef858446d34756cf0f5cd38a6a46cc4f62b0cbd3db74554e1e4d
                                                                        • MD5 SHA1 SHA512

                                                                        jopt-simple.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
                                                                        • Size 1KB
                                                                        • SHA256 2a80600e20caa13523635d814a618af30111b35c7343b74d434c9642fc922e50
                                                                        • MD5 SHA1 SHA512

                                                                        jpeg.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
                                                                        • Size 4KB
                                                                        • SHA256 5eba6c9999a5a6878a590f8bdd653ad105cfb29a031929f20cc739c2831aff6f
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        lcms.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
                                                                        • Size 3KB
                                                                        • SHA256 503ea0784032014d36613c810cb05645481e550a90316ced006fc99b5e43ce28
                                                                        • MD5 SHA1 SHA512

                                                                        libpng.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\libpng.md
                                                                        • Size 7KB
                                                                        • SHA256 379e75292c78d0867bb8737ad8a09d4d6b0455f32a7ced34b604944b33f51f37
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        mesa3d.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
                                                                        • Size 6KB
                                                                        • SHA256 5f83b120d2348a3c53a36eee20d641500e4a335ad7e5a7c129b1e0d2da9f8241
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pkcs11cryptotoken.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
                                                                        • Size 4KB
                                                                        • SHA256 ed4bd5660076a47c792ccbb4642a9255e1e75a85ff0b2de5dd3d17d4e0796ebf
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        pkcs11wrapper.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
                                                                        • Size 2KB
                                                                        • SHA256 3c971ce0d789d1d11957f8b36f5a4f777f09639f324a7923235e6c42894db0ee
                                                                        • MD5 SHA1 SHA512

                                                                        relaxngcc.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
                                                                        • Size 2KB
                                                                        • SHA256 f55e1b17f8de4161628d41a9d55b2a5a1f4477319ae9ceb95103def838cd9ca3
                                                                        • MD5 SHA1 SHA512

                                                                        relaxngdatatype.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
                                                                        • Size 2KB
                                                                        • SHA256 b8852e230a55cbf619f743f680934bc19e589595da341fc27950297e73226537
                                                                        • MD5 SHA1 SHA512

                                                                        relaxngom.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
                                                                        • Size 1KB
                                                                        • SHA256 f25e3d807b50a5b4e876bbc0e9c36c641dbd1e9db7d20557add9f33b3fee462b
                                                                        • MD5 SHA1 SHA512

                                                                        santuario.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
                                                                        • Size 12KB
                                                                        • SHA256 ad67f871ab703de29ddbec767f3ceb68fa6503eb45a87163f4fef66eacae8f66
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        thaidict.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
                                                                        • Size 1KB
                                                                        • SHA256 51d61743c5d30952fc8b2ee2528322a8d8396e2f46c9003d052fb840b482a7c0
                                                                        • MD5 SHA1 SHA512

                                                                        unicode.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
                                                                        • Size 2KB
                                                                        • SHA256 8dd8f83fe6b3854460cbe9088f7cad9d7314430e805ac4cad1986833854415a0
                                                                        • MD5 SHA1 SHA512

                                                                        xalan.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
                                                                        • Size 12KB
                                                                        • SHA256 d20a454e7cd54b11ad388f11b348177e87e9bb9323e36e6e3de8bd104284b366
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        xerces.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
                                                                        • Size 12KB
                                                                        • SHA256 12654e6364eeea709d0cab88f05b90465c25a42e02224896bc154130d52f8a86
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        xmlresolver.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
                                                                        • Size 11KB
                                                                        • SHA256 ca5cbd1085321796aab8f45b3864ed0c9e674aaf3f4bcfa35b611eaf2f345608
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        zlib.md

                                                                        • Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
                                                                        • Size 1KB
                                                                        • SHA256 1e9b934027e0665ef124c7c283da07a1d87aa561fca2f7c9a53c33aad4499f07
                                                                        • MD5 SHA1 SHA512

                                                                        messages_zh_HK.properties

                                                                        • Path C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_HK.properties
                                                                        • Size 4KB
                                                                        • SHA256 db827550cf39bfef1bfa506d1700e36888cfd3688616125eeb38ff39124af789
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        ClientSub2019_eula.txt

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
                                                                        • Size 563B
                                                                        • SHA256 743fb0c80cf22b99f103aa91d6a911bac9692f8139871d119392a2c51ace74cd
                                                                        • MD5 SHA1 SHA512

                                                                        MSOUC_F_COL.HXK

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_F_COL.HXK
                                                                        • Size 635B
                                                                        • SHA256 3507ddb30decc0f89b22d5e0a32957dc8d9789d4c2eb46175bfc763a4d9e100c
                                                                        • MD5 SHA1 SHA512

                                                                        MSOUC_K_COL.HXK

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\1033\MSOUC_K_COL.HXK
                                                                        • Size 634B
                                                                        • SHA256 c1124602920396ffc9989c396a8f33dc8434de9e4068f23af39be6437802c95b
                                                                        • MD5 SHA1 SHA512

                                                                        Microsoft.Mashup.Container.NetFX45.exe.config

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.NetFX45.exe.config
                                                                        • Size 539B
                                                                        • SHA256 b346af243215fe2c5334e1df5277e7f4ce5380a45d6694ac831bd24cd7a00bc5
                                                                        • MD5 SHA1 SHA512

