Analysis
- max time kernel
405s - max time network
410s - platform
windows10-2004_x64 - resource
win10v2004-20251231-en - resource tags
arch:x64arch:x86image:win10v2004-20251231-enlocale:en-usos:windows10-2004-x64system - submitted
07/01/2026, 16:04
Behavioral task
behavioral1
Sample
sample.exe
Resource
win10v2004-20251231-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.exe
Resource
win11-20251231-en
3 signatures
150 seconds
Errors
Reason
Machine shutdown
General
- Target sample.exe
- Size 5.5MB
- Sample260107-th25tabx7b
- SHA256 a501583bca532c4ea11b56780a13a865b609d6a0fcd92b9c9b522f1edcc49c29
- MD5 9e35477130cd2731755a35e8b4c0429b
- SHA1 28811b212449cd4b23042770b437b98acb3f9c47
- SHA512 cc1d894c58e9209c0d9569ea8f4a1b0a2519df1cef6703fe2648ecafa2586be194f52c3c1a037b9d34df90b8d95d06279aa0d995b2f8a19d60c641cc75060c46
- SSDEEP 49152:dXMpGtlqibVwASODzFOgNju/+cw3Qsh3mlZm9FHnuswfB479lx14Q6od8oWK6KyM:Ol2cJyznus1R1RBEAEz2/W+fZ
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Malware Config
Signatures
- Renames multiple (10783) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1017923329-3442370593-12565554-1000\Control Panel\Desktop\Wallpaper = "C:\\Windows\\Tasks\\ba.bmp" sample.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\ja\PresentationCore.resources.dll.fbin sample.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe.fbin sample.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Dev.msix.fbin sample.exe File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\METCONV.DLL.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\themes\dark\rhp_world_icon_hover_2x.png.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\example_icons.png.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\css\main.css.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusiness2019R_Retail-ppd.xrm-ms.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\es\ReachFramework.resources.dll.fbin sample.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\splashscreen.dll.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\wpfgfx_cor3.dll.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\ko-kr\ui-strings.js.fbin sample.exe File created C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ro.pak.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogo.contrast-black_scale-80.png.fbin sample.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll.fbin sample.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA.fbin sample.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kk.pak.fbin sample.exe File created C:\Program Files\Microsoft Office\root\vfs\Common AppData\Microsoft\OFFICE\SharePointTeamSite.ico.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\cs\UIAutomationClient.resources.dll.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RManifest.office32mui.msi.16.en-us.xml.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\UIAutomationTypes.resources.dll.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-white_scale-100.png.fbin sample.exe File created C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Workflow.ComponentModel.dll.fbin sample.exe File created C:\Program Files (x86)\Common Files\System\msadc\it-IT\msadcer.dll.mui.fbin sample.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui.fbin sample.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Dev.msix.fbin sample.exe File created C:\Program Files\Microsoft Office\root\vreg\powerview.x-none.msi.16.x-none.vreg.dat.fbin sample.exe File created C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-runtime-l1-1-0.dll.fbin sample.exe File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css.fbin sample.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe.fbin sample.exe File created C:\Program Files\7-Zip\Uninstall.exe.fbin sample.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\libvnc_plugin.dll.fbin sample.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\vccorlib140.dll.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\uk-ua\ui-strings.js.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\rhp_world_icon_hover_2x.png.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\UIAutomationClient.dll.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\en-gb\ui-strings.js.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Threading.Channels.dll.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\de-de\ui-strings.js.fbin sample.exe File created C:\Program Files\Java\jdk-1.8\jre\lib\jfr\default.jfc.fbin sample.exe File created C:\Program Files\Common Files\microsoft shared\ink\pl-PL\tipresx.dll.mui.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\da-dk\ui-strings.js.fbin sample.exe File created C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\msedgeupdateres_vi.dll.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\ja-jp\ui-strings.js.fbin sample.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-file-l2-1-0.dll.fbin sample.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fi.pak.fbin sample.exe File created C:\Program Files\Java\jdk-1.8\legal\jdk\icu.md.fbin sample.exe File created C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\vlc.mo.fbin sample.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\gd.pak.DATA.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\dark\arrow-right.png.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioProVL_MAK-ul-phn.xrm-ms.fbin sample.exe File created C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-utility-l1-1-0.dll.fbin sample.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Resources.ResourceManager.dll.fbin sample.exe File created C:\Program Files\edge_BITS_4068_282700755\BIT75FC.tmp.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_download_pdf_18.svg.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Office16\MSIPC\en-us\msipc.dll.mui.fbin sample.exe File created C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\stable.identity_helper.exe.manifest.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-si\ui-strings.js.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\check-mark-2x.png.fbin sample.exe File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\apple-touch-icon-57x57-precomposed.png.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Licenses16\SkypeforBusinessR_Trial-ppd.xrm-ms.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_school.png.fbin sample.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_EnterpriseSub_Bypass30-ppd.xrm-ms.fbin sample.exe - Drops file in Windows directory 1 IoCs
