!!SetUp_!PaS$Kḙy$!_60814[.]zip

resource
unpack001/!!SetUp_!PaS$Kḙy$!_60814/Language/en-US/AutoWorkplaceN.dll.mui
unpack001/!!SetUp_!PaS$Kḙy$!_60814/Language/en-US/avicap32.dll.mui

!!SetUp_!PaS$Kḙy$!_60814.zip

SHA256 5cf127ccb4d461cd11701d8b949ed45af04f6ca188a24c482cefc2a26583c721
MD5 34d313d321f156375b0c3f94ea9e4936
SHA1 78450c7f1133106f206a8abeb111ca4e448ba4e2
SHA512 6c578110b1d2c1d5d150182af4a5949ae63bf7c0c622ce519df83c954b3a8710596ec1546dbb01ea300fe408533f0c51604604720195d44947cca9b246bd4b52
SSDEEP 393216:T6m4tr0MMMp/Ms3txYv0hAXV0rFQND/iA0uLyw:m9t4MZ/MyxYcWXW+9iBw
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/am.pak

SHA256 4c0b4273dc4103c666ff01ed8b9db995f68c5c178973465bb25cd5cdf99ef01a
MD5 4e7db89a9f5c07a295de43b745e5658b
SHA1 3f24cbc02d130ed156f1b4c57dc951a9238dc8ef
SHA512 c4117d50e2b966345ff86aade385552915ba41bb176fcdcd402fb54949377f00d17eea384ec90df2e3db92354198ce600131b7609eedf108f7b919d5ba330611
SSDEEP 3072:Mw1jZA/92t7Rh4rgEkDvuHqOVoZL5kiIEG/yZJjhSQVNLWGe/oqM0bvuo00kef9m:716eGurQfZx30jH8+x
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/ar.pak

SHA256 776db47dd91bce8bc813a54a815be3e73b6e58e9fe5f24db7bf0d8c06a240f6a
MD5 70bb1c831327b26e4dd74097f59a55b0
SHA1 46cf431d19bff9646ae6c6fd0c57e25664178d14
SHA512 8f78d18e15ee86b801cb49ee4ee7f5dc06f9730181b849ede944c5d922f7c7ab5814d7879399a712e8bb56b1878011552b6a667a6b8dccef6c6be3f236c3f44a
SSDEEP 3072:qjf5HjSNsZaJBWGxyxMtxHSM2uZtE9yDSZ1B/G29KSI1+CsI1IiH2L2p:BNsRFoyCsI1Zd
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fi.pak

SHA256 528e453ee8fd16b6e2066b5417b115504cd31afc4ffbd79206369c747caad1fe
MD5 c865b2cab8dd25682b40006832a4b604
SHA1 0722c7157c96eff7a4ac85a113cf21c4d0e27b1f
SHA512 8eb3dbff515e18f481f62e8f3ac17ea7674ea8adf0c37b0bb2c5da6c9914b9376a8dac35f2e004a313fc5f2507e7200bfcc3b5973ae428df147d93b26ed3965b
SSDEEP 1536:jw0tbGVUG8TQyRYFTTqIZq3Ik7414JEj6MEi18El0oR8QoFcb4EjjATcM1JhizRs:jw0tbUaTQuYFTTTq4Ug4JEjH18ElXRCV
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fil.pak

SHA256 500906ac9cab570726fe2c3c819eec3f88cb69f326857920d8423883c222c773
MD5 60d50ee0763200548c9df4b4bc712cd1
SHA1 206f9cd895936fd7f597b72446c529881cde9829
SHA512 f59a30f34eab4bec57b6e5d3e53e0b13b74db64f50a9d7b33c9a6fad63de3a80a2436fe8483355d3632fabbc613e1aeb38a3792c4296773fbe50e23ba1e7dee5
SSDEEP 1536:jsSFtTdYhLVgQNqsszmNvuNpEWnGkHl1AM64CzPEchYkZKk175aXmAMD:zTdmq51AaCzh7MKsmAW
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/8514sys.fon

SHA256 dc7e1c9bb168e22b7a8b1a10c5d9555d71ea8486dc0d628fa17d117698bae61b
MD5 bb8f1f693bebf6c738e47b68c4db7d06
SHA1 78e8897326882c540ad1550d400e4533a1edd78e
SHA512 2d3e000b5c2fce04bf8ab27dc684bfb75c7d4ae29e510a8dd5d232651f0b8fdeceed3e618f5aa3cc4666a4d81f0ebe274383cb08c4c9b6fdbb2ce6f095d3485c
SSDEEP 96:z26rDEDrYDaUEZIZCa9qkzAZxo5m3NYiCDuUUDK1FDflI:i9UEIYaAkzWxciCDzL
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/dosapp.fon

SHA256 0da0d4ed89fd1e8810c7f2cdb5372abfb02cb3d031acacc1a5bbc853f879c2bd
MD5 8a5853ebfc046f428dd31c5f3ae217ef
SHA1 61dccd934eeaf49b9dfe4385e5ba12ea8eaaa35c
SHA512 b2427ec94402e06af2239277087376ebb5a4a231a2d9fd020e7eae557b865355f257d0fb3c2f2f306c132f919160b5b7d50e0f078f9e382a3ed9ceee3e285c32
SSDEEP 192:0mDIv/vfv/vfv/THU0nunX/ff//ff//tYAhzZfLL+8bDLRnuQlfOFYFYmuPGlVu:0mDQX3X37U3vnHnHWAhzM8FTlfOUuT
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/smalle.fon

SHA256 de416395301da32c96bf34625483ea6ecdcdaaeb9ff72cdca00b5af4d7092da9
MD5 abc2dda06ac9d95b210a3a805d724391
SHA1 f696b1221ce83c5b9a01ffc53a4a07e10fa31226
SHA512 5f3a8ec4228ec588cfbaeef47ccd4c2a97cd30228d28d657940b6806e835f0dad697217f253d1ab129ab110ccf6f90298fd75df323fbd40a7ecba1079fac87ec
SSDEEP 96:B2eD1DtDEDSD5qDJDHfDgpiGNDYpF1R2Oj/IwDutDzJD4xZoBHGDFPAVWsCPkvYd:7SpF1pjIDzex6LVBn9SplqvEQWX0Y4
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/symbol.ttf

SHA256 bbf1192965e5266fbf23370416337d2861fc1e8bd349def93f2994ba67382fc3
MD5 3e443984997631a694dabf0fba9c8693
SHA1 5ca2785630fae8b7337d37492c4486b224a2fd5e
SHA512 f42387acd0e60994fb9c48d7de8d050113634af768722e9c4bd3c5a420869143df9f138476e9e785b04da68d1fb230238d164bb5efb5dce67d26856c12b29ccb
SSDEEP 1536:cpdCuONLItPRYqXoDxIsTVJ/HMRIHgxxLba:sIXNLIVaqoDxIsT3/HMRIAbG
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/trebucbd.ttf

SHA256 dfcc306777a594d2815368547dd897e2ac82aff8073e55d9e682569939e49b81
MD5 af116cc142b0786d0c7898103a0bcd12
SHA1 a1fa4d6d7a2ddd568e4c615091ea7fa405c7052d
SHA512 e757178d9007e591ef5cbbf91454f362aec75d637b954d2bfbbfb2c4935280be5a00a53d3b5b1408ec0095c1ea482f255c4cc6508ef39c456cffe3374132b940
SSDEEP 6144:MzuSY5gmIupqm9PXfGQSy57HRKU00i1/5:CdAqeP7HtHRKP
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/trebucbi.ttf

SHA256 87942234ab0cc4400088648bef8d1f7afc4c44e676c7ed6b32ca31462c18307d
MD5 7b0201d14bb2a17514480eafd86da51f
SHA1 78296a55fcd48978a28bfc5ca0d230ffebbc0e4e
SHA512 1fa546243b042949e4a281055586ab4e6d177d99d65af9753e689ec8ac63a98b252579357d131f618f4399d80b61c5f82fcbfd28926f901d7c43a2ab4700389d
SSDEEP 3072:hnNrseJzgDqZNZJgHQds6TUYbqI/4TfLHu/IULnneSS1XAAngJ41:xgDqZbWNj59raIULnnRS1/51
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/verdana.ttf

SHA256 6a8481fe107ee547893c018b13dba291c2020bec3de5da6525d9ac09f6bc2105
MD5 5587517d47893e1470ab2296eb609c93
SHA1 0919499ee7c5cbf6ec77d8d82f913df94962d415
SHA512 cf5dfffc1370e237106374e3d1f6211434a76b2b6804e88823a4689d03bfeaf183779cb76db141d0a8b2feb9eeb589c4a7220214c1157cae56ebcc1b945f809a
SSDEEP 6144:kSa3ky/zQva3i0SAqyOpBc1kWw+b8S9g2CRKeCN4A0Q+Vnkn:oQvvNyu+NveCZ0Q+Kn
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/verdanab.ttf

SHA256 f3245f5f38f61bd1ceefb0f1338a5b88a21e6220832c2f43a38bbc7e1547c36f
MD5 215accaad3dd60e8a5ab1b110f79d507
SHA1 612e869a6da8f879a67109ae4d78a0a41f266ff9
SHA512 075d5dce7fadd8ce273a0a5e7d35e54682623dbb9502932c39bf101b90f166b29d81660339a71bc06b9a40c8dddd8f5d3164fc1234895b62903088cfa665bd1d
SSDEEP 3072:nbaB8YYR+hff30sWnKmN8sjZ/aFTByY7VBXhisnoaIeHrLYTHzZnL4n:bsh7YKxIZ/GycVBhisnoOLL6ZnMn
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fr.pak

SHA256 0ddb18e05d4a58c010a42207af0ffdfaf12f9bee29f6971459bd69fdf26b0e79
MD5 b5bce917fb4d322dad4b26febaaef09f
SHA1 891fd73ba1c70be635772386e4bf3cb13496fb59
SHA512 a795e60a2197f4a2f9644e2b4c96635472e270274e991cc1130edc64e112f2d527577ff3b7bf7539fc62e724687f82330bc59e3adeaeb37000a60dcd4e503425
SSDEEP 3072:hPI7B3PxbJzThykykClc3wwTwajbIwKByroFDuFcZqslcaWyNf/Uv:hw75PxdzTIkykClKwGIwKgrwDuFArfsv
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/gu.pak

SHA256 5a23541ce618f91b78a809fe91a0c68681e20018c4411e00d8c205ab1d850dbf
MD5 b0b1b848ceafcaf9e0dcde8bcf7492d8
SHA1 39e929ebc69acc4c6610b9c3382c49a376ac9052
SHA512 7ac783936a15c1313dd7a68961ee98e4d351b60d3ef1e5bd89ef02456145fcca5147884038950a8b9ed0de7ed37ed6f3c2ce9b82de5e3a426ec7e5e918e5b2c7
SSDEEP 3072:twDmoa1A626WB8Z3i81cKHdO3Iu62oY/meBeQOR5q22Dv2pCbflLMWsCBDnZkSHl:tQ4Cv
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/he.pak

SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
MD5 209974550cc2a835f1879995851b424a
SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/hi.pak

SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/hr.pak

SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
MD5 624bce9b02382312f4588d3147b738a3
SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/hu.pak

SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
MD5 ca8a821ff5a6b848c5a170ff9a97bb39
SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/id.pak

SHA256 03e35e4c8d682d80ebde0492ba01d5a922766daf70df6cb2a22a5a5365adff1e
MD5 c26b55aa25d424653e75ac278b0bca42
SHA1 fb49a3940c6380d6af38a82c95ca56cd3aefbeab
SHA512 b701aee8c2d2490309c902cf152ea118d90429caabfef4774802319871bec4c94fe41d5a305d6df7b698ca051b21332a7422a63777470d781c70100ff758726f
SSDEEP 1536:QOle5KmKs/EKdQ95/SWlEmjUwRHeEJpkw5B4X1CPXsAzb2ZghMrREYwcCdAbJ:QdlQ95KWxpkwc8XsAzaZGMNwcCdO
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/lt.pak

SHA256 70996649507cc815f0c4886f8c4822d45c5e201e8e41dc464ab4973ea19d8a23
MD5 6b4c975b9a0b31fa4c0f8818ec53942c
SHA1 dcc10f3758945824b092d071424f9ecb413a353c
SHA512 4ad012581c3853d944152519202e1df67dbfee2fa752c3114da5bf8cb6653f1cb093d5bf951795990a0e0e5d16c8375ab99074cafecbce518ab83ddaa30d2dd9
SSDEEP 1536:n8UXuRiF1eo5N8FYzKcdnaJGNMJ0c5PAQpvK5rmz3MWbhnfmvVDF6S05nGWSgAGU:n8UX/1eOxKonaJYQjbXd+NDF6S05nI
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/lv.pak

SHA256 605d916a697824c4ad6c418d6e7cc157b85825da5dc08a0716d89c56bef0a6fc
MD5 2ac1161c66a47bb69378559c2c6fb44d
SHA1 a1e28a5ae021fe5cbf57ed7e6e7177114421bfa6
SHA512 2e5a9d0ed020447e6482feed0770c7f1f12118591c7412b4bb796a2219b9977632cfcef16faa0f28064d8b19c2dafc4fd2cae929d57bdabd37702152fa850855
SSDEEP 1536:AllVfG/A7NnPXNGchkGB5nDJa7z+z0AhzOgUcCYh2Nn4WSuAhaIvhZmE42Cla2M6:cbfGI7dNDkGcOUcCYwNLyxfaVdF
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/an.txt