                                                                        SIST02.XSL

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
                                                                        • Size 245KB
                                                                        • SHA256 9d6e504589c51c4d22ffb66d127460b06c375b4dbb83300d9160bd05ac0614f0
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msgr8fr.dub

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\PROOF\msgr8fr.dub
                                                                        • Size 526B
                                                                        • SHA256 fd6e37f9c81102c6d2b991664069f3507b7b7914c32b2e1852c605f74e84a234
                                                                        • MD5 SHA1 SHA512

                                                                        pkeyconfig-office.xrm-ms

                                                                        • Path C:\Program Files\Microsoft Office\root\Office16\pkeyconfig-office.xrm-ms
                                                                        • Size 904KB
                                                                        • SHA256 3c64dc9b7b8ce94c04ee520bd3bae48a61642207a3d190e62b77ca454c905d0c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Informix.xsl

                                                                        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Informix.xsl
                                                                        • Size 31KB
                                                                        • SHA256 1c7409227e6ece203c2848b4133e075e6354f01408d7b0d765ba59d90f3cac53
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Sybase.xsl

                                                                        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\Sybase.xsl
                                                                        • Size 30KB
                                                                        • SHA256 f9894cfeaaa280919b07622eb336441cc533fca450c8c3bfe421a2a96d0b49c1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        msjet.xsl

                                                                        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msjet.xsl
                                                                        • Size 30KB
                                                                        • SHA256 9897f067c4b5d71adc8eeac4542eb0845f63f2288529c4e7fcd5afefe43b9142
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sql2000.xsl

                                                                        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql2000.xsl
                                                                        • Size 34KB
                                                                        • SHA256 8b89675d22f479626cadfadf6ae7b092e0250bfc5044b75b8a6091f2318b9bfc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        sql70.xsl

                                                                        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql70.xsl
                                                                        • Size 32KB
                                                                        • SHA256 349de10f91c310541f71703f6b5558c2c176e4865482b6b8cee943cd4deeb040
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        hive.xsl

                                                                        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
                                                                        • Size 80KB
                                                                        • SHA256 1b7bdad6fb013d7fcc6a1844d1c1c46e9736a8792a6e8f791504461df554ce93
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        vlc.mo

                                                                        • Path C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo
                                                                        • Size 584KB
                                                                        • SHA256 6f7652a894bb239f7ebd2431c2611a85defbc18d9b45ffa08d3d90cd1ad41b31
                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                        • Path C:\Users\Admin\AppData\Local\@[email protected]
                                                                        • Size 1KB
                                                                        • SHA256 bdaba5d1e4023c1328b1840e5a722b73478be793a10bc3f7565a9342113ff215
                                                                        • MD5 SHA1 SHA512

                                                                        USStmp.jtx

                                                                        • Path C:\Users\Admin\AppData\Local\Comms\UnistoreDB\USStmp.jtx
                                                                        • Size 3.0MB
                                                                        • SHA256 f1ba1a5d085ad475c35d68cbfb187a04f9e86278258b4c43055651ef1894afa6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        BrowsingTopicsState

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                        • Size 414B
                                                                        • SHA256 fe9fe3f068f838ece0f1f5335fa27857fb15c232d9f158d085dc7054ed84c157
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 96B
                                                                        • SHA256 5e74a6a2731e3ee3ee1cca1f7dc57e6a1714f679dee15ca6792a2f4f54cb7d2c
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index~RFe59b414.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59b414.TMP
                                                                        • Size 96B
                                                                        • SHA256 0157037bfd970ad303e559514f68f91cbc15693e23bbfa158103839eee9f9563
                                                                        • MD5 SHA1 SHA512

                                                                        data_1

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnWebGPUCache\data_1
                                                                        • Size 264KB
                                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                        • Size 3KB
                                                                        • SHA256 48e421cfd2ac1fc4abce6d61ebd518655adb0cb37b302f00d85dfac3bc0ac6f1
                                                                        • MD5 SHA1 SHA512

                                                                        SCT Auditing Pending Reports

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        TransportSecurity

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                        • Size 523B
                                                                        • SHA256 f6664b0544152ee7d2ade21b1a3bd369b6c52bc424d4ca8f87965fc826e25999
                                                                        • MD5 SHA1 SHA512

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                        • Size 12KB
                                                                        • SHA256 93a137bdabb17c216ac8df7e8c3d3a7e556b53123dd09582222d0a700835e11a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                        • Size 20KB
                                                                        • SHA256 63f53f6330e488a5d3756f50253ed72d30bf0b67b1576718f268f1d34ecf8ee6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                        • Size 96B
                                                                        • SHA256 ed537c2e6c1beefa89e0a7243e82539aae3a9031077385e7bd38aa68a5b4d971
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index~RFe59b3f4.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59b3f4.TMP
                                                                        • Size 48B
                                                                        • SHA256 afb26dbfe74183c6c365212d2cadb6e270539241c1568c74d733fd7dafbd63af
                                                                        • MD5 SHA1 SHA512