description ioc Process File created C:\windows\tasks\ba.bmp sample.exe - Modifies Control Panel 3 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1017923329-3442370593-12565554-1000\Control Panel\Desktop sample.exe Set value (str) \REGISTRY\USER\S-1-5-21-1017923329-3442370593-12565554-1000\Control Panel\Desktop\WallpaperStyle = "2" sample.exe Set value (str) \REGISTRY\USER\S-1-5-21-1017923329-3442370593-12565554-1000\Control Panel\Desktop\TileWallpaper = "0" sample.exe - Modifies data under HKEY_USERS 8 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-19\Control Panel\Desktop\TileWallpaper = "0" sample.exe Key created \REGISTRY\USER\S-1-5-20\Control Panel\Desktop sample.exe Set value (str) \REGISTRY\USER\S-1-5-20\Control Panel\Desktop\Wallpaper = "C:\\Windows\\Tasks\\ba.bmp" sample.exe Set value (str) \REGISTRY\USER\S-1-5-20\Control Panel\Desktop\WallpaperStyle = "2" sample.exe Set value (str) \REGISTRY\USER\S-1-5-20\Control Panel\Desktop\TileWallpaper = "0" sample.exe Key created \REGISTRY\USER\S-1-5-19\Control Panel\Desktop sample.exe Set value (str) \REGISTRY\USER\S-1-5-19\Control Panel\Desktop\Wallpaper = "C:\\Windows\\Tasks\\ba.bmp" sample.exe Set value (str) \REGISTRY\USER\S-1-5-19\Control Panel\Desktop\WallpaperStyle = "2" sample.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2624 sample.exe 2624 sample.exe 2624 sample.exe 2624 sample.exe - Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 2624 sample.exe Token: SeBackupPrivilege 2624 sample.exe Token: SeShutdownPrivilege 2624 sample.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\sample.exe"C:\Users\Admin\AppData\Local\Temp\sample.exe"1⤵
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies Control Panel
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2624
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:5760
-
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe"1⤵PID:204
-
C:\Windows\system32\LogonUI.exe"LogonUI.exe" /flags:0x4 /state0:0xa38ee055 /state1:0x41c64e6d1⤵PID:4716
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_closereview_18.svg.fbin
- Size 736B
- SHA256 036e89154f9374df21daf904c9b407be5216ce59f1bce1dc5cbd793e1e39b3ec
- MD5 e429bcd3278e8402f4393c9b60701ad5
- SHA1 e36cbf33b72468b841e77f6ca03a99ef38d90522
- SHA512 bc7e7afcbe8c6808f3ae3f29027edb306b38915597835c444e69297f7161abcb038a0d9979098402f9d8c1b3c8593a347e347b31843b938b14d3c26143ee40c5
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\bg_patterns_header.png.fbin
- Size 720B
- SHA256 25279dc8b27876723fd7a326095bf5deffa14130741ecdecf018f1a57d2351eb
- MD5 bb1a2bad40bbad51046dd33839da70a7
- SHA1 479d408c7972c629d438415b185ac4a82e7a2798
- SHA512 099046ba092d33da4dc415f09880723bf2bdd56640064c6fe4ff9954a531877d43fb060d65410bbaa99fe53532f9139303acb75fa61f44a7cda138a31b8bec32
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png.fbin
- Size 15KB
- SHA256 3c4f45ada9ad4e2004ff07a7d25305d14ae8b32a7a0f19f911fc376ffec236c2
- MD5 b1ee041421890579bf12f7afc566735c
- SHA1 ab213cc10ff47d15be1331c021cec358783d9396
- SHA512 146c8afa4f0bd72d547a6d45706a0ed6227a7641491dd6b02ee62aa60de0001dcc1e206ba2d1ffb4b92fe4ed46ee2729a7509d2dfae74ca1ccb1112e10471e0c
- SSDEEP 384:I2/cBbI1xnowEIelCE8XBogEnJS7OAJdTQ4:fMQnofIelCE8XBmnJmBTT
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\illustrations_retina.png.fbin
- Size 19KB
- SHA256 b302e92cdb7eea45bb0eb13e743d5a87d6ebccfbd8ad8d0c43b15c18cb42ac67
- MD5 ea11c8db9b7ce55967b78cf6527b917f
- SHA1 ca086ebdd051eff4b3ef44771a5275d7bca8682e
- SHA512 fb97e388a56e1d48540e1687aab18eb4135c5939f5ee01694d87793c302937bf7ebdd12e3adeb10d732659bf737c264ea68e7939477a66a02ffecdc75933cdf0
- SSDEEP 384:A6cswzDFxtEPxcFiYs4zH3eJ4/jwm2CVV/WZiX0XhKPj0+KrYK:AHFjoxj/c3eJ4/smZViy0+KrYK
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\images\themes\dark\rhp_world_icon_hover.png.fbin
- Size 416B
- SHA256 1d58435b8f39b1dd4cf854bf80873107685b40d57282c6854bc831b5836f3e8c
- MD5 99522d2f803687bb407baa501de90ec1
- SHA1 2396af16200f7853e6833e115fd9c374576fd3b8
- SHA512 d539c000a3f750fbef31698b0ee62973a7bcb379b6a21a5ee794782f39d73ca4de81fbb837ce710de1dcd3c05fb7b0bf0e54f5c5e695ded9bf4a9a572f3148d2
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover.png.fbin
- Size 416B
- SHA256 043304f2b4837f9fadda43e6316ed9f100b40082704402ec123c3c09feb1df76
- MD5 a125b42685d9ec4a183fea754827aeb5
- SHA1 05f767d14c5e6bc5990d6689db270472b65bfdb9
- SHA512 eb70ef51536b1ea2f2ddd5fc457c58fae4f4351c2725b7c66fc188579ceb24beb5f992d2b6155e26d65b07e167a6026f60c5034ff6262b4389cea9eb3c0ade7b
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\example_icons2x.png.fbin
- Size 1KB
- SHA256 a3221323d60e954231e55ffd07995a0ce3fe6161588333e00af85a1c3e9f4b4f
- MD5 1430abe7387401465e63ec1aed86573e
- SHA1 ea033e8662ed5f2544d5a250b6c78a66e5907d8d
- SHA512 d2a1af40f790622ca6453e804f4c3207333af19b70c2bb8200c29336c64e9c32f6093e9d3237e61028c0270e7b07e57569727fb12bff37961d29095579f0e56a
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon.png.fbin
- Size 416B
- SHA256 15f1b8c56137b32a024f8d0faed91a0d5276bdf37186cd7a91d8f54ff6a1dab0
- MD5 689e7145e306245b2169730f6387f020
- SHA1 0af1421a06317cbaf081262501274ab84515059c
- SHA512 569f82e2a90947403b8873104c85b1a9bb9c1d047cb0f7635ecda215a6669aa043c199b3558aec001de723bbe9dbdbbfa278c8c4433f88a7b29b21b3ec48c314
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.fbin
- Size 640B
- SHA256 5786a719bd369b23efe1bea4fda3286d35de0640a35b537d5042a8613f25762e
- MD5 bdfb676e4714eb5f664deb2f7d3802df
- SHA1 4160c9210144851a056330f9029841662680aa59
- SHA512 35bc5c7c5c1de884dc0ffe3b59acb2e2b161f7de0132fd72589e3d2d29b2a23bf36809a702e17abf31f1a3012f0b7d9cdff92757d68f846031f2fc8f5469940a
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.fbin
- Size 576B
- SHA256 6d67dcf42233f158ebe8bf680ddf071ceada8ae088166b34164b72b662641a42
- MD5 ad5c567f42865c258c48d714cc0ae943
- SHA1 4b120cb32e2391b20268f410b75f7bacda75d3e2
- SHA512 ec9412073ad2e7bbc33741774685a092010ba95c5a4be4aa18e8a66958892b537a8fdb94f017f2c46e5b6361ae7de01641ed79a5d81eedf47eba6f9e23c834fb
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\images\example_icons.png.fbin
