Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20251231-en - resource tags
arch:x64arch:x86image:win11-20251231-enlocale:en-usos:windows11-21h2-x64system - submitted
19/01/2026, 00:50
Static task
static1
Behavioral task
behavioral1
Sample
2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
Resource
win10v2004-20251231-en
Behavioral task
behavioral2
Sample
2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
Resource
win11-20251231-en
General
- Target 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
- Size 256KB
- Sample260119-a63ayaby4f
- SHA256 e55056bfbfcc329ca02ed2d9231ce7552f7f5e95d99f98c8452b4069217c6ceb
- MD5 7b5438c4f65366c8ef457eef0b27a970
- SHA1 3b26745108896dc8f089be776f6bed4ebf5b9529
- SHA512 ebbf078f88203ddb9944a886206dd206349a034f4121e71c5a3929278d802c872c509c09899892687915714856d554d6a56ee5c5157d6f5a1a857377aa531304
- SSDEEP 6144:Q17+eW9Olanw/ZbCvVp64ZuVc3t/m+DmFIyQP3X0gh:Q89rwtCdVZz3c+Ddy6nFh
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
-
C:\Program Files\7-Zip\Lang\readme_for_unlock.txt
- ATTENTION! Your network is hacked and files are encrypted. Including the encrypted data we also downloaded other confidential information: Data of your employees, customers, partners, as well as accounting and other internal documentation of your company. All data is stored until you will pay. After payment we will provide you the programs for decryption and we will delete your data. If you refuse to negotiate with us (for any reason) all your data will be put up for sale. What you will face if your data gets on the black market: 1) The personal information of your employees and customers may be used to obtain a loan or purchases in online stores. 2) You may be sued by clients of your company for leaking information that was confidential. 3) After other hackers obtain personal data about your employees, social engineering will be applied to your company and subsequent attacks will only intensify. 4) Bank details and passports can be used to create bank accounts and online wallets through which criminal money will be laundered. 5) You will forever lose the reputation. 6) You will be subject to huge fines from the government. You can learn more about liability for data loss here: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://gdpr-info.eu/ Courts, fines and the inability to use important files will lead you to huge losses. The consequences of this will be irreversible for you. Contacting the police will not save you from these consequences, but will only make your situation worse. You can get out of this situation with minimal losses To do this you must strictly observe the following rules: DO NOT Modify, DO NOT rename, DO NOT copy, DO NOT move any files. Such actions may DAMAGE them and decryption will be impossible. DO NOT use any third party or public decryption software, it may also DAMAGE files. DO NOT Shutdown or Reboot the system this may DAMAGE files. DO NOT hire any third party negotiators (recovery/police, etc.) You need to contact us as soon as possible and start negotiations. Instructions for contacting our team: Download & Install TOR browser: https://torproject.org For contact us via LIVE CHAT open our >Website: http://nietk3nqpdtrzcm7pblreqtrqyxhud7qbmmdgn4ras2txibwgmmmz5qd.onion >Login: customer >Password: 5+x3ZIYfe329Qbf_plkL%?sEJxoQk& >Secret: e9chg%_JTRoMMHyWq-?r If Tor is restricted in your area, use VPN���������
-
https://gdpr-info.eu/
-
http://nietk3nqpdtrzcm7pblreqtrqyxhud7qbmmdgn4ras2txibwgmmmz5qd.onion
Signatures
- Cloak
Cloak is a ransomware that has been active since 2022.
- Cloak family
- Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
- Renames multiple (9590) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Disables Task Manager via registry modification
- Modifies Windows Firewall 2 TTPs 1 IoCs
pid Process 6788 netsh.exe - Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
- Deletes itself 1 IoCs
pid Process 6524 sichost.exe - Executes dropped EXE 4 IoCs
pid Process 6524 sichost.exe 6492 Host Process for Windows Services 2492 A3R6C9.exe 5344 sichost.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows Update = "C:\\ProgramData\\Host Process for Windows Services" Host Process for Windows Services - Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI Host Process for Windows Services - Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\M: Host Process for Windows Services File opened (read-only) \??\V: Host Process for Windows Services File opened (read-only) \??\L: Host Process for Windows Services File opened (read-only) \??\T: Host Process for Windows Services File opened (read-only) \??\R: Host Process for Windows Services File opened (read-only) \??\Y: Host Process for Windows Services File opened (read-only) \??\A: Host Process for Windows Services File opened (read-only) \??\J: Host Process for Windows Services File opened (read-only) \??\K: Host Process for Windows Services File opened (read-only) \??\O: Host Process for Windows Services File opened (read-only) \??\N: Host Process for Windows Services File opened (read-only) \??\I: Host Process for Windows Services File opened (read-only) \??\S: Host Process for Windows Services File opened (read-only) \??\W: Host Process for Windows Services File opened (read-only) \??\B: Host Process for Windows Services File opened (read-only) \??\P: Host Process for Windows Services File opened (read-only) \??\E: Host Process for Windows Services File opened (read-only) \??\X: Host Process for Windows Services File opened (read-only) \??\F: Host Process for Windows Services File opened (read-only) \??\Q: Host Process for Windows Services File opened (read-only) \??\Z: Host Process for Windows Services File opened (read-only) \??\G: Host Process for Windows Services File opened (read-only) \??\U: Host Process for Windows Services - Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3050491965-2933534114-1688612772-1000\Control Panel\Desktop\Wallpaper = "c:\\programdata\\wallpaper.bmp" Host Process for Windows Services -
resource yara_rule behavioral2/files/0x001900000002b48b-831.dat upx behavioral2/memory/6492-836-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6524-835-0x00000000001B0000-0x00000000001CF000-memory.dmp upx behavioral2/files/0x001900000002b48a-834.dat upx behavioral2/memory/6524-847-0x00000000001B0000-0x00000000001CF000-memory.dmp upx behavioral2/memory/5344-867-0x0000000000760000-0x000000000077F000-memory.dmp upx behavioral2/memory/6492-869-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-2909-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-5323-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-5324-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-5326-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-8160-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-10066-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-13361-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-14645-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-16216-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx behavioral2/memory/6492-16218-0x0000000000BC0000-0x0000000000BF7000-memory.dmp upx - Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\da-dk\ui-strings.js Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\zh-cn\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\WXPNSE.DLL.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-pl.xrm-ms Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordR_OEM_Perp-ul-phn.xrm-ms Host Process for Windows Services File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\ODBC\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-white\BadgeLogo.scale-150_contrast-white.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.3102.0_x64__8wekyb3d8bbwe\Win10\Classic\Pyramid.Medium.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AlarmsStoreLogo.scale-100_contrast-black.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_x64__8wekyb3d8bbwe\Assets\FeedbackHubAppList.targetsize-30_altform-lightunplated.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.41182.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-100_contrast-black.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_x64__8wekyb3d8bbwe\Windows.Devices.DevicesLowLevelContract.winmd Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\StoreAppList.targetsize-256_altform-unplated.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Images\LockScreenLogo.scale-200.png Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\nb-no\ui-strings.js.crYpt Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\s_close.png.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\ru\msipc.dll.mui Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-pl.xrm-ms.crYpt Host Process for Windows Services File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\dialogs\offset_window.html.crYpt Host Process for Windows Services File opened for modification C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\resources.pri Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\eu-es\ui-strings.js Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\it-it\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\is.pak.DATA.