                                                                        trusted_vault.pb

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\trusted_vault.pb
                                                                        • Size 38B
                                                                        • SHA256 ac6ce31fc9613c21bcbbfa3e53bed3f9aaba4ea292204b5ceecb1404ac55fcf4
                                                                        • MD5 SHA1 SHA512

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 83KB
                                                                        • SHA256 a874848bb5677fb2c6081da325c50a7a1166421fef9a0707065d029b5002f2a9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                        • Size 146KB
                                                                        • SHA256 4e07a612f43f46d48a5697ccea5a235558da552d3f43813404003bf19533c25d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
                                                                        • Size 537B
                                                                        • SHA256 a0fcec8a9e7a6ca6124213d146d8ca2f60918c49845b26915181516525b27437
                                                                        • MD5 SHA1 SHA512

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\MANIFEST-000001
                                                                        • Size 562B
                                                                        • SHA256 029fe0ee0dd437c654eecca613c41929112fcd10a697e5c4c155137a29a2e3df
                                                                        • MD5 SHA1 SHA512

                                                                        data_0

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0
                                                                        • Size 8KB
                                                                        • SHA256 fc5a14f5cfac68e9e845b0f6229ec94785ab5666feea2c8ab51c3d1463eee499
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_1

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1
                                                                        • Size 264KB
                                                                        • SHA256 7f4305b0ad99bfbfddae3802d68f3308774c0ff381766190a33b1b60d4ad4719
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_2

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2
                                                                        • Size 8KB
                                                                        • SHA256 ff21060718b092ea1780078d2e3df37bf6ca6fc869098d296228703b275c1a1a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_3

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3
                                                                        • Size 8KB
                                                                        • SHA256 57d129d823ebf6c16eec0593db72fb73f30f7d2f2b76831f206fce5c3d555dba
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index
                                                                        • Size 256KB
                                                                        • SHA256 554618d03e127f05cacf12a91d43da372dcb363d37c74f3f8871ada7b57777a9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0b53b82a-b1de-46ec-83e7-37b94ec14a14\index
                                                                        • Size 545B
                                                                        • SHA256 88cee76ea0ed05aebe6218742124cc2e40a98b74daaac8bb8907e08f0fcf1dde
                                                                        • MD5 SHA1 SHA512

                                                                        winword.exe_Rules.xml

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\16.0\winword.exe_Rules.xml
                                                                        • Size 332KB
                                                                        • SHA256 49f3dbacaa968df8487ce21b782668dac27839ca3d4638b5e4d9be78edd7f940
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        StartupProfileData-NonInteractive

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                                                                        • Size 944B
                                                                        • SHA256 15833176048f5e8af89d7e697d421db8a82de759dadb48be616cb2434542a6ee
                                                                        • MD5 SHA1 SHA512

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Packages\E2A4F912-2574-4A75-9BB0-0D023378592B_cw5n1h2txyewy\Settings\settings.dat
                                                                        • Size 8KB
                                                                        • SHA256 f26bc178a1e221198ad106dd84e58145f278853047e079273dc823dc329c158a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

                                                                        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\AC\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
                                                                        • Size 525B
                                                                        • SHA256 a74c5c1d9cb7d1d54fae8c1be4dbc2e9e4878fe4830ae47bad4615a0c0b74532
                                                                        • MD5 SHA1 SHA512

                                                                        0.1.filtertrie.intermediate.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{74a31dda-3548-4154-9762-2452fe9ea875}\0.1.filtertrie.intermediate.txt
                                                                        • Size 526B
                                                                        • SHA256 b75ca90fd4a1883267247e323d2d5c6aadf97d40f0f658326ab235c7bda67445
                                                                        • MD5 SHA1 SHA512

                                                                        0.2.filtertrie.intermediate.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{74a31dda-3548-4154-9762-2452fe9ea875}\0.2.filtertrie.intermediate.txt
                                                                        • Size 526B
                                                                        • SHA256 212eebc4bbdaa7bb96441a03f93a8694ca0996aece1f5f3a174bf6935ee88553
                                                                        • MD5 SHA1 SHA512