SHA256 0e8dd119dfa6c6c1b3aca993715092cdf1560947871092876d309dbc1940a14a
MD5 bf8564b2dad5d2506887f87aee169a0a
SHA1 e2d6b4cf90b90e7e1c779dd16cbef4c787cbd7cf
SHA512 d3924c9397dc998577dd8cb18cc3ea37360257d4f62dd0c1d25b4d4bf817e229768e351d7be0831c53c6c9c56593546e21fd044cf7988e762fb0a04cd2d4ec81
SSDEEP 192:ifEAGRBQ0p/74r5jMdDTSBXgDQ7V8vBOC:iV5o74r5jMdY8l
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ar.txt

SHA256 972261b53289de2bd8a65e787a6e7cd6defc2b5f7e344128f2fe0492ed30ccf1
MD5 1c45e6a6ecb3b71a7316c466b6a77c1c
SHA1 04bf837911fa31ffca8e034158714b47f6489d38
SHA512 5358bb2346c9f23318492b5e7d208e37a703c70d62014426eadd2dd8cda0b91c9d9c2a62eafe0137faefb38bf727fd4d5d8dc18394784ccae75ae9550558e193
SSDEEP 384:7+CIwRJQh3hY4+6TRxAFqpdQbCs7ZpN4QyRl3fcxMZXj4V/2QT:LJi3K4+60Fqpd8Cs7ZpNryRl3fcxMZX6
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/az.txt

SHA256 caec460e73bd0403c2bcde7e773459bea9112d1bfacbe413d4f21e51a5762ba6
MD5 81b732a8b4206fb747bfbfe524dde192
SHA1 4d596b597cf25ff8d8b43708e148db188af18ef9
SHA512 8667bff18a26fe5b892ecfdc8d9c78ecc5659b42c482e1f9e6eb09f7cf5e825584851cd4e9a00f5c62d3096d24cc9664f8223c036a4f2f6e9c568269b2fbb956
SSDEEP 192:iQMqAQbtI+SY+oEDQM0ia9mh/Vg/HksiM0ko3gvje2ojVPC1vUZzxEBa2U:i7SrSYzEsMDV4P0kggv6pCahxEwr
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ba.txt

SHA256 2901b54f7621c95429658cb4edb28abd0cb5b6e257c7d9a364fc468a8b86baae
MD5 d83b65ac086da0c94d6eb57bee669c2b
SHA1 6210f62d41d44cc280f44b39accf10da28424b75
SHA512 56c7ecb4223103d81ffd11c214cceac20e7770b82fbc78a5e82e6dd9d589cc319d4689bb6d9027e5d272097e1b33ddba27a8414fcbc29f9ef68329e343004222
SSDEEP 192:ikNx8wxsv75EMVB1m6pP3z/WxdxbpXuBwBMzByzVHQnlBJ7a/NMIMx:ikLhsv75EMVB1m6pP3dzk5ww/NMIq
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/be.txt

SHA256 d095879b8bbc67a1c9875c5e9896942bacf730bd76155c06105544408068c59e
MD5 3c21135144ac7452e7db66f0214f9d68
SHA1 b1ec0589d769eab5e4e8f0f8c21b157ef5ebb47d
SHA512 0446a0e2570a1f360fd8700fd4c869c7e2dbb9476bbdec2526a53844074c79691542b91455343c50941b8a6d5e02a58ee6aa539cc4c4ae9cf000b4034ef663e2
SSDEEP 192:i2PDEeaNB1PmcptkcDHxbTvPnc67bMxQxGx4ch/JuLQRcg/oN96bPNljYiYr197:ikDFKBFmcPLx3HPnIsqrJuqcgAN96b87
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/bg.txt

SHA256 4dcabcc8ab8069db79143e4c62b6b76d2cf42666a09389eacfc35074b61779e3
MD5 833afb4f88fdb5f48245c9b65577dc19
SHA1 1a6e013226be42cd2d2872b1e6e5747fab65fe8a
SHA512 05bbc7abcfd0a0b7c3305c860b6372871cf3927bbe1790351485a315166e4cbdf8d38d63e01b677bdba251ce52da655f20b2d44b997d116a1794c7b3eb61ef31
SSDEEP 384:i6jWFsfLEnlztmkbjX8jD5VqWMTlHdr8vwyFSH:tfghGufHdrLyFA
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/bn.txt

SHA256 216cc780e371dc318c8b15b84de8a5ec0e28f712b3109a991c8a09cddaa2a81a
MD5 d0e788f64268d15b4391f052b1f4b18a
SHA1 2fd8e0a9dd22a729d578536d560354c944c7c93e
SHA512 d50ea673018472c17db44b315f4c343a2924a2eaa95c668d1160aa3830533ca37cc13c2067911a0756f1be8c41df45669abe083759dcb9436f98e90cbb6ac8bf
SSDEEP 192:iM+g4O23sZEstg+lTr++0Mx148IiZaXTXEU10bXYc+4/rexX4:iMyc2stg+lTr++0MQ8DZRDYc+4axI
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ca.txt

SHA256 ed8748da8fa99db775ff621d3e801e2830e6c04da42c0b701095580191a700a6
MD5 1657720023a267b5b625de17bf292299
SHA1 0045dfafafb9c9058f7d0d6a6c382959c5a67fe0
SHA512 e7998f6484370e53db9cdc80cd55070e408aa93161fa59e48c6e2b26462d6d3eb774c011212840ef1eb821a5ba067b6706cd4ca2be00619aecd24a11e6ca136f
SSDEEP 192:iDNC5+TqX1VvwqqNZ3SE/ye3TmsZmpk0R6PeNJH+L/w3M0ZeDwDWBszBUe:iBhuX1OqqNZ39BDmfHB4yXBUe
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/chrome_[1MB]_[1].exe

IMPHASH 53811707eb72202ebb2c8f39bfac68c5
SHA256 c532ffa77b220ac54083dffb2286c526c2873131448e3a37fe29dbee6aa028b4
MD5 068cf70414b79cd8bc078497553389ed
SHA1 d9778170404ad0435ab82ebba3fb5515831dd17e
SHA512 89b69a9c53530605573d7816eb625840404251e9407fa6041492fa5ad21bfe21206f2fa5bb21f4b85017c5a39daabe13f51c615f54ce08fffaeeb5556bdb45ad
SSDEEP 49152:9b8W92V8WpGaPIgI0GW5VuwHDoTZyMB0q7ug52I8:mW08WpNPLGY4wHDoTZyMjSF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

1e:82:91:03:50:a5:e9:01:9b:c7:1e:95:da:50:d2:4e:e9:3c:5c:64:e4:df:7e:e3:40:36:25:7f:61:f5:61:a2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Stefan Ries,O=Stefan Ries,ST=Hessen,C=DE

Chains

Mar 2, 2024

Subject

CN=Stefan Ries,O=Stefan Ries,ST=Hessen,C=DE

Serial Number

6b:4d:af:cc:ac:60:53:d1:bd:9b:24:05:bf:cf:26:2a

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 7, 2021 - Sep 6, 2024

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

1

Major OS version

5

Entry point

1059808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

chrome.exe.pdb

chrome_elf

GetInstallDetailsPayload IsBrowserProcess IsExtensionPointDisableSet SignalChromeElf SignalInitializeCrashReporting

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler CloseHandle CompareStringW ConnectNamedPipe ConvertFiberToThread ConvertThreadToFiberEx CreateDirectoryW CreateEventW CreateFiberEx CreateFileMappingW CreateFileW CreateIoCompletionPort CreateJobObjectW CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateSemaphoreW CreateThread DebugBreak DecodePointer DeleteCriticalSection DeleteFiber DeleteFileW DeleteProcThreadAttributeList DisconnectNamedPipe DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesEx EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHandleCount GetProcessHeap GetProcessHeaps GetProcessId GetProcessMitigationPolicy GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDefaultLCID GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadLocale GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultLocaleName GetVersionExW GetWindowsDirectoryW HeapDestroy HeapSetInformation InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsThreadAFiber IsValidCodePage IsValidLocale IsWow64Process K32GetModuleInformation K32GetPerformanceInfo K32GetProcessMemoryInfo LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MoveFileW MultiByteToWideChar OpenProcess OutputDebugStringA PeekNamedPipe PostQueuedCompletionStatus PrefetchVirtualMemory QueryDosDeviceW QueryInformationJobObject QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseSRWLockExclusive ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ReplaceFileW ResetEvent ResumeThread RtlCaptureStackBackTrace RtlUnwind SetConsoleCtrlHandler SetCurrentDirectoryW SetDefaultDllDirectories SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetNamedPipeHandleState SetProcessDEPPolicy SetProcessMitigationPolicy SetProcessShutdownParameters SetStdHandle SetThreadAffinityMask SetThreadInformation SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToFiber SwitchToThread SystemTimeToTzSpecificLocalTime TerminateJobObject TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery VirtualQueryEx WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

ntdll

RtlInitUnicodeString

Name

.text

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

168KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

349B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

210KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

!!SetUp_!PaS$Kḙy$!_60814/Language/co.txt

SHA256 5470b36a4a715deca06035333a01e0a2899fce1cf6c29a6ece4c35cfcc843cfd
MD5 c76b8c615c11469d5f6dff0abf39171e
SHA1 1906cd1ce4712d79d129fcf32fd2ff87368081ea
SHA512 c4920988538810b9501c6790a2ed4d4e82500134244b8ae1371f3025bffbc7e6cc73fe1a9839aa2a0d020f2b9cbf0fd09ec99354cb2a65c3d08af519bde38384
SSDEEP 192:ihVHn4OzB1duTbLH7v6Hosnk8dazlVDFdYojN4/5rA3AOEY9yt0zKdAVJg:ihtnjJuHLH76Hosk8daZV7FjN4RrA3FG
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/cs.txt

SHA256 87a4b9369fd51d76c9032c0e65c3c6221659e086798829072785be589e55b839
MD5 641b90f9aedfc68486d0d20b40f7eca6
SHA1 0a683dd844534905336784fadd80498afe26f6fa
SHA512 567cb9f6c31d196a171e5a9c2726a39a9b3d351ac92d4acf8624213a68c9033acc31afaaad82aa9f5359f32d3a0ca40522e151b8370d553a41abeb6a6e097078
SSDEEP 192:iRJ98lWxEb5BvGIrd+mc1OTno+SXhbSIm1JjSvcQpK/w:ijK0GeIrQmEOTno+SXox1JjmpKo
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/da.txt

SHA256 f65026ae33d4302a7ef06a856f6f062c9730100f5a87d5c00fb3feaf5fcd5805
MD5 d8aba2da47c1031832957b75a6524737
SHA1 b83069ef9f7a08f18804ae966b8d18657e2907cd
SHA512 82b5f4ab8e3e2310a98be87b5cf2cbf04b7aeae1798cd69529325ee74add40bdca38eda865a821f66436906d4f3224004f690cf406b532e116475d2b2424b570
SSDEEP 192:7lsrCMNPOVDlCOd6NSv9MPdYJIG8YsYccAP6ox1OYSqMHCaQEzYcdD73Q5CTG:7lsrVwJCe6NzPdYJIG8YsYccuT1RSBCV
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/de.txt

SHA256 06e5265a2b30807296480dc0b0d3a27e41f1381d61229e4eb239c4930d14a43e
MD5 40ae22f5bcbeab6f622771562d584f2b
SHA1 4eaa551055ccfa0076766b7bdf111de9dbcc1c82
SHA512 581a94dc12fe48aebfd88453351697aed9de5b1decf4c5dd53cf4db38d50727d3b887498f0bee6bd532cfbdc8af7bc01fc8d58ce0c3f6fac235bc6ff3f843125
SSDEEP 192:ifuT0Y83ghfM/5yT9lBJ/LQs6gIgiOvcLh3ahAHE+XAgiRTlu6ZgSboZDWUL+g9C:iG0D3ghcy7Ms6gIgiOktU+Iu6CS4L+g0
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/el.txt

SHA256 cf90a21c69a13e0d674b6b74e2904f7d9d3bee594d89862155d94105311f47a7
MD5 812df218dae08f9f883a7455015707b2
SHA1 6e7d7d1c8e783b9b913f44df515f4d376d3502c4
SHA512 51c3c6151b47fa5e3968604cc2385c5d0984ccb96b8f92982bd28440786e1b99826aa70ae1232465a3469ddb6c50d13a241b6a979387eb47bff013953db1ed07
SSDEEP 384:iZF/smolE2pHjN6ZdrD2zH9bOrcjfnicC5aLoDNwSF:wNIEZRD2R5jfnic+aLoBwSF
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/en-US/AutoWorkplaceN.dll.mui