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Retail-ul-oob.xrm-ms Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\QUAD\QUAD.INF.crYpt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-96_altform-unplated_contrast-white.png Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\cs-cz\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\s_checkbox_selected_18.svg.crYpt Host Process for Windows Services File opened for modification C:\Program Files\7-Zip\Lang\ja.txt Host Process for Windows Services File opened for modification C:\Program Files\7-Zip\Lang\id.txt.crYpt Host Process for Windows Services File created C:\Program Files\Java\jdk-1.8\bin\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm.xml.crYpt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-amd\dom\elementContains.js Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\te.pak Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Java\jre-1.8\legal\javafx\icu_web.md Host Process for Windows Services File created C:\Program Files\VideoLAN\VLC\locale\am\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\BadgeLogo.scale-125.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SnipSketchAppList.targetsize-36_altform-lightunplated.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-commonjs\assertNever.js Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\EXPTOOWS.DLL Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.efe979fc.pri Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.21012.10511.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-72_altform-unplated.png Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Internal.msix.DATA Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Retail-ul-oob.xrm-ms Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_OEM_Perp-ul-oob.xrm-ms.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\sl-si\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\OneNote\prnSendToOneNote_win7.inf.crYpt Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.BingWeather_4.9.2002.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_4.0.2.0_x64__8wekyb3d8bbwe\Assets\Icons\StickyNotesAppList.targetsize-32_altform-unplated_contrast-black.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\SnipSketchAppList.targetsize-256.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-black\DeleteToastQuickAction.scale-80.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxA-Google.scale-150.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Generic-Light.scale-150.png Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\AppxMetadata\readme_for_unlock.txt Host Process for Windows Services File created C:\Program Files\Windows Photo Viewer\de-DE\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherAppList.targetsize-64_altform-lightunplated.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2008.32311.0_x64__8wekyb3d8bbwe\Assets\GetHelpAppList.targetsize-48.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SnipSketchAppList.targetsize-20_altform-lightunplated.png Host Process for Windows Services - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
description ioc Process Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe - System Location Discovery: System Language Discovery 1 TTPs 9 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language sichost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Host Process for Windows Services Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language A3R6C9.exe - Checks SCSI registry key(s) 3 TTPs 26 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\ConfigFlags vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe - Interacts with shadow copies 3 TTPs 1 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
pid Process 7036 vssadmin.exe - Modifies Control Panel 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3050491965-2933534114-1688612772-1000\Control Panel\Desktop\WallpaperStyle = "Center" Host Process for Windows Services Set value (str) \REGISTRY\USER\S-1-5-21-3050491965-2933534114-1688612772-1000\Control Panel\Desktop\TileWallpaper = "0" Host Process for Windows Services - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services 6492 Host Process for Windows Services - Suspicious behavior: LoadsDriver 1 IoCs
pid 4 - Suspicious use of AdjustPrivilegeToken 14 IoCs
description pid Process Token: SeIncBasePriorityPrivilege 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe Token: SeIncBasePriorityPrivilege 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe Token: SeManageVolumePrivilege 4688 vds.exe Token: SeManageVolumePrivilege 4688 vds.exe Token: SeIncBasePriorityPrivilege 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe Token: SeIncBasePriorityPrivilege 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe Token: SeIncBasePriorityPrivilege 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe Token: SeDebugPrivilege 6492 Host Process for Windows Services Token: SeBackupPrivilege 7072 vssvc.exe Token: SeRestorePrivilege 7072 vssvc.exe Token: SeAuditPrivilege 7072 vssvc.exe Token: SeIncBasePriorityPrivilege 2492 A3R6C9.exe Token: SeIncBasePriorityPrivilege 2492 A3R6C9.exe Token: SeIncBasePriorityPrivilege 2492 A3R6C9.exe - Suspicious use of WriteProcessMemory 10 IoCs
description pid Process procid_target PID 4088 wrote to memory of 4440 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe 77 PID 4088 wrote to memory of 4804 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe 84 PID 4088 wrote to memory of 6492 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe 89 PID 4088 wrote to memory of 6524 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe 90 PID 4088 wrote to memory of 6540 4088 2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe 91 PID 6492 wrote to memory of 6740 6492 Host Process for Windows Services 94 PID 6492 wrote to memory of 6788 6492 Host Process for Windows Services 96 PID 6740 wrote to memory of 7036 6740 cmd.exe 100 PID 2492 wrote to memory of 5344 2492 A3R6C9.exe 105 PID 2492 wrote to memory of 1480 2492 A3R6C9.exe 106 - System policy modification 1 TTPs 16 IoCs
description ioc Process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogoff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableTaskMgr = "1" Host Process for Windows Services Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SYSTEM Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableSwitchUser = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableSwitchUser = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoLogoff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoClose = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\StartMenuLogOff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\HideFastUserSwitching = "1" Host Process for Windows Services Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\EXPLORER Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableChangePassword = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\HideFastUserSwitching = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableChangePassword = "1" Host Process for Windows Services - Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4088 -
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:4440
-
-
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:4804
-
-
C:\ProgramData\Host Process for Windows Services"C:\ProgramData\Host Process for Windows Services"2⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops desktop.ini file(s)
- Enumerates connected drives
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
- System policy modification
PID:6492 -
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet3⤵
- Suspicious use of WriteProcessMemory
PID:6740 -
C:\Windows\system32\vssadmin.exevssadmin.exe delete shadows /all /quiet4⤵
- Interacts with shadow copies
PID:7036
-
-
-
C:\Windows\SysWOW64\netsh.exe"C:\Windows\System32\netsh.exe" advfirewall set allprofiles state off3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:6788
-
-
-
C:\ProgramData\sichost.exeC:\ProgramData\sichost.exe C:\Users\Admin\AppData\Local\Temp\2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe2⤵
- Deletes itself
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:6524
-
-
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:6540
-
-
C:\Windows\System32\vdsldr.exeC:\Windows\System32\vdsldr.exe -Embedding1⤵PID:4596
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:4688
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum1⤵PID:652
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
PID:5924
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
PID:6656
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:7072
-
C:\ProgramData\A3R6C9.exeC:\ProgramData\A3R6C9.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2492 -
C:\ProgramData\sichost.exeC:\ProgramData\sichost.exe C:\ProgramData\A3R6C9.exe2⤵
- Executes dropped EXE
PID:5344
-
-
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:1480
-
-
C:\Windows\System32\vdsldr.exeC:\Windows\System32\vdsldr.exe -Embedding1⤵PID:1172
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
PID:6096
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Direct Volume Access
1Impair Defenses
1Disable or Modify System Firewall
1Indicator Removal
2File Deletion
2Modify Registry
3Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\am.pak
- Size 1.5MB
- SHA256 df1a34b7640c2b1e7bc92b5c88de248579a82fc8fb21333a6ff436c219ee2688
- MD5 b1cbb36f232b8312107a0e424e33f93b
- SHA1 1bfdcedbf3fa3f20f9d5ca9276ebe5a551830c79
- SHA512 4cb4016bc4445fcebcf1956c54a6460923ea76d2e816e332f2e46136966a4d976e63de51a9d2ff78b7dbc9387ea4a09e0aa569985010f5533324a47064a3ce35
- SSDEEP 24576:gZohBP3mb9zphAVYHmAi0v/9ORFzbFaLE37dvsgMJMPaLoztCsPLvEqWhQl2+rBc:R6OL29