                                                                        1.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\1.exe
                                                                        • Size 37KB
                                                                        • SHA256 d1faee8dabc281e66514f9ceb757ba39a6747c83a1cf137f4b284a9b324f3dc4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        10.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\10.exe
                                                                        • Size 37KB
                                                                        • SHA256 9af50adf3be17dc18ab4efafcf6c6fb6110336be4ea362a7b56b117e3fb54c73
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        11.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\11.exe
                                                                        • Size 37KB
                                                                        • SHA256 24945bb9c3dcd8a9b5290e073b70534da9c22d5cd7fda455e5816483a27d9a7d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        12.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\12.exe
                                                                        • Size 37KB
                                                                        • SHA256 66123f7c09e970be594abe74073f7708d42a54b1644722a30887b904d823e232
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        13.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\13.exe
                                                                        • Size 37KB
                                                                        • SHA256 fbf7d12dd702540cbaeeecf7bddf64158432ef4011bace2a84f5b5112aefe740
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        14.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\14.exe
                                                                        • Size 37KB
                                                                        • SHA256 ae43886fee752fb4a20bb66793cdd40d6f8b26b2bf8f5fbd4371e553ef6d6433
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        15.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\15.exe
                                                                        • Size 37KB
                                                                        • SHA256 629bf48c1295616cbbb7f9f406324e0d4fcd79310f16d487dd4c849e408a4202
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        16.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\16.exe
                                                                        • Size 37KB
                                                                        • SHA256 a83e219dd110898dfe516f44fb51106b0ae0aca9cc19181a950cd2688bbeeed2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        17.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\17.exe
                                                                        • Size 37KB
                                                                        • SHA256 b31ea30a8d68c68608554a7cb610f4af28f8c48730945e3e352b84eddef39402
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        18.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\18.exe
                                                                        • Size 37KB
                                                                        • SHA256 1123f4aea34d40911ad174f7dda51717511d4fa2ce00d2ca7f7f8e3051c1a968
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        19.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\19.exe
                                                                        • Size 37KB
                                                                        • SHA256 6dac4351c20e77b7a2095ece90416792b7e89578f509b15768c9775cf4fd9e81
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        2.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\2.exe
                                                                        • Size 37KB
                                                                        • SHA256 12d159181d496492a057629a49fb90f3d8be194a34872d8d039d53fb44ea4c3c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        20.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\20.exe
                                                                        • Size 37KB
                                                                        • SHA256 34546f0ecf4cd9805c0b023142f309cbb95cfcc080ed27ff43fb6483165218c1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        21.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\21.exe
                                                                        • Size 37KB
                                                                        • SHA256 b388a205f12a6301a358449471381761555edf1bf208c91ab02461822190cbcf
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        22.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\22.exe
                                                                        • Size 37KB
                                                                        • SHA256 6f05cae614ca0e4751b2aaceea95716fd37a6bf3fae81ff1c565313b30b1aba2
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        23.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\23.exe
                                                                        • Size 37KB
                                                                        • SHA256 d811283c4e4c76cb1ce3f23528e542cff4747af033318f42b9f2deb23180c4af
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        24.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\24.exe
                                                                        • Size 37KB
                                                                        • SHA256 b91fb228051f1720427709ff849048bfd01388d98335e4766cd1c4808edc5136
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        25.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\25.exe
                                                                        • Size 37KB
                                                                        • SHA256 47f2a0b4b54b053563ba60d206f1e5bd839ab60737f535c9b5c01d64af119f90
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        3.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\3.exe
                                                                        • Size 37KB
                                                                        • SHA256 20ab2e99b18b5c2aedc92d5fd2df3857ee6a1f643df04203ac6a6ded7073d5e8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        4.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\4.exe
                                                                        • Size 37KB
                                                                        • SHA256 db99f9a2d6b25dd83e0d00d657eb326f11cc8055266e4e91c3aec119eaf8af01
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        4363463463464363463463463.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\4363463463464363463463463.exe
                                                                        • Size 10KB
                                                                        • SHA256 2fcad226b17131da4274e1b9f8f31359bdd325c9568665f08fd1f6c5d06a23ce
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        5.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\5.exe
                                                                        • Size 37KB
                                                                        • SHA256 079d320d3c32227ba4b9acddf60bfcdf660374cb7e55dba5ccf7beeaedd2cdef
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        6.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\6.exe
                                                                        • Size 37KB
                                                                        • SHA256 1fa6a4dc1e7d64c574cb54ae8fd71102f8c6c41f2bd9a93739d13ff6b77d41ac
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        7.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7.exe
                                                                        • Size 37KB
                                                                        • SHA256 fa54653d9b43eb40539044faf2bdcac010fed82b223351f6dfe7b061287b07d3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        8.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\8.exe
                                                                        • Size 37KB
                                                                        • SHA256 2c3bfb9cc6c71387ba5c4c03e04af7f64bf568bdbe4331e9f094b73b06bddcff
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        9.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9.exe
                                                                        • Size 37KB
                                                                        • SHA256 ebda356629ac21d9a8e704edc86c815770423ae9181ebbf8ca621c8ae341cbd5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Bomb.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Bomb.exe
                                                                        • Size 457KB
                                                                        • SHA256 2027197f05dac506b971b3bd2708996292e6ffad661affe9a0138f52368cc84d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        CryptoWall.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\CryptoWall.exe
                                                                        • Size 132KB
                                                                        • SHA256 e036d68b8f8b7afc6c8b6252876e1e290f11a26d4ad18ac6f310662845b2c734
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Client-built.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\Client-built.exe
                                                                        • Size 3.1MB
                                                                        • SHA256 78fe9f9cac3e4d5cf653be4475c8f247d4803379365dd44320716ea7384a8c11
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Ganja177.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\Ganja177.exe
                                                                        • Size 83KB
                                                                        • SHA256 0bdf99525a8812d88d70e89f5bccd438c4ac76dd07126c62bb78ee74eaa60919
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        IATInfect2008_64.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\IATInfect2008_64.exe
                                                                        • Size 128KB
                                                                        • SHA256 58be2f77908a38e2ab7120837ba4985d3ba6b3dbe43e872ae039c69cdbc947dd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        MC_setup.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\MC_setup.exe
                                                                        • Size 11KB
                                                                        • SHA256 a238084a5247a985ba49f4f9f997c92722f6d91ee2bed143b192cef52b573594
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        MEMZ.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\MEMZ.exe
                                                                        • Size 14KB
                                                                        • SHA256 a3d5715a81f2fbeb5f76c88c9c21eeee87142909716472f911ff6950c790c24d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        OSM-Client.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\OSM-Client.exe
                                                                        • Size 18.9MB
                                                                        • SHA256 cbecca01a711d72f666729e0f256c2d6b808b71feb76bd0a34146cd41b7edc23
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        OSM-Client.exe.zip