- Size 704B
- SHA256 f80f86e0123b0ab66114f9c617c1615d43cfe90a58d66d5a41f566ac8e2dce1f
- MD5 9f568d2cf0b340612890ae3431815838
- SHA1 d009617743fd223e9098674ae9f7bd541be927ff
- SHA512 5ead3e50dee094445c26b9e728872ea21b8794643f68e9313412c9846ed61d0f911613e12d35656e1126b91dfbd015da49166a48ec4b45d96d1fa3640e1f87e9
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif.fbin
- Size 7KB
- SHA256 093279ec670e08807d9879843d00819c7794ef1cf84b10dfcfd23ce8ab9294cc
- MD5 453499bf74254ce3535e39d132092ab7
- SHA1 314c7910b760654b40ccade83176bbfc615725b4
- SHA512 752c586e692c7a7f94fb9a2b047999363e58f6e22dd99a4056678665744942c743cdb4fbd0315da74cdea9e521ca828a70ef0be6ebbfde611ce149e3b30068ed
- SSDEEP 192:qyfjrPczCwytLhFHThKnhm+mDTCPAm66MmF5EsdLZS7P4o/pt6c:HHPPzhKnhSDTCYoDF5PFS8w
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png.fbin
- Size 17KB
- SHA256 7faaf48b557d45cdd0c8ef38c303daa8467bfa1c1129ef4d468c6000af03d815
- MD5 8414e27fe7a3389833a3bd299a602403
- SHA1 884aaf2a7d129308501e80cb0b649ac7c71497c2
- SHA512 961450eef6774fc46425ff226bf33a2bc9b8126f907de13d9ace0ad3a5494e479e0d162a40f66381d6e19292b304b7db7ed45dad3e00570cac84d31d1323c918
- SSDEEP 384:8Vi/+yzYFkofTCE/dwaWZ+DSHEj9dj3whGAfi7txPp/ZG4mDm:8VgzGj/dgcDSg9dj46xPpBHD
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.fbin
- Size 7KB
- SHA256 e8104a575b1807e2c20473e0ca6b8346a5289789c51e438fbd60672892ce09ce
- MD5 199ee70046e4c0ef4c790586f5cb7ce7
- SHA1 30053780a86b8ca63147fccc5e36b97932e95c28
- SHA512 05afcffa792c2a38da8bd7869840982ff5bd2390823baa40a3a5d6009b9d01523d2fbf16270ef46f7975712d7421c7d473d0e16c8b82defd22b62cc76a47f7f1
- SSDEEP 192:ixsvV6VBVTe/J7+uJ4cu16xwT7LLYK+CFQ5h2g+/aWiskt:usdWTe/J7CL1IwT7YK+CFyh2v/aWiskt
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png.fbin
- Size 8KB
- SHA256 4139d9674a8f15681e8703878b487b64e1987906233d3ddf85aa12ed49ce2276
- MD5 fad67b94542cc08cee45923daf61eec4
- SHA1 505f2f49013079d77ee73a7165b8b9e9488fa9a8
- SHA512 53a6638cfaf48c5b59072cc19f771cf2c437d09c8127885ed8a39ae4db75d804bc340cda5ae6385bfbb5f1e43fc33b3cf2c6dccc9415818099ff1a6f3e62d62f
- SSDEEP 192:Hjm6Ma0RhEh6JzqlRLy3zjwJTt2MkLvVUSW62gnzV9Z/xN5hl:H6/Jqh2zqlozcJMMkL6SW62WZ/xVl
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\bg_pattern_RHP.png.fbin
- Size 208B
- SHA256 e63c2c689e71352fd7fe90f547461f3b7aeb981cefecbe62ab6b9510e4c937ae
- MD5 7ff5c387ac6363e20476bef0449e7b49
- SHA1 48f9a8d727b19c0b7c2e563ea9b253f83ad78507
- SHA512 99e2cc86ccb586e0a06c5b0c1e9347db3fca573ebe44663a28b31a5e265e71c34476591d5c944246c497ae49692a774da786128140ffbe9ae53661f78177ecf0
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\new_icons.png.fbin
- Size 8KB
- SHA256 d9d8d5683a1ea5bc5c4ecc275048d249e401a1cd6897c72dfbc02e3a07a9eeac
- MD5 cfe1b6a1908da31124e4711b19197197
- SHA1 3a7d21fcde15059e495df72c6e67b855ea5fe781
- SHA512 cd736fd8555799db4d03221afd608683902024b6e5adb57af67609681116471472950c29e15eed90c9552860705eba9878be8035a82c5848f98cdabbefbd0e9e
- SSDEEP 192:C8Lxr+JbgsCkOlbXSIEC9V4Skd7Btz1dBlTvfsKHaZmDMIvfBW:v1r+dgsCkECSPyxBtZXlTHsK6Zhd
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-gb\ui-strings.js.fbin
- Size 848B
- SHA256 ddf8d46ffb364f73ad792fdd457acda6138b5baabcd340ee2bcb3fb4f9a99382
- MD5 131f3a0e5fe2899eaa9e834c353d2252
- SHA1 b843260c71673d52cb910d327eebb28c0e5fa30e
- SHA512 97d9f6d9ffc0fa87bdf1d4d6ac96584a5b28f9c05670d58bdda960f8ec1a2f005dfb1ce87513057fa0a4b6d6fe830ff64bc564641704ebd5229170e97cad3d68
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon.png.fbin
- Size 464B
- SHA256 1b1318d56adafca4a759214bdc293f6225bc071551fd4eebc2505a1aad2c0e55
- MD5 09cb8773a0ac6e511199f1cd358edf06
- SHA1 896bfb4aa53ec520b44a1e8de080a945357bfcbb
- SHA512 ac44705fbb9d01ed370a3b639c6245ba0031b16a4aefdcdb7ada293a21ac05ccdbfac61c8118bfeed1d34cdb7b0ee9e113134452a20fc6b94ebddef37212166e
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon_hover_2x.png.fbin
- Size 576B
- SHA256 19fdc1a56410fbad93303df0d4cf79eb92f6efb32f8520bdfbc05a81abb95da0
- MD5 0e51b79e3c8e3b71a735d36993074657
- SHA1 837a9e3dcb9e544d9871aa3e7c2820885aabe1e0
- SHA512 a1e0ecbe6f50e263927998b85fbe93470b8c8b802517725c66e0642f46e2d29550f722558e2e446a014cf138c48e210be9e168d8463af82c6261938326e36f32
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\themes\dark\rhp_world_icon_2x.png.fbin
- Size 576B
- SHA256 0f7389e0da1713d49eabd9bf1cfe43d9d9971a51de0cbdedf59b9d084cf3925e
- MD5 9b95d7315ab01214546a980c83c0b6db
- SHA1 d3a95cf5b6a0a16be96695294b824dbc18323b09
- SHA512 59e8a77445b3ad98afab84f9b8456568e5969fda4cadb0b9610920e2847867d93aaee8e1c773161e52aacf4dc434417144ffb71bc2908f93c616cac0d5c818e8
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\cstm_brand_preview2x.png.fbin
- Size 4KB
- SHA256 166030471c2db2067dfba041742e682031ebc85dc198c3daecb556fb2bdc90b6
- MD5 3dd3dd1a8f24af99f4d2e1e0bb567642
- SHA1 f69754887ccb37b5afb677c678732adb4e0dba8e
- SHA512 20d08ee8e8a3d9980b921dca0aed9b0081b7e1eec32b6657655ab2274b624f25897d489f47e67ec6d98918653ae932706faeb95e2af66a42b53ecdd75f605ef8
- SSDEEP 96:oUrK8MUcG6yk/Zs5FhukTmGx6fLZ3lUul7JJTh+u7dGPwjrKbl5V:59MUcJ/Dl3BTCaMIvOD
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\bun.png.fbin
- Size 2KB
- SHA256 56a20b5b3c5203dd542f390f35ae70a86eecad91c67113cbb09410ab4b384712
- MD5 1b167f3026eaad848d2e8c607a837a09
- SHA1 20c25c0e1f8213b2ebb3464a376fce509dcc5d75
- SHA512 d5b7945f2db1ace09c9971f0f2738d57374ac0613bc4b18c163bc32123c7e17c04397062f45d058b1f1fd7f055659eacac8de2da5dc05e2686875ca4a9de4586
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\cstm_brand_preview.png.fbin
- Size 2KB
- SHA256 c22887d1256f35e91b45ce44e0f3c1a491157fb6fa4c7ea882f61652bd4bc182
- MD5 9532ca2582ecf2810697308e1b553949
- SHA1 69c1ff7dd82a3e775b9cf699a4478f1b3232c39b
- SHA512 f96658a7e54cafa552f3760354f565d2faa427c5bc842f0a04ad477f083584cb15b9675f8dc98785eb2687c83a9664a12f1393369b689c6eb8d1021a8d28ae35
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ui-strings.js.fbin
- Size 1KB
- SHA256 6d5400ef75796a21a9d6c15a3bbef9e643bf1303f2bf85c564896dee662ed427
- MD5 7c8b3dc94a0d7e6b33aa070da8b1778a
- SHA1 933c17487f884acf7640422e767ca72de1c105af
- SHA512 548550d8c1ca20366c278e894f67bbec9df0044d289554f3bd02d6a075a22c6fcda28e126f72cf77ce55dfb78f556f6fc66ab11190732fe50dc4e9a9dacc28e3
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small.png.fbin
- Size 320B
- SHA256 c83fd8de7f7f3b776314da3d058950fad77a3560136419ff60489f93cd949c68