- TLSH T16D65ED547DF9F7170F8E8A1994211D4FA598AE4692802C38D35BE3FC2B2EF5B4CDA214
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ar.pak
- Size 1.5MB
- SHA256 9c58f6a27c5cb6556d26d42dda4461c2ffee6ad904dff3bf15b4dbf1b5a27d0d
- MD5 870c793bb95178566e17074886b34733
- SHA1 189f84ee5c6d922cabcae9e369b596bef4723d4a
- SHA512 72d77246fe5c110ca435295004feb7b9f4ac50b267da5c23546faf3bd21621083de18c61b72dd283926bbad420f8ad1e7103a626fae4978d0487469f7fb6d63e
- SSDEEP 12288:IXqBXQVBfxsX37nX0aXJ3rIGGqrgUwEF32cFqEPGc8oY4Vh+DgJnXsJIeiwQZE+2:AqmT2nJ3rIGGqrgUwXcGRp
- TLSH T16E75CCE21A2684720B96DF1FC1D2356CE872AE23EB4BFD3134974A2157D7513E28E235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\as.pak
- Size 2.1MB
- SHA256 78e5a4f49418fc6d92707cc50a1f9a2b88652a1474b3b8b05cb2f670febacfc1
- MD5 cfc77878c491d683fb5707aebc41c2ce
- SHA1 4b194b5e3587c7a155a1870dc7dce79688c38c49
- SHA512 d688c68fd68a7204ab04190d188f87dca7694ef00724a40f88138693ccb0235104120d9f82143974c17f1a7d63026e352f2f2168d65ebe7f6e8314948d763cbd
- SSDEEP 6144:1PT6x3vNuMMd0qmdUTr5HjaMFUKnbFDLbwwikEBs/9fgsRYri0aB7rOQlIRUrCWP:1r6x1GHtmGhLJ/ZTKBz+unW8fWEw
- TLSH T15CA546248CAD55B6A8D5DCC91F0C6330C127AD5AC7A5F708CC0BA214799ECBC8DAADF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\az.pak
- Size 1.1MB
- SHA256 4fec2ed354a3f48daf5320ba9bf20104e9428fb427cc0b44eb62827ed836b156
- MD5 65ba63691b8535298843aa8a60ec66c1
- SHA1 7e6ece53f300bc0680c39317ac41fd793ac98b04
- SHA512 2364455baa53062060879290cc94e0ec2cc998e773ed20aa5966d71e5fbf01c094e5047bdad5d9e61d3ff6fea408d57bcca6877618f008a130bf184126659d90
- SSDEEP 12288:Ny+WSPYq0Os3f9/H6UD07EVBc85fM6qoXxyK1aoC153BlQGBEy6+sQlDcORJWB1j:12nOs3Q7EVBc85fM6ZXffgHFRJWzAu
- TLSH T1E145F785694E8C0C47ED13890862AAB6F84D7BDF719261577A89521C338FF639FE034B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bg.pak
- Size 1.7MB
- SHA256 38a4afb5772b0b11e178968c14e4ca9b362090b4bf5bd90fc4519193aab4dc9d
- MD5 4a29966a5c771cd595d0457a4f8f7839
- SHA1 c03f6cffc7151f725d09e4e72dbaf34709c796d1
- SHA512 d8c0c3c69513c70f075aa667a0a2ae4860a0cf1589e8f4c5945abef16f8c3f6d490e837b94bce22e1da21ed39836c48b50d217b6da114890e97779747f80c470
- SSDEEP 49152:WjCihKY/BvE38msAnEp0XfmGZg6KH8migjPJTRudxgdH162s:fg/5FcmXu0Y2s
- TLSH T1998556A15B9A68CB4101F45F9C047E093CEB94FF3FE7C79211642DBD39E20B486AA61D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bn-IN.pak
- Size 2.2MB
- SHA256 e57d6a23a8393438805e01e5e3a79c02eb79bce11fadbeae0e7406df67cd3232
- MD5 47fdac2e18f163d685f9e18e7f1944e7
- SHA1 d28f6fb6edd666d35ec67da9f1cd84e7012e6b74
- SHA512 6d0c58d82221b654888f124cb4f8c56be0731f83e1c10c7732477889595df1cf6f12d19c5b21771ef188ddeb4de5c008024e6ab8de4c4352ac7c29299f882e46
- SSDEEP 12288:g/veb+bEgR1VcYNBofhkNohDJ7VWzbElRaIvWb:C8UEFcBofhkNohDJ7VWzbElRaIvWb
- TLSH T1B2B5F3209C6E81B2A8D1CDC9434C6370C113AE979B66F748DC0BA2553D6EC7C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bs.pak
- Size 1.1MB
- SHA256 285015e8b634880692eeba953d3bbb296071e36f13ae7d3cf6a9f75d2255d005
- MD5 32a41d70d0b94436c85f7e56c5d8e266
- SHA1 2c439eb511bf736448da49e6ecb553c12f1f040d
- SHA512 02feb6dc6f8a597d8c563b89aa3249e567b080d56209f382c0fc079bd21a9adf5dc4c83f5e607953e20b669c54810816f17fd8f796e7fff4b22ff83844ed152f
- SSDEEP 12288:3DDpeZNI2idMYrt3WKuMkIUOs005W6QhSxKJZHdiupeQasNO:3PpwIvMA3WKrkIUOs005WoxK/drTO
- TLSH T11E352B79FEA69B0649936382DF96875078BC49CED454DFB6385FA22E0303F4C62F9109
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca-Es-VALENCIA.pak
- Size 1.1MB
- SHA256 2c4fc068496f280228506cfc0343c5c31d7aa1c7cf679828332a1ef886e36ddd
- MD5 3a45472a8ad5eb78f0a98b11862aa7d8
- SHA1 51d47a5f05688fc52e15a4ac3a757e22daf9bb75
- SHA512 132fa3c273cbfd6394130a52ec6a8097e22847f7ee2e00169e0a49d0e1c6d86f0c9202c6dc8a9d5f322f3ac2e083396b890362388fdb8402a2e72f52290788e0
- SSDEEP 24576:ix/VelUCgynilvPPEJlYON2XAgcWPUkummKK4H8SUkG:itolglvPPEJlYON2XAgcWPUkummKvH8R
- TLSH T1B535F822CBCD6B6285C2331BAB41C527B09CE9867A15D244F4AF061933CEBDCD277AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca.pak
- Size 1.1MB
- SHA256 4bd0db7a968ce1d3c4f3036458bd09a3a7999f9554aa3c93b990cab61c587fd4
- MD5 9aeb3e540f7f8af016e005ecb0fe8c36
- SHA1 19ccd0bfa589138cd19362c12e0a25c1cac1cc5d
- SHA512 86fdec7166ad7ae41235d7481f2a155a4934d5fc09f2cc3cb2da8d6bb2a0e91ac7e9df3a23ff1fe39ffbebf3a12889c67fdf70b5dcd2fad16f4246c41e99d7eb
- SSDEEP 24576:vOKb0e1fIobJCMO4rfR4569rZhTvVSpG1WkWyQMmZEwS06/o51RHiDqoWUXPx/aj:rIMJCM9VSpG1WkWyQMmZEwS06/o51RHN
- TLSH T14E451A23CBC97B6385C2325ABB41C227B09CD9867A05D254F5AE071633CEBDCD273A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cs.pak
- Size 1.1MB
- SHA256 f40a4b04a53040f76db192ed71bb0f3000dc14cf89abf2fab074457ceb7230db
- MD5 5ceaf551a16438783c18d63ee6e863c9
- SHA1 c43530c044c019d312d9937e75237d580bc7e622
- SHA512 a1f174bfc6feafd522a0e16d8d5449af3d7e54bd7dd9d4a075fc4f15d894e6308cc04cdedb415d36679573ce4955ec6171009d377a58b33cb6c12d732236b586
- SSDEEP 24576:Z+LG8VDctjGQlF1XW49m6xuW40yUjNjZXgWSXSlyQdk:ZoGFm6xu6yUjNjhVSXsdk
- TLSH T134358D2ED9A6E521894013493FB94024FD6D43520A6AE9AA7C8F895437777FECFF0C18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cy.pak
- Size 1.1MB
- SHA256 564da98ad85ea7a84af2a349a2d60bb095f163fdd1c534dae36a7c3d9c159e0e
- MD5 97b932845d3d1fc31a59f1531ca57d2e
- SHA1 3039334bf4d82e87f9ed550e0cb588e8de546cc5
- SHA512 8fa703541e9e055246758523d58f7d79fcc238ea5169838383fc69619fbc34ece0c6e08ad3d588b9c9a05e438fa4f3b47be133f17c972e3fa8fbc6581f5a82c6
- SSDEEP 24576:hnvdfthWJC72yO7UXQiC5/QPEZVrl43ZAeXV10K:xFVL7hRKeX4K
- TLSH T19D354B0BE8858F97D20977A1C85B8E39B92AF57BF5D5D4C0701D092D27233A0EAC978D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\de.pak
- Size 1.1MB
- SHA256 a2a9db06ece2a91fb013882001972b1e30a61cf49ccc9de94956dc07eadef383
- MD5 2edccddfbb6ed7ca91fe4bd4965a1ef9
- SHA1 56e82f4e7f5b1e38e0f7aeff99857a37d4b45738
- SHA512 f1f5dc4ec5334ac45b4312f225125d06263a81a17a11cd6f7f40452b9f5fdff01b0e4afc0a751a882786e3a3ede101726b70abb17e01d642b64ad8b08319300c
- SSDEEP 24576:oSqApn0mp1nVT16Gl7Hy2iNQhp80J4msZg3RzwN5aCc:Lc+20JRsZghzwNS
- TLSH T1D1352A13DCEAB29EC64737652601CCB7772EE3AFC389B259605DC07A270B3A5829D171
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\el.pak
- Size 1.9MB
- SHA256 e945572774cdb69984111f7a5346becb74d040a32b673d9ca3b7537f5380b118
- MD5 9525c704c6740a4d05b900065d372129
- SHA1 334546097c95b9d92d84c6d4127ede87db6912a3
- SHA512 b1715db5178c8a20e07fc13b5c289086e7b0636007531fbb3b39448bd1cdf1614299715f2561fea9a7e4f4698de852274b8ce520557f19bd23a95c8405caa75b
- SSDEEP 49152:NjkmlxnSM7UFLqQXvJOd+AkEbE4fTi6jcRRGd0z6jKGYCmM72je1bz8ZhpEUwiv9:Cv
- TLSH T13095D0EFB4582DEE8045950785D8A07C37866D6DEB49CBD8722DCB20BEF90719A11E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es-419.pak
- Size 1.1MB
- SHA256 c1f37c031aa76740bd37f06ac482c807e5c30bae9ae9123ff8fdcd8cd054eb9a
- MD5 15edd6d43c21b844a44be3e7f6f5dda2
- SHA1 89ce42f200997335c881f85d3a9f8c5ab4f8e00e
- SHA512 562fd291c51f3455dca5dcdaaf27849be5db9af4e8fe90c34d050895ab9ea401d9df52e986790c0a5d3c4eaa666bbf4c3abda8997cc3e55a1bdf89687dabe079
- SSDEEP 12288:0ElLnoBzKGuSJ4tEgqtJGh0wSOgFwEkklGQTycmBFq3u:0ko1R8EgqtJGh0wSOgFwEkklGQTyfrL
- TLSH T1CA350826AAC81F5350D32386B743C667F0D49587B408C29AF8EE866933CDBCCD567E91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es.pak
- Size 1.1MB
- SHA256 504e00f1f34021189d11cdd482b637849882785053fde4167e56184955e69775
- MD5 d64de69442e162bbd11bb7fda4143183
- SHA1 92692d85303c839a6c8c9492b4d162d4657b8304
- SHA512 e7693724574f5ace07762d9a18cf0621c09a1530a531fab1b051abfcd25ac72dd8ac3eb820796647b9dd3246a83790dcb26c238f3d8cb3a0f242fe7fd2b63c4d
- SSDEEP 12288:eDborJUBOIBl5c/ogVtlef1BiOe+RXdqOfOL5/Ac8M:sorSB7OogVtlef1BiOe+RXdqO2tIW
- TLSH T139350826AAC81F5350D22386A743C667F0949587B408C29AF8EFC67933CDFCCD567A91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\eu.pak
- Size 1.0MB
- SHA256 00b86474e2fb12c8d332ad2a8fa9bbd2e5e3725409c8bddc1f1fa73a37d54bbf
- MD5 258a7fed3558c2ede50817e5226abd12
- SHA1 ee8fa54647754327842e1387cc7593a6a77aa5cb
- SHA512 01bdf751f32fdb011596d779eeb72cc279abc4bf906155659f17bc0da719d0368ac12ff154565421d9f480f97bcb1b65244c06d5ab2df55d8fdb67a995f1c4d9
- SSDEEP 24576:aqiGr3PPFZkJD6fasFhX3xD74h8Jhdn99E6pyuIaUkBhb7I2OM0E1Et9xtfw:TVbPZxD74h8Jhdn99E6pyuIaUkBhb7I8
- TLSH T102352B2AEA16A3718D1023FE561008643DE9969F9B09FF51F42FDA2677037DE15A33B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fa.pak
- Size 1.5MB
- SHA256 2c64b2c3ca98d902eb69886dd807d91071a80e7a97a825bdededaed33c911b8e
- MD5 2fa6cdf5c81e134dd0e72bbbe81a96f6
- SHA1 31df6ee3a899309234e53d409d0fe1dc253af001
- SHA512 872af74417b3e4aa8aac96c227de2980dc5ffb6a5d5c8b80a33e8d53ff0a8fb2829481df8a1d300b6c907fb2d02ae91c62777f3e9ab0992a0e99d9db5f34386a
- SSDEEP 24576:mmcpsUOhs8pGnApdyiKhxPwFdjT3zTTxLsVYriFYfYBYgGVm2RGoPuhqwwOplv+o:mj
- TLSH T11775F1956AAC8AB25746C91341D33838C773EF13D348EE40F8A107661DA6B179B4FA37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fi.pak
- Size 1.0MB
- SHA256 8885cea78a959bb0f567cbd8164aa83a88875b545e0aacaab12edac3468eedc7
- MD5 12b3a0347eaa3aa7312c75a24d112b33
- SHA1 75c3db477446c993ce26ec6a4c78e8222c2026a2
- SHA512 efafc749af558e99d67dd535de5a721b26bb978aa792bce6065b64d4c971fde39eaaa2f90fbc75baa65534b445a40ef0049808b49faada6f9b2f92cee8be0673
- SSDEEP 12288:9U5mCwIia+++PlD+1PlpkpfbDcA/8DRUJKwVX9Tf:9UYSq++9D+1PlpkpfbwA/8FBOXt
- TLSH T16F354CA1814AC2117B84529F5DA09439F1E8D3DF8824CD99F94BD2F90BD76C879B232F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fil.pak
- Size 1.1MB
- SHA256 9b7f3e16ad95c5ce617809da1902ccfcc5398c33d4a46b87567b04ae8804edff
- MD5 e2edfe464247ff4929ea527666178f15