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\OSM-Client.exe.zip
                                                                        • Size 6.4MB
                                                                        • SHA256 39ad95c3bada4cedbe8278169e1cbac7980d7582d9b384142ffed61df0930c54
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Opolis.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\Opolis.exe
                                                                        • Size 4.9MB
                                                                        • SHA256 05298f220e88f765a184d56bcbbe00f33cb22523415592450afeee3aeec48369
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        XClient.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\XClient.exe
                                                                        • Size 59KB
                                                                        • SHA256 3df057f43a8c20c88fe2a2266ac09414fcf9dac4037e9a4f6e95ab66e6409636
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        google.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\google.exe
                                                                        • Size 1.1MB
                                                                        • SHA256 e0aec8d85a97523d72ef88049d9360d306544c5656d777efe437cb125b5415f3
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        kepek.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\kepek.exe
                                                                        • Size 411B
                                                                        • SHA256 f80dc39bb3b7ae017bc2d0ab465c814c1c1ac5b12c5fd4e0c559dbc76afe82ff
                                                                        • MD5 SHA1 SHA512

                                                                        njrat.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\njrat.exe
                                                                        • Size 37KB
                                                                        • SHA256 d6471589756f94a0908a7ec9f0e0e98149882ce6c1cf3da9852dc88fcc3d513d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        requirements.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\requirements.exe
                                                                        • Size 67KB
                                                                        • SHA256 8cbdf129e7d0a40ce86513be5dd5d0dcffdd140383bbbfca1d2ac7eebeb10691
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        self-injection.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Files\self-injection.exe
                                                                        • Size 9KB
                                                                        • SHA256 d816db15ccd6b15dc1a369f0fd460d4bed0ac21e2694379cdc96cf4781fd6b0a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Microsoft .NET Framework 4.7.2 Setup_20250619_161326657.html

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft .NET Framework 4.7.2 Setup_20250619_161326657.html
                                                                        • Size 94KB
                                                                        • SHA256 bc0c7fc6bc45a5b45d1c71d4bdb771bfbdb1f1d31034ca968b55639ece59549c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        __PSScriptPolicyTest_rb0bchyr.tvr.ps1

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_rb0bchyr.tvr.ps1
                                                                        • Size 60B
                                                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                        • MD5 SHA1 SHA512

                                                                        a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5.exe
                                                                        • Size 159KB
                                                                        • SHA256 a76e49df84ba2a7b33e8ea959995b5e6faecb90d551ef169d8272ce9042c35a5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        asena.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\asena.exe
                                                                        • Size 39KB
                                                                        • SHA256 ec35c76ad2c8192f09c02eca1f263b406163470ca8438d054db7adcf5bfc0597
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167.exe
                                                                        • Size 76KB
                                                                        • SHA256 d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        wct78BA.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\wct78BA.tmp
                                                                        • Size 63KB
                                                                        • SHA256 3d16462c359f29ef0211b5947ff04dc7baea0877e887d801759bbbd4f4d55cab
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        41821752867797.bat

                                                                        • Path C:\Users\Admin\AppData\Roaming\41821752867797.bat
                                                                        • Size 334B
                                                                        • SHA256 1e5a53b8996bb0672bc19e0a4bdd90fda584765cfb97a351ab3140e97bcd7dc2
                                                                        • MD5 SHA1 SHA512
                                                                        • Path C:\Users\Admin\AppData\Roaming\@[email protected]
                                                                        • Size 933B
                                                                        • SHA256 840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
                                                                        • MD5 SHA1 SHA512
                                                                        • Path C:\Users\Admin\AppData\Roaming\@[email protected]
                                                                        • Size 787B
                                                                        • SHA256 db3ddb6edb7174b6f243b811c1a51e593d39e1ff2d63cc61ab87404bb1489b83
                                                                        • MD5 SHA1 SHA512

                                                                        Cry.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\Cry.exe
                                                                        • Size 22.4MB
                                                                        • SHA256 d850d741582546a3d0ea2ad5d25e0766781f315cd37e6c58f7262df571cd0c40
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tor.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\TaskData\Tor\tor.exe
                                                                        • Size 3.0MB
                                                                        • SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        b.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\b.wnry
                                                                        • Size 1.4MB
                                                                        • SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        c.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\c.wnry
                                                                        • Size 780B
                                                                        • SHA256 0ceb451c1dbefaa8231eeb462e8ce639863eb5b8ae4fa63a353eb6e86173119e
                                                                        • MD5 SHA1 SHA512

                                                                        ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe
                                                                        • Size 3.4MB
                                                                        • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m.vbs

                                                                        • Path C:\Users\Admin\AppData\Roaming\m.vbs
                                                                        • Size 213B
                                                                        • SHA256 4f9cbe32479d621f25b1d8fa0cdab927c23d4a672874b763acb3854e104e54b0
                                                                        • MD5 SHA1 SHA512