- MD5 a990ca7dea5d9808d3f57cf9cf27ffb6
- SHA1 e4cd7977ab8079912c4dcaf2b295b8b70bd71af6
- SHA512 69827b1d8c8cc8cebde3942c5ab2530f0464cd7ab3b44e3f8c808da1a3e45a21a6516bf4d1c57321e5141211b60575862fcf82bfb022f118c640185d85bb3b50
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.fbin
- Size 416B
- SHA256 f2f2022a265482f33dab8f89a103b7bc3a3a133dfa631a45b3b0ae608060ab2e
- MD5 9152f88350e5301be3553da1468bca46
- SHA1 8d617973b258b56defb047e7ae1ee63a4da6eb62
- SHA512 15b05680760a2261bb542bfddd364aa91b1d0b52bce7de910ffb4cba2040073eec108049d25a7c294f96cfaa3b9a4baf481f09768aeb1d222958ec9071b617bb
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.fbin
- Size 2KB
- SHA256 fd4c4d516d5b6c89e05908cf46f7e491746dfdd2abd5262d8948918aaef04aa0
- MD5 9de14232fbc8bd78d4189b6fe37a0a48
- SHA1 ff31585080e80096326e610d8f5664e1d9386e32
- SHA512 efdd2f7e6e53786ee067509f367d52d86f4e469fc9dd528fd1a95020872950adccfbf5769dbfa8059dacda16c24c8805e4ce4e05db7e7b98a86613906b9eba12
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\nub.png.fbin
- Size 1024B
- SHA256 3a6754a3adc2cfa76aecd6579b42bd7ea314e447e668d3c8f2e9f12d2206edac
- MD5 4c48a725522d8f27a090d642e8ac4c91
- SHA1 ca2c4af52d02b592ec10bfda6bc7f1f7b7a3dcb2
- SHA512 aa4c0b7de337fcbf2bd3762d2545f0cf95d3ed17d6c999ca2056b6911d9f1f8f99b627cb18a0f9974fb4b6b7522ff6c84909f8b7442dcdc322ec19a98b322a41
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\share_icons.png.fbin
- Size 1KB
- SHA256 c73612236498be061f005bea21514848d23402bca19dd68337dc5a77c8cfb081
- MD5 09479d43b975fae6f2254edd89a00f15
- SHA1 88dfb11b7011b58c3f28407e1b48cdb2e3bdabc7
- SHA512 4cf6c59ed5385ccdc4e78038a4874c180706c2d03db2ebd351e3e75048738a6c52d2f353368789bbcfb53c0a6eebcf52603fb748157a5a2dab2b764c63dc48c8
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js.fbin
- Size 864B
- SHA256 9f820fdaf647f205ca3f4bc4ad4a202c589a904afddaf4f77d625932ab0e535c
- MD5 3821a4c90ee69835fd266ab2104696c0
- SHA1 892cd80b0ccc6b613fa10ab0a217a7a68c23efc5
- SHA512 aeb85c80bba08f2f1d7cb93aaf59a3457d259299481905dfe241a2dafc7321df3d24ae850bac0db2705a882a1edc34dfcc4715eaab2e44430a90025c6ac3b0b7
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ui-strings.js.fbin
- Size 1KB
- SHA256 eba72d6182a22072811be7274c9b834370ff13006d51bc83c32420559eff3c57
- MD5 9e525d0908818186b12246f987948b9f
- SHA1 6ac318b91b361602c846b8cb0ccf2c7453fc713f
- SHA512 6a6456336a5fc5727fe6735612da6f7e1449802859efed55a9834b94550a9193df4853362d5ad86963a2c07371828edea34207202895c1f1183121b12d9fc2a6
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\css\main-selector.css.fbin
- Size 832B
- SHA256 9f6ca907b687a8cdd276bc3389ac8bd792d781e0b3c381a24b230e1db7a280a1
- MD5 b6f805f66e23e4ec5da029fe987f188e
- SHA1 445dc6784b11c522d031df362f212da5a5ed0f89
- SHA512 a21425a234da3eecae7f6baa37aa35ee99e011b143d596dd758bf744b23282dd425ddf03fd242158882bb66c9840527cf0e9d5776f05ffa8cfa8aa0ceb5b9cd1
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB.txt.fbin
- Size 33KB
- SHA256 fc1a88bec868cd49f8c9366fc115f0ad1ca30a5528a0580326e10c4cc501554e
- MD5 595e9aad47f6394ea907dd0b89823ebc
- SHA1 3578ff940339aac234882a8e62c25759e84e7b0e
- SHA512 30d7309d8a23f6e5d059bd8f40f5ef208053121f92f82d026b87c07bbeaa959044bcbf84d5cd2e59cfa296b18b1e41645aa8b32e1d94ff24d6642bace219ce1e
- SSDEEP 768:KT8EEqBreWEJgYHJRI7CjYO3+v9x7CdUZGUju1gTcEK3I:KYjqxDEJgYHzI7CkiE9I2ju1gTXR
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Common Files\Microsoft Shared\ink\penkor.dll.fbin
- Size 2KB
- SHA256 e474428e97ec349f046f93e794d41cf570b53f9292485dbae59be8945da8b5d8
- MD5 335dbf440e08bad38c5a63737354ffc3
- SHA1 72a9b854cbca36a3842d3487db8a0ecb470faf7a
- SHA512 5a7dc68efeb9b62164eaf6d9b7393ffc0c94843b0802564739399e85f6596235fcf048efe1fc7fed280a995dc941f1ec7af111335503d6234c2168c2d391a2a2
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining.fbin
- Size 1KB
- SHA256 9c76ac49a73def1d7872283b67e52221e6fdfaf0b1b478f433defdd001a3bddc
- MD5 17c06d5f69ae58c81b0577a32c5cec15
- SHA1 256d10f88ded70973f2079ec2c6b1eb083ffa0c8
- SHA512 ef83d6356c7f0a3c706e1634affd0eb20fa59c6777e34bdfbb7df740b6653a554d9da4c3996be064d8e4e693413e0563bb8f3e1a6c256628450a733875d3985c
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\LICENSE.fbin
- Size 34KB
- SHA256 20f8664df79cb01e584f67e48d6fdd7344ade05b4165dc68205bcbf82e72bf25
- MD5 8f4b7ecfb943d26928e418fdf948f2dd
- SHA1 e88be0841654412a5c4374080db6be1d5f0a6467
- SHA512 e64ca0a619498a7acf3ea35cb4ad2d74f60038e75218b93125525e7135289b9a5275edc1395743580be8587fad614b0f2f24dc4168bc35005e278c39955a9166
- SSDEEP 768:GUftf4Qk2ueGDOJwOz/omxPt40qVpayS3w6g56zdKmNKmdG:GItgQkddOJwK/omxW0qVEO6zdBG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Social.fbin
- Size 384B
- SHA256 9708df4bef0214d919d030d94453568ae98d6afdfda5c398fd46fa585a4a5111
- MD5 b723c6246f385d4ffb8e5a5d7cd5c412
- SHA1 4a71e137a41f09b141aeda2296676bb617e9aff2
- SHA512 0bbac8eb60c2abdf6b570832356038ff14274c4aafdcc547a21c5801d9dfa2613e156614d8aec5e1166963deda6fb8aae02fab53a05ec2fc3fdb9e71e0b3a22f
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Entities.fbin
- Size 42KB
- SHA256 86534bc6b69afaad16e0f8de0237845392e5691573b9003647fe74e1cbdcf1bf
- MD5 c9312d3e64d05e2fc1db507f4784130d
- SHA1 928660d1ed65d5a74117c08b098ebf034cbc57fa
- SHA512 d9777f4a50b8fe189127c9bf089e52f2f6227e82661c1e89a9bbc958e4422dcf5538e8d9fdf44773f0d74d335ea320c013accf60bf1c98702c544608a1e14b73
- SSDEEP 768:hCbHvjqyqxyOIr5+5adTR+ZoJ0Oqzi+dTfxU7beHHJNBy4jjUZhV0aEu9qOcd20d:hSH7qTcz5+5k+Q0Oqm4S7bkwmPaEu9qP
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE.fbin
- Size 96B
- SHA256 e76661a98cb33e635f393ece1a3f4211ec595418bf31a5af1ed84f03d610f7b8
- MD5 76f9f1b9ba6249a1b670e032106ff2d0
- SHA1 209d483070ee7a753d5906a3d20722273b228c3b
- SHA512 5e59ac03d36859e95dc1c110e3d5d3eae0512e3ed04f42901d663c5c4da8d700471a9ca4653ce1d5eacc943de0b13343ca49cf993f77897304b372442d2a4871
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Social.fbin
- Size 3KB
- SHA256 e698a1a702cf858e81007d16079860bfc5d5396d71724e3ef3c147e5e7026142
- MD5 c9e8d02ac8961b4b5d3bd2b74d806919
- SHA1 3435edb958312b18157483007edfbc0b6ce9c35c
- SHA512 1681e1481fc30acd493d55b25df89b9b0322b7225773f8967d254f6f882b0287f0b10aa607e20a8221fd561b70359747ccff1ef78088cd40beb5667c554c6186
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Staging.fbin
- Size 16KB