- SHA1 bf6f13a9dd4dbb1e7a818911c48c3f538f85d075
- SHA512 f35e5227afdf4fd96055ff47405c14fad0f8a8ef6ffa847ebb37f11f65c2f5fd874f8078ecb5c9649f04d5bd5161ad011cc37616b7a4e182420ce34721b4c4ab
- SSDEEP 12288:AXqLtOuFcCHcxatarg9s6uY9DYMB5W7Ef7bxmBMEFXsQ:TOycCHcxaj9s6uY9DYMB5eubxmVXsQ
- TLSH T17F35D619A7442744EBC212E60660AC2F76E420BE3F816C6E6FBF279737A7CD4D270156
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr-CA.pak
- Size 1.2MB
- SHA256 d24f8bdb0e9db55fbf2f3bb1721028ba0c8ba9540a5c20bd1b71ad20b777609c
- MD5 fe7cf0c9db8fa33e0b382420f0540a0e
- SHA1 b80eb172b621f60c174aefdd1c6b0155eb8d886a
- SHA512 d8f910ce448e60a5427670d7a400f47ba5ac3c21a9e6fa65b95d047f8340c8dd498aab99d4f61ee65598737ae6325fa4ab7ad12a3c90a31df53638496ff49406
- SSDEEP 12288:onmvqrACrNlbw5CGkTDVTdcIVjdboTnBC5qNrQ8xPMy656jbtjiTm3lZxNZPEcsu:+my5ecVTdcxWIjbtjiTaTuVCf+lY
- TLSH T1C345F75FE9C465C749C21263BF02D663E938C299F205D700F8AF4295238B9ECD39B5E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr.pak
- Size 1.2MB
- SHA256 54fc6d450fa85570ecdeea9f23867bae63c2d3ef7d7b381705dccccdacd5f2f1
- MD5 9f92ee5fcb2e78f8dd328d90d3a26cac
- SHA1 8900c79e3245fc63507c77b4278cd0b3d018d5bb
- SHA512 a1eec3250fc4770e80e1beb8c7e2340b961597db631f7c11f2a215811482c878df8789f6a93c8f7084b5deb5e31383900af84878b36733a561291ef6269628a6
- SSDEEP 12288:nH+6kASmHqmbbCjouVD0tZV67b46fB6koUWn+xPsS656Ab6jmbdpxBNTjCv0kkO8:nTrWVD0WxWIAb6jmbrfB3Zxj
- TLSH T19445F85FE9C465C749C21363BF02C6A3A938C299F205D704F8AF4295238B9ECD39B5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ga.pak
- Size 1.2MB
- SHA256 d27b3219360b5e9dcb2a72e58ee657e14575ce9db6724b063e7dea3f0ef8bb6f
- MD5 b0247845f8ac89db58842f1c873b749a
- SHA1 5b3972d79dad999d8550633b52d8658bf358729d
- SHA512 31c3b6fae881b55e609e3b96a9c81ea539897d09d1ec0cce1b8b424ed00d9622b81b4097f156aee1fed57374e178fe3cd4b2c46e0c957905c25aca1a94545429
- SSDEEP 24576:je2FdTG8WPJlQFyc8sisgovh1Q1+yRwAUThAjtcnt67L3/C0ydzYiW:0p9LjtVlH
- TLSH T1C24519B755B462E3E053728B4381D766F024D5BBF484C8C1388D6A7E2B276CDCD16ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gd.pak
- Size 1.2MB
- SHA256 77baec05619f663d5f8a4ac5120468b381292c1049d06276aefa32283776314c
- MD5 1be149c185b9cc412fe1a0ef55adbcea
- SHA1 9e4aaef3c6495b91a092dabea11b87ccde454271
- SHA512 f6712428906577f7dcec76de4481d7019c97fc8576c51e00726e45f466b89b78a3286c32f3c353835fe75647688690cf32d9ccfa5e3fccaa96be056d80d0a5d2
- SSDEEP 12288:9E9GECza+9vywT9y+MlV4iu5YIcDTNCBMSck8pssJlMz5t1NG4Li37D3UwuLhwMD:nECzbXSI50NCBMSck6BwNGSyoANQJF
- TLSH T1DD55C8AFA7ED93E3C843D2A50141D0712424DCBAB113D55039AD643A2B17AECEFBDAC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gl.pak
- Size 1.1MB
- SHA256 5231780de08aa626a0906472c1a3a89f4f8fc0d1c45f0df61433304ac6f7068b
- MD5 e4f403509f4270fab2e71f6807fe768f
- SHA1 bba0629c36fe9a0ad5295aac70e4010312eab9b8
- SHA512 d0619ce7df6b082ff0dd3501208f76acc42ac2301e63064c6d3b17ad7b99962717e4563f3d5314e971cceca0655d2f98ca600106c42436a6dda811a955a622ed
- SSDEEP 12288:kfspv6lxEy5wrCuzf2ZRVi4jOkogrztQJ:kfMcEmyCuzf2ZRVi4jOaK
- TLSH T13E35F96A9ACC2F22541233897B43D163B5C49147B504C38ABCAF467633D8FDCD167EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gu.pak
- Size 2.1MB
- SHA256 7ba4e03467dfabea992a0fa4f760e55784abad8cd5dcb47eb893a027922f8fee
- MD5 53435746cd22784078ac9fe951590fe0
- SHA1 2f14126b8954a835ff1605d5c7962dfe85ce4095
- SHA512 13f70d725545c41707c004132e4d84b473da7f219ee6d0005dad6011fdab2c777d3e03b32baa0be75005f485e6d21f64490e614643628524db11da6f700a529f
- SSDEEP 12288:QfB3D34QSGq3qVpwka3lZbypF3rPxH0OLtuTLGbn:sB3Dow0Y0bypF3rPxH0OsTLC
- TLSH T137A55ED1C3B9F07159C99F7E819E5120C6699343D67D230011CEEE998802DDE3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\he.pak
- Size 1.3MB
- SHA256 8782c4a261254d2c0c925b76f1b7e30fa04596a76bb6b2367f4c94264e034d6d
- MD5 f79817de2030bcda3178fb2a04b97017
- SHA1 cf6e70b3bc6f8298f2eeba841e8ed357aeb28cf2
- SHA512 70ffa6a732f9309f1b6f936a85c42037ca75a4a248130fcdd8be66dc2507ba5ed656df850e312537c3b2a3469cf79bc9a74a01fadb74d9a980eeab7e8003ac34
- SSDEEP 12288:tuoqW8LybHloJ/iTkSQPux2aYymAkNZXti8IyrrZobRZ1wJQCTVwAYxbJ6JJgtV1:GIiiTu5bw1wJQCTVwAXgznH6EN8cA3A
- TLSH T15B55DCC4A1D8522591317AD38FA5FA286FF3C7B62CA27516DB08126CAD374F0BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hi.pak
- Size 2.1MB
- SHA256 b99cb8b39ce4df3270d2eb36f28e6dc4f7bcbf78f19c989c891339478e731190
- MD5 931889089bf9431a5dcc0e20dffed082
- SHA1 abef0adcedc78dfdee00bfc2b924e08ad5e890ae
- SHA512 63d02d7c002f48e0bb8746f8bd1052bf064ecfd0fcbff03ea7bf617010c1e3f83f86431a276cc517ba128525bf20ef798cc30768f7799ef88464b73948d0a966
- SSDEEP 12288:TwYo8qcQEqSgX19gbvS0IEEgfC6PaZz01mwuGCPgz7S8yd:8YEPSgfgbvS0IEEgfC6k9PF8yd
- TLSH T174A5370CE7BEF3B55DEC3C9A36880D37C5AC3670A3E5525348D5B3EB9944CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hr.pak
- Size 1.1MB
- SHA256 0f8c137a2091e2c6e69eb2b590eee03799c9c48d375cd81739b8d45eb5c777c4
- MD5 2c727d80214f81d76fda7314e44ce7c5
- SHA1 ca4915defe5bfe5c29615159f4371c09c78bbb11
- SHA512 70434789c4746e80ec6575ea436db0cadda99d2095797a1140502c116f5f91bb05bd30d1890a4731dd7b8f20451f8fa7f623a01c7551b65d476de5660af164a4
- SSDEEP 12288:r9Fc/e2YuE4XDKkLH9aY6iC2qsvgYgpMXXU/Wl+5rF:r9ye7j4XdLH9aY6iC2qsvgB+U/Wlq5
- TLSH T18B352A79FDF29A064996B3869FA2474475BD45CEE510CBF6788FA12E0303F9C62F8109
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hu.pak
- Size 1.1MB
- SHA256 210447c886f15ccfc95626c0be4cecbd118dcee3c585e4cc7fe21b750063a8a8
- MD5 599bfc3f5c4235276bca6d3b89ffff4e
- SHA1 99556e525943491df491b16b56e13543cd9408d3
- SHA512 8720e8bf764c3db037d0a6998f9300adb6d56822e481a5f42323ca6da15cb8d63931dd3eb149bd583e94dfd56bafacbf461dcb4b2be9592a709e03b396f9a23e
- SSDEEP 12288:xuNz4AbsURXTp+Lcw3V5yP8SVfJarSrrfomxlfVC8GzeKPamnx:x+0dk+IEV5yPBCSrrfomxlfVC8Gfimnx
- TLSH T1CA455B7BC765D441EC681BD32C242E19602E841B5A2F6AF73CCE886D35937CC5D938AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\is.pak
- Size 1.0MB
- SHA256 95618ed20e82b0c4aeb34dda772f3922c7fb10b42ac6fc2efada082dcb7acf23
- MD5 d69bbcb55ffbf6ecd66ebca0e5687100
- SHA1 bbd3a31764a9f47c7354640cc89fb5e3ca94a71e
- SHA512 6aed0b4ce75b40bee7a78e6fd5043d59a2bcb415b324eb9e443f9d74f8ffbc6a5e27a04d94dde9cd47aa0944bd472d69bbc3111374496fdbe6945d0ca2e98366
- SSDEEP 24576:SmGCfbIwBxxVVO8oO3InO9DYW3cRHThaaCt2kMjdv9Ns:xOO9DAHVjK
- TLSH T185352A06B907E21F3ABD23E44A940F653799B7E69CE1DCE0FA5B0127238BF455472272
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\it.pak
- Size 1.1MB
- SHA256 1539d735865c3830ba88a0eeb650f73aa0aaf6125ab0442c2c555e9ada5c2f09
- MD5 43aefb98d131e869e94a007b3bf4014d
- SHA1 8a27b439199586793bcf4663155062653ae62ca2
- SHA512 cc6e1351a16dcb4d730111d1e9e3be71aa0abdd4235d98199de564a8960aad2b69e7365655e533444567d9d086c950369e596d29c62acfd7a2ebef9ee31173f3
- SSDEEP 24576:rHZU0dx3KB9O/jFqDFOqVKxqQ9S1xV3C5EfyAs:dFHKSFuV3C5Efzs
- TLSH T159352A3AD9C961119E962396C511B055F67EF8CFFA40A228B95E431C33CFBC4F1ACA46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ja.pak
- Size 1.3MB
- SHA256 f2ebdb6800215a7e62c4de7fc981dd22d6e6371829211411c14c4726d12da533
- MD5 9b246d89f7b225e1f52ce0b0a20e020c
- SHA1 aefadbfeb89b26789289603647851fc8d1681e8f
- SHA512 246b80229a1b231cd74953d4c468cdd71208b0cf36381e60a0919849b4d9e926925127c644e78e8d8c8ab5dd187b9b47afaea222a8ca419211a0457f04e78efe
- SSDEEP 12288:mPMsEggM45yVcE3YFyzIrLCHDgRqNaf7VWLwS+kvHVMVo/wMY88i152t:mrEgr5316LCHDgRqNaf7YL/+kvHOA5W
- TLSH T12A55507CE3C5A9329D6153B22C0E76E5710AEC9BEC923A36542DC034BE617CEE415BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ka.pak
- Size 2.3MB
- SHA256 2a489ef1ed670fe58da8254b289764f5caf857db3d26b1849cc13df82c423d01
- MD5 1ee5b71901270cded24eb7ceb1649b92
- SHA1 6c9878e16ca3238a60e9bb6d3f83465a9b8abaff
- SHA512 e33d40dc2a1d13883693cb5798dc1cbbaa85d2aa7b578d87ac2c8100bca4a6c946a05df52e7df43585f2b23e1344a6baa9f09f7fd5932e23b2f57af76ea00fef
- SSDEEP 12288:JHcp5c+M9lz8Ycc+cXY15NnQarTqQeQWZ8:Sp5c+MnwYcc+cXY15NnQanBeQWZ8
- TLSH T14EB57F5139FF77709C5E21154672BB8AB7A48C8FF0C8843FD111F1A27993A046ABE366
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kk.pak
- Size 1.7MB
- SHA256 7db6371b4e8aff46c842957ffc0c6824b0ea16d46dd164b7c27bfbc4337b345f
- MD5 d15dc8ba627a86543826cb2f4c9b1ddb
- SHA1 43fcfc3daa5c2b55e54668ef8153293961bb019b
- SHA512 e5a6c87f780873b3562df8f16f9eb1a1dd071f36199e2b8d6c3915445cbb433ad5d336b8a12fb583cb4d2739035833c81395f2d351b87ed50d84f2673d49f79b
- SSDEEP 24576:6mUd3DReiqKhZf1tqSvOcurDbL5qiWIZVPuN:6mHSvOcurDboiWITuN
- TLSH T18385BB91A64BACEFA311E5922D047A092CE914BDBFE733522415BC7F39FA271463C742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\km.pak
- Size 2.3MB
- SHA256 232d02e0b28ebd37c2957cfbca76ac648bf274e8f7d45df779079e267d353724
- MD5 3178853895d2df69bed80306b1921015
- SHA1 a1dc45b3878d6b429da201edce87b6c11cead6cf
- SHA512 cd04d4f90e5fa2505c3e02b4faac9a6e834480546371640c0e020c3b91e100a4c1adec633e05538b0bfda3659d3e994761396390fa2b0532875cc8a4ab6f17be
- SSDEEP 12288:RpAhG6ATCHaYKRE7neU3SG4sWAFrgWLxgzmkdAxFKsHPubBUOvSyjNjmXFPUOVu2:PAhGvTC6Lm7nb3PkmXFPUOVu+Xn
- TLSH T132B517505E94BD75413E73C3219B6F484AAC9F738C5968CA385C3E9EEEE6F53A20204D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kn.pak
- Size 2.4MB
- SHA256 0835ad9365a6bee8537f12c5086f5e051abb4be0d5cdc0e3181222a0480e130f
- MD5 316e2daeeca10910bd8463a22ba431d8
- SHA1 b2f5af3c6571f45d2a52d49f75740b21376baaf4
- SHA512 084113185ad812e771aa327ab4bc6a3f88ed842b99e50a5f3cc475d65a8d8bf84108a9b285c9f7a981e358a94eb9936378d599e3c0d0666b95ec4639465de23f
- SSDEEP 12288:VXwZqdsuOeSLUekmtmlT34QesM+XbdZFgin++BqOsbN/5AMKDYRBObyhHsR6LrL7:xwZ6ONL1T1+XbdZFgini