                                                                        m_bulgarian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_bulgarian.wnry
                                                                        • Size 46KB
                                                                        • SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_chinese (simplified).wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_chinese (simplified).wnry
                                                                        • Size 53KB
                                                                        • SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_chinese (traditional).wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_chinese (traditional).wnry
                                                                        • Size 77KB
                                                                        • SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_croatian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_croatian.wnry
                                                                        • Size 38KB
                                                                        • SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_czech.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_czech.wnry
                                                                        • Size 40KB
                                                                        • SHA256 d92db97a597e7002fa16a256e06a16dff378c8b45ce742ae4b965d65abff7691
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_czech.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_czech.wnry
                                                                        • Size 39KB
                                                                        • SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_danish.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_danish.wnry
                                                                        • Size 36KB
                                                                        • SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_dutch.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_dutch.wnry
                                                                        • Size 36KB
                                                                        • SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_english.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_english.wnry
                                                                        • Size 36KB
                                                                        • SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_filipino.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_filipino.wnry
                                                                        • Size 36KB
                                                                        • SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_finnish.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_finnish.wnry
                                                                        • Size 37KB
                                                                        • SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_french.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_french.wnry
                                                                        • Size 37KB
                                                                        • SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_german.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_german.wnry
                                                                        • Size 36KB
                                                                        • SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_greek.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_greek.wnry
                                                                        • Size 47KB
                                                                        • SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_indonesian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_indonesian.wnry
                                                                        • Size 36KB
                                                                        • SHA256 ccdc0df1b0f2da014abd664f5b4551947bb9607fe62e866e56a2eb7081a46000
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_indonesian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_indonesian.wnry
                                                                        • Size 36KB
                                                                        • SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_italian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_italian.wnry
                                                                        • Size 36KB
                                                                        • SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_japanese.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_japanese.wnry
                                                                        • Size 79KB
                                                                        • SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_korean.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_korean.wnry
                                                                        • Size 89KB
                                                                        • SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_latvian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_latvian.wnry
                                                                        • Size 40KB
                                                                        • SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_norwegian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_norwegian.wnry
                                                                        • Size 36KB
                                                                        • SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_polish.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_polish.wnry
                                                                        • Size 38KB
                                                                        • SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_portuguese.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_portuguese.wnry
                                                                        • Size 37KB
                                                                        • SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_romanian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_romanian.wnry
                                                                        • Size 50KB
                                                                        • SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_russian.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_russian.wnry
                                                                        • Size 46KB
                                                                        • SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_slovak.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_slovak.wnry
                                                                        • Size 40KB
                                                                        • SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_spanish.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_spanish.wnry
                                                                        • Size 36KB
                                                                        • SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_swedish.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_swedish.wnry
                                                                        • Size 37KB
                                                                        • SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_turkish.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_turkish.wnry
                                                                        • Size 41KB
                                                                        • SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        m_vietnamese.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\msg\m_vietnamese.wnry
                                                                        • Size 91KB
                                                                        • SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        paping.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\paping.exe
                                                                        • Size 60KB
                                                                        • SHA256 e685f5d925148c82ebfe666f75d72226f7b411e0c161c73c7a01a2faed4601bd
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        r.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\r.wnry
                                                                        • Size 864B
                                                                        • SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
                                                                        • MD5 SHA1 SHA512

                                                                        s.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\s.wnry
                                                                        • Size 2.9MB
                                                                        • SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        t.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\t.wnry
                                                                        • Size 64KB
                                                                        • SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        taskdl.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\taskdl.exe
                                                                        • Size 20KB
                                                                        • SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        taskse.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\taskse.exe
                                                                        • Size 20KB
                                                                        • SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        tcping.exe

                                                                        • Path C:\Users\Admin\AppData\Roaming\tcping.exe
                                                                        • Size 252KB
                                                                        • SHA256 9f04c46e0cdaa5bce32d98065e1e510a5f174e51b399d6408f2446444cccd5ff
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        cached-microdescs.new

                                                                        • Path C:\Users\Admin\AppData\Roaming\tor\cached-microdescs.new
                                                                        • Size 34.4MB
                                                                        • SHA256 f8801e64e1ff49e3163131f108e3b8a7148f9c0a20ea9106d95de5067f3097be
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        u.wnry

                                                                        • Path C:\Users\Admin\AppData\Roaming\u.wnry
                                                                        • Size 240KB
                                                                        • SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
                                                                        • MD5 SHA1 SHA512 SSDEEP
                                                                        • Path C:\Users\Default\Desktop\@[email protected]
                                                                        • Size 1.4MB
                                                                        • SHA256 5ea946725f8c4463bfec86acae700573f291578fbacd32b91a9a3fa83d8bcf06
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        RGNR_B6B3FA01.txt

                                                                        • Path C:\Users\Public\Documents\RGNR_B6B3FA01.txt
                                                                        • Size 3KB
                                                                        • SHA256 84449f1e874b763619271a57bfb43bd06e9c728c6c6f51317c56e9e94e619b25
                                                                        • MD5 SHA1 SHA512