SHA256 799cf32fc0515a4bcc0388d0d39618d9c67ee67a1c2000d7344c5a8120004e2e
MD5 a311c98e7cb3bc2c6f4ad9ca65e95810
SHA1 481168e5c9437731ab632fcacb9c88471c008d6b
SHA512 8eefd67ab748725145db643dab47f608b66582c194e42ed412bfe31f26c36b2bd2c4e157fa1bfaa582c697de267c242e5e809be109c7ab3f61f19bd6812e416a
MD5 SHA1 SHA512

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

!!SetUp_!PaS$Kḙy$!_60814/Language/en-US/avicap32.dll.mui

SHA256 cb852e13a323c8e226b9bccc7786df3c55e4be16d9d63f4911ea0565ac879a9c
MD5 a5696b2d379fb322c7ee1e18c01ca920
SHA1 0063d4f4814d4565334b5937fd83b56287ab413a
SHA512 01e93385f90fd0a25d8c7da31704cf8d04596113fbc9c19199506bbb5ba978f974c65a636ea663fec0c32408a931499814f806091ef7b3d9ca59c26fa01cdabd
SSDEEP 96:9XIEThBLwopUCfwpyIR3M7Pel5LdDzdlSjrviqEtp9JhZ47/5PYBtTdbhFYIDiqf:KKxy3M7P5vRULZ4S5HTbnWnUrTWQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

3

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

!!SetUp_!PaS$Kḙy$!_60814/Language/eng.txt

SHA256 628366cbe1964564f8bcd0732abfe08cc3f9a86fe761e41abb41f84f7b6ba00a
MD5 8d7264236adca0407fa61d942b7e575e
SHA1 21861f62751d2e3d452146ba139e758f20da6f6c
SHA512 74ab8e70fc3a685ae715368df90e9f6b9630e6dc1091436c244ad486db3faf25bc59ac1b89f90e935e7eb2c6766e19165032fc24824ad8af932ad95a8a34172b
SSDEEP 192:iZ76FtmZSw5U0LutH5EVCPXUoDzg3TMHig7v7iH+xb:iZnKtH5EVC/U2zg34Cg7Hb
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/es.txt

SHA256 7dddae25296f14c1f45ac032d9c950c3a8d39a41489f9d2b06000edcfa7a6660
MD5 5a449308a0176d6401181bef4af13765
SHA1 9d8bc3e801bcfb43c7dbfab94ab91a4079a2070f
SHA512 2aebd25219b12d88bdf7a4a1b90b6b13b4ed5d4215e15d2316494c56b7d696eeb3252478200bcf0d84160d11979f5a71c72ca110dd3e28e901cfdb13255c45b0
SSDEEP 192:i3vSP1uIlLvt2WSBL7hBC2pjlRS03gyLuBODltrO9K:i3KPUIlrt29BdGK
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/et.txt

SHA256 d3fc7e1dd6f0486c99997b75d9d8c5592da6cfb9b89c3ec4f59e7bc5826b3456
MD5 54d610c174514d0f60b382249885963c
SHA1 4d2c22ba3da557a3e8641f8d5388123d96c8259f
SHA512 80d51ce4dafa9967ddfa7a8bdf4f62351fa085a7059bc63f9427e0a5e70dc21cb917057f1a41b5e1a218138141dedcadf02e18a0f028ebee8316aaf4ad280d59
SSDEEP 192:iz52C8/cUN7wdeSxU1ntA9i6fH4XKcmcb7cn:i92EA7jS99i6fH4XKc9b7cn
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/eu.txt

SHA256 536d93ca6d7c96d203b51333c4e78de2429f78d32cc321461589626759c84127
MD5 29ec04893f6b2c9058a8f1e0beaf9081
SHA1 8e7b5a0ec24153aa7be02f0395c003df02cf6a09
SHA512 b84e6606a5f58392de5c5f8113db10b8212a82bb93367469284ad2dd9a961bf381e3d230179ec19a32cae7a266cdde7290d95a262dea247b267fdce905f89972
SSDEEP 192:igp4YY4DAQwPnrVpoL2Q03nCIQJ861JcBkoZEU4DHYUv:i0JvVwPrVp9lQxHcBkoZEU47v
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ext.txt

SHA256 3cd8b8633fbc076ee07bf58da6e01ab692df461381a2bad4ef5512c653da46e4
MD5 f048977cdc74ff4d1f045fb3fd5d0118
SHA1 4d44f8644a0d41fdde9f7d7732b197a4ebb65dae
SHA512 48011fbffa45f8809fc6e7d1e8899ee29d4cc6be2cde36484301e71a3c3ffb85cca6cca6a9e9e79af5355b1309834f67d62100ad09aec852d152aca3688d129b
SSDEEP 192:i+TjfUOQlhcX2jsmnNKjgwlgI34gjwhS9kj6P3eW15Qm0ImA6uBacIUmHm:igLQUmjRt0wD6PHPD0IhBt
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/fa.txt

SHA256 05851ba54b24d7fd45179419aee91a2d40bcab62e6aab99c1a92189fb636bbb2
MD5 952328b44391b1d4196dfe1f832a16a2
SHA1 7bf9ced7d272d2df60d2d3984333a6bb26a69377
SHA512 34cc2908320e349d04babf2e5039dfc18b6aaf9f39bea6192e9d53bced3c661c847cce8a17b9aa6bcb941390da9a7ac40b28a93903c9f1946152a7fd93f43aef
SSDEEP 192:iSExioqnlY02IxV2ew79hLxH1jIxOw/E9u7tWN/Up73om1qvu:iSEx22j+8TxH1I0zY7hp7V
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/fi.txt

SHA256 24d66c5733314f3f72b7ca0f5ceb5a3246726dddefcf2f033715188edb062db5
MD5 7ac9d88f81aacef8759e510e9601a4b9
SHA1 249fe906a2d5a8e084cad76e3e67dad26c77bdb1
SHA512 00b67a09cc101c557b7c9a5ea623e654407a953fe87ebb5786a7a2e8ba1944130ba4026a64bf83952a14e7a7c719f81351d8a84fe0b3fe9ba553e4796e7a7ec1
SSDEEP 192:i39+pcahf+fftkY41jF7gEh+fHPZk8fh39BbTk3iTOATOelpwPFy:i39+p3GfixF1gEh+Jk8VDkF3elec
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/fr.txt

SHA256 cc283e9b0c1822f757372c21f179710c4592a2f7755e706c48065bcfe70bba5b
MD5 b1b6e1c3cf5247ec1618a88f9853d54d
SHA1 0671cb77ad76f9e27237aa538f8efa6bccc40de3
SHA512 045422d358b3348a1e52cced12d70757a7e6026801113eb68f07a399acc75b6ecc9a1a4401cb7a65506c6f61d4fbb348765b0c80080072bfe06e0500cf31b0ac
SSDEEP 192:iNbWj/xYCMXHxl759OMLpwPGzfejsH0qNXRDvG2oZ56LXlX+78+LF3Af7Br1T:iW/0Xxl7fOkpwufqsH0EhbG22KXlu783
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/fur.txt

SHA256 fc944eaa7883341372ebd5ef0e2f236ca248b2996a902240a75218541b600e72
MD5 dfd698a0f6ed7bf405a8fdd6f33b2315
SHA1 a8cdbc14ad118c61d484cd62e8c4e7d1141fbb4e
SHA512 07c5cd9ededc00fc28f878d83d327d91a91edc236b51d05cd8171e43bb175072fe9bf0a4c89d09e21441d8192b08e5c3e5e156fa132b1c657715a5b7cb0488a6
SSDEEP 192:i3er20XT2wwImuvDQjdkg9E3JIWQ+iWPNULtCG+ydZystz3:i3erJD2wRmubQL9EuiULtCG+ydksZ3
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/fy.txt

SHA256 9fe460264af4abd9ff23eab79387ebb52b4498758645cd5721e75fd7b747e536
MD5 0111890c0137974fce2d79b6d22e5686
SHA1 98ab055fa8bf5f410cad55627424d6512338a4a1
SHA512 86acdb4d62bf9c784bf21999cba5fa3674e70fe5647fdf1dc6a9c5b3cf9c182a18272d9c8400d997bb09e12c908e08a87a951c3d0156a134802e00f70dd1ad90
SSDEEP 192:ikdpohFyPI4mHJR/eVMIBNgjJdMe1bEIVo5XT3EVULQ:ikmvpRGVwj7Me1bEQgDEV9
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ga.txt

SHA256 406669ecbdf562e773b9cdf831cf5f63c3dd1a012c3521a41227c9141511d959
MD5 b4295e254b9dfc90e0093188257c007c
SHA1 6ae9b959a752c32fab8407b3aa277f300165a579
SHA512 cc4671a9312b7f41ddecd2e02d038affd58bbc62363b811f15f10002c82ae826e060f5ad6e2b1fd75557b3dc3bbf12b6e6900b398623cf547e3727ccaa6bf8e1
SSDEEP 192:iOCmUaOzBKdHRZqt83HRE0HruLP2HJioV/TFa18QCbjXsf0VUY+sGa:iTRNtKMt8BM1Y+ba
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/gl.txt

SHA256 54f676333ce58af67b839b0f0470f99f405b5ce7fdb9c345a19d00b6423277e5
MD5 492e51b4b5b287fe2b90a5f0bd433847
SHA1 f7e1eba770d3d07d0e8c2bd61d556508ef0578b8
SHA512 0aa1df55256324b24b495543e4abbefd776108bdd90d3155d02b1c10f018bdbd1700c4430848dfbd5073a374715f8510efb17ae1812a9aa44b65e50edb23de59
SSDEEP 192:iObNz5MsaqwKlr7UdusuTcaHAB9yVU8SqSd6W5rnuc+Yvy36rV:iOV5jaqwKlr7Ud+LgB9yVdOnuca6rV
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/gu.txt

SHA256 9025d8a58e0c76b186c943ef8a73a1bba6c08945e346de14d3c255ccfa3a10e6
MD5 410c8a33c66b4b2bc707e113d9c76914
SHA1 81a9f3618168dbecf309907ee74591ac3b1297b6
SHA512 a520cf2dc7e9f653bb08c93c657cb8e2d1142e86c3e0bacc44457cba5ede044e91ff01f55139c5aeb7b3f26e51724931ea2b2bb20a058c4b9d888a3ae8766021
SSDEEP 384:iyxKBXaWdxmWpk2x8QL/XwxD92K+R5+Twk292Bh72/OXMQH12fdvKA52hJV22b2o:FKBz5Cw+wvKAQco
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/he.pak

SHA256 ca440d0128b62e35333730c5925992ae5b4b05a37c10105a9145eb5cf7a77071
MD5 209974550cc2a835f1879995851b424a
SHA1 f09850b9e7fffce197e362b9562cd0ff1c5c71ed
SHA512 4ab857adeab0e45f03868d1208d8f3250bbe27c5854bbc885e94e7e6ed8bcf9bdb2ff5035bebb1958b345ecadf244dcc433d760643ea544066b32f3f1e266276
SSDEEP 3072:MSeD15QWmU6XrlH/piG5Bnm3XTnZ2F2j9V:MSeD15KPXrlH/piG5BnOXTnZ2F2j9V
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/he.txt

SHA256 dcd061a0a7b29f55fa28d4396f60881836c2df07cd936412c476a7f149540cc4
MD5 1b53819f8d58fd734b5fd985756b557c
SHA1 8759783adbd62c6f32511313babb9d138fa0a150
SHA512 b7f0a16d9d02434e7d1c619768dc1d67c163ad6630c19630c405b5934311c41b65918c61dd5f27555cf5cf629411d57fe2ce04fc6c99a2272d4689b69a078e73
SSDEEP 192:i3D58xnxi9MoO0EGp/SDB52RM/VtvQPyE7H/Y8vFzicYWrWxusvU3FXxaXbhNXf2:i3V8YdE0cP2RCVFQPyE7YcYGW9U3F490
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hi.pak

SHA256 1ca6a0546f9627fa9ba3d377d79a21ff26ec9b349d47247c9b241a70728d0699
MD5 fa034eb13d21ce4e9fc2d3eafdf40cd2
SHA1 0992d91706d26b6cc2ff64d899308ba4e9380a35
SHA512 4f8024f43a70d9d8ae67848e2540b028cf1b9183b7dedd66043fb16394601da986d695c8d28f072444a69c1b2639c8b79096065389069fb854d152db166ed734
SSDEEP 3072:XkOxgTgcwfKSj33cdEVhk7ovrCEO/S/bBfvTHef+a7BKfzzrRE3b8RLljlxCYPhb:rOCi8R
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hi.txt

SHA256 8cce5e5a846196dac3649483290160177f47d88a7dcf0e85acfd3131856a266a
MD5 a0fc3c3d880a54918d86b40ffda12f23
SHA1 34fb9f1b5a6731100466f66e193ab5028b3ec1be
SHA512 bd1f17d76699f177ce6df4b69f82dfa777a0ae20e243d5fed0605fe951a79d8ae54371b07eb30f075161c108f46be1ce21b162b66cc099c02adb6eb6d5e8f158
SSDEEP 384:icNErTw7YtUD/xvVxkTTkjxQ10Up/ijaCXEk02VQGKFO8YeY:n601ao2hY
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hr.pak