- SHA256 51278358abe68cc86316bc2607d9a9eb87ae9c972aad36a60c18dec902314b63
- MD5 654c2677187a47ea29af655002035e65
- SHA1 a445b6cd1db116e88e6061684e4f155a82ad3320
- SHA512 53dcaf6a24b4aa873d162f11fa2a42a4c45126089ac80ea59b44f88277a74aa2a0b64243091516be1522acc157c720f0bd9fc7486eae6bd476f861a924af6509
- SSDEEP 384:jAhrGj6ssY9x7MVrf/UYpZnLskITdQ8JpSH7sZCo81tjS+qf:826sxnwVz/UQnLxITdQ8JpSHWmtof
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\delegatedWebFeatures.sccd.fbin
- Size 17KB
- SHA256 c69f3df742e174845ad80eee4f43234e2fa83796cf892f8165d0d5d6fee49c52
- MD5 ec3ed3c9f2e43220ebdd0d4ad8f72cee
- SHA1 970b790f612a39891ca50b6a0acfa54e0915e54f
- SHA512 7c8d7a8fadfa65bfb8073daed300ca90e8d2497cee765bf9ef2e36130407d6585e540029c6046abb4ae1aef7e16a597fbee204f1b4bffceef2676440ae21e74c
- SSDEEP 384:gnxOUFXGOdnZ1NBGcQ/zmhKASus8TWjwu3u0j:FwhZJQ/OZSZ8TWjwCp
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Dev.msix.fbin
- Size 52KB
- SHA256 1445f5ba837811b8f2efdccdd0c033d98ec1020e7e5b3e999e32ab6cd0c8a6ef
- MD5 8d04e3d1fe267bbcecefe31a868c1320
- SHA1 c68652177e4aa69203d52bd259203ae67e6d9363
- SHA512 d978e9bc3c501ef4d1046cbb601192ea2b26c60aa123112e51e99d0dd105bade6a5a05ea24d46e463a2185541f2b0973eb457eacc5f5d1749c201fb2a7f9dcd0
- SSDEEP 1536:n4EbGZtFzJd30fihvWgcIsHSnCVFUbiPtNrsAsZKRHL5TT5K:n4CGZfJ9sjVFMiPtVDsURH9T8
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting.fbin
- Size 1KB
- SHA256 cb37bf3f9275cca97d1f452e4a76e28d4a88fde3c6e52b29070b9d633f727a9e
- MD5 c592815b7ffc078b854d5398313202c5
- SHA1 41e0ab116a61cc7c4eb2eb17890572ee4b533cd4
- SHA512 9606b387c2b0cac57baa82e523aebc43b6f6e69d042a9bd17f7ddc2135c84b34903ccfc983b10e9de9f5c99ffcbbd9045fcd96640240575e92d9820f08849915
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers.fbin
- Size 128B
- SHA256 1406166747e422ce849f379ade890daa42fa3977278800dadd564acdecd87356
- MD5 ffaa9c657d20dbbc6af767e74b2e903e
- SHA1 5899a3081cc730dfdb3c7a8a72f72bb4b26d49b5
- SHA512 1b86533e8a2c73416f46398fb166cd0b27cf966c2ab9fe1885b545b8a2ec27926a1a284049d8dc0c6847613dee85a51efd9602a1baa7a051be199f7332aa20d0
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Trust Protection Lists\Sigma\Cryptomining.fbin
- Size 48B
- SHA256 74b4515e3bfe3a695674aad3edc1f6ad379da135d04b044632184a59eaf9a149
- MD5 8faa20f37d269015115aa722665049bc
- SHA1 85f7baa5e1df8232d6effba9b560e7b1557631d2
- SHA512 877b1e797efcd22472294d198715fbbb444ad48d3ba99dbb95ed0bd901236e478007c8350a972c97accb6fa51c2b51f5816dad69c8faec33e9e224412a9fb253
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\resources.pri.fbin
- Size 3KB
- SHA256 ad090348a5c9e828cf584eda9c362a4eb89af0c8441d601579ac04f534851869
- MD5 0b4ffc37444ddb09097e914cab1d95e6
- SHA1 34c0033719edf382f2532a5c082d81c4d8ca487a
- SHA512 e4bd3a2c1c68e53e645e2feda7faf51a8e429c98193c3ae304c34f89a5e4824fcce9dac2b3cc742ab4c1cc37d4624852cdefc80081eac41d4aa0d27833932b25
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\win10\identity_helper.Sparse.Internal.msix.fbin
- Size 56KB
- SHA256 377452479e66391c6cd791e65131148b897618ac7286558cf63de8b39d9cb2a9
- MD5 0ff484221b6a0367f14b95e439d04a25
- SHA1 7336b811b67c624df40c714ecbebb026e962d44f
- SHA512 7b1a7d2e5999f11f143b66d027e67bed8d76c31e90c72bf6bc934cf1b0046710e007ff2932b035453fe339a4d747030ae109c12a1ecda31468087c85b0affe03
- SSDEEP 1536:9L0QXy9THaNXww13oPyuEo/yRL0CK9paWYq/AEwqecW//z9:t0cyd6NAwpoKuEAmq4EwVcW/x
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\win11\identity_helper.Sparse.Canary.msix.fbin
- Size 53KB
- SHA256 ddc6e8b30357389b18f22f08792d832bd23acd2809307b7aead222a3e93717db
- MD5 1a5e3475467474cfb78d93812f593ddb
- SHA1 f69f88fb884d6972d175fa3571e16f50c58c30b3
- SHA512 7eb570afc32b521529b3bf5fdaafa487096f9c2e81357875da939d65e910e2b4f17152d429e80d06ba55607367e4a2e4b5171df97b05ee9654d99c2c54bc34a6
- SSDEEP 1536:RzMbpOi/U02DCm9pSragR+iXqRRrj/TeY7aeT:Dgr2DCmHSrlR/aRRyY7aeT
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\MEIPreload\preloaded_data.pb.fbin
- Size 8KB
- SHA256 2b38dc356d553543f0871579518c1ab36394005b063dbb21bb75d79181e35ae2
- MD5 27673e49fa31a17523fee20d9af3b02f
- SHA1 ae5b4f2857fb246888d156773d4ead7e9671f500
- SHA512 d35ad75d257867651e0208f55511f311100f2897fc80e4a716e3304e6d5c6b668e67fc5d64f1654f33c33f32bc2e09aa8e95b125cac4aa75bb79ab37f4083a76
- SSDEEP 192:4N6gIYN+aQNttad7slGA3SlLM/PJMfei6DwU6om5yFI:YNPNLQNttmBQqLM/hMfei6DwU6x5L
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat.DATA.fbin
- Size 80B
- SHA256 9640eaa589bdd8f799691849bdb3bc22d2c9f80b1e621c49dd2312620696cb67
- MD5 d49bda86f36b8d9e1c8823d52a728a0a
- SHA1 8c35e88e196d256d68e6c39c5439d715c154e13b
- SHA512 8458fc29a7713922a3ccab2b59fdc970a079e46ddd2b4f27ba2f663bdd89ffc940f717fe089079ad7ee5a5e67a8f44812282a2386456419db20cf14ec0ad07c4
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Edge.dat.DATA.fbin
- Size 12KB
- SHA256 67f0420ca9fe487637937e5386c268865720cd3bea4b3f962c7d9a7b55764000
- MD5 5621ba820eba7dbf9ad6710defe0d054
- SHA1 b26c1db137693baf6aca3aabe7f71660a949b8dc
- SHA512 0f2939b5ee7064381c1182187172c384e672d13adfa83e13c3187a127797dce0c6cae118f0269dade2f3817e292641c76ebfea7fefa4967a0a7c2df3f4193150
- SSDEEP 384:32gXi5x9/BkcZeRCZ2tHThR02rHLYwfcg:45jveRJThRLHMwV
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\MEIPreload\manifest.json.DATA.fbin
- Size 256B
- SHA256 5cab88d397cb441bfd8a97ef57a430d80d2800cf2f58543e749cca224746a431
- MD5 eecb70445beb541557c071bb19c1238a
- SHA1 4cba56bd5d584cd62231dfb1b06d1ffc20e5d1e5
- SHA512 ade8749fb6c0dc67427db740d019b93a14c88a2ca21c53c258eec11059af32bfe8f5f5abfa99bc89aa9daf640b382eb08278335ebba87bb95b4f966f3940a83c
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.fbin
- Size 448B
- SHA256 0ebb262e02d08d0bd6ddde77fcf0122544de4c070bf7a96f3bd084873e68cc33
- MD5 95a85cc17102362ec697363532172f3d
- SHA1 036fb16055ded323e3a4ff73a8b9ad200d88bc55
- SHA512 10ea29b2d43efe43c748a56e47d672a88f0e50b6972b0c257ff04bf5a77fcea3611cec6847bbba04806274905e8d116e8541702a50c1bb4fba0552d8deae2e68
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoBeta.png.DATA.fbin
- Size 29KB
- SHA256 a1cd052c9b783d253afb128827b29171ad831979c01a3a89cffe7f5e3b94d574
- MD5 445afdc0f1fef4aae76b26c8d116bfee
- SHA1 ecda2fc085e3bb6b1ca9e976434d669436ffe2fc
- SHA512 43470cf44f9a9bf179abadf422e197bdfeab1313b8707943f4fac4117694d94656da1d7b414d9c411956e7eb75b8e017a0bc7c9fcfe3be8f053387125380c14f