                                                                        memory/1004-2516-0x0000000000510000-0x0000000000520000-memory.dmp

                                                                        memory/1096-2208-0x0000000000E10000-0x0000000000E20000-memory.dmp

                                                                        memory/1208-1774-0x0000000000890000-0x00000000008A0000-memory.dmp

                                                                        memory/1500-4715-0x0000000073A60000-0x0000000074011000-memory.dmp

                                                                        memory/1500-121-0x0000000073A60000-0x0000000074011000-memory.dmp

                                                                        memory/1500-113-0x0000000073A61000-0x0000000073A62000-memory.dmp

                                                                        memory/1544-2202-0x0000000000A10000-0x0000000000A20000-memory.dmp

                                                                        memory/1740-321-0x0000000000AE0000-0x0000000000AE8000-memory.dmp

                                                                        memory/1740-323-0x0000000005480000-0x000000000551C000-memory.dmp

                                                                        memory/1780-2196-0x0000000000300000-0x0000000000310000-memory.dmp

                                                                        memory/1856-3687-0x0000000000F80000-0x0000000000F90000-memory.dmp

                                                                        memory/2052-468-0x0000000000CA0000-0x0000000000CC5000-memory.dmp

                                                                        memory/2152-2911-0x0000000000850000-0x0000000000860000-memory.dmp

                                                                        memory/2192-49-0x0000000010000000-0x0000000010010000-memory.dmp

                                                                        memory/2208-2210-0x0000000000540000-0x0000000000550000-memory.dmp

                                                                        memory/2300-4120-0x0000000000830000-0x0000000000840000-memory.dmp

                                                                        memory/2632-2438-0x0000000000560000-0x0000000000570000-memory.dmp

                                                                        memory/3188-3285-0x0000000000EF0000-0x0000000000F00000-memory.dmp

                                                                        memory/3756-2967-0x0000000000CA0000-0x0000000000CB0000-memory.dmp

                                                                        memory/3804-312-0x0000000000E10000-0x0000000000E88000-memory.dmp

                                                                        memory/3900-2437-0x0000000000FE0000-0x0000000000FF0000-memory.dmp

                                                                        memory/3940-1877-0x0000000000350000-0x0000000000360000-memory.dmp

                                                                        memory/4076-3682-0x0000000000A30000-0x0000000000A40000-memory.dmp

                                                                        memory/4080-322-0x0000000001000000-0x0000000001025000-memory.dmp

                                                                        memory/4080-478-0x0000000001000000-0x0000000001025000-memory.dmp

                                                                        memory/4168-4406-0x0000000000850000-0x0000000000B74000-memory.dmp

                                                                        memory/4200-2209-0x0000000000510000-0x0000000000520000-memory.dmp

                                                                        memory/4212-1819-0x0000000000210000-0x0000000000220000-memory.dmp

                                                                        memory/4680-1823-0x0000000000780000-0x0000000000790000-memory.dmp

                                                                        memory/4716-4261-0x0000000000050000-0x0000000000060000-memory.dmp

                                                                        memory/4728-7803-0x000000001D060000-0x000000001D112000-memory.dmp

                                                                        memory/4728-7795-0x000000001CF50000-0x000000001CFA0000-memory.dmp

                                                                        memory/4864-3883-0x00000000001E0000-0x00000000001F0000-memory.dmp

                                                                        memory/4880-3405-0x0000000000A40000-0x0000000000A50000-memory.dmp

                                                                        memory/5352-2910-0x00000000001A0000-0x00000000001B0000-memory.dmp

                                                                        memory/5412-4215-0x0000000000E80000-0x0000000000E90000-memory.dmp

                                                                        memory/5516-25439-0x0000000000400000-0x000000000043D000-memory.dmp

                                                                        memory/5516-26072-0x0000000000400000-0x000000000043D000-memory.dmp

                                                                        memory/5516-291-0x0000000000400000-0x000000000043D000-memory.dmp

                                                                        memory/5956-2860-0x00000000001B0000-0x00000000001C0000-memory.dmp

                                                                        memory/5996-3179-0x0000000000310000-0x0000000000320000-memory.dmp

                                                                        memory/6396-24616-0x000000006D180000-0x000000006D39C000-memory.dmp

                                                                        memory/6396-11998-0x000000006D0F0000-0x000000006D172000-memory.dmp

                                                                        memory/6396-24254-0x0000000000910000-0x0000000000C0E000-memory.dmp

                                                                        memory/6396-24838-0x0000000000910000-0x0000000000C0E000-memory.dmp

                                                                        memory/6396-24255-0x000000006D440000-0x000000006D4C2000-memory.dmp

                                                                        memory/6396-11983-0x000000006D440000-0x000000006D4C2000-memory.dmp

                                                                        memory/6396-11993-0x000000006D180000-0x000000006D39C000-memory.dmp

                                                                        memory/6396-12016-0x0000000000910000-0x0000000000C0E000-memory.dmp

                                                                        memory/6396-12001-0x000000006D0C0000-0x000000006D0E2000-memory.dmp

                                                                        memory/6396-25012-0x0000000000910000-0x0000000000C0E000-memory.dmp

                                                                        memory/6396-24257-0x000000006D3A0000-0x000000006D417000-memory.dmp