SHA256 64e531e46cf5b644d1b7f1df885efcf51a65db50fab65ab250f5e4e1adfa9d29
MD5 624bce9b02382312f4588d3147b738a3
SHA1 8df16c75c9e86a96d9f2b11e80eb182ba6c8eef9
SHA512 e74e56210cb3c184499de4e0d9e57e8ee9d7314b93fb1a97030a3397cc47b91ec74c704b25fc4bd16f4c7680240ae1d39d69cd9f024dd52c90eae9cc6c53b6ae
SSDEEP 3072:1JKdAGC/lemhlBExypakZUaO2sMMoLaz7v53Kkx9i:lHiKp
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hr.txt

SHA256 a72f01215eba3be3af6659129dd20f7a42d74f1da08658a9c8ce8e303c3e8f64
MD5 a0a8a75560efcf15801c96e6d71becc3
SHA1 b3f7b92d2a13151a14b493108a50a8365c46f6a0
SHA512 d730c0dc30a299b6bab1b8cfae64d8d4bdea121e651641f578b0947bf5f67669f342ce20198b26fe7881ec99baf290695bc460828198a997b4e59ec91396c217
SSDEEP 192:iw/kl7v3mUecLy8RIxXr1aYPDIbOPw7zinGjeQOsEyKtizzDQ:ixpvNeBUuXr03inG2tyKtiPDQ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hu.pak

SHA256 fdd99d667419612bf98200783e0ccf0f7c11913ca03ca162d72d43f6861e5478
MD5 ca8a821ff5a6b848c5a170ff9a97bb39
SHA1 a98b91fa29848013cef021ec8b3a29979cac0c65
SHA512 e475a09e1f9f740b6c36c9b33b20f263896b869d8ac58848504db29903a9597b84761b9c3918addc9c726d4429a0f496f44e3a8b0cce9a3008d071a5d46bb5c6
SSDEEP 3072:a1WzOkbJiCwF/iGn1dgTrdA0RdpEtL1543ICJ:eSbY/iGkTtRdpEPu3ICJ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hu.txt

SHA256 ef79e98fc911e0d0d16bd061a65f50f5e50caa011699852e1608a2629b8ba37d
MD5 eebea9c4e71a5d2820f5e8972822800f
SHA1 e9f5e741995bf92266e5b6d6891896e5b9cc1f42
SHA512 01b4bd586a1b2629b94dab877510110e6fa1286eb9cdf7882539d42466609d830489ba450e7e7cc41958f463227f5376151f912591aa88c7866182374ed574a5
SSDEEP 192:iZEtt30B1cWELI7BD5QoMJu2dGiYU8dGfVFr6ksQA3+oV6YVSUJRPn:iaHOvxlQhJu2dLVUGfVFr6ksp3+oV63q
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/hy.txt

SHA256 d8f60bf92541d20d01f6ddd56d49f25519303fd16e285e18080be6815b74b8a8
MD5 1362c3c286cff992117d5466bbe284f6
SHA1 faf50ecdb6db6cd6ba9e0ae18e7fad64511048c7
SHA512 1834fe901b1182b793872e2a822801966abdf312873e15877e589b9c6a58d04e06a2c60b26d2209fe7048f7ea9befe0f6b39630eb4c5578a54735b6840677205
SSDEEP 192:igxIecm/mNxhlsms7CBFPwWbLkSMBvAoPz3qkZXDwC7o9F9f:iTeB4lE7Gw8KoqznlT2F9f
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/id.txt

SHA256 18c4531e9fc00ed242f1c0526dbcd0a3d1ada9bcfee651ae950328ac872a216f
MD5 73b9f189f0c37d7cf37df8db89fb52af
SHA1 060ad5b22f8dd408260b7210392c0a6f6271fbff
SHA512 f8dca8e9aecbaa7fd596535fb792314253814098c1089262ed36e78960ffebe377c6436354228a9b4e17bb87fa6e1833110fd843c63bbce3294262b623df86e0
SSDEEP 192:iQLoEmEjXCv1MYlMRsF40N+7EeN2ev9KJ3nhuCoLqY:i0oEmEjCv7lmsF67yev9KJ3nJouY
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/is.txt

SHA256 f4f9d6dfd36512f027452499b083ad0656df6503ce03e4e4cc45b925f1f1d678
MD5 f361950b7d1bb073ef48ca729b7ed5ea
SHA1 8c5d3fb8e09c9682c6256f05f82ca67c58f0ff2b
SHA512 6163fb77d3155525a563ad907cdf48fa18a6ce019a073c7d9dc2438927217d0d8534ada7fc444114f14ac216c89d12e83f5b582021be693baec80bd69199909e
SSDEEP 192:7vbGuJ7kBfcLpMPz89Pwkr5fXnNB3RQMFWdZtffvTqBmV4jLASZE33txMF:7vbrJ7k+Lpy8ukr5fXnNXxFaWBm4jLAu
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/it.txt

SHA256 dd0a9a9ce33d25a9f6c461a6e43721e975b8b1e189c3d5b81f1dad0ff12870be
MD5 87efe148b443c6b50eab945e27f9b39a
SHA1 d4a46f9a798c381a7415de8b74b296f5632124c1
SHA512 3f391e6c840ea267f500e7912e87e8696099aee683a0a656a97033dec8de38f875c60dc21e9332a7e24ca3e2ae8c404fd936f915ad8c8a05eab090c355916dd1
SSDEEP 192:iqlpzc7zUwLkm5g6dLeUPezxs+GGWFP2oJhD0k8nv8C/PZmvmVxPdYjgl0h24oUf:imzo15g6cUPim+GGWVJhSvNP6mVxPdYP
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ja.txt

SHA256 b0150c2b3d2ad9b37a7f47a24466aea4a56ced728caf12d02b407fd0080602ab
MD5 470b0ca449e9f34bb34244a7ef39441b
SHA1 471c37014eff0214ce757b6e88987fb9e2b31931
SHA512 1e2d690e484449fa4859836f7ab880d512e98e5f996bf679ecb3a5c3ca8a3fc7e9fed4e6c2470fff790ce22bb6aa407d951ec6c7ced571b5ac8e86ca873f3afa
SSDEEP 192:i5bovSMlRAuVo6k8FUW7Plm6eAY/yCIQ4YftM40EZwGltXuWRzoaGN:i5svH80I8B1Y/C40yXRRzoaGN
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ka.txt

SHA256 b78defec49d07120b74c2172f3e07540314771b16729c6bbfc3a1902ece2eda0
MD5 eb2af4dc4c28275ae1876523944d708e
SHA1 bfb87569112a081a99ecd5bfdcc6f2aead07f67b
SHA512 e04680a6050fc6b3d0bf50a092f5fe2049bedf705f479fb5c45852e4cc19d1b735b85166da15ea67dbeb3aacf39dbe6c80eda9d4c180805d87762468875ab49a
SSDEEP 384:ikzn3UlfDnVKqnB+C0aHgtyr6g5W0p5rUbVkmUmqIcR5mFuBUPNIazj:7sMW6gnAbVkmUm3
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/kaa.txt

SHA256 4d631602ce3d0c4d9162af6bf56a90c8eef75a24d556b729191b62f79aba0681
MD5 dfba5c2185e113eef167a5e21c32df76
SHA1 e36703d7d1954e3f1729a0497674ec15c41a2f76
SHA512 3271b66114bd6f145693258c5e84a175acb3db865169734a9beb5de7f9aefd06b4144650dc0e98fd47dd38ad3cabd26415640cddc8ac611c23d14487e975fb70
SSDEEP 192:iGKztgVKxXfv5NKHLm9ufAX7M5amaRi5WsU1Ok/VO1ri:iGStuYXfvBXQiuWslk/sBi
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/kab.txt

SHA256 b8a7a5182dfdacc9baccb412e161c60864d3b5d30038935122c736ae4f4ebc22
MD5 c6ac7aad8bce83ac69f197db9d4529f8
SHA1 5fa31ccfa23b753cee7aee7ee65915aaa94f9b01
SHA512 a643e38a5801a50fd318fefeb0245b8935c818737b860839c15fa09b0cc0e9ef55eb455e3ceaf8b2263ae23b5befd1e6013ba63c4abd1b89627905498ff026be
SSDEEP 192:iFKQ2IdVUQs/gSSmlPgUulpuDUed3JhFyglCxCxqJo+Msp04ndCVv:iY7IrsgSSmlPgXpUUed3Jh8FCxaB/dCF
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/kk.txt

SHA256 f2e6e55c102485e232daad00f68d8905f7a54f8ae2128db6afe25231c17acd69
MD5 f4c46b450a580ad5abf0b638dcdcc6fb
SHA1 750dfddddadee9cfe0e8f651f1c6cc38cf1fcd78
SHA512 24b6dc7b491302b905c1e20e67ddab16af9420820b6c83406618e017fa84d952661087e2ea577831441e8a3c82ef697de713597e33626aed787f3485dd9b1f7d
SSDEEP 192:iwHw0jjl8sq/UDEAY40JI0lkMPK+K4ppfdMMda764a:iwHw0jjiRUD8kMPJqMdj4a
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ko.txt

SHA256 58a2dd10438c1199653c1bcd88c520ddb437fa8e01bcf311130ada0a626151c7
MD5 55e8685ac21571f0b5f11a4d5fa088f9
SHA1 285d09b7a8adcab4e5d72928487c711b8f48b8fb
SHA512 bd95e5f82e17494404e7319f5cdc1b4bdd868b2ae73be1cf407f9f1e54b360bf75a36993a60a14d29e4af3ec15e0538f23e1f22dca1153bd01fc0ba964390337
SSDEEP 192:i36rCE/KKcFaeVLs7sdGBbeO9onv40if8Knv3E3q9FGdUBUe:i6CE/KKcQSLsJbeOqti0KvoAGdqUe
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ku-ckb.txt

SHA256 19af39960142b8599153a09ef4f03f944fc00999beb9fe2399f5f8b236716eef
MD5 c90d029172a8533946ef7419bf383305
SHA1 7b3d96899f5935e559626d215517315c04207627
SHA512 b0a711161ce233e5b9231c21abfd721bca6a85567debc6cc9c033c68d0a6e1292f369dbf1ea52b4088658d13263c245ea37752e87abd8b2aa878b5270ef0b1be
SSDEEP 192:igHCpEmyIRe0g/OQMEuDP9Y799boVTiUaml4hSf7UAlA+cA90s5bKlcRBfwCiIEW:ivjQMTDShMTiUaTSfwA90sglMRMj2z/
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ky.txt

SHA256 4ef68fbd8ab002bbf4cd6d1c9fd6d87a5fde048afd2ef162b727259eb97d70d2
MD5 7d0420ee265c9122dc11ef964871e179
SHA1 4b84b209e5a637869e501d54ff0b535bd3924851
SHA512 0ddcd7871e61b76acf3fa0224519ed8e29c33234c300097f69e799951f8f9e87943a4f755f1362856f0c2a3804c399e466cf08cf0e189ec7bcdf744e07c61635
SSDEEP 384:ikVDGPB8R8wedC+GwW2womKx4rXNMQOpR2avWPYx3jqSxv:78Z8+7CS8uiMkARuSN
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/lij.txt

SHA256 431cae1bb77633fdf3ce339e97bc5d5d885779decc01ed03583e381f097a2487
MD5 372bc4a26b676c48cf8fefab3711b91d
SHA1 39da7ac5a483bd675657c24f875c2cee93204a1e
SHA512 0bf4ded969bc2af21b806fea241b7f0a312d8d4d9c81b14293e352e09dc31b3b876c77c155b6c9769d89b169d8de65c4f52b649acbf90af14e75ccd6bb8157df
SSDEEP 192:iIxLxXfim7pf7nJePcyzqBJv3/gxqwP95y:iIxLxXTFDnxoxqwP94
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/lt.txt

SHA256 c5da5b37be32fa4cdd8b938d479c0327b84c9f83c948eb7e65f4ddc15a6beeae
MD5 92d03523dd0e7e7b2862a6396abad455
SHA1 ea1fc2bac5ab8d5ee329a5945f1ed90269cb7aec
SHA512 1fb0ae4117dd69418ecc371f699630d79f89daaa3099f57ebfa4a7de398cbdef095e0b029a547dfb6936a336a9e2748b880ec83a65554a1858f2f87104d63e27
SSDEEP 192:inIsB9j4K01iwimxhiZ8yczB7XhyyYR1gQEfo9GcC7MDc:inIsyiwnhiZ1czn9YwQuZ7MDc
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/mk.txt

SHA256 78f5cb9345ab258cf745eaa90d44c7a7a73d3fe06ea182b1298a989135ffa11f
MD5 71d42abe45803ac9c3da5fcacf9cc59c
SHA1 98a1049906972abb480abaf1f5658c1b8c10f27c
SHA512 a0096575d6f911cc2600dac93d6fd7aa8d9e2f9f71a92571a76996fb4c47bdb714bba453c862b3f42cc5f4baaf2aed1dff3c9d6f84a3e2053ff2037c56ab85a5
SSDEEP 192:ia3g0F7SHayJ5vKVEB3Bxg5GteGIxpWNMll39oWvt/i4drxJ4MrZEXSW:iWg0zyJlKVEB3A6SM2mWvt/i4dtJ4MNO
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/mn.txt