- SSDEEP 768:4rpOEHdIK+s70YTS5iXfIKqyLXPe42PkK:6OEHdEsc83LX238K
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.fbin
- Size 29KB
- SHA256 fd74242ab1925ad4ab5eb1c445adbc0a5a21d0148211a066c666b4e7a72d51e9
- MD5 8c5945b16344f6d0f07405a50abd6bfb
- SHA1 4188131d3ad538cefa9d81e38fb302e5a80a2df5
- SHA512 7abe5cc974de0e4938d34dbf730a2f4755bdc0296c839b7872fa16f1d589d7975304e0c7236d15ca0dbcc2a178d6aacb2fb53321e1dfeb424135602daf9ce86e
- SSDEEP 768:yeCWV5mQjUGJzGqnI8qPAB/N5pB9u0bqJWpNLbm/DKV:ywbmuUo1nUYv9vGJWzi/DC
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogo.png.DATA.fbin
- Size 15KB
- SHA256 6ffb1a7082d88917496224cbc23c91e0a039e38d768d6b036f3b0b3f408cb7e9
- MD5 be91ff9c7e216eea41c65fa2d6e94955
- SHA1 bbd57274b193f4beabbf873ec017e624ea231a92
- SHA512 b5636202cc865dc6d7a20df545cc25da3a1cefc09389ca38186dd63cf8c39fc9a6e395ebb369ce5f6692cc3941b11746f2ed54bfc70b70fbc6089fe282d8bb9a
- SSDEEP 384:/MmItJDe1j9SOhkggXPgbglDe/QBv91f/2B8OkNLvb:2TDw9Sng0YbgIQFTI0NLvb
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\SmallLogoDev.png.DATA.fbin
- Size 14KB
- SHA256 dc19c9f1712d6fe3396ea27c9a1b72c51426c85d094def544c673b00f0f60c2a
- MD5 f8d57742ffcc410fbe2d56a6ab6b28dd
- SHA1 92cc89f1bb05884d15d59c9ea5e85fa8897bfa63
- SHA512 cb51f69fa89db6ff10155861e7817386a18f7056320084d22f2507afa01688822baf546d7417db100ecf504a286a61ce903edee57c182746f543abba7b0ac4bd
- SSDEEP 384:bZylnDkV6Iag26AcHSmVTP9qV4MnkLBYdhx5VK2NY:bzVvag26AcHSmhP8VpktYFblNY
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Analytics.fbin
- Size 4KB
- SHA256 8798c58f2f2bfe879714db2e86cc16e2bd2c007a228b9b0e3ff88244060751ac
- MD5 2139363cf5b8ebe1c8879c6693c8f29d
- SHA1 0ef097c424c3e7a5ba51c46ccaf0546b7627b444
- SHA512 21a82f5cf2d5bd311a27349924bab26e9d31f0f9c37cb2203d63316d8429502243e6f5d1a63a538d127617833087f48017baec5d80e674aba0fd6bb44992ceb0
- SSDEEP 96:xHefpHp14qZsq9is4dIly0EgV0jsqYF4y91QU9UyrOziyN+XAqev:xHCHLf4dIlXEgVvq4wUvRU+XAqG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other.fbin
- Size 64B
- SHA256 fbaab57b89fb476655c2c424714402e0e6ee971e0f0213df174020a085261b3a
- MD5 c1849676f0df39209a5f6fe6628d4a97
- SHA1 39e8c5bdd61213661d231e895ed68ca3acc731a8
- SHA512 4fd01fd99682a075daed499887cf38c146c876da30405679865cb8e16270c395fb5b5f226fe48d96b126ad23cc10bb00cf35203e51309df9a77091c477c021d7
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting.fbin
- Size 192B
- SHA256 b41d631f866be5a61ef22c39c239265d0ebf580eaeea149f2e8b4fe1bf8b59fb
- MD5 2b682de1df60c16137822096bec03cc2
- SHA1 67206cc6f503a337a16dc1a19153797fa661a04d
- SHA512 5c2f4fcb3173b99a3b9014d1ae3660370c718a1040e2a18fd41daf62862ef834278c949fa8320b20efcf123b99a2efd2c847361ac1ff950ef253baa8d11e2b9f
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other.fbin
- Size 112B
- SHA256 3af66a86165e530ce1c52d97188be2ba5eaef6eeaba234f72fa253bdd1a212c1
- MD5 f08bdd3b9a514e8c5a5289b85e19ab69
- SHA1 e0edea864c0a12540b47c7dda7ae1f9e9d73b5d8
- SHA512 5e587a71ebe963234f62ab6c5989d3c6080415add70687b81428383987aaab60c4508696fdc51e18bc69595049b6b1fec755f3c0ee45a82b2b2d25eb815e8304
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\edge_feedback\mf_trace.wprp.fbin
- Size 12KB
- SHA256 6a3503b326ae91d8c072538f30110e9d51aef72b5a4a91e253f1d9a55b1f117d
- MD5 e59554e8e6674a0072085179388660e4
- SHA1 f0bd82f2ed5b05eac2df4300b3dd6bb5b31256d3
- SHA512 9ca85ba1de2b3e279bd8f43905e02f42d4d8cb541a435e16a7590718d81ef6b0a745e46e5974bb9df66c13574fc03fc509a72ab1da1d627aaff0d3ab292144f3
- SSDEEP 192:RJGk/0gwhRnzflPTCsEGdUc0RUIfxOnkfP7h2k3W6Gejxcil7dNiGkjHoyQx5/5d:Xb2zfhTTLR+UMThxGGVc0TAm//5JpfNb
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Beta.msix.fbin
- Size 53KB
- SHA256 094cbcacfd9cd21fac108eaea27008239fd0eb0f804b039ce84c4551e0cc30b0
- MD5 2c84143a2aec65733b99f06b28d67219
- SHA1 7f817411fe9e04617a96e97828d4bd7b8d932ec6
- SHA512 b8901c25decb2defc78b69eb57c164d545a30e5f63409229d43a5af3e07d902eee469fdb720e9d3f4a09ec47c359d3bd9ec64d3fae7d69d8ec7857c94cf5c831
- SSDEEP 1536:Fsm61BvvvPTrlpNUlYFv16jeyEpsa7MiMrm2KdD10Y:y1BvHLrlpSeFtAe9PMrm2i
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Canary.msix.fbin
- Size 53KB
- SHA256 de62950a83a87261502d5e5cb0cf7d00201e2f26ae09d4435d582e0e8ef80703
- MD5 f97fc68736fcb3544f8a9aa515b895fe
- SHA1 0966f3f5275c0cee84686683f712afee52f34383
- SHA512 36d7c289e4ce34b0c49769c3e3cafc125d91fd0baf639c67870bfbccd060c578fe79bc10544d03aeb362461aefe2cbbcc3a86ef6ae74ab77aed37306e5856968
- SSDEEP 768:vDPuwX1gHsYOSQ4TCMfQNeQoDAaLVsku+KeXDPA3iY51TPJDFxK6wlsH:vLuYwQ4QkDDBL6kuD3H/BDq6wi
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\identity_proxy\win11\identity_helper.Sparse.Stable.msix.fbin
- Size 56KB
- SHA256 f431781ebe89125d0e9b64355d30adf7974786ccbfec20515d9f31dbf65a9286
- MD5 c0ed54345dc08d784ea601edeed1ef02
- SHA1 2d21b8443a76470e688f81c902a63f98861d81ab
- SHA512 4540cef364cc6e2bae2cc442e5c5bcc6408e91986ba5c928f235ab5dae9a26c3083e56cea1b052863512f577e479855d1fe78dd6bf7930a12a5f4eb0599dff6d
- SSDEEP 1536:goGwT8b+6Y9OoYycBHU7ebOKUllXi9G1QGkt:gw8b+TYo1cBHs0OKglXi9GaHt
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\AdSelectionAttestationsPreloaded\manifest.json.DATA.fbin
- Size 144B
- SHA256 86c24b7e5b403f9bc66a3a941dd57833b4a56e4e95aa8f83027e372be5c94880
- MD5 9e1412bde39204c1180fd3abc85059c9
- SHA1 c7d4b3811747c8a5e35ad4d1593092a9b3183951
- SHA512 f57915b37365edfcf39ce6f755813f4f8ec178370f4b0d7da070e6e1bc1b37c00e9f583d5c098f692a56d7186c4661643bda789b0a2b74378abe2545acea4819
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\EdgeWebView.dat.DATA.fbin
- Size 8KB
- SHA256 fa4a059fc8a13e8f3167f71e3ebaf21e0ff95f42a8eb51a0b8c833537a8f21fe
- MD5 f5cdbfb85a3da3391d6f2e8157b80d34
- SHA1 5639ad3e537186d814ecf6f7774382a00be467ed
- SHA512 5cd5ea12a25dd18223a69c3db011d9020c6ceb1e8298f15599f58c54d2e1521980b49af170a9fd3f906c34dd4bc15ee0cd182a18138eb4ba2703e62adbf5edc7
- SSDEEP 192:QdrIpioO8VccSZsinW/J/bemjJLXh+IGQXVIF7iUgy3jusmh:QdksoO8VAs6W1bemdLVZytiUH3tmh
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Extensions\external_extensions.json.DATA.fbin
- Size 128B
- SHA256 79f6b9fb0f73a077b10d5f473537d2d46edafd2c1e672591de72d806881fa1e7
- MD5 da78adced98444f768ef3f7f36247885
- SHA1 45c12e58c95ba17d38f518128c5dec55884a8800
- SHA512 481e296f2cc389426783d2da82d73b932e11489e1a2bf39e65708048336da75c018fe1da7140efde8d3812908338d55283a09d739ee9cfdc35f0d19a5339882d