- TLSH T134B5FD189CBABD301BD5106B24EC643EDFF16BE29CAA47D2F49DC7402C62C6A90875DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ko.pak
- Size 1.1MB
- SHA256 1ffbbe2ac0346f982d82c2fa61dc86483b07f168b36f86074fa1bf2904fa9825
- MD5 9bdc632168c20af28815eabb65772bad
- SHA1 6c2079c6c5ed8ba4d5f3ba934dcb226d875882e2
- SHA512 f167e1a0eedf32eafe41fa72f028db5ab51d5709a0d18f77af1b4bb1647442ad1826ec82b627e62e30cb90210e190f8bdfc006d6d32c3be4eb1eab0d5121f617
- SSDEEP 24576:qHRFP0zJbJtSPPxH1ZfUutjRNOItEiQiFe7I0:uROgNJnQic00
- TLSH T13935E7F238DF67C9159389826EE0FA24A381D9B3EB530294FD48CE049F156C74587A7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kok.pak
- Size 2.0MB
- SHA256 3fd60750ed9d21c09f877ed05da78d958a9d3c22d8c2a1a62b7d7f0d76967619
- MD5 ac819c8796def8ad0f990f910f6c39af
- SHA1 889af5db8d43fa4e7eeacde2637be3f512f1ba98
- SHA512 3b7b3f357038c502ed2ae215537f702faf7102638f66231e7f679777fe1e2c699ef77885efb4e4b96a33a423151677447b45b630197b72fea0ffe595e3a1c870
- SSDEEP 12288:pDDK1FLi+j9zNb5nCZmiZ8YlfCIY9wYx8l5:CFvXFdiZ8YlfctxS5
- TLSH T154A5334CFBB9F3588DEC789E29090D7BDDFC2171D3B8629648A5B3DB4885CF401895A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lb.pak
- Size 1.1MB
- SHA256 1b44025df6694d8276e71c3d89dd953849b97925a5486f5dad2de25812668bab
- MD5 139ffef544af0c927e19bcec8a318507
- SHA1 2b6337a684f52d09f6c16e3bedc1413c502f28f0
- SHA512 299514c76cc1c7622932b620124984d3e36f86abb9b646615d1f04eea5707f765fe4b958f66641b22158fd78be8cf2513b15e1126b76135ab06e80f71d66a1b3
- SSDEEP 24576:JPhoScqWTofAk1at9Ws4U8u+ElbA2nE2bh0LMHSOh3DM:jcT+U8uHpEWAW3Y
- TLSH T13A354C069A6D09D5AC812743EF01EC393D2BF36BB396F604749DD039631B2E6E19E48D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lo.pak
- Size 2.1MB
- SHA256 5bc5385277aadd862492188b9f72d8623a3ad40ccd3bca34410c401b596a8469
- MD5 a48209803a6f720d9ee046383a62c850
- SHA1 193b62f3696c3da8e254723730617804d99ae89d
- SHA512 7d925c1bca03f7050fc694d744c7b5d951d96803fc53225a527f178b517e3599649b321ac193f85d4679c58914f42f71117fe88d1f6a735b29e748f0693e3b27
- SSDEEP 12288:0+rvzAi2o/ZOXRxlHGgqCpXjTFfd2WrMHXFESlElM5hDC3OXgvTrkENUOLpL20WH:0+r8McDxGU2WrMHXFEQD
- TLSH T132A53550A99FA2F092F413537853A6F653B58E38F067B8A03A9E4D785EC1D30EC4766C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lt.pak
- Size 1.1MB
- SHA256 7b91d33bd1af9900974c28e534f6b9b9cb70e6b950e7ef26e6c08f3905cf9854
- MD5 98fa50d41ff6e4f5c87e7bec799750ae
- SHA1 c393fc6b7c1f89631923bb5fb7580082f4e1253e
- SHA512 2477c31ae7a64e4a3a91a13c9dc1f3c1b73a20d0a28b3df1e430b4d75fb801dafbac77fb0c6d8c12bfaa82f035cfd9b1bdd5865deaa85b8e2112e8dbec90d206
- SSDEEP 12288:TA6mhCmMaX+HU9greLo3LqehF1WWAKoywuLrLI/TRGKYnNu34O8oVd+g:7mcR0448hF1WWAVywqal
- TLSH T10A453B00AF93EAEBDE4123C641A08D71DDBC5245B626AD20F86EC766D62BFC53190F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lv.pak
- Size 1.1MB
- SHA256 8364928d2048c86d03caa2e2d40d1101470257f0e58dc22293562ca6810fef18
- MD5 a601bbecbdf5d08f536745601d2d58e9
- SHA1 771a1db5c8cd2dfe34c0f12db3fac2d634e8281e
- SHA512 b80d861697182611cb6326e17b9a01e29e3195ade657890aaeb64d28f3d1fd3ef8d6cb6149a26d9f91e366f02ba4fd3b064b6ed525978614170db2bd8d530a60
- SSDEEP 24576:qv9qkmJ6c9OA09tCnSO8p6Fo5Cm5vU3zEQasf7vx3P6v:qv8J19q6Fm5vU3zEQasf7vx/6v
- TLSH T118351964CDC6CFA18E505AC72722D822B4CCD743ED0AD621FD6D8B3A670F66431B5AE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mi.pak
- Size 1.1MB
- SHA256 02635bf8fe0f60d01b7de40b3f3b555a7703379957550b11cf50544d5274953c
- MD5 b822fbd74144fdf47d2d446995bf7a3e
- SHA1 d989160faabc01ccf9784cfae3abca49beeca70f
- SHA512 728d0bf33062b6227fbf384a016227dadf1c6898c35ad951b3ee9aa8de35bde75b909119fae925d5a913054fe2ac19cd89866607118406c9db59fc6fcc8daa12
- SSDEEP 12288:dRzvEybJ4qglJtI9gH2UubAVWOPkgx4eYK:fj5+lJtI9gH2UucVWOPkgx4eX
- TLSH T11635D790A5C1B600FD2607D627A7C927BC9F934DFD22CD177924FA263E4B3A43355AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mk.pak
- Size 1.7MB
- SHA256 8824393f693a3a3eb75f88e9adfc52374bd597fa67dd1e6bded16944e8b5c74e
- MD5 8842b7e1c1c71908017272f0079718c7
- SHA1 65c48a278816ae3f3e25fe345ba7f60ff666cd59
- SHA512 dcd70d5f195486181edd276a26f6ab948a7306c9440d6258438b07fbd9d3ba929ee74e56d1712d0e59f2a69ec3670a802905bc47c8c9c68c1d3e3e0e6523edf5
- SSDEEP 12288:eW7+hzC7bs18OVnt/CnUgTWq1XOTtCQ0Zh96VSwR3/s+1fzDo2xmtlKPV9mBQQc4:T+hzC7q54RuTRSwR3/s+1fr/6p
- TLSH T13E8556A15B9E74CB0501F05FD808BE0A3C9B45FE3FAB875211651DBD35E20B886BA35E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ml.pak
- Size 2.6MB
- SHA256 b68fa96efcbd82fe08127efde190cda58056a32ce062ad2f61d7dfc054f0a557
- MD5 f0a1a25b6dfbb0ab49e5a7990d1ac7f7
- SHA1 f868c2e63afc36565ea5075cfb32c28ce8682fc2
- SHA512 0c5665d18b7216a7e6147fcf089ead00e70e113b4171adfab9f01a5f15d8e65428758f994ecb76079929b01e8afd3dfb0c2109d457b0c2fa434c7f3c872676a0
- SSDEEP 24576:G/rOjHhB0ptfzln7LMmGN/Bdiff3ymL3/77mhioP/hm6meLy+eHxaQnrj99eCQ5k:wSKjx
- TLSH T11BC5BE5BA436CD3B0FD0021A7B4E2FA7DD5F9FA1409F228B5869B1628D59FBD0C99031
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mr.pak
- Size 2.1MB
- SHA256 bc772e8ef60320810b8a030dd6e2eedd70085e3bc13c952b4d72d2dc6f1acef7
- MD5 d2ef32b5fc50a96d7acf8fc11bd158b7
- SHA1 1b3317879f5c55e3119807b924af8fdf2c383a08
- SHA512 839b6a415ddb7fcacb8fc79ed33596580d21abeebd0857c28290e6e4a1bf254ea3bf8a1b69741568146d1f6f91421e5a26768d4eb2403c2b650dbbcc42c6fb89
- SSDEEP 12288:+EHDTGI5uZjcpQxouQuH5V5A+e0hb4IZ7Dpj45x:+aDTZ5kWLuH5V5A+e0hb4IZ7D65x
- TLSH T109A5F04DF77EF3644DECBC8A36580D3BD8FD21B1C3E882564896B3AB4945CB4019D6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mt.pak
- Size 1.1MB
- SHA256 9e29b5eb31b7bba453f41ffb3efd16b5bb2d002faf9399f39bca265fa9ee97b2
- MD5 18c759fa501b41aeb2e5242a6fd3d313
- SHA1 47e53db2885acb6027fede6922174caa4c0b77e0
- SHA512 6cd9e07336b8716ab7ff919f404b4670207f7ebc1cf65a6e93643bbefae99733bb3e493cceec015635b1e8f27242f17f40aacd0705392737eeb5060f530ac9f7
- SSDEEP 24576:INVpbqhpLpbdrZnGwxvSRctply67pnRHzz43ign6muwKMd3sjAYwF5hEBs7TRVux:IYhnO7fuwK5jucsnRVuSIsY5
- TLSH T1A1454B16A6F25E69DED0A28E8800C736FC5858CF2D53DC417DDE172AAB4FED592D3202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ne.pak
- Size 2.2MB
- SHA256 7da998e03eb9e1980d3f3528cd68b7e3d988d479e4a6ade76f685c71a1962c10
- MD5 ee6c3ac89e8b33315cf7fe0cc52c9923
- SHA1 def5fab88d59adde8b77f71925b59db807939a08
- SHA512 ade8e09f59a291daf32505f550ca664a1b4ebe4500adacd4b9007ba5edc4cb5965fe46010dfcfa7e85529afadc1f18fb606e98d06858b51ee1c9add83a357d7e
- SSDEEP 6144:vdP0rEqAOhdPzeZ3rTnONlHgGH38/Qcsphny:V6EyeJrZaiQcsy
- TLSH T151B5294DF7B9F3A659EC788B2B4C0D3BC9A86631C3A652578CF8B3D34885CB404D9592
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nl.pak
- Size 1.0MB
- SHA256 271f10356d5150d9e6bc2c5542878e069140df11da8d86f73a48b952cde79c90
- MD5 d9a60bff674fa8021cfe0835f3824e32
- SHA1 fe6c35b7a2b7d26daceef950ba1366d96f54e875
- SHA512 603d413d14cb23e4a69b5a9f2f18778a51cf41172419ff0edf72838a6d739de70b6307a6ede3a6203bc4f9d2b89999f54a97a5fc025bfb7aaf179bbce02c4516
- SSDEEP 24576:+hg7/fYV0Ab1gnQNJOY99DZgTaPpAU4guh2bN2d:+O7/fxgm2N8
- TLSH T11F352C079C8D593E99C0A38AFA044A77B72DC31EC6ACEA7CB4DDC1381613FA851AD5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\or.pak
- Size 2.3MB
- SHA256 2f69d3d1809db6efa5ba609a3ad8faaeb8d231b6705e810c43ce759d4a6889b9
- MD5 447deb0107d9b83b86a74ee65121ef67
- SHA1 bf1afc2da3fd98ae79d8c13589db73850a96726e
- SHA512 0d1ce9304fccb438f4b28175c1745429dd85022e906da0041b0feb2b3b272411bb6f7e12fe52dfc3ebf00d08169e5b7aa33c8e4a3c66572dce8fee6207c1b5fe
- SSDEEP 6144:1LystyBgp+n4PE/UVrYkqfh6Fx4+H2yQrForrJgK0etKfrb3cOZFEl60xMoJuQpk:Vyq44PwUCk8Y4+H2yGz5ZFEc
- TLSH T11BB5F320EDB8EDE69CF143A4B499E239642D03B5F9D76BC90740A3C30922CEA4FDD559
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pa.pak
- Size 2.1MB
- SHA256 952f4a890435e780706e7fae43489b5ccd6e24bd15226c9e8bae64c46845bae1
- MD5 b398409cb8874718a07a8ea4c744dc79
- SHA1 ece5ec1106bcc45d64146bda0446b4e58a1a20c9
- SHA512 18129683abfa2175ad4227253ae32dddfb805de94ae7794240d4aa958828ad94c00fc35a8a3380587367da1db9e49cedfcd38749a2bf816b048ff7a8e4a62a60
- SSDEEP 12288:Ze47OYZNS2L6qzAHiEL/PHXxGJtNMosQdAZ/z8ygN+nvjy5tw5q83py3IXqTEtzM:POY+NhY5
- TLSH T1C9A56600C84CE2A68FD8195D56E6977D10960D398CAFCF6D8580C65AF6D8FC10ECBFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak
- Size 1.1MB
- SHA256 184871b6c941dffe0a6233c15ff376b366b0d5c79a1e9a5e26681357cb23c5a2
- MD5 445ad28db584196d66ed573c909713c0
- SHA1 62990a6d1dba23fdab082710e8d7384229c1aa7a
- SHA512 f5491c3d6d511e827c565ffae770491b0edeaf6fd8cbecbe7164d252ed4693a6b303bfa78b0066ace19ad9a7c030a708ebd83d66d71b7d9e1e2b6c14721efdfd
- SSDEEP 12288:lLIyNQ4qT7jcHsy5NxdMbU2VKKEq9VNNyYsFu+KU+hqS/4p1ecbItP4paTbuQi8w:lLIMPqTcMQjd0sKEq9VNNyYsFRw92bs8
- TLSH T1C4455A4DC5E5DA0ECEA008C6F5E35F3878AC848BE519C74EB45F8129730B2DE95BE498
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-BR.pak
- Size 1.1MB
- SHA256 4a1a1f1b0e334309f832dce745e6ef292c48feff18b4c6b101d38a4df2918721
- MD5 0360730b6c74dce336f8c2710fc9c68d
- SHA1 a32152b2b9efb90302fc27d4a24aceb827a269bc
- SHA512 26d21e8bd8623c7a004191b64733f233d5036801bc3375be5b583abc49739f7571063f963335fed573d3db5e69462ca7c3f5f4202a2a7c995998e84d7fe860bd
- SSDEEP 6144:I+SnuNeJSPvTJKPA/N8uXQcGBqaQ+098MgT6cXwx/q07/eh0Y4wKzOPVAdw5CyLH:Bv6cGB/QfBY4wKzOPVTLzbl6aom
- TLSH T100353B299DCA0722452213527B499B43F1C85647FD09CA87FDEF8B1573CAFC0EA63A25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-PT.pak
- Size 1.1MB
- SHA256 50aac06e5b026b7f3f435d08a9288b28a49cc65cb787eaf9d445a7d57499f3bd
- MD5 68dfa0deeca8358044ada8441d287ffa
- SHA1 17d37f598953fccb6d0b132fcdb6588d8c304dca