SHA256 cf5245d17224f85011ed85062957dbfd936dd760a214980fc8f2eb69e6ba3cfc
MD5 8756027adf94b3cc3d6c42f0d3fb4af0
SHA1 823bdbc5abf1d2f3528aa319a417ee090d1c6928
SHA512 92715a814d24318533ba26af542b174df12e5d8cd40251bc27890345eb6c64d174448745b2b138bd0a7e0fa0d96b803fab9b29f89767729e64a95b164fb27f29
SSDEEP 192:i2GVqAYj834yHocynU6GwgeBLHvNlIfYfFCkMupHCwFxhjPQtQP1d/R1JTPUJ:i7kIYfUjuZxhDDHZQJ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/mng.txt

SHA256 92898472c1db5248b0556fb5bafda8090684249b561de5ef2a84c10f2f4383ca
MD5 ba28c5c312d1a7827b40ed84f1f6f85b
SHA1 72788c4b14c47a3988245e81fc6e7bbb8f88442f
SHA512 35871824adede6169118087d28fe3c78ea09cb259c7c168e83a22ca74c024d9f0d61250ad1fc9f75b71a8ee5235a12ffd52c146b8232b7bea84ec024b19da7d5
SSDEEP 384:ip3jpGUSlwi6aHQIXqB6B22bKP995BOqB8A5Y8KsC3u6cIVFJFGtMksJYkXoFs85:MWJbm50qN5Esd6t/XWjgqVpzs4XZd8sL
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/mng2.txt

SHA256 47bfe43f3f5a88a0f366fb317a542cdc1e216f8c368ddc67252480ede7d130f4
MD5 a0d06dc2b7f53acd8cdebf7864080cd1
SHA1 a4b9c4d1c4355bd90356e60289fb4efce0046b6a
SHA512 811fdbfc11f8db60b2d059d433495fd50220e5a718ed9fe7f9c422d9695353825129b05e0f287419d4784c3564ea7cf7be9117c4408170f4afa3353fbc875442
SSDEEP 192:ip3pxHmpcSmhZcbnD1e+Ft9780rdLdNQwL4rG/d+RWsB/O54Q4gLwqZ816d20xUS:ip3jJfHp4BLLCJOIYB
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/mr.txt

SHA256 08b8f7ff35dd4315133e04fd17b6fb896d63b9c87040a2cc68a83e81ea4efd78
MD5 2e9fc42dbd17e30f8db8205fa2d18543
SHA1 60639e6d06a38d5c507136c130a172d606b698e7
SHA512 7e1aa7234dc2c07654847de01600787ba735e9ccf5d376d37696f3810418a357beb1d611a164fdfd7a24ca33e7bed150df08187d4ade6c973c45be5df74fd95f
SSDEEP 192:iSdCIrunpyKHseL4bzwltFrjVL0TEpbpFeki8rJNhBB:iSt6pypS4A7FYA1r
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ne.txt

SHA256 c129f67193295736e1c1ff4ac7245cbd737a07ea6073b43fd22ac767f3d56e23
MD5 c7ed0560a6145a417b1e92546ed6b0f1
SHA1 6be9ff3e7ef34767caa165a0e9851914bb65378a
SHA512 508504216c916c6ef168062c1d13336594d469db92d8b40571c726a4b3053ca6fd0c57f9f2fc389f3216a5c663ebdc4aa520462ef39abd5be55c7b87b522d90f
SSDEEP 192:iv4xgZB/n6NclUY0PA8jaeQPYX89RcgDZjGKOVdp:ivYUSNcOY0PA8+0gfOJ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/nl.txt

SHA256 8a74f64c91c25da6056b054d388bf1bbd97384ad7d0086f86df0240e077c6149
MD5 54169e744254bb5a4182bcb2678f8479
SHA1 244ff8c38c8da10e20282cf74a08e18ab165640c
SHA512 b798027c10f2aa7f06fa4fc3473f3040a23968d967aa93c08d072f86da2747d7847f8d7b37bc796a8270721c200978c61b1a4a5c6fd8b87845fdbb1337a142a2
SSDEEP 192:i3oJFqYSagoQss8Yok0y0qiqfUaep0XTrsv3H2TzQEjsrKdOZhGcicbyoL0rnycW:i3AQZUaemXTOWTMosI9loAry34sf
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/pa-in.txt

SHA256 377f793eedf3a935ddd6260d72ac3cada9391aafdf1f019d0be72be2b83a5dd9
MD5 6c48ed7deba6d3efe6447be948471810
SHA1 4e1d76d565211416f0ed32a2cdd473d9ac54a61f
SHA512 22b8bbb70492e19ede9c5e74483a1a6d57d4f86f38d1321331e0137c7953c6612e03f854fb1bb0c3234bbc0f561e92501a345d881fc09dde598e217d946018dd
SSDEEP 192:iK8eAMv6KYvDPVWnkFGdRq8A9UCGd6KFnidivnjnqAPvowQoNVq4qEFmQt+MN9YL:iKpZnt/dhCivnjdjQKFNt+MNfU
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/pl.txt

SHA256 223c109301a7bbf01fc57c42609083b28e3fcededc1f6e6dcdfdc8ec1580c51d
MD5 2cdf63e6b3f3a474465d0d88e5386718
SHA1 aa4f3f839b35c68ea2a17e7a63053262e94f952d
SHA512 db7c086b9fd9111d468b7bb4f55455524fe161869c20c20ad7e65e5b8eee38fd4e3b19aaa183c69c87d2c61f4561d12c90aa966a07156f193af59bcb6db10ff7
SSDEEP 192:iny0xONopVdHc+Xmy9hk1s6i+6rELzpZ6+0FVEleeNRChH6ufZfjp8Rb:in3xOgvXm9s5+6QLz+jUlX2rp8Rb
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ps.txt

SHA256 881b19dd1f74251e475855b8bdb53ce9af1c3d2654a9331b069a3c273f723769
MD5 8f15262b3c1cf560b6352fae4a5fde21
SHA1 c493f7834117f02aab3dd34999acf55977d94c67
SHA512 18406e2c762f5e7d5d37d76c0fdc8a8a85d50fcb66b2d92d072b4ca3714fca6eae9ccd9dd50bbb00da84bccfd07eba290930c17a1b9342626715a6d6de8191d2
SSDEEP 96:ikrJrFkaUGFoiZxn8pSbo4YCVtH7tpY+Qan1JZ0d+yccGFs8Ie30aNMfm88B9eDb:ieJZ0o98pT4YCP1pfSDHayRvpyDJe
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/pt-br.txt

SHA256 da0b58f52bbc131f967942d1d8e9de1b5721ae864bc21852a0ad4062332297cb
MD5 7b02e1ae16e2e709d7c97de560b4dbe9
SHA1 191a54644417f7d36f5cb4182dcdb3737d74be51
SHA512 4f689f854db3f766b5e53ce2f19e9f8293c075ee3f9b18098eb05b352f2ec95df85e49a78540781eb531bce60c7b1f7890f1fe3c65200dec3cb908e90fb827a1
SSDEEP 192:icoGT04mzNN8hYivh5gtE/PkjY09fdNQuQ:ibGg4mzNhi4tEHoDfHQuQ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/pt.txt

SHA256 55807ed90ae0d9216b93ec7e1d0571cb16d7f9db40723581aefc4ea829d4d182
MD5 e6f09b147cb07532c12e47b05ccf87b7
SHA1 1b6d069d431edac41c4221a120e8cb9b1152fc70
SHA512 95f7db5dd308ca3e91fc3203dfb9fa9dbabd7eec6cf1a8590eef0cc670c6b08447ba09ad151a972d721dbfcfa03468bb7e9d2cac190d6c72c543ce5a16c7aa32
SSDEEP 192:imxbxSa4GR9N8zMzM0KgWWauXYY5wNKDyYaipnj0aQiAKECNIuZB:imBxSNGR9N8zMzM0KgERYKNYy3ipnj0G
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ro.txt

SHA256 f168bb4d026782134cc6c261006b815850e753a27fb47c4f23ee617666459a66
MD5 e3ee837f02a1f6e4b2213eb36c025284
SHA1 56ccafa0f9c3d805a845311c2ebd80c93a595b17
SHA512 a923f953af5df72e04b5c38e523a003b85c0ed74e20ae1c3a2d4848828e03de8e703953cfcf653c148a0eeaa9365f9187804de0d534435ccb90dac1c4ea68a63
SSDEEP 192:iVF8khF2yUYtHwfajHwKlPVS6LWbsWGGqZfG7ORVCPF27l:iD8mUYtHCxuPjWQu6KP0x
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ru.txt

SHA256 ac73d4810639114c3269e3beaec84ecac9473ca6fbc248d804a09df2b33e4351
MD5 b5cec4d03d2d9e162137e475c54afbc3
SHA1 3e86ae0174a096b07173c623b637122e4323dd29
SHA512 cb78bd4f6d7d94780bf84f6618a2800a3b6885485c6cb7b0836affcb9ca6f6734834fb84f756946e59595067788cd1b1a230cec760e39d3ea0baf523f7cc7647
SSDEEP 192:iW2LUMKClXfitECTGV0jxOfXYCjisdvyMpf5ZOO8gCS4nY5tbV67wyxZ+XU2WtWK:i+ptEGntQYpY6MXsO7ChKeZ+HWKk
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sa.txt

SHA256 a44e8c328bf809890aa6ca883e2cb82b6c5207d9636e9a91253da4cd893668c8
MD5 9fe4da297163a84fe9d0b0289b1af077
SHA1 d14a6a318a50f2f13e45b2269ea2ad8fc5e3c44a
SHA512 a6fee2f3d6448f1f5be6ec88b51fb65ebd07c7ba3dbaf2f7a801fef54b9da410e6b800094853180a884889b304ea9a54672781fa7d0f1067af6c4a63c494a44b
SSDEEP 384:isw3ma17q9ntvNTsld5VFxxwMkAGO310F0klrfofmR7HOwPyng:HwQvVnQg
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/si.txt

SHA256 3899edd17a78bc729278304f7b0ae7750c422a5ba684aac9edc15b8527a229da
MD5 2b78e18bcb07cb8d59d8682502576f8e
SHA1 c277b543ee18441681cdaff9efead09963bf9604
SHA512 da07af56bbd954828623c7b38fd3e6cdfe89df98f2525aa486a43fdd17ea5ce79f90e691b1f459df5238b04b3fff0fed58559bc93e15559ff6d8d2a2cf4da172
SSDEEP 384:iIOc5iNEOdZPFVIz36hkSuWjJyzB8X/qCwd5WvZNkad73+ivI/MpngGhNJDkGx/p:2XNnZ9/u59CC5WHt9I/rGhPRx9+7SuJc
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sk.txt

SHA256 e571c0d87b50f4659099b4ca618057533c22578066e411c5ceb3df8be1e77cff
MD5 ca2b22d21945a478757a099eeafdf9a9
SHA1 5efbf215647e82ddeaa4c83d064ef83b51413dea
SHA512 40365ac6cdd70ff7b7ab09482e1e9263b1b131772019eda357007d029a879111da72b05756adbfc3206b1c060211a16b5f10d507fb0caa3696907c8433fe9537
SSDEEP 192:ihqYyHuLGHP372c79qAFklXva+hF+zmTzeNMR:iMjUGHP72cJqAFAXi+hs0aNMR
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sl.txt

SHA256 548aa8422a228617b30fbd448d03c38c3a11d010051a24544cf8ae479314acd8
MD5 7004b98d09316e84156b91c54888c9d4
SHA1 39c8681e497dde4ccffa3bf8d15b53627757ece8
SHA512 c48f4baced7a4faf958712225a5326ca2225dd7b396164787ad2c83a0314774e9126fa510eba37b1ab2ff26c67a7aaaa0ba9129b0d97a119ad1d726a56a33066
SSDEEP 192:iGCcUhGAoKfrxHa5Qn6dq5OSsZf1G1huHF8fY1oTraGAF7S+pVss0Bu2mXXF6OG:iJhFoKlZZoZ9Gi52rChEmXAOG
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sr-spc.txt

SHA256 283dd99ec8d13784b3d79c36766cdb16dac0ede0c1c09e8b1efa64f5dc2c1a55
MD5 ffd26304b9b5fae8547703515e84460d
SHA1 cff3f023bb47ca3c6c3db202cd8c126b0bb2f59f
SHA512 0a4e39e2598c73f936e4c8bd56201fee00aeb5daab0d7b735d5137a8b7c15830b40f028c77b528b75653540836098f5e8fc059111dd2efbd0a46ddbdf97465c1
SSDEEP 192:iCk9ED/u0/rzMXyBMtR/TL0wN1i9Rd9u3ZDxoAF9sOVbvmyz3xnvze0kIqLm3HGX:iCk94zBWv0b9P9gZ1lLhnbe8q0tfsH6o
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sr-spl.txt