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\CompatExceptions.DATA.fbin
- Size 720B
- SHA256 7f1c1de314df79eaa07262484a90f4fbe51a1c1729efdf040b8d8f6596901156
- MD5 afc3158fc90bba54a1d81e08cd45099b
- SHA1 2fe0e8e93c986427db22461cfaa2cfb049b78558
- SHA512 324cd7ddb73078c2c92acf89bbde73f7538d3af6a45acc6b21746ece2e3653e58c5e8cdb6f3a7ddf45ed8fed44017627c041cb9e8c65a0120a7bec2979cd0362
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\Mu\Entities.DATA.fbin
- Size 68KB
- SHA256 c5b5aefaf85a9b82926f80187b3c50712e9981f3709bd13dded3aa8f783fa692
- MD5 b12f080f3b06cf319c943de6d75a1ce4
- SHA1 28864d03738c4d97d691e0475039b5c9dd02e08c
- SHA512 db656675890fba03ef670a7b7cc28742f7782343b4d0981c4ccbd3819c62e4790c0f09b37d4e00785e2731347b06aabb6c68bed5d085f058987cd6e862a11ce7
- SSDEEP 1536:B1T9fU45Uj85w052RXCfyJq+3AQzJdzW8fLx6J+KonAdTFL:fG43wDayo+3AsJgJ+KoAdTFL
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Trust Protection Lists\manifest.json.DATA.fbin
- Size 160B
- SHA256 c84e752bcbda44880221da66a2a8841b680bc0cc0afb91200649045432a337ab
- MD5 ae6edcd006b87779ec3b7940818ff49b
- SHA1 f50a221f022e49de7f29ba616ef2c7c5bd76303b
- SHA512 de5b0358911d2d76a73cd749cd76cc0ff117bdca7b00c945d3100235c54f26e8efb0456607ab810cba8b152db9fc73ce68a85f0f9691f45d70b4eef5b085e404
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\Logo.png.DATA.fbin
- Size 31KB
- SHA256 bf7b39f7e5170abd6a277f78a492101b2d6f61cff9ba4f2f63326afba570351d
- MD5 b992738215d8540cd7e1ba5473f1f4d4
- SHA1 29f04ee227f7ade3342177c7704185df59cb9682
- SHA512 b8177c1ad56196b7a36f4cba77fe56f9a9196a4ffd0a1d9c38ff7249acc7ceff3f14e9e05e842f5d6b8c66dac26c79502c6c2ba1d90dad762252ab7f2e0a85bb
- SSDEEP 768:0jjKLdxWylGE+xRD9dvY04kWRCkkqFk4YSHipQm:0jjK/HlGEo9PZiknSi
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\LogoDev.png.DATA.fbin
- Size 29KB
- SHA256 1ece301a05ec5f7884bbf1bf5f59fa2080594c1db8823661e2c84700a6e2a960
- MD5 b15e81f9c5a2e99ff9f6b0a278a2a1d6
- SHA1 f35a34d77eb56c5dca6e43639173c5caa8f53ef3
- SHA512 b0d71c37660b78152863b10be09cac27111dea30d6cfa6c34439fa08747ccc34d37c5df83636fff74c10ce685e861ed39af83c9314ceff4075efee147dd0e0d7
- SSDEEP 384:pC7w3XVXYE1rpe+KlQTkpbEGOU6JyYKJhTZNWSZ5QlUyUPZ4zdeW3UbvFGwMk83M:XnBxe+KlQTkpFsFpyqdeW3UL+QxF
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoBeta.png.DATA.fbin
- Size 14KB
- SHA256 5c100e94de275cddbfd1a2d0c217167b4035f40f098c02dc1fc2529c455a27be
- MD5 0614f7cf6f21c9b70edd884b6ca73c4e
- SHA1 832b5f51f072fd40d452e0596149717237fdb35e
- SHA512 830cadb1e354bc58eeccc47f17b9e8675df0be585bb36ca0ffcfbc042576599adefe8dc1a7dfe4412b5bd3e25cfc62eb27f7c1261f9083888cb97c77e830aa16
- SSDEEP 384:krCN+P4qlOFExEoOyYP7M2quPs18hCqsESx1Dvft:krlM2GoOTItuEX59fD9
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\VisualElements\SmallLogoCanary.png.DATA.fbin
- Size 14KB
- SHA256 f822b3c5bf5a0102c6765423c322b7c28530391531a25ab8bbee8961da409870
- MD5 dc6a0c677a8f18fd594f3e5f7e759686
- SHA1 dcab66c97132114698633d9b27e3df570aa999b7
- SHA512 e468b1226a67e59bc5eb5e0349e9efc8cabfbd47fe3211c74cb796e1b5bfed83a2d6ccc94f359da467909c3b6c5aa57bc99eb67871e9e94fec07ede0f4c54630
- SSDEEP 384:+Ygsex3R/KAHSJqbzFnBg5qWPy4dPYQMG8bN0t9y54C4mv6h:+dDSq9dYRPYBTbNUS4C47h
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Beta.msix.DATA.fbin
- Size 53KB
- SHA256 633c5d2b0d3afefcfb3bc673683ceed4eb4137db650cf0c71d294917cd76b19d
- MD5 57f1655737d5de78a785665bda6265a1
- SHA1 33acc5b86a765f3a988a9116a092070ddb33cf64
- SHA512 0ec005ee3f07f0a3a18c914b7d2b908c04e31c0265c15e3ab04af62944b2c588ffa3fc9ae4b33c6acad43479b095d01e00b7572db67c74d44b593968c9a108a4
- SSDEEP 1536:JAZl5CEo1qp2ZN8cZBqRCamKDZJF4Rd/F76CX:gTCEou48cz/CD3yRdwCX
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Dev.msix.DATA.fbin
- Size 53KB
- SHA256 a48fde4aa9797c669c23ed6d112ccfdbadf3dc58e573170c31c76fbda37b6e2b
- MD5 0c696d3197f30d3cd655e075291ecd67
- SHA1 9841f2107b6548cbcffe54715a687f45ddc762c9
- SHA512 ac768b10a772632ebe21a1ffd9f780092caa9fb956b7c36afc370f98dc4394dacc14f747cd293ca600447d4288751cd75871d880a81fba36bec9d4d1b9a3f3d5
- SSDEEP 1536:Cu9m1Hwl1gRA6xxIQU/wTFyveWjbwJHr9WYIPZ:R9mOWAq7LFseW3wHrIR
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\vk_swiftshader_icd.json.DATA.fbin
- Size 128B
- SHA256 4b0f008da0188cc8658cf05395a30e5e4a24c5472dc86782b3ee1916c0a20fd0
- MD5 e90a2082ceaabaae67c4fe310a908938
- SHA1 29e15547695ea2cfa0af9bc3dc21d651010a0a34
- SHA512 cddb03ce9adbb5bcfa569e8bcabba50756d233a2c9d0b4eee3258e90b6af7f425af7a03e0d847e4203b24b3b1c6d1dd7e3d2a9d405fedad710449ff56e460b57
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Advertising.fbin
- Size 24KB
- SHA256 8c4f52886e55990dd15fca6902e11f609213c3d76aa9b05d6b502a9f226af2e2
- MD5 a69cbcdd78783410599391a0c07dda3f
- SHA1 59122cc18391ab18ca7f3f9cde41c25259dc7e83
- SHA512 9c325e4f13e882cf33b74883102f0483d10065ea6248c83eba63f1213df95923f1131c82c32410938317917ed5f6b61a576d1ff23fef6c54516f240b27ae8eff
- SSDEEP 384:bh10Zer01mTaA+dvgqko1qpRqS36fCuR0MbmOPKpOvcWtYYe2b8lzWKsUhVgex:t2K01m2Agvgy8STSOPWOEWtYY7RhBex
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Content.fbin
- Size 6KB
- SHA256 ba60eb008492d71bd7043f368e1a242c371ad78e1289f42f0e36e04bae8a90e3
- MD5 8b1a5b306053c1b373646f9095bf409d
- SHA1 9fdf99ba306bf4f9be54cc33d9cf918d4918d8fc
- SHA512 9cba3cea69646da5109a36564db25e58fef137512922b34f7cfcbfe731d138e6effc863b76537eea9256ac071de659cd3c650d5384a1a66baf9a0882fa722298
- SSDEEP 192:tkhtdHAbhZhY32OpPRf8a5GaRa/gixWzCRXNftEwKRHu:6f1sh8mOpp0sAgmWzeptEPu
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Advertising.fbin
- Size 2KB
- SHA256 b3d361797a5bf251ec87bd3a8d700e83b1b127cc878d9ac3e2adaa89c67041c2
- MD5 6c7e89ccb4f514b26979014c427ff3a2
- SHA1 a5b8daff69ad7e151bfa5ae052a010124ba5f243
- SHA512 f5cf67633ef0486a21d9e0776b895fb16eb28c48720d0c01c66c6b2ff0bbb4846132ceba1df68aee08ea58c4fdb5cf984f94645ea9adb4e6ae4dc3c04c99caee
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Content.fbin
- Size 64B
- SHA256 17094e00f086fd5f452ac109a3b826de0456315a0cf2c463f66523c3cb77d5b9
- MD5 c3a387cb07d56bd3d9ab8f71a7c4c55d
- SHA1 7765094c468b90e95d34ef9450dc920d866053bd
- SHA512 7997c2dd07d23963d1946cb62feadf8af737de7de0bc5af3880edb28ef876a3b2e0269023e9b1f659c3690f408a93a4098d1d4c8626a2d2064a799e32fde049b
- MD5 SHA1 SHA512
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\edge_feedback\camera_mf_trace.wprp.fbin
- Size 24KB