- SHA512 68387c055b09974562dbcce7d1b3ed7f708e66f23cd2e4e073e0c1cb9a67286d1a2df39fad6f11fcc95410f22f8d3e96bd49964e09e453baabe27e224df688df
- SSDEEP 12288:gBKMuK+W+Jv+IJ4obNv/j4ZP/eeRqcXMfmzSq6x:gQv+IJtNv/j4ZP/eePEy6x
- TLSH T1C935F9289ECA1722452213927B05DF13F6889747F809CA87B9EF475533CAFC4D2A7B25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\qu.pak
- Size 1.1MB
- SHA256 51fd0956b568068dc82b93c816c004c70155eba47215621d59248441b8ba5e33
- MD5 a56049c456446f8b4892318b47a6bd2b
- SHA1 addf1063b92b09d68b8233f2fb59ef10745e3774
- SHA512 b76213d90c91b1f209b0cfa1c2d04a76237fc4720a2686997389f361d719daaaf3ade5d39bcca29c7a4076a3c2e3edcd8381197ba8f02dc36726c18e2b5f4c39
- SSDEEP 12288:ROJey5O05+KjpBMJRrOya1hUD5f6Go3F3zLVm/BaA8:R3y5O05nCpa1S0RJV9
- TLSH T14D35849419EA5144B91463C302E99C6320FAB2763CA0DDD3B87D1B6C5B4E8DEF1C2F66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ro.pak
- Size 1.1MB
- SHA256 b4250d3e9d7b8632689545f6182bd826c1d78751de34c714c4c9a7567e976e35
- MD5 6ee816e1869b044079dbd833f5da3439
- SHA1 6731d60aef44bb1f1a3cb1cd85ed556911cfcf33
- SHA512 2d13aca86d12e365c50b1105c2528e618eef5faac0b61b232176473fe21120767e0fa14fcfab9a948f8bdf63feca29729ac570a31b024287cb9c7f0d99b03c0e
- SSDEEP 24576:vouNv09/0hf69Ur4h8bCDGe2uXsl1efHQHflduUuVBRTlHCBZ:vNvzbCDGe2uXsl1efHQHflduUuVBRTlc
- TLSH T1B6353C22E5C856521E4113A3B72114A7F68F519FBE01D18977DDC4B822CBBDB812AECF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ru.pak
- Size 1.7MB
- SHA256 db50bbcc8e4f29d15c0d763a030368c277e4bccb2555269c338f9a17dc32f92a
- MD5 ea22447f0df081f47c8472297eddc659
- SHA1 d24257dbefa516c24fa8d5dccdb861bb5ae7a076
- SHA512 e291f9b50eea6f253f9524b43802f9812e3ddaa4569ac9955b041347198a16ee23831fd526cc5cd0c65c5840c3d6f3dcbc1f2233552c7651171d1e17bd06063f
- SSDEEP 24576:F4P6md2iPho3QJux3Os4u/xjjJM/Xc3/EW0:Q67+s4u/xjjJM/c3/EW0
- TLSH T120857861569A64DE1105F01BDC08BE0D7CEB45FF3FABA32229682D7E35F2024C67D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sk.pak
- Size 1.1MB
- SHA256 0f517973ee821a6d4e12641e1c3ec95a22b458911b92766cba9edd5eb921550e
- MD5 46483a8f5f0ea1fa28dcc055eb6e1a40
- SHA1 d4616dedf367994754682d1a5ea0d751c13ffd1c
- SHA512 007deed522148d603361f2b73544430106804886049736ee2b4001440d2153455827078537b4be3649a9a102e565b14d889e8cb4566317f1881322144010dd2a
- SSDEEP 12288:16FpxpY/GFiQpfTdbjwoBXmgU50qo0MaTIGBN1bNHA+A6dX5BJzhZGHJkctdNOWJ:ADxG2ptUpo0MaTIGBN1jdcJzq3lfz5e
- TLSH T11F456E7FCAE5880ACFC90345DEA66410B97D02D7884EE9A4B80E324737E37DD86B4D59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sl.pak
- Size 1.1MB
- SHA256 7df39d82b0968633268bf6a3397b9407d08ab2eec5d196e5569f0c27914c912d
- MD5 985f6c81629f183d31b3524a75c165ae
- SHA1 a3a523ebdf3ced41936974bcdd9677c98b1a0b2f
- SHA512 662734f83f893780eb15b3c7fdafa3fa973e21547e33a9cbf026d02c87481001fddead12a7a62f1936f75424d91fcf034c2efc4bb92a73b4347dcb57e7448899
- SSDEEP 24576:8l9+oDUXy+x0utAPdSYj3eJ2AJBEOeyszbDT:8L+oD8nxRgAJBEOeyKHT
- TLSH T1D0354D39EAAB8E0F0D6672CBEE9206107ADC458FD241D661FC4F336963037B863AD554
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sq.pak
- Size 1.1MB
- SHA256 9d912af9c4cef3670baf6f37e718fb8b82cabd49293e6a4bea0417c4c73ee5c1
- MD5 5992765c295f0b072957595f76a58e50
- SHA1 85d61e5c615d52399529e27f46956846b4f5fc74
- SHA512 08d147151f876c66e768e02f48a4ed8a3bb6be81b00300a32d29c3c2b7a126286393e2f4769b22bb9b20132593dc220428d60e9628b6301c08dfb964ba98dc7d
- SSDEEP 24576:CKAuT1MxAqg4mT0OP5MiaV+F/BtI4OASE2a9IVY8bKbg2MtqVDzQ7kQ12N8LxPqZ:z1MxA54mT0OP5MiaV+F/xCVY8bKbg2Ms
- TLSH T1F035C526D9B9C776C517326A6B4009092FFD626F70E3DD2DB88AE227053377D4268D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Cyrl-BA.pak
- Size 1.6MB
- SHA256 280674ee360851dc9d2714fe8a88c979200f95809f683815e64499e5d7280d28
- MD5 f07defc7a3224c8bf4e2656f3cd27199
- SHA1 7cc93cf8bb090978df2b4b5c55ff11bf7b02cb69
- SHA512 1ed8ca9aa73c714fb3ca58e79a3ac11f9e260ce3b691596afb7633de51e3a8b3c46118e17831bdfcb7714a4408d96821cbc5c400a4ed2720fb9c6ec507924da9
- SSDEEP 12288:EVxrKI6Q0up05Vz7/hs2zuj1Citq34vgXBc3FodqXl4M8n2qkFya7cEfU8gnrmS4:w6rSj1Citq34vga1p7gnrmSipfxdgy
- TLSH T12D859AB1979E64DB0501F01BD808BE493EEF41FF3FAB875211641DBD35E20B846A929E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Latn-RS.pak
- Size 1.1MB
- SHA256 c25057bee9715661148e32464c38b57ae23dafb8d547f510271574c5227ed4ba
- MD5 5d5bbd0c155c765655599fa8c1b9471b
- SHA1 cd3b98aacd8d48439c3f049f1d94642a6a7e42c0
- SHA512 0729e2c67d8e7be49313001cb1e4f31a4da5cadbbd130a29bb9d95bae05d7f73a9a278f3989e26fe9f3084e14b8a4433a154ae831a9145926f174412e3b639b0
- SSDEEP 24576:RJaHQNMRrh2asunAa7iI/MgKdYurWV/upMv:RkbRrt/qi2pq
- TLSH T176353C79FEE76606499323829F928750B9BD89CED590DFF2384F922E1303F5C65B8148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr.pak
- Size 1.7MB
- SHA256 759610c7fcb001524710420eb67479521c0a7ab8a3ce74d3f23ff2911605c8c9
- MD5 43d08a4fcc79203d8e320d308f464da1
- SHA1 a0caf6b761fe59ac8afd7dae8e4bdbba44faebbd
- SHA512 d6b2053a39a9a8c170fa9986e4ba9060b1483b3fb28f1511a9307fef19a055ad3142387b86f19a22952b194e0dc301b2319af5734724a13d905ac9f59ab2a319
- SSDEEP 24576:NeDCVDgJYnErvrDtRD0Ya0FVnEBFza/pdnNtTRAHx:oFVnEBFza/pdnNtTaHx
- TLSH T1988569B1879E64DB0501F41BD808BE093DEF51FF3FAB875221641DBD35E20B846AA25E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ta.pak
- Size 2.6MB
- SHA256 c5714b9db3e4f55d7096bb2bf74384bef6c4d70ad8d8389237782a48629b32ba
- MD5 4c0a63b3ed6a4c611d86ce69b64405c1
- SHA1 49bb874f90ee32f4af7873f0a5a3e7e25768e01f
- SHA512 ea09772c93783e8cb51b9921c960fc150a81ccecf874a657390c1eab181f3d46580bcab825779b2cbbaf8790ba4ca83b63e7e62ec0004eacdc1c56efa1733898
- SSDEEP 6144:3ZlozG/nn9MaT15qKBeRQWoTsM1vQo01kFyj4Xb4uQ1nXJlcAKSE9GhVY0Pj8H7p:bYUneaJsKPXTzGpY0Pj8H7/JnqMuGH
- TLSH T1E4C51ECE923EEE890F93288F0318536912986255C47BE3A67C765E1198ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\te.pak
- Size 2.3MB
- SHA256 5d09ffe4331afaf263e2be9318ee8b3639786924941e1a1582aff0db16aa4018
- MD5 aa0705825f850fd7ce87ba8e69b04d9e
- SHA1 48554449db02f2a41e25a09330a9452b59c8f04f
- SHA512 0291c5232f685975e36d98fc634f5e1f15f51be7776e2a253ba7dd742b48666646707b451296ff249a23d650a9aacf27b966767ced229f31f0e80da514dde732
- SSDEEP 12288:g5qRtrFRXvl7lHMHWAQr2o4uFaAeM1fxCU3hkNu9pX3SHLVr8DVR27nlYkAB3cW5:gYRtbfdlHM2U06hXBcpSIKcXv6Jo
- TLSH T126B5D002396AD210DBE702B7352CF56C4A781B42A1D6732C1EAF9357EB47D7E0883676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\th.pak
- Size 2.0MB
- SHA256 09fa72ae30fb9d656c14619693feadbe1b4e4f4217963372256c4df87d7a53f7
- MD5 558a77d718c9eabc6a41a19112611a32
- SHA1 ce4e4347ab791dc9768ee43422dc04bcf3e8ba9a
- SHA512 e86f47bf5769f3e380c2e43f27ed78ea51b230f2daa9818fdc83781a2914afcc76993dbc28d7d56bbabcc62a1e9c2f1d93a09bfe8f81c8f5245f6473384cf934
- SSDEEP 12288:0eWe2Y8BLOp3BA5jLklcnLknCiayFSfZkSLLh5egAI7aMzaIVv8IaSEBWUZUepUk:JWw8Ry3mWY/A/T4KeZYz
- TLSH T1F7A58AB3724BDD9479441A5B292A7784667DEE693F73F8E000C9211A73F071A8432EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tr.pak
- Size 1.1MB
- SHA256 827d1655ed0777abd10f90a72759ada3fe9343ba7f31ed58db4ca77df7893769
- MD5 2b60b684dacf6cf8cdff5956fa4ec07e
- SHA1 f16dda3bae7d28c5b9ce1154a33e54040111f13d
- SHA512 16d7f443de5fe2ffb11ffbe1d4204854d5179fa768c267ce623af1d86977bda4691be5e31d2031fef2808dece60033ba78b417f0b334691e2a5e8a3fd25247ac
- SSDEEP 24576:1JX6R4GMh1KyRUTIItIMvfsSl8OFlTcNhauIU+TWGVtSa3I7DALqxGvL+:PHKyRel8O9uIU+TWGSa3I7DAOGvL+
- TLSH T15035E8417CEF681C8B7527DBC5A50976F89F47A7B330E54ABA1E8626370739702E260C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tt.pak
- Size 1.7MB
- SHA256 038966e40daa056df50e8483042500d9007379fd4e717e780a690c55c732dc77
- MD5 6ceba1465060d1641418ac4c49e0cb02
- SHA1 163ec4c88f539a7ab6938e61c43f090e0212b69a
- SHA512 b7c0ac8b41f304e592fa487f198fe7669a544c77402f3c51085a1ed5dcbc78b9c88dcbc4ec682f1dd4a20a63997f5adb1d514b7cbd3fa7fb72b8c8d928129a56
- SSDEEP 12288:tb9vzwjiud/Zkqj9+53GGOl5EBVW90SuVVyyGKwyNFPxIzVPeEwiNwIP:tJw/ZkyQi5EDFVVyyFbNBmVas
- TLSH T1FE85DC51A68A28EF9241E2423C05FB487CDA54FD3E0B7622641DBD7D3DE327403AA75B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ug.pak
- Size 1.6MB
- SHA256 60901e70fd4d6221397044e6f83de50b41bf0b512808eb86ab9932de031ea7cc
- MD5 edf2d28acb2f3fce8344ee45026bed8e
- SHA1 e95b3ad22cc02f06b89aeed414556bf7c195bfcc
- SHA512 d01120338f4097a3508804676d03276160be4338b240d43da6b95baa80f9662a940f039b01eecb97d632ecaabfd3dfebc16de22338fa02a400f71aa290f36044
- SSDEEP 49152:ZiEwBXwLgR8Z2a9P3VhKXHjKMT1Ik8hi3sn8ejH1D4CIfyylTWzA2HkQRo44Rl71:MES
- TLSH T17775CDED62650232AE47E91EC352B024DB3A3D338F02ED59F1476205CD871697BCAE79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\uk.pak
- Size 1.7MB
- SHA256 61af745a967b1bb9a8380b23c3f7995cc687d5c840891f69d15d0e371e18db82
- MD5 dd1ee13649d0f9af743b5a6e37b7e5d6
- SHA1 fc2cf8d25c5f9479f4bf3fb64f1ba3849e4132b3
- SHA512 8540330f4f5de5726f6fbd0b7c9b902e6c0249d38cdb6f23d701d7470cfbc1c9580b8624e400868843aea66e4c50c51f5a607b8b7533edb1d296c45c4d9d4b9b
- SSDEEP 24576:IV/0QpnaOFwyIz7lpifV+HO7QSTElfEO56Y87bZVM85M:isaV+HO7QSTcMO56t7bZVM85M
- TLSH T1A285ABA59A9D58DF0105F05BE8487A0D3DAB41FF7BA7871625683DBF39F2024863C329
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ur.pak
- Size 1.6MB
- SHA256 74c7f306e4a614b37bf51baf8301fa543e9bda8d0fe9a443e48e3281b9e81a4b
- MD5 e907f737e994fa1fdd5da6bd6d52f5a9
- SHA1 85e8ce4b273cf5fb35811294c4958d8e4e5f9fe8
- SHA512 7b6b096dd342c14cd88321e49cf15d3ad4dd68f72bd59a7d886cabc553f6ce82821b4b23f4e7062dd583fb49c48d40f0e48b66d37421ea6ad5c364a9dd836e2d
- SSDEEP 12288:CJEQLYHQ5v9AOmBIFbpbyDAdbEfO7PU6t16fE3CzZcPJKD7jMczoqUOUgPzeganS:CGRHc1AsFADAds315