SHA256 d5a250b45bd51267e2b0d78cf60e7f14113419565f9b95c2b1113963396570a5
MD5 fd327f424c7e4f23d2c018ded334a1b5
SHA1 0fe9a48c528be4022b19f7373cba9190d3bdb473
SHA512 ae6c2959a5348bdbc1464fd0e08a3a00f8598a2d423381e5883347a85e88f7749659e0fac4f89d6ccbc74a1e83f47ec4f42cac22115ca3921def00de41978adb
SSDEEP 192:iZjnEAuD8cvkp9HRmD+eyl3NLH0qgGOzeVTs8rmXab4f:i5EL8cIxMQGGjuXasf
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sv.txt

SHA256 54112b265ec01759adbf72dc856ff0f9dbb2b3029eff8a56de08dffc5d3dc954
MD5 2ec8b6f0c0c05157ae90aba540debed1
SHA1 56de30674cf6ed17ae1fd42080214573b8383789
SHA512 6cb83b0d3db5254e47f86100c38be073f257b4f2e643f14e91df9ccac36a631bf06e52ce8f98106f5a17cf19745f2b6277605968bfeb9e0d423b1fd3ab5c0a06
SSDEEP 192:iIRthqlCnYhI0sbVA28ta0obRFz+3uCFQ9/FLFDLb0Y620X9CWHdfSzuQ3lBMjiC:iIzhdnY+bi2tWIFLJb0Y62dWHuTlC
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/sw.txt

SHA256 aaeb1631458e448b678579ce369fd0a6d66e0fb02b9218328c537ee38636c557
MD5 ee27959aef24cef2ec07684cf420b2dd
SHA1 07d9b4d2b4ab10b3341f3286cee73185daaad918
SHA512 9e0fd7db8d799763eee9980d8c2b0864640fb74a86036d337b019ac317a3541cba6d65af1c4179ed46d64d4005395cd6c761f6a234428df3f1fb04634955242f
SSDEEP 192:7F+9CSE///gXaidWrT8PpH0fKxsyEeHRinn:74Cto9paKxsRn
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ta.txt

SHA256 0a3b285566bbeb3f188b3c72ba21cbfc545ea05471eab706e972c828da5234e0
MD5 228ca6d7b8d850853233c4575a7ebf1f
SHA1 4bc90fca87925f7d855972f5dc67ef5e9e29b438
SHA512 2995d1c2bacc8c0ee757fc47fe9c8ac07f1ee74ae3a70bbbcc66cbcfa13a924855b3f7515d04031434870829be34f0fb49a35388eaffacc0e7a33f9a44a02870
SSDEEP 192:igMxAhP2NKfBuRZjaaC1e13/BNhpYY+KEHtiAnCuu1+AuvB1nNh11N:irlNZjagbAn3
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/tg.txt

SHA256 1cedd8f699940fecacacbc5df093ba70fb2099faf9864376a3d990da78b8e075
MD5 4a5529986613cdf743b3f7755f8f5cae
SHA1 970dfad147ab3d32e93eef6bf464bcac23368e4f
SHA512 1f7e8a8a21e8e5faf546b2f4c621b326a907afa017dd8221022df2d19b3e41d10d5157a8713f8d5485601311029f4e25dcb21d0e9b4991b6d26d651b416239c0
SSDEEP 192:iLcxMil07H3brpQXBwkGE3RypQcG3XlDrpQK3I5D2OleVZZd3K5RATp+O1jR40pE:imK3bMlGE34Q3FBT3eDoZdaOHfllqzDv
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/th.txt

SHA256 01e7b965bd4b722003f74b4e4b30ef6a1baea67108816d1b9f8d6add39c7fa10
MD5 8ee06a03dc18e5f8bc750cb6a78f6d9c
SHA1 179c195700df844216c2cabdc17062cddbd1d6b3
SHA512 4c908ba391bac8bd36bf76b5c3b59dd59eb71f2513bcd04c47cbde683ad463c0feac5d5aada67730f3f566156c4beff09cd7b7d1eb043b988ad7938b9041c4ec
SSDEEP 384:ir9n+rMUfsqjeWnShfO1LpBIB9jip10zsPRO2a8fUhe1RBC6sl4wjn/PqIpqINAG:09n+4csqjeWnSh21LpBIB1O10zsPRO2e
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/tk.txt

SHA256 75eff9de596459f3eba755b5c4c8ce635af2cecdbae40749df348c97a2e56ee0
MD5 75c23d0431bc83ca17308f08d1173c1d
SHA1 a052e61036e0da973253ba225031d5929ee5e2d5
SHA512 10872e31df08e59d080be3c0b975df06e2e8bcecea14fcf9f547965143a9652c8b9ed50d38232a72b8f0745c964f4e616b06368d9983f35ba05fbcbf2294900b
SSDEEP 192:7toKrLbypqg+g8p0k9DMfjrdTU4dX81abJjrkLPFT8jPJzVIj7dYqxMXXDqit:7mKr2qL3oRUU81oBmPFwb9VY7dYqxMmm
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/tr.txt

SHA256 4816929c4bb958ce8d64d14df47f0b6a35dcf0e7eb88201eaa93af541894e354
MD5 c69be29e4448a858180daf367464d531
SHA1 d83819911331f73bc35e2eb02ec1fbcdddf30b7d
SHA512 469be1075e9a5c4cc8bb6a0b55e645448eda3d46527a5561cd55807f5e52c3410904a34e0e64e11f963153d5cea5ccf16e7e7fc7ed63aea3fbe532959056aa77
SSDEEP 192:irkBYXKvLRGGtGcunN8uRvXWt2GSdRHI2Je4Sv6J57kLbLaK/FwacCz:irkBgg3GJ8uhXWtfGRH5o9D
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/tt.txt

SHA256 18479d66e0c8b5144ea32cc9d6b58eb8748e80d2c3bdec0dbd99bbc3ab42495d
MD5 6e299b81edacf15face1271d032cc5a0
SHA1 f2e955fd7bbf9140f0e86bf1a759d729c9a4e4da
SHA512 84e9484319deb5a7049fe130290a7d67a8faefc9a17f7b2ce9f9586fb0f0641b839bae681c6f8ffef551780f56166c9886c1f7f6f0df386389f44710423b9865
SSDEEP 384:idiangc64QGQ6p6Wc84DqdqQdP9YW0XyU9ondS8O20Biu9J5:rag/4Tzp6Wc84Dq0QdP9YiUGnmiu9T
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/ug.txt

SHA256 9d0268d1eeb8dfdebbb8ea1033c2b99cd667a244c9859085be5d54c9e5ced369
MD5 ef3e8d61d03e42a3b40d6f0b12535adb
SHA1 569360bcfeb39c102a3dd78ed96204b5d733ffbe
SHA512 6e9afeb0a96da6d8bf63f06de421b8d4ddbf4d750e1bdf861fbbdc0268cbeb19068d08787f0f1655b40ebdc603d888251dae188c3547f32b970c7f927754066a
SSDEEP 192:iDIm9xflePh286zK/bnZ6U4EeBVDeZTyUZirOCsiCjcY8VFDZ:iNMPhhrBNeBVSTTZUwiCuDZ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/uk.txt

SHA256 53235cb228dbbb5207f18bd0b318f54fda9f9f5b05094ea6ac7ae368216cc4ef
MD5 d125ef7f9a009cfe4093152e48055ac1
SHA1 7063f242690890c98296314884e0e6d058c23aff
SHA512 cc199e839e2cf24abcd8b9685702732427295858976a038fddf6e3691fd1a31bcaf9f1dbac48e125e096d1a395dcabfb4ecbb02a6c5e7d6dea67e44e21e69037
SSDEEP 384:iv+2HgJiSSXX7VPkqM6Ix68c65gLKPENwboGxX7xFxexNbK7ExOiyq:LqRRr87Rq
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/uz-cyrl.txt

SHA256 2dd421a44ad779d961c951f01e7abf4ac358c61ce26ea8311a0c902b4fc77ca3
MD5 7afedbd6e9ef3a4a2a99bc1bcb133605
SHA1 317d758dd9f65a6e320a4d45776a21ecb2ad60cc
SHA512 48650bc3ac6c316ad6431b9db3e49d76fd066f976fdd949a8dfdb194775b0e1c6eda5ed99d2574c9d3c2781c6138e3bb3939c294894443eec981c78377823af5
SSDEEP 384:i7ggZifEX14nReON0sutg2s/Vk/A/n/pPqS:cYEF4nReON0sutg2suY/YS
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/uz.txt

SHA256 a310044dbc86e2441f0d50bb7d7dadb9879359b0c6ceb1faf413a0459e07045b
MD5 3035144eea3a382e39541b218a5d813a
SHA1 eb7a2f6306f7d2ded4cc88fb4cab0f65558db8b0
SHA512 99d86146e0a6407f8d0fd7179061699bc82232e6a2427203a2951fef9089572c9c4e29c8484910f672a31f98ef13b5f3a45d5786fb118701a5b908f8f85a5c6a
SSDEEP 192:ijX9l/0gt5MpHB8zNq+cwKp/avDFxCg8FTO/7yWyTHGw:ijX9l/0gt5wh8zNq+cBVavDFE3cTyWyZ
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/va.txt

SHA256 f43c31bd959a752eefbb7c76ed918c4cacd50d43706121c55093d72a638fa7a5
MD5 639741f687d4427c9d3b170b1ced41a9
SHA1 ad3d3a09b8877381df520e6eb654227da045b89d
SHA512 eb63b0437624782d2bcd033905c7c0538902f9644e4facdc52d094ede5353309613b4eef3cb437d4f69c2a4fd4b2e0f241990aaa3a38366685b10cabec20a357
SSDEEP 192:icd/FL0HKwFgPqtXdN3K3TIcmqHfc39vNH:i65wCitzaj5E3P
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/vi.txt

SHA256 3a6dca3e1b5c8190c81fc859b5be83eaf54efdcaa148f4374d1225381083406f
MD5 044531d134aca40d5e57cc0ab96b4940
SHA1 988aa2bb6922360c1977b97725175613266242d2
SHA512 458a86ea6468e8b1c9cc98a7a579f74854a34f101ec2ede3ab48dd7dfbbf75eeae184c5a23443b3ccc69b8c06e0e09ef2df04d9f00d86ce99b82e785f95b7635
SSDEEP 192:iJg8VLjw6yLuVSjHohWCOMF65E0QS3CmJdH:iJg8VfVcHpN5/CA
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/yo.txt

SHA256 ffab6b91ffd2d3c2b1f7f431b47f7d28aa17a11587b876565613bb26c173402b
MD5 698af9267c08d61b712417491da6a3bb
SHA1 01f21ce60e571699b006098afe9520c02d4e11dc
SHA512 d37f63d3824d12d9bd4749ea94fce924f3a5469874d6777261f0570a2a7ef28574825fae199408c0e1eee7061b08c447da8744a1c2fa486981165ab5062fc8a9
SSDEEP 192:7XgmEsBVCxtNc/EcoGFGDbMOw3WmkmSAGplG0v6k6P89Y6QVkixHxXUE4zVG9uRt:7XgECxuGbMO3/J3PL9zyezVGw5
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/zh-cn.txt

SHA256 7cf13e7434e6c062a29b964c026b2f66e75ecf541228665bf0c826ef7c0fe133
MD5 0aae98f500ce669da6a4fcc33aea04e9
SHA1 9326f529b796bca164835fb1eb4e135f01cb61af
SHA512 fc64fb4c2df2b99f3d24cd938f4f381acc20547ba655fb34016a1a1f860e0d8a99c087b24fdc160d2bd1dad1f04c9ebba682adde0e0004e0b64d774bd3f3550f
SSDEEP 192:7f+OUNnnvU5RLUvMyUxupow69yJ1L8ln9K4zy4VCrcj+v67DAT21ph4LiD:72rnnvU5R+yJ1MglEyycWV2DATk4LiD
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Language/zh-tw.txt

SHA256 37c79297f8d4e491d681b556c23d957bc830068ae1d5f4535fd054c2233f3474
MD5 acfc57de6b0e4489287bdafe2062409a
SHA1 dbf62f8c6dd239aa16bfd62500517b849ed8e5b4
SHA512 50a76a2c5a61056b2b9efaf143335d86c5882d97c9d42acf29ca87cd39d79876d561ec0fe83fb377e25379cfebf593b782ecd8613d2a84ac33cbb6d8314481f1
SSDEEP 192:i965RTllmRwM4cO+VnoF0HDczLXO7AJ8YRcaBxU+G9dDRI:i9MRTPUZO+VaoDcmRYUhXRI
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/Setup.exe

IMPHASH b7e244ba46aac2a40ea643244bcedc5b
SHA256 6a2d3876003f6c68f824df4f0033564d8c230716908ba2e6c06ea1dd6d5f98e8
MD5 f975a2d83d63a473fa2fc5206b66bb79
SHA1 e49d21f112ab27ae0953aff30ae122440cf164b9
SHA512 4af4ce56bf131432d488ed112f8858c1e1392d013c6ac0603f2fd70ed513091e35854c0f678efeab7fa9a551517c6b9698f40a92729112de4b852fa3c0c69d64
SSDEEP 12288:IbCylcTVPbi7vT1K7n6HpVkg8KHIo5u0K1VmMxEnbuvuY2jTU+LHMA+nk2oG1ts:4lcTVPbikTMkg8KH/mmMxnvfphx8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

bb:c2:75:72:31:f2:01:c4:fe:84:98:96:a8:e9:ec:40:7c:71:ab:e8:83:35:a7:ec:5d:53:66:19:0a:42:a3:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 3, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