                                                                        memory/6396-24842-0x000000006D180000-0x000000006D39C000-memory.dmp

                                                                        memory/6396-24258-0x000000006D180000-0x000000006D39C000-memory.dmp

                                                                        memory/6396-24259-0x000000006D0F0000-0x000000006D172000-memory.dmp

                                                                        memory/6396-24260-0x000000006D0C0000-0x000000006D0E2000-memory.dmp

                                                                        memory/6396-24612-0x0000000000910000-0x0000000000C0E000-memory.dmp

                                                                        memory/6396-24261-0x0000000000910000-0x0000000000C0E000-memory.dmp

                                                                        memory/6396-24256-0x000000006D420000-0x000000006D43C000-memory.dmp

                                                                        memory/7832-24722-0x0000000000EB0000-0x0000000000EC8000-memory.dmp

                                                                        memory/8264-22102-0x0000000000080000-0x0000000000096000-memory.dmp

                                                                        memory/8620-25020-0x0000000061A40000-0x0000000061AFD000-memory.dmp

                                                                        memory/8620-24969-0x0000000003FF0000-0x0000000004008000-memory.dmp

                                                                        memory/8620-24961-0x0000000003F10000-0x0000000003F22000-memory.dmp

                                                                        memory/8620-24960-0x0000000003E80000-0x0000000003F09000-memory.dmp

                                                                        memory/8620-24958-0x0000000003AB0000-0x0000000003ADB000-memory.dmp

                                                                        memory/8620-24956-0x0000000003A70000-0x0000000003A82000-memory.dmp

                                                                        memory/8620-24955-0x0000000003A30000-0x0000000003A4F000-memory.dmp

                                                                        memory/8620-24953-0x0000000003960000-0x0000000003A23000-memory.dmp

                                                                        memory/8620-24959-0x0000000003E40000-0x0000000003E72000-memory.dmp

                                                                        memory/8620-24951-0x0000000003900000-0x0000000003912000-memory.dmp

                                                                        memory/8620-24963-0x0000000003F50000-0x0000000003F64000-memory.dmp

                                                                        memory/8620-24964-0x0000000003F70000-0x0000000003F85000-memory.dmp

                                                                        memory/8620-25025-0x0000000003E40000-0x0000000003E72000-memory.dmp

                                                                        memory/8620-25024-0x0000000003AB0000-0x0000000003ADB000-memory.dmp

                                                                        memory/8620-25023-0x0000000003A90000-0x0000000003AAA000-memory.dmp

                                                                        memory/8620-25022-0x0000000003A70000-0x0000000003A82000-memory.dmp

                                                                        memory/8620-25021-0x0000000003A30000-0x0000000003A4F000-memory.dmp

                                                                        memory/8620-25019-0x0000000003960000-0x0000000003A23000-memory.dmp

                                                                        memory/8620-24952-0x0000000003930000-0x000000000394A000-memory.dmp

                                                                        memory/8620-24957-0x0000000003A90000-0x0000000003AAA000-memory.dmp

                                                                        memory/8620-24970-0x0000000004010000-0x0000000004022000-memory.dmp

                                                                        memory/8620-24978-0x00000000042F0000-0x0000000004303000-memory.dmp

                                                                        memory/8620-24977-0x00000000042D0000-0x00000000042E2000-memory.dmp

                                                                        memory/8620-24975-0x00000000042D0000-0x00000000042E2000-memory.dmp

                                                                        memory/8620-24974-0x00000000042B0000-0x00000000042C3000-memory.dmp

                                                                        memory/8620-24973-0x0000000004290000-0x00000000042A4000-memory.dmp

                                                                        memory/8620-24972-0x0000000004270000-0x0000000004286000-memory.dmp

                                                                        memory/8620-24965-0x0000000003F90000-0x0000000003FA5000-memory.dmp

                                                                        memory/8620-24966-0x0000000003FB0000-0x0000000003FF0000-memory.dmp

                                                                        memory/8620-24967-0x0000000004140000-0x0000000004182000-memory.dmp

                                                                        memory/8620-24968-0x0000000004190000-0x0000000004245000-memory.dmp

                                                                        memory/8620-24962-0x0000000003F30000-0x0000000003F43000-memory.dmp

                                                                        memory/8620-24971-0x0000000004250000-0x0000000004263000-memory.dmp

                                                                        memory/9280-24276-0x00000168287D0000-0x00000168287F2000-memory.dmp

                                                                        memory/9840-24765-0x0000000002700000-0x0000000002710000-memory.dmp

                                                                        memory/9840-24829-0x0000000010000000-0x0000000010010000-memory.dmp

                                                                        memory/9840-24821-0x0000000002FF0000-0x000000000300E000-memory.dmp

                                                                        memory/9840-24813-0x00000000027B0000-0x00000000027C0000-memory.dmp

                                                                        memory/9840-24805-0x0000000002FD0000-0x0000000002FE8000-memory.dmp

                                                                        memory/9840-24797-0x0000000002790000-0x00000000027A5000-memory.dmp

                                                                        memory/9840-24789-0x0000000002780000-0x0000000002790000-memory.dmp

                                                                        memory/9840-24781-0x0000000002770000-0x0000000002780000-memory.dmp

                                                                        memory/9840-24773-0x0000000002750000-0x0000000002768000-memory.dmp