- TLSH T1A17500D2E66C96B28A21996780D33C34CB339F13D34AF285F56246C54EDA1135F6CE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\vi.pak
- Size 1.2MB
- SHA256 9f476d725511501758d49842cc7f6a3a9983b49adb714f4195fabe5e6a17c532
- MD5 4d4b6850d161484729ad2db60a85380a
- SHA1 5d68cfa19fb60312370c9ec74c9a4af549485112
- SHA512 48b46a004c0b7af6b695d55e61678a6d221642924402f774112d3c0c1747247f33d13c15bb7bb7a2af325330d6673216d6ebfd38eb71221f31924d5feb2a0631
- SSDEEP 24576:hGv2j4SIIKckCiBkYqTsJcEjTrqVluxxrUC9VTPpDroAGho2qT6ZWXNilJuJotw3:54HoS
- TLSH T14545A41106D4702281AC163EC1CD540DBFCEE46FE781CFE57AE819787B232A56F25B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\manifest.json.crYpt
- Size 1KB
- SHA256 d224ed43104c85d0726ba1684f06eda4e5faaaca47c1f3739a4e7aad010a1a52
- MD5 944c543128dd7fb980431545838a4b12
- SHA1 65c89b81c9c75613de6c916018c777191f22bc8e
- SHA512 ff9c72c84f159440dadbbedb99cf23582a0a9717f2f8f051739f1b15b81aeb9aa8eea09b0c2de52b6607c782eec61d0878620afa8951525fc9d80f10abeaeee1
- TLSH T18121E7120CDA13D64BCC2CAC6C7B762923A52AC18F9EF82167976105CF360DB458C871
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_100_percent.pak
- Size 1.6MB
- SHA256 5d3b7d0c6290bd80aab8141433f79e85edb2285019c57eb2278ca6eafcff1089
- MD5 0a0fcce4532eb3dfbb02fa2ad69b8beb
- SHA1 e3eb9facdd7c04ca7ea9004d246c9f4e69896ade
- SHA512 9fe9ae6fde61dd919b2716ce9a246f3e3bfbe58e47f4798572453fce30c513ae093b7b3a9d4fcaab2935d21019857114b315c7592f602bd3ae24b42e5f134af1
- SSDEEP 49152:N3VnMw4X+nMS6P/rRhne7njddl8PJjw+TucKsD1:nMw4XfS6Pbezjdj8PJjRTuS1
- TLSH T1517523E7B770EC7DDE6B1373936626B1ECB30A2D1691510D1B8AA8392532B48C4D57C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_200_percent.pak
- Size 2.3MB
- SHA256 09bce136ca5bfd72290b0b4c2582b6bf097596ae979ffb586f612980d9340893
- MD5 2c2ac1590ca4297c4a4fbd018b5bace4
- SHA1 afc62a9c254cd027b2c669059f1df588bbe6eada
- SHA512 1fe25b81dc1aa9fbcf4caabc6de8f27edaf079c392ad9b545176cfa81f2a442aff0f051e79b519065786fb07d6407f524c70d2cc3231260b9f5d3f856d25af13
- SSDEEP 49152:/T3DMsOQbMFX+nWwC3/gZZc8khvfRqv7Ijddl8oqzuSXADUNaTaurkbh:3DOQ6XpwC3tJhvfSUjdj8haSXADUUTah
- TLSH T1ACB523D7A375CCBDCD2B0BB3826B01E4FDB3156A0272111A1A36AD3DA535B4898D67C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ta.pak.crYpt
- Size 2.5MB
- SHA256 7ef772224f0d236e2bb643c2e8c1b0408baffc2c7da6bad57fa7efb0308b352a
- MD5 9e194cc223b79c34273ee2fdbaeded72
- SHA1 b1865336a35318fcf606b11723f8ababe7c4dfef
- SHA512 7b9e6724e4722cf7ec3ab4f5b62cdc1819ea887b5eb80181a67c4896949ea0c6f4f67c1aeb0c9dbeab0a7b9540a115f0f34e85c7a336515fc78b68575bfa5e48
- SSDEEP 6144:nLhdrmHqW9C9VImM6qYavQ7zKV3oE2MvQo01kFyqoXb4uQ1nXJlcwKSmOY0Pj8H0:dpkCQD/vQ7z9GLY0Pj8H7/J76Uw
- TLSH T170C51ECE923EEE890F93288F0318536912986255C47BE3A67C765E1198ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\am.pak.DATA
- Size 1.4MB
- SHA256 b315498baaeca0f580c0613d2690cfc2eb5808ecfc69d1bcf6cc8b9e423c40cb
- MD5 e9fefcdb4b90c5231c1867907e7b5fb9
- SHA1 419dcd95a54e99c04f76d0955b6ddb90b561b809
- SHA512 005d54a724168858de16ee44a49bf8516f445ba28ccd15fccd0a4468e0fdde87012ca0a7d97e11ce68b4a0dcc33d596fa93db72446aa75d265726e60bb1d9454
- SSDEEP 24576:EL94CtfP3a8WIxhulYHmAi0v/Sl0zEjbvSGnzmwJRAelNTLwPZvYqyOQF2UwEnez:a94CPRoE
- TLSH T1B665EC546DF9F7170F8E4A1994211D4FA5A8AE4692802C38D35BE3FC2B2EF5B4CDE214
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ar.pak.DATA
- Size 1.5MB
- SHA256 209a82abe7b52988dbde45116d18b8241f5ef520731e0278538effed1937663c
- MD5 05b4a0c80ae6404fa4faabe28d166c68
- SHA1 5a3d97966134edae0bfd95294e0fcfc841926019
- SHA512 63ccbc6c948df219d0649997a90abafc79dfbc4b4c2ce6cd9c0f08d15e0b4e222e8f8b5aa4b4a76d06339945bf32cb4f4efc9787f43e0ffb9537b41677b7aee5
- SSDEEP 12288:baz23z6Ungj/HNxkjgmOi505xJ3rIGGqrgUwFA3FccMGQ4Hb2AxkeTsqO7leiwQv:baziz6Ung0OJ3rIGGqrgUwcc333
- TLSH T16965DCF21A2684720B96DF1FC1D23568E872BE23EB4BFD3134974A2156D7513E28E235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\as.pak.DATA
- Size 2.1MB
- SHA256 bc5a762bf0329cb8da73ee355a062da74e6aa3659b31cc52ca94409aff8ceca2
- MD5 cec86b3bb8b1799a8a3c6eaa9470caa1
- SHA1 6c1204e92e1a02f0d873a50d9c9f90024b083278
- SHA512 527dcd4a8aacc5f5160f2ff96adfe717233590d6a8b58b6ace36ed66653912d6041b1aa17bb12b14899fbbda9a7cd1935321ac11eb9a4bc61d0a2374ffba91e3
- SSDEEP 6144:r8L/6vE6OYCUjyHUZzsaiJxFgov7HonWjDEXIoE7jLjCSvIBjU9YWKi0I0qrKpln:aCv+YCUjyYDa97/slHSfdnWoCSEJ
- TLSH T10EA535248CAD55B6A8D5DCC91F0C6330C127AD5AC7A5F708CC0BA214799ECBC8DAADF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\az.pak.DATA
- Size 1.1MB
- SHA256 4b56469dbf961e7669af64796af6e13ff41ef802335005cb469d961b473b3fc9
- MD5 d415678bd7acbdf071ae3ca8bd07ac79
- SHA1 84c1f30f1bf401260148ee6830396946c8c4e717
- SHA512 1ff8ae59e249a05e6d31bd39205ea02ec0fa823f1e724c015f4eca68480db4c774035d2cd1e103cdec06008cc32a5f8d52d302084a6c3247fbd35f167808f5a2
- SSDEEP 24576:UhDuel3/4gTS7EVBc85fMRGXoVzPVTh5I7S:4K4azPVh5IG
- TLSH T14B450845694ECC0C46ED138908629A76F84D7BDF7192A2536A89562C33CFF538FE078B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bg.pak.DATA
- Size 1.7MB
- SHA256 b2998f85180e83724b719fc6d99f79ddbf71a0b9fa0d2712502c357694900c87
- MD5 7872466b82e1c3f171a3a625d035fd0b
- SHA1 1d07266ca410ddbeadc361420a5a3c03d79be60f
- SHA512 35e151b6406f690f66ee26702581ab01155cbf810b2dd8c187d772a6383c2387975a986d62006b6ff8a2ee405169be00b3acc30084b19a0db1deca88f8c42a91
- SSDEEP 49152:/ywuhKO/jm28eVOEpknYmLWLjNmtuzLMgJkPRucSg1gQs2X:56/rkupJVam2X
- TLSH T1358546A15B9A688B0101F45F9C047E093CEB94FF3FE7C79251642DBD39E20B486BA61D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bn-IN.pak.DATA
- Size 2.2MB
- SHA256 41d635b3dd35339c847177ec4ee586ad24a099fd3077772bdbf9796955daf7dd
- MD5 40ffd93f75f4ad62dd52b4571b0c3631
- SHA1 e2e599876f0503aba663810ef1a26fa131b2a794
- SHA512 8399966fdd7d251f50ff7eb219b8caa833105559ce389cc1f771c44ae9d42cb98d14a5d128f1c28a5ec89798158a83798ec91e5c4750e8363630aaa2524012b0
- SSDEEP 6144:bFYazEEOPJ3NMiasKyKwu3fzV633ufFNmpWx9fhkNohDJAgYqxMKEBZ6Uajxvj2:pqT9+XzZAgfhkNohDJAgrxMxj6UaVvj2
- TLSH T114B5F2209C6E81B2A8D5CDC9434C6370C113AE979B66F748DC07A2553DAEC7C8DADCB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA
- Size 1.0MB
- SHA256 655fa76a0f249ce66c80aa965c3e3153648b3193954f8bfef4fd13e66ddd12dd
- MD5 7942e95f5d9d1aec37385971b17e198d
- SHA1 c5d099c971a306d0d59b24ea5c62a12777d557e3
- SHA512 ce7ba991208f941f7af2983491e18cbc75b11c39d177a60c49f640e90e8a69f2cb6338f8dae79e31f76e3c88a00c9e7e8e48696b500f6c391748b6d877ae053a
- SSDEEP 12288:HzHK7cFxPgXVg/maAoKs0kPUOs0053NTeMpH5pW/ZYEwBqHV:HzHvFN8qAoKNkPUOs0053bpZp1q1
- TLSH T144352A7DFEA69B06499363829F96875078BC49CED454DFB6385FA22E1303F4C62F9108
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
- Size 1.1MB
- SHA256 daf9c1ed9a8b345b1bf6526159fa69d904b0e4be782b91a99e03e0feb9aaddb7
- MD5 92a2de41829dca3090bbb84acced3a90
- SHA1 73bce0e6b627c9794596a6d2d3e94c3998dbf72b
- SHA512 71ac20f4856262c1596b333953525dd6a2bb9cdc8e2f3bcc2c077f06ab4427d002fd8be5d7b893eb5565bdee56c7e9bbbf5d6b8b081d0f4c034c228275b8119d
- SSDEEP 24576:6i75JUhQllXogynNmVtTZ1N2ybzhTvP8UAmnkl46cy:uhElumVtTZ1N2ybzhTvP8UAmnkl46T
- TLSH T18235E822CBC96F6285C2331BAB41C527B08CE986BA15D244F46F062933CDBDCD677AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca.pak.DATA
- Size 1.1MB
- SHA256 76ed26876b09220d9efc0ba833c09a36c6d31ba598c1d08d2f12bb7f7ecb8ed3
- MD5 e381f99946106407ffa50289cf903f53
- SHA1 cce403ee8d12f572ed8d6b1f763e7b3e0ecd443a
- SHA512 05293e74cd22063dcdee970ff2e30e0f1472752cb2ed00de131169ff0fabc28da807765fdca2c091580bdac3a686eed3ddfaa6713f1e881e95f099dc94e0943b
- SSDEEP 24576:wfL9u7ZWeCIj4rfR4569rZhT/aHGLZQMGhjDx0X151sHiDBEsUWUbPxGUTyiN0dZ:M9u7QeCIkaHGLZQMGhjDx0X151sHiDBv
- TLSH T100350A23CBC97F7284C2325ABB41C227B08CD9867A15D294F56E061633CEBDCD277A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cs.pak.DATA
- Size 1.1MB
- SHA256 8e85d08caf2183006f0e06e3c2b3272193e05c54bf52701575311dee691c3b74
- MD5 14d0dba7981e449f47b9682c5393280c
- SHA1 33b3211ac820668eae4b17caf3d7995c6ecba33c
- SHA512 102dce2f18cef268a23fd03eb8d5057fc1e11c5e2f48fe5b215071da7b7565b795a596455f17735b30ede79b32c055bfb53e1495c29c4c9bfb882d847f2f0efe
- SSDEEP 24576:CJ0skVjGQlF1XW4a0q4cbHPbFv3Xg8hPlyUZp:q0ybHDFvHNhjZp
- TLSH T10C358C2EDAA6D521894013493FB94024FD6D43560A6AE9AE7C8F895437737BECFF0C18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cy.pak.DATA.crYpt
- Size 1.1MB
- SHA256 a1d1ba96e23d9348ac8e28c8fc69974779e58542500710d3f0ee1fa93249d7fc
- MD5 0b043b3530b4d3fc165c182c012eb603
- SHA1 737527cb38785980b377dee0d649e7d87da43041
- SHA512 174b38ac7b48b1456fbd72fd9412dad18494616ebb85b313adbadb9215510778f7450d167b900bdbcec7811aa80cdcc737cf5516145356c74264e91d4e60c398
- SSDEEP 24576:ajfnPdC3pyO7UXQiC57QoklN/n202XdQX:w43Jox2X2X
- TLSH T154354B0BE8468F97D20977A1C95B8E39B91AF17BF6E4D481701D052C27233A0EED978D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\de.pak.DATA
- Size 1.1MB
- SHA256 1820825aa818fac35d50a3138ecaf0d3ff3bb3d28f6a18ea0439bf65c0a4d2d5
- MD5 cbb5f289c2c5be4e02468fbea6458e7c
- SHA1 e9b9630bfeb4e1fc0d24acc5b157c78b3fd936e4
- SHA512 817bb2b47c6496c7e047ea343e97bcbcd0267b3de720e18e745d346038727100b5478bfd8d963124963952c124e1154701d9683261877eeece9242105d37744c
- SSDEEP 24576:RX4bGespn0mp1nVT16h1RfGiNQ3twsCdRnZcKGwt5rC5:RX4hTsWsCPnZcKGwto
- TLSH T14D351A13DCEAB25ECA4737652701CCB7771EE3AFC389B65A605DC07A230B2A5829D171
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\el.pak.DATA
- Size 1.9MB
- SHA256 74bf0037672ea5678e9caed02772ff7daa8968e2df312cb2b04165c0d7de3d22
- MD5 704b6a3419390511e152c7aeb201730e
- SHA1 de072b6a85991611e83d01f31d2296e9082e102f