415632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\e\src\out\Release_x64\identity_helper.exe.pdb

msedge_elf

GetInstallDetailsPayload SignalInitializeCrashReporting

advapi32

BuildTrusteeWithSidW ConvertStringSidToSidW CryptAcquireContextW CryptGenRandom CryptReleaseContext EventRegister EventSetInformation EventUnregister EventWrite GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl IsValidAcl IsValidSecurityDescriptor IsValidSid RegCloseKey RegGetValueW RegOpenKeyExW RegQueryValueExW SetEntriesInAclW SetNamedSecurityInfoW SetSecurityInfo

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

winmm

timeGetTime

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW CreateEventW CreateFileMappingW CreateFileW CreateThread DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetFileAttributesW GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProductInfo GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MultiByteToWideChar OutputDebugStringA PrefetchVirtualMemory QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetProcessShutdownParameters SetStdHandle SetThreadInformation SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile lstrlenA

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

ole32

CoCreateInstance CoTaskMemFree

shell32

CommandLineToArgvW ord680 SHGetFolderPathW SHGetKnownFolderPath

oleaut32

SysAllocString SysAllocStringLen SysFreeString VariantClear

Name

.text

Size

868KB

Virtual Size

867KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

62KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

140B

Characteristics

Name

.tls

Size

512B

Virtual Size

397B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

!!SetUp_!PaS$Kḙy$!_60814/caret.xls

SHA256 1157762e33aa772c2653b9a674bc6626d77ba6067618e919f8b95de6e2b4271c
MD5 c21774285407e328a4a1094be7cc6493
SHA1 fce98ad3b459ad528f2b417f17b1296eb1505e3f
SHA512 87cab8e97c9abd719b10e1fc8a4541c1e13e16dd318bd4d26a6f7052ab65839213bdfda1c05b953fa44abbf8c7367f340a700887efcf626860ccf525c5ca762c
SSDEEP 24576:vdUhonwyguWttkKx11qJCc8heVHN5wlIscxJUAt0fZi51Uym5:vdxwyvv4sJ58AVt5wiJftWehE
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/identity_helper.zip

SHA256 b16bfcf15e9910851360800dd2bc5f6ba9393cf67f3cbc9d2fd1422ed16e2882
MD5 33043b3a7872ef3ceb6b50fe70f2e263
SHA1 17100014c706f25fceabb80ea68b22c179d46905
SHA512 2346e5277d367ed59f989a2e99cd7c754ed4726805ba824b1ffa8c9142124ffb2c3bb842969fc491fad2895eb3904975df1c841d37cd9579f71e73d8e5cffabb
SSDEEP 98304:9BqoaYuBdar5sq9fbUSXA3NGeK1TDTZ6yKwOY6:9S2fakeK1NRtm
MD5 SHA1 SHA512 SSDEEP

caret.xls

SHA256 1157762e33aa772c2653b9a674bc6626d77ba6067618e919f8b95de6e2b4271c
MD5 c21774285407e328a4a1094be7cc6493
SHA1 fce98ad3b459ad528f2b417f17b1296eb1505e3f
SHA512 87cab8e97c9abd719b10e1fc8a4541c1e13e16dd318bd4d26a6f7052ab65839213bdfda1c05b953fa44abbf8c7367f340a700887efcf626860ccf525c5ca762c
SSDEEP 24576:vdUhonwyguWttkKx11qJCc8heVHN5wlIscxJUAt0fZi51Uym5:vdxwyvv4sJ58AVt5wiJftWehE
MD5 SHA1 SHA512 SSDEEP

identity_helper.exe

IMPHASH b7e244ba46aac2a40ea643244bcedc5b
SHA256 6a2d3876003f6c68f824df4f0033564d8c230716908ba2e6c06ea1dd6d5f98e8
MD5 f975a2d83d63a473fa2fc5206b66bb79
SHA1 e49d21f112ab27ae0953aff30ae122440cf164b9
SHA512 4af4ce56bf131432d488ed112f8858c1e1392d013c6ac0603f2fd70ed513091e35854c0f678efeab7fa9a551517c6b9698f40a92729112de4b852fa3c0c69d64
SSDEEP 12288:IbCylcTVPbi7vT1K7n6HpVkg8KHIo5u0K1VmMxEnbuvuY2jTU+LHMA+nk2oG1ts:4lcTVPbikTMkg8KH/mmMxnvfphx8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Digest

bb:c2:75:72:31:f2:01:c4:fe:84:98:96:a8:e9:ec:40:7c:71:ab:e8:83:35:a7:ec:5d:53:66:19:0a:42:a3:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 3, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

415632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\e\src\out\Release_x64\identity_helper.exe.pdb

msedge_elf

GetInstallDetailsPayload SignalInitializeCrashReporting

advapi32

BuildTrusteeWithSidW ConvertStringSidToSidW CryptAcquireContextW CryptGenRandom CryptReleaseContext EventRegister EventSetInformation EventUnregister EventWrite GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl IsValidAcl IsValidSecurityDescriptor IsValidSid RegCloseKey RegGetValueW RegOpenKeyExW RegQueryValueExW SetEntriesInAclW SetNamedSecurityInfoW SetSecurityInfo

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

winmm

timeGetTime

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW CreateEventW CreateFileMappingW CreateFileW CreateThread DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread ExpandEnvironmentStringsW FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetFileAttributesW GetFileSizeEx GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProductInfo GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetVersionExW GetWindowsDirectoryW InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MultiByteToWideChar OutputDebugStringA PrefetchVirtualMemory QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetProcessShutdownParameters SetStdHandle SetThreadInformation SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile lstrlenA

api-ms-win-core-winrt-l1-1-0

RoInitialize RoUninitialize

ole32

CoCreateInstance CoTaskMemFree

shell32

CommandLineToArgvW ord680 SHGetFolderPathW SHGetKnownFolderPath

oleaut32

SysAllocString SysAllocStringLen SysFreeString VariantClear

Name

.text

Size

868KB

Virtual Size

867KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

162KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

62KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

140B

Characteristics

Name

.tls

Size

512B

Virtual Size

397B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

msedge_elf.dll

IMPHASH e5e4f3f5367c0c82df24a4723fbd8a3c
SHA256 0b16174a0a47cfcabf5dd427e56355b806467ac3284d5d55f66aa19fbcf91e92
MD5 b37d0df4c44e4e1e9502f6b90adbd73d
SHA1 2164d4fd7184f2ed4ebb225f2ea36b84c001f7ee
SHA512 f5fbb1d506835a4cedd2843a7ff1e1b750ad0c147730e9de521de0c1b67cece4ded32ea0bf153341f9fe6630febb7af785b117d4c49fdfe01e65a18fc450a265
SSDEEP 49152:dB3FRoUiZNneKuALVm76f7qOlTVhX9TbvIyULS9j3vZ90tXq+iarIQKf8klU4AXv:7izZu69kO9j/itKUka
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

25:ea:4e:5d:aa:06:d9:55:19:b1:db:ee:1d:df:6e:96:13:24:60:c8:b5:6f:ea:57:11:55:3b:4d:10:5e:30:1d

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 3, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

1993728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\e\src\out\Release_x64\msedge_elf.dll.pdb

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler AssignProcessToJobObject CancelIo CloseHandle CompareStringW ConnectNamedPipe CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileMappingW CreateFileW CreateIoCompletionPort CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateThread DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DisconnectNamedPipe DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNamedPipeClientProcessId GetNamedPipeServerProcessId GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapFree InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetMappedFileNameW K32GetModuleInformation K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableW SetErrorMode SetEvent SetFileAttributesW SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetProcessMitigationPolicy SetStdHandle SetThreadInformation SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SwitchToThread SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualProtectEx VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory lstrcmpiA lstrcmpiW lstrlenA

ntdll

NtClose NtCreateKey NtDeleteKey NtOpenKeyEx NtQueryValueKey NtSetValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlGetLastNtStatus RtlInitUnicodeString

oleaut32

GetErrorInfo SetErrorInfo SysAllocString SysFreeString SysStringLen

??0PwaHelperImpl@edge_pwahelper@@QEAA@XZ ??1PwaHelperImpl@edge_pwahelper@@UEAA@XZ ??_7PwaHelperImpl@edge_pwahelper@@6B@ ?AppendMojoServerBindingInfo@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVCommandLine@base@@@Z ?BadgeNotification@PwaHelperImpl@edge_pwahelper@@UEAAXW4BadgeNotificationType@mojom@2@AEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@@Z ?BindWidgetManager@PwaHelperImpl@edge_pwahelper@@AEAAXV?$ScopedHandleBase@VMessagePipeHandle@mojo@@@mojo@@@Z ?DigitalGoodsAbortPaymentApp@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AX_N@Z@base@@@Z ?DigitalGoodsConsume@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@@Z@base@@@Z ?DigitalGoodsGetDetails@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$StructPtr@VItemDetails@mojom@payments@@@mojo@@V?$allocator@V?$StructPtr@VItemDetails@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z ?DigitalGoodsInvokePaymentApp@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4PurchaseResponseCode@mojom@edge_pwahelper@@@Z@base@@@Z ?DigitalGoodsListPurchaseHistory@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@V?$allocator@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z ?DigitalGoodsListPurchases@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@V?$allocator@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z ?GetAppAcquisitionDetail@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4AcquisitionInfoResponseCode@mojom@edge_acquisition_info@@V?$InlinedStructPtr@VAcquisitionDetails@mojom@edge_acquisition_info@@@mojo@@@Z@base@@@Z ?InitMojo@PwaHelperImpl@edge_pwahelper@@AEAAXXZ ?InitializeAppUserModelIdForCurrentProcess@PwaHelperImpl@edge_pwahelper@@QEAA_NXZ ?OnClientConnected@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVWaitableEvent@base@@@Z ?PinTileToStart@PwaHelperImpl@edge_pwahelper@@UEAAXXZ ?PinTileToTaskbar@PwaHelperImpl@edge_pwahelper@@UEAAXXZ ?SetPwaHwnd@PwaHelperImpl@edge_pwahelper@@UEAAX_K@Z ?SetSingletonProcessId@PwaHelperImpl@edge_pwahelper@@UEAAXI@Z ?Shutdown@PwaHelperImpl@edge_pwahelper@@AEAAXI@Z ?StartAppWithIncomingMojo@PwaHelperImpl@edge_pwahelper@@QEAAXVPlatformChannelEndpoint@mojo@@@Z ?StartAppWithPlatformChannel@PwaHelperImpl@edge_pwahelper@@QEAAXV?$unique_ptr@VCommandLine@base@@U?$default_delete@VCommandLine@base@@@__Cr@std@@@__Cr@std@@@Z ?StartProcessWithMojoIPC@PwaHelperImpl@edge_pwahelper@@QEAAKPEAXV?$unique_ptr@VCommandLine@base@@U?$default_delete@VCommandLine@base@@@__Cr@std@@@__Cr@std@@V?$unique_ptr@VScopedTempDir@base@@U?$default_delete@VScopedTempDir@base@@@__Cr@std@@@45@@Z ?TryActivateInstance@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVCommandLine@base@@@Z ?ValidateHandShake@PwaHelperImpl@edge_pwahelper@@AEAAXXZ ClearReportsBetween_ExportThunk CrashForException_ExportThunk DisableHook DrainLog DumpHungProcessWithPtype_ExportThunk DumpProcessWithoutCrash GetApplyHookResult GetBlockedModulesCount GetCrashReports_ExportThunk GetCrashpadDatabasePath_ExportThunk GetElfLoadThreadId GetHandleVerifier GetInjectionMitigationStatus GetInstallDetailsPayload GetUniqueBlockedModulesCount GetUserDataDirectoryThunk InjectDumpForHungInput_ExportThunk IsBrowserProcess IsExtensionPointDisableSet IsThirdPartyInitialized OQS_CPU_has_extension OQS_KEM_alg_count OQS_KEM_alg_identifier OQS_KEM_alg_is_enabled OQS_KEM_decaps OQS_KEM_encaps OQS_KEM_free OQS_KEM_keypair OQS_KEM_kyber_768_decaps OQS_KEM_kyber_768_encaps OQS_KEM_kyber_768_keypair OQS_KEM_new OQS_MEM_cleanse OQS_MEM_insecure_free OQS_MEM_secure_bcmp OQS_MEM_secure_free OQS_SIG_alg_count OQS_SIG_alg_identifier OQS_SIG_alg_is_enabled OQS_SIG_free OQS_SIG_keypair OQS_SIG_new OQS_SIG_sign OQS_SIG_verify OQS_destroy OQS_init OQS_randombytes OQS_randombytes_custom_algorithm OQS_randombytes_nist_kat_init_256bit OQS_randombytes_switch_algorithm OQS_version RegisterLogNotification RequestSingleCrashUpload_ExportThunk SetMetricsClientId SetTelemetryLevel_ExportThunk SetUploadConsent_ExportThunk SignalChromeElf SignalInitializeCrashReporting StartAppWithParameter