- SHA256 fd1a404b93c0b82e96f679e53ecfdcd4c057ad0aede2f1b7b52d6649cea68521
- MD5 4d1644769bc0e791963cb7119bca2731
- SHA1 82aba1afe3b8c90c989303564aad0da66ac0e654
- SHA512 30047236cbfbe905e71c5ff20a4a4b16b256ae0c5cd574141d14afb458579b1a352c09f6e04d5d62aed26b98e7e21cc4f126c3139e73ee8cedb6f26dc575102c
- SSDEEP 768:SP4hd7GpRnep+LuLy26xMXJK2o+FxK1nL4:SP4hd7GPnepoey2nX5F0E
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe.manifest.fbin
- Size 1KB
- SHA256 10bedce7a104b8155b9fd157cc35d951012a4fb07a615e5ab96a1447edfa6627
- MD5 9b42e5a13756963a315d8cfd387668fb
- SHA1 87787b2df1df05d9335ac76fc4972ccd36a632c0
- SHA512 5fdc5b56749fc501a9f5537eeac20baf7721880a5fedbb7b0ce146f19dee85732232a20277526fb1f9d9645b8a089b751bb9d48bd3cfb359be1e4198d350c230
- MD5 SHA1 SHA512
- Path C:\Program Files\Common Files\microsoft shared\ClickToRun\msvcp140.dll.fbin
- Size 613KB
- SHA256 3651f1ce33933aee5302b3519c9e4363426b34382aa233236d7bda890c47363b
- MD5 97e4b96e3af9133fd542593f91a126df
- SHA1 8f30c0b076608b0155cd2a6f64cd3a141dd8e121
- SHA512 313361a167725c89b9607ca6cd6f3d6d962de1fc95e85a67ffaf44aa3fddd7f3c478f25e9aaa412034602040086d6272201fbd17a1477de9b00a9ce9d4876e72
- SSDEEP 12288:59QG5KhUW391W+edBGTLQgKA14TeaivM5i8BII9IpF8v5FKJ97RwjOoRg:5KG5KjUrGTLO9iwi8TwaKJxRwG
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll.fbin
- Size 558KB
- SHA256 2d70944c3de8d337b89f26f4938513c0248c73ea16c3fb76165e554c24b23076
- MD5 e6e38bad5aa976fcf17599ed869c3e08
- SHA1 1f99b91e7218333ad4318d080cad1a75156fd810
- SHA512 311274a8d37cc83af90c94e57aaa1fdeffbddd32758e23249716f63f503483b0745cee78c0c70c1de17ffea5bddc1ba282247c6a56a118caee0e6b11ef0207ae
- SSDEEP 12288:Ey/1B/O1O1C+KhwNEVdl3p8D7AOhBHWIXFelqaOpG48:Ey/1BX0LwNEVQ8aXeAaO4
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\Java\jdk-1.8\jre\bin\plugin2\vcruntime140.dll.fbin
- Size 95KB
- SHA256 5daaa4c1730740f90d0a2d9e7b9e935255a9cdfc8716cda25bec8d23fb3cf7a9
- MD5 420a71a9ff5d01d2fa1011580fcbe35f
- SHA1 26914c5d2f26dabca8037e00b3f3492a6c3bcfa7
- SHA512 8e0f91e4430da4b1afc783fcaf6162d4df0d4a8eab6c067bf5be5e84c8ec03402625e14a2d1d3ba68957d776a538038522e7f3994f295ac6bb21cd3dd167878d
- SSDEEP 1536:juGATDuj/+BVLczBQr/2F9h9OBGA01qM1wtoZFIiQcxRIPtA9bvZFeW4ZL01wYsc:SGATq2VHeF9hwBGAxM1ZFIiQcxRIlWSO
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif.fbin
- Size 176B
- SHA256 de36906abe8000fdcd65bce6cb84aa4e0efe4ad4d213ba825a8a72276fca5a27
- MD5 e930330376f643ff52a0276f2acd0c4c
- SHA1 ce59d4b6b4a5f0438d173bb2e43199e51504e680
- SHA512 80955f4880fd60bf57894ce6a930d0ffe6ba21074dc122422c28660747de750a99e8616464f2ecaaf4d83b81a948b45ad0369655b238f25ef2c24c869de2e501
- MD5 SHA1 SHA512
- Path C:\Program Files\Java\jre-1.8\bin\vcruntime140_1.dll.fbin
- Size 36KB
- SHA256 26813319dde0485bb206300e29a367194df9516aa3c4c4dea0878c2894cc82d2
- MD5 2df155e9688108bf01cdbb4839cc9b56
- SHA1 a41fc4c2f96e68228a46906058b515e6c4638a33
- SHA512 526718db6527a82bf7a02a42984edf3873c7b3d509fc436acaac3e730cff79d47c79a34dd56b326f34ff3b54e5ad0decfd2d05175e9c05ecf279d1bdc245985e
- SSDEEP 768:h9jU42JSDj3adIHEE1W25WopRVI+KLr9N0eMY13li7SRZXpbzjU:h9o4v3+n2W28AVLcr9N0eMY18s7bU
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_F_COL.HXK.fbin
- Size 144B
- SHA256 bc632d7dcdfd6413e96f1d3836ff2a3738778ee410b09354ae5cee19e389a2f2
- MD5 c3e44d99dcd288aaebbb8d8c10e8627d
- SHA1 dff6e8050b496db8b46cde6361c49fe51e55a569
- SHA512 ef0e61d5af1296969aeafa4789dcb8748354950fb0ac245143aec04cd44aea04c50ac26d50d64e30da1389fc65ac6b7554fb61ddd36d17a61a7ffba34f6d2e53
- MD5 SHA1 SHA512
- Path C:\Program Files\Microsoft Office\root\Office16\concrt140.dll.fbin
- Size 324KB
- SHA256 84584093bc3307b96b961b67d2ded27e3753a184ebf4a046041fe1120e624265
- MD5 c1809b64da76b673c3d5a9ac3760f151
- SHA1 fb3e1c232e8e990073ce17bc91a7118fec7a2fa2
- SHA512 75ca5962ea6a0748a7c22eb4e161405e34b61d1d21ca117e2b70d3cd43482350992b60732c18ce2b1018251a372f8f4be47bc3a7abde43fb3ff6853b6041c576
- SSDEEP 6144:MGjnLUaL9UWasv/AyUL3tv/5UP9UZBqbHRxcuKwJbcS88ZW/hXB8hcKbb4s+NHxb:rpQsv/AyUL3tv/2PGzq7RxWLj8ZOB+lI
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\Microsoft Office\root\Office16\vccorlib140.dll.fbin
- Size 358KB
- SHA256 dcd15bfaac8b6c40a68d9372367b92df07e9eb944a06b2a5ea2bd3fb002b553b
- MD5 48b31232a3cfbf4ee7fcae34a1d954c9
- SHA1 835622f77730857f2de26e375a941d7d95e3dd8c
- SHA512 2e1a2895d92b63c9b1d8b9ccd2ffb9dc12684cc96d4bbb6fb0f4ac6f5d7f1663c6784d5d3d39a2cc552f83b2cbed46435e050ab2f23c0b688dedacb55b4fe93c
- SSDEEP 6144:g3sEsoxbfiay7uDUCYXRCSYnCGfjHFZQY6GZ8ggGbX+vWbHS7zev/e4m1z4uC:g3sEJ2ayqgCYQTnCGf/dD++by7av/FUQ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\eqnedt32.exe.fbin
- Size 16B
- SHA256 bf26cb86cf2aa03d8d25974cc6613569b42644499e4ca708c8aae2b10d361587
- MD5 c31a42db05c4db0c58bc259bafde5259
- SHA1 cd5be779114596771214df415ed6abe7d1d21f6c
- SHA512 25b8c4030a4887946a69ca419632373df1f1bb04e49da895432fde4e6e18b3f0378aab67325c5b3208390afd2ace2cd9bf0c05018861a7e77089c241a7eb94b9
- MD5 SHA1 SHA512
- Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\SpreadsheetCompare_k_col.hxk.fbin
- Size 144B
- SHA256 4d447ca97fdfc2df2095189d2a9337d229cb5a6093f623ba81da5f10dcf82896
- MD5 f08df67c5f7da768c118745c9ad3eb0c
- SHA1 4fe2bac1dcca1381eab81f221021f5fd941f256b
- SHA512 918e47e17d488421f641fe90eb4d9a300d6f32b8e76211b3f01b414312cf5675ddc61cc2db14fd099d6cfe1147455e0554d0bdd82ed1cd563b94762cb706aca4
- MD5 SHA1 SHA512
- Path C:\Program Files\Microsoft Office\root\vfs\System\vcruntime140.dll.fbin
- Size 83KB
- SHA256 8eec080d3660e7981a2840b5ac5fc5a370d7f6c989d3269605d2a22470d17ed9
- MD5 4a9072b2b7f6f489b54262a4ec262da8
- SHA1 e3c3f5381811bb2a8b35b7b4678bf0bb96046c8e
- SHA512 fa7266d652c93db5abbd501e9114a28f00411290ed7479dcda39370d1688c64814cae38527abdc399e4045ce01899b35949a810cba4df2c8adea7c142aea3e12
- SSDEEP 1536:nteDi2OIA7yLmtlIeCkF2h7Apk0PiAwo2qh/0PxAyNUrBkACgLu5prWREwalvLqD:nteDiXIA7kmtieCk0Spk0qbUNkACgKqV
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo.fbin
- Size 831KB
- SHA256 88bb7fbbf37e242ba9bbab7e46ae06495be93b71ab4cca54e3d200389304257b
- MD5 87732751e1210d7944cd0c80fb0fdf83
- SHA1 bcdcb32de1ba9d8632756fe3db7fd872f5213ce5
- SHA512 88b01ee422f6987dcbe56be83cf46526fefb8a7246f5af10f724817b2ca79322bfac27eb553476c090d1bf084f3b02802c886a749a4d72524bec0171df8908aa
- SSDEEP 12288:u8ZHwozLsADPoxwp/wby9RKWDlt3VjiCAypq2hr2uJsvSCgQr1zkXokn2fC2htFG:1lwgLVo8aAK0v3NRsvStl1PctFGJFjeK
- MD5 SHA1 SHA512 SSDEEP