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

597KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

73KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.crthunk

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

196B

Characteristics

Name

.rodata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

522B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

226B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

test.asp

SHA256 42f229a1430516ca02825a0b8ead2aa296c1a1cd7e1b41165d918e6657fe4ac4
MD5 012206c2a828f8687db2a3e5e878068f
SHA1 ee75d067cebca73b982546e1d4c7c7cf32569e8a
SHA512 8a0c894cdf75f675b692a3e5fd0db278536c7b8044490fd1a83b47ca606996d9d36190017f33ff9874e0223dd6e2dbb9f5173c870d501e0ae57fbc2bb6ca323b
SSDEEP 768:3N8JIZSJ8vzKXwLldvfFBG+2WXT750jbo7i/mogJFQHEb7KJbvWOzh8S9Dj9qOYG:xhLKgbv350YWaSHWHOF8S9Dj9xDUJvM
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/msedge_elf.dll

IMPHASH e5e4f3f5367c0c82df24a4723fbd8a3c
SHA256 0b16174a0a47cfcabf5dd427e56355b806467ac3284d5d55f66aa19fbcf91e92
MD5 b37d0df4c44e4e1e9502f6b90adbd73d
SHA1 2164d4fd7184f2ed4ebb225f2ea36b84c001f7ee
SHA512 f5fbb1d506835a4cedd2843a7ff1e1b750ad0c147730e9de521de0c1b67cece4ded32ea0bf153341f9fe6630febb7af785b117d4c49fdfe01e65a18fc450a265
SSDEEP 49152:dB3FRoUiZNneKuALVm76f7qOlTVhX9TbvIyULS9j3vZ90tXq+iarIQKf8klU4AXv:7izZu69kO9j/itKUka
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

PE Signature issue

Digest

25:ea:4e:5d:aa:06:d9:55:19:b1:db:ee:1d:df:6e:96:13:24:60:c8:b5:6f:ea:57:11:55:3b:4d:10:5e:30:1d

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 3, 2024

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

2

Major OS version

5

Entry point

1993728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\e\src\out\Release_x64\msedge_elf.dll.pdb

kernel32

AcquireSRWLockExclusive AddVectoredExceptionHandler AssignProcessToJobObject CancelIo CloseHandle CompareStringW ConnectNamedPipe CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileMappingW CreateFileW CreateIoCompletionPort CreateMutexW CreateNamedPipeW CreateProcessW CreateRemoteThread CreateThread DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl DisconnectNamedPipe DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNamedPipeClientProcessId GetNamedPipeServerProcessId GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetThreadId GetThreadPriority GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapAlloc HeapFree InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetMappedFileNameW K32GetModuleInformation K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadFile ReadProcessMemory RegisterWaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetCurrentDirectoryW SetEndOfFile SetEnvironmentVariableW SetErrorMode SetEvent SetFileAttributesW SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetProcessMitigationPolicy SetStdHandle SetThreadInformation SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SwitchToThread SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualProtectEx VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile WriteProcessMemory lstrcmpiA lstrcmpiW lstrlenA

ntdll

NtClose NtCreateKey NtDeleteKey NtOpenKeyEx NtQueryValueKey NtSetValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlGetLastNtStatus RtlInitUnicodeString

oleaut32

GetErrorInfo SetErrorInfo SysAllocString SysFreeString SysStringLen

??0PwaHelperImpl@edge_pwahelper@@QEAA@XZ ??1PwaHelperImpl@edge_pwahelper@@UEAA@XZ ??_7PwaHelperImpl@edge_pwahelper@@6B@ ?AppendMojoServerBindingInfo@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVCommandLine@base@@@Z ?BadgeNotification@PwaHelperImpl@edge_pwahelper@@UEAAXW4BadgeNotificationType@mojom@2@AEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@@Z ?BindWidgetManager@PwaHelperImpl@edge_pwahelper@@AEAAXV?$ScopedHandleBase@VMessagePipeHandle@mojo@@@mojo@@@Z ?DigitalGoodsAbortPaymentApp@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AX_N@Z@base@@@Z ?DigitalGoodsConsume@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@@Z@base@@@Z ?DigitalGoodsGetDetails@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$StructPtr@VItemDetails@mojom@payments@@@mojo@@V?$allocator@V?$StructPtr@VItemDetails@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z ?DigitalGoodsInvokePaymentApp@PwaHelperImpl@edge_pwahelper@@UEAAXAEBV?$basic_string@DU?$char_traits@D@__Cr@std@@V?$allocator@D@23@@__Cr@std@@V?$OnceCallback@$$A6AXW4PurchaseResponseCode@mojom@edge_pwahelper@@@Z@base@@@Z ?DigitalGoodsListPurchaseHistory@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@V?$allocator@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z ?DigitalGoodsListPurchases@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4BillingResponseCode@mojom@payments@@V?$vector@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@V?$allocator@V?$InlinedStructPtr@VPurchaseReference@mojom@payments@@@mojo@@@__Cr@std@@@__Cr@std@@@Z@base@@@Z ?GetAppAcquisitionDetail@PwaHelperImpl@edge_pwahelper@@UEAAXV?$OnceCallback@$$A6AXW4AcquisitionInfoResponseCode@mojom@edge_acquisition_info@@V?$InlinedStructPtr@VAcquisitionDetails@mojom@edge_acquisition_info@@@mojo@@@Z@base@@@Z ?InitMojo@PwaHelperImpl@edge_pwahelper@@AEAAXXZ ?InitializeAppUserModelIdForCurrentProcess@PwaHelperImpl@edge_pwahelper@@QEAA_NXZ ?OnClientConnected@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVWaitableEvent@base@@@Z ?PinTileToStart@PwaHelperImpl@edge_pwahelper@@UEAAXXZ ?PinTileToTaskbar@PwaHelperImpl@edge_pwahelper@@UEAAXXZ ?SetPwaHwnd@PwaHelperImpl@edge_pwahelper@@UEAAX_K@Z ?SetSingletonProcessId@PwaHelperImpl@edge_pwahelper@@UEAAXI@Z ?Shutdown@PwaHelperImpl@edge_pwahelper@@AEAAXI@Z ?StartAppWithIncomingMojo@PwaHelperImpl@edge_pwahelper@@QEAAXVPlatformChannelEndpoint@mojo@@@Z ?StartAppWithPlatformChannel@PwaHelperImpl@edge_pwahelper@@QEAAXV?$unique_ptr@VCommandLine@base@@U?$default_delete@VCommandLine@base@@@__Cr@std@@@__Cr@std@@@Z ?StartProcessWithMojoIPC@PwaHelperImpl@edge_pwahelper@@QEAAKPEAXV?$unique_ptr@VCommandLine@base@@U?$default_delete@VCommandLine@base@@@__Cr@std@@@__Cr@std@@V?$unique_ptr@VScopedTempDir@base@@U?$default_delete@VScopedTempDir@base@@@__Cr@std@@@45@@Z ?TryActivateInstance@PwaHelperImpl@edge_pwahelper@@AEAAXPEAVCommandLine@base@@@Z ?ValidateHandShake@PwaHelperImpl@edge_pwahelper@@AEAAXXZ ClearReportsBetween_ExportThunk CrashForException_ExportThunk DisableHook DrainLog DumpHungProcessWithPtype_ExportThunk DumpProcessWithoutCrash GetApplyHookResult GetBlockedModulesCount GetCrashReports_ExportThunk GetCrashpadDatabasePath_ExportThunk GetElfLoadThreadId GetHandleVerifier GetInjectionMitigationStatus GetInstallDetailsPayload GetUniqueBlockedModulesCount GetUserDataDirectoryThunk InjectDumpForHungInput_ExportThunk IsBrowserProcess IsExtensionPointDisableSet IsThirdPartyInitialized OQS_CPU_has_extension OQS_KEM_alg_count OQS_KEM_alg_identifier OQS_KEM_alg_is_enabled OQS_KEM_decaps OQS_KEM_encaps OQS_KEM_free OQS_KEM_keypair OQS_KEM_kyber_768_decaps OQS_KEM_kyber_768_encaps OQS_KEM_kyber_768_keypair OQS_KEM_new OQS_MEM_cleanse OQS_MEM_insecure_free OQS_MEM_secure_bcmp OQS_MEM_secure_free OQS_SIG_alg_count OQS_SIG_alg_identifier OQS_SIG_alg_is_enabled OQS_SIG_free OQS_SIG_keypair OQS_SIG_new OQS_SIG_sign OQS_SIG_verify OQS_destroy OQS_init OQS_randombytes OQS_randombytes_custom_algorithm OQS_randombytes_nist_kat_init_256bit OQS_randombytes_switch_algorithm OQS_version RegisterLogNotification RequestSingleCrashUpload_ExportThunk SetMetricsClientId SetTelemetryLevel_ExportThunk SetUploadConsent_ExportThunk SignalChromeElf SignalInitializeCrashReporting StartAppWithParameter

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

597KB

Virtual Size

596KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

73KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.crthunk

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retplne

Size

512B

Virtual Size

196B

Characteristics

Name

.rodata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

522B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

226B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

!!SetUp_!PaS$Kḙy$!_60814/resources.pak

SHA256 11d0f55c105883d203137a87a610ba793299dc4774fd6d8b3a86666a2c337041
MD5 df15387bf046715cc592a690da33e4b1
SHA1 ad93b08dff82cbd894f6a0a9733c70d7e564113d
SHA512 71244553d7b1b559fcaaa059622c340d22148bd5324fa3f6730d37322025dbfe5e853948b49b91db6022a25bca4ddbab8fe6ee1522a461963dfba04a7c93d69a
SSDEEP 98304:b6zN1Kt66I0+1Yk93pPVrXh188CYCUrwr1ISgMRQK8nXCpGm5vEybt:+zjKt66bGVrhm8hCUkrGsyCV5vXbt
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/test.asp

SHA256 42f229a1430516ca02825a0b8ead2aa296c1a1cd7e1b41165d918e6657fe4ac4
MD5 012206c2a828f8687db2a3e5e878068f
SHA1 ee75d067cebca73b982546e1d4c7c7cf32569e8a
SHA512 8a0c894cdf75f675b692a3e5fd0db278536c7b8044490fd1a83b47ca606996d9d36190017f33ff9874e0223dd6e2dbb9f5173c870d501e0ae57fbc2bb6ca323b
SSDEEP 768:3N8JIZSJ8vzKXwLldvfFBG+2WXT750jbo7i/mogJFQHEb7KJbvWOzh8S9Dj9qOYG:xhLKgbv350YWaSHWHOF8S9Dj9xDUJvM
MD5 SHA1 SHA512 SSDEEP

!!SetUp_!PaS$Kḙy$!_60814/vcruntime140.dll

IMPHASH 44c3854843f7a3fccdf8ddbbea66f302
SHA256 e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
MD5 11d9ac94e8cb17bd23dea89f8e757f18
SHA1 d4fb80a512486821ad320c4fd67abcae63005158
SHA512 aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778
SSDEEP 1536:yDHLG4SsAzAvadZw+1Hcx8uIYNUzUnHg4becbK/zJrCT:yDrfZ+jPYNznHg4becbK/Fr
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

f7:83:e8:fe:9b:12:41:fc:30:39:3a:38:a0:12:16:d8:7c:73:43:56:72:48:ca:1e:25:f6:f1:cb:95:e8:ff:06

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 3, 2024

Minor OS version

0

Major OS version

6

Entry point

64368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\a01\_work\2\s\\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

_CreateFrameInfo _CxxThrowException _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __C_specific_handler __C_specific_handler_noexcept __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __NLG_Dispatch2 __NLG_Return2 __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __intrinsic_setjmpex __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _get_purecall_handler _get_unexpected _is_exception_typeof _local_unwind _purecall _set_purecall_handler _set_se_translator longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

Name

.text

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

!!SetUp_!PaS$Kḙy$!_60814.zip

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/am.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/ar.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fi.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fil.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/8514sys.fon

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/dosapp.fon

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/smalle.fon

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/symbol.ttf

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/trebucbd.ttf

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/trebucbi.ttf

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/verdana.ttf

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fonts/verdanab.ttf

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/fr.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/gu.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/he.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/hi.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/hr.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/hu.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/id.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/lt.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/Locals/lv.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/an.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ar.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/az.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ba.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/be.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/bg.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/bn.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ca.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/chrome_[1MB]_[1].exe

PE Signature issue

chrome_elf

kernel32

version

ntdll

generic

!!SetUp_!PaS$Kḙy$!_60814/Language/co.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/cs.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/da.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/de.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/el.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/en-US/AutoWorkplaceN.dll.mui

generic

!!SetUp_!PaS$Kḙy$!_60814/Language/en-US/avicap32.dll.mui

generic

!!SetUp_!PaS$Kḙy$!_60814/Language/eng.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/es.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/et.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/eu.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ext.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/fa.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/fi.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/fr.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/fur.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/fy.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ga.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/gl.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/gu.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/he.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/he.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/hi.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/hi.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/hr.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/hr.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/hu.pak

!!SetUp_!PaS$Kḙy$!_60814/Language/hu.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/hy.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/id.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/is.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/it.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ja.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/ka.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/kaa.txt

!!SetUp_!PaS$Kḙy$!_60814/Language/kab.txt