- SHA512 fd7daf29baa6f9bdf71fa36d34ac0738ff8849d1af656b1d35fbb5c9a2bf52184ef6aa02008f4ff7d76b7ed133fcee4fc5e7da80d5e404cedce50b0f04e2eefe
- SSDEEP 49152:cnAM9nDMiUFLVKLhDFyxXvpEbEFfUz0QM/cRRGd0SYZ8GYDWM74Zjn1bz8ZylHpu:Kw
- TLSH T13D95D0EFB4582DED8045950785D8A07C37C66D6DEB49CBE8622DCB20BEF90719A11E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es-419.pak.DATA
- Size 1.1MB
- SHA256 d8cb3ea707cbc44c0094fd3afdb6e548f0bc17742ff16f7bbebe954220acaf0e
- MD5 cae947862c80b4b6ba4822a7efa38148
- SHA1 de7d280ae8642ccc141f0b464e8079a25d4ae96b
- SHA512 4e8050b9bf20339aa273db2c3ea68e9d0ce02123ce9adc4a755dea22aab1ec7dbd4097bf5ce58a379beec099481429724df88ccf32f0a6233a3a1e8d623fa42f
- SSDEEP 24576:RyNu8NrEgqtJGh0wSO2xDIpTL6OkiDBvAmg:7BxDIpTL6KDBvAmg
- TLSH T19D35F826AAC81F5340D32386B743C667F4D49587B408C29AF8AF966933CDBCCC567E91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es.pak.DATA
- Size 1.1MB
- SHA256 ab1ee3d0c9b6ea9cfd5816fe9ccdad22b391e5c90901d27223988118b4b76d18
- MD5 cadeda01d6c729d8de84b19cd2f9d5e5
- SHA1 c706b28b129154e4666f0fe37ccf98374d827be6
- SHA512 159a0ce9f3aad7bbf177856165368f55517389ca90b2c7a88f0f4e738736abbed4feb387871c75aaa52a316fa1f10b2354d91a805144140425ad4e6dbc8df87a
- SSDEEP 24576:S3zxugIcQFogVtlef1BikKXpzHR3XkNJ+We:9ARKXpzHRENJ+We
- TLSH T15735F825AAC81F5390D22386A743C667F0949587B408C29AF8AFD26933CDFCCD567E91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\eu.pak.DATA
- Size 1.0MB
- SHA256 ebfcf0450084588b25e2b13acc93a98d5221a80dfcffc03b56e7d4fffe813492
- MD5 54145201d2744748011bd31e6d384885
- SHA1 7ea359f3f6942782fc8b31846f1b0091806e67b8
- SHA512 3a3dc85c7aa98866c8390d2b94c8d6f771b11a9853ce8fecd5c57f9f71a92cf88e163a2715a7557a1ca1d764814ce35bab1501b6223f4bb2b7e8ca55ff2577fe
- SSDEEP 24576:0TkZu8HzwYeVJgsOAZkJD6fasFhX6oh0CWHRjuIdTkBhb7IPZDwdh138m7ahAeCk:BHAPOZoh0CWHRjuIdTkBhb7IPZDwdh29
- TLSH T115252A3AEA16A3618D1023FA56100C643EE9969F9B0AFF51F42FDA2577037DD15A33B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fa.pak.DATA
- Size 1.5MB
- SHA256 e3cac9fbb432bb223bd9cd556f53270152b45907415e69886e8cafb6a9f3d758
- MD5 020735f803c1321317949c7be4cb4586
- SHA1 e3874aaea3dba90d54d20c93d64d3dd7ec63d387
- SHA512 58d2086dd61a61030204d5f7549111791067277420a1bdaa267145aee7cded2b6075ce42435de9bf08edac0c40c2dc10df11338b93712cad583740ca2da920df
- SSDEEP 24576:jF5WpsUNP18pZypNJEy//b6u+yif8KgdasVjitt/pXsYi1oBm2xh8oPuh5wwOplg:TW
- TLSH T12375F2956AAC9AB25746C91341D33838C373EF13D348EE40F8A107661DA6B179B4FA37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fi.pak.DATA
- Size 1.0MB
- SHA256 c3af3ff2de7a888a3e9392f63cd8bdecadecd3a350513fb14fd0fb94dc7093d2
- MD5 fc4a4cb6d57e1ed51ed876ad5fb4d2ce
- SHA1 5544c51338ad2f737d792e107aff4bd981f808af
- SHA512 871714494ca82bf31ee870b97af97be0f530b7bbbd7d21beb3295af97988e11d31186cae4b191bca037ff8d4111c797bb4997ce046e52fb371fcb9b02dd44c4c
- SSDEEP 12288:Lba+uwd+xi07fBPuL+1PlpkpfbpIkSkYeJMyo25Xd+J:LbFTd+I07JmL+1PlpkpfbrfYea60
- TLSH T10D353C61824AC2117B84529E5CA09439F1E8D3DF8824CD99F94BD2F91BD7AC8797233F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fil.pak.DATA
- Size 1.1MB
- SHA256 81f055cc41aa3cb70659936d5e07c541ab1a9f12949eb25b88e74e8d2af433c3
- MD5 44b352b3d4815b87b1a5af55b121df71
- SHA1 8e4c4ba78f04ec8ec7cbd89d3ed38742ba1d0a57
- SHA512 68548986bcddc42d8b36113ae47dfed1761334ada8c14c9604724e59dd8b6238ab6de63bc2ad5dde0d224edd91f9e07e20f6901397f6dff1010cb153df165ec8
- SSDEEP 12288:nbQkwWNASLJca+iVs6uY9DYMBNib5E4MbMLknEpjOd:bbICJTVs6uY9DYMBMybMLhje
- TLSH T19535D619A7401B44EBC212E606606C2F76E420FE3F816CAE6FBF279637A7DD4D270156
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr-CA.pak.DATA
- Size 1.2MB
- SHA256 5e19f230a77cd9d00026fd5430c518d178bf612416b5950ce6c10b3996735c0b
- MD5 0e96b832e486e7157531167753ab366e
- SHA1 02aa49ba675a06e5caabea432489ce0be5937ed7
- SHA512 158a3775151b0a00c092056bb5d5afbb9e7a49665be543485befac65a172c76ac62a5f6691fe12133321b47109449994f15cf0aadf5f885f4ad7a84b5d976f29
- SSDEEP 12288:qWflXm62Q+nxfN4b12sBkK2V+sN+wf4bATnB1y3brl8xPMy656jbtji6brYJQjcz:/fU9NV+sNxWIjbtji6EM7KrGLo
- TLSH T1C245F95FE5C461C749C21263BF02D663E938C29AF215D700E8AF8295238B9ECD39F5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr.pak.DATA
- Size 1.2MB
- SHA256 f929847d71d5f314335018c1f15f04ad98d92168a026b6a4c84df3ee14697a3e
- MD5 88cffee38c59ad299f94caa6ed908d2f
- SHA1 9f94f0f9372892ab10e5ce5bd84f3e84e701cfa9
- SHA512 1ed35bbde452a93b0d39f0f82166f1adccb30a609d4c70a68ae7f134df1d1f71f4f39a6ae5a51a91cdacce4ae8f1447bf1b52a5502ee8fde8b1e34d83176dd19
- SSDEEP 12288:voJZUfbtkZsnqGbDCjNFVca+tic9bq6fBB//DWG+xPsS656Ab6jmzvvrZkkuhDNP:eyouOVca1xWIAb6jmzTXTxOz
- TLSH T1B845F85FE9C465C749C21363BF02C663A938C29AF205D704F8AF8255238B9ECD39B5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ga.pak.DATA
- Size 1.2MB
- SHA256 f4ba8c98cbe62c18c2373d25e808a1271410a46988ffd0def002f6de8dd3c236
- MD5 9efeb9af1f47abfc473dcd5ef43db1d9
- SHA1 9c2f4a5a23c06166c11b50aa7476a7a3a0d10969
- SHA512 9d6c69dc14f8328c1bbea9d8d2046736cb9717137869ccb3488b57427570722cc4f9b5dc1e08b09edc2ba2b0b3034d4d342e73823c816ba83524e78ae32e4519
- SSDEEP 24576:AHXInGgXWPJlQjho8nlMkjg0rcHw8TTXAjtcn267LJB9E6G:ACnPljtr
- TLSH T1C24519B795B452E3E053728B4385C766F024E57BF484C8C1388D6A7E2B276CDCD16ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gd.pak.DATA
- Size 1.2MB
- SHA256 94ccc176667a68d44295ed4bb6c12e630b61520239524cadfda272fc60b91c82
- MD5 d97fd03c5ba5fb271519984605c41212
- SHA1 3521b55c7438784d81be74cc9f12ec8c3be34a60
- SHA512 2f36756aaf688e9a25f8faded226df8694efaf6b43ed8676a82043087d1cfe9ef99909dcd0cd91916362dd8ad2f60d64e9c1485b71b7037ffa1dcf8c7b09935c
- SSDEEP 12288:z/CFOUr2zVwh/ZXTep9y+T95ihuzWcnANCBMSckRs+dVzjdkzupqEB8WuLND0XXr:WFOzzMBajIuANCBMSckRJ8RioAL9L
- TLSH T18345C7AFA7ED87E3C843D1A50105D0712824DCBAB113D55039AD643A2B17AECEFBDAC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gl.pak.DATA
- Size 1.0MB
- SHA256 2679633216b1ac643b93c803bdcea55e623ec7883ea5c0df004c991e33fbc1d2
- MD5 53cfea06e835be5e232da9282a9d9fe6
- SHA1 cd8f970eeed0273d06926d94b2faf7bf46d0ce64
- SHA512 f733faa73488c467484d29c54b4e8013f9929ef058c449808a597cc5c9ec1b13f9ba8f541a717ebcccd47e6440a632ad24576a2deea8954b6a5a2e01032c1c4b
- SSDEEP 12288:L31mcdMtSG98pnCuzf2ZRVAlej8RClabAWU0B:L1LmydCuzf2ZRVAlejsoc
- TLSH T11435FA6A9ACC2F22541233897B43D163B5C49187B404C39BBCAF467533D8BDCD167EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gu.pak.DATA
- Size 2.1MB
- SHA256 25db4dd197f574761fc70d744720598737159e92f31be8fe6d04ba0259aabb6d
- MD5 f9ba71623e3e7d7cfcc5884f8ea879ed
- SHA1 2d74d0ebd4ff1a6a4d132281f6fbe06609584b12
- SHA512 0c5f42ef36d95c7aa6169aab01deb6be6a1c9940b3b552a0cb5bd0c00bcab3462b907d158f21a6e61a74bbc4acf3ef53f19943dc552fdaf76fc5f210ec929982
- SSDEEP 6144:J4xbUH/4CMw+CoL28LXTNdIQ69LnCmLl5ypF3rPxH0zxV6Go0K0tcxnpPNCgi9Qn:btaDNdc9LlXypF3rPxH0z20tUxTUtAl
- TLSH T1B3A55DD1C3B9F07159C9AF7E819E5120C5699343D67D230011CEEE998802DDE3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\he.pak.DATA
- Size 1.3MB
- SHA256 4d2825827ca8f9eaebfcccbe4bf1de7f1f359c584ea301d1cf2ecc2009a28270
- MD5 7394a73dbb395cc4c039ff48cabf3b8f
- SHA1 362ed15b7c420206ac0e24727369a206c5e9d677
- SHA512 20cbd89949fdaea1e77704f7f1edbdee4255e120c94ef5b18242d3338fc164e2b5b62bf13b367efae4f858cb8d3c521ecf06d08b4db1c8e4131225b1bbeab438
- SSDEEP 12288:2FMjAAO/Db1RS+tZ6aEkfZ7nXdIyrrVobTS1wJQCTVwANR7bWaVgRigY8t0G3sO2:2/AWLf1wJQCTVwAs3JTGT83i
- TLSH T1D555DEC4A2D8522591317AD38F65FA286FF3C7B22CA27516DB08126CAD774F0BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hi.pak.DATA
- Size 2.1MB
- SHA256 3912b4c90123b5f9b7fbb545ec7e0d896eac3955a779a013ea1fd773bf49bbf0
- MD5 3062bceed57d0f5b2fd6f77f5ee2b2bf
- SHA1 4cb1bf9d40e916a33b5852ee0ac03016aee5fe18
- SHA512 a8994c7c8f3430462a19bc9203aa628d0b1612d986c2fc5739c6ec84e88d18b6e22dda14999c2419b44564ce2b611070f376c68738680fc13086e922c80ea1bf
- SSDEEP 12288:cRMaokgvHhyZoDPDVnQ6rgbvS0IEEgfg6rT1mwuGzz6Lcv:WM7kgvsZoDr5QEgbvS0IEEgfg6r8Lcv
- TLSH T1CCA5370CE7BEF3B54DEC3C9A36880D37D5AC3671A3E5521348D5B3EB9944CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hr.pak.DATA
- Size 1.1MB
- SHA256 fe39efcc13e3bd5a9c57be087d3c1941d7b6393ce6cc11fb986a867eefc480bf
- MD5 0870059371a272b2f406f2ad44b67083
- SHA1 740cab46f7fc96ef04ff0bd6340f6f1fbb927e4c
- SHA512 a27e63706fae9630d32e34216ed247bc0da8f954b1ecaf4fb5e1f2e3f0bca03fcd7cb73aabdace2098baf0d0fddc08271adaa152acada154a0c8ca5c2bf80832
- SSDEEP 12288:0Mt9Q/QaGU5Y81GiZSkGH9aY6iC2qcNW9G0RJuuin9ha:0su5pGiTGH9aY6iC2qcNJguuwe
- TLSH T1B6352A79FDF6DA064996B3869FA2470475BD45CEE510CBF6788FA12E0303E9C62F8109
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hu.pak.DATA
- Size 1.1MB
- SHA256 08742311261c40b7822456656bc337494e9bda8238916d860c98bae70fafb34a
- MD5 8707dc28a02bdd6fc7b881bda96fd6f2
- SHA1 e49ea73d78d47b309af4b7f01848a57a1947dbba
- SHA512 52eb389772c411b392e978342824432b8775c7ebfaae2d1229ac3f76e56ba7bb9ee3d440bbce0b41d7c8e45fc156ff96a413609ea28e90844f35c60a3a2d5bb4
- SSDEEP 12288:WjlDUfEFqjGXlwxYFfXRGVrrfomxlfVCzyR/dR4H2:WBGE4jGXlwc8VrrfomxlfVCzK/dR4H2
- TLSH T1C9454C7BC765D841EC681BD32C242E19701E845B9A2F6AF73CCA886D35537CC4D938AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\is.pak.DATA
- Size 1.0MB
- SHA256 b4f1bb121e9ebfef4c0084c6bf4000c72105bc59a36f0effe72f89661e09bbdb
- MD5 23911fffe8fc09f19970caff3d9ee542
- SHA1 da80433ad928fa0d6708ffd5834948e551b79706
- SHA512 a590b7a4e875023298ec05eb915a41161a0190680712e1e4a5a8817062e361e632c19c863cdf21c5ccb7e462da33942532eb130351de8b439295ba4becac784c
- SSDEEP 24576:c+ZOIXmwtwxtpBxxVVO8oO3gJlabyW3tXCOhOtabv9kYjIjxe:npm8wQ7abx9jF
- TLSH T1C8352A07B907E61F3ABD23E486540F252799B7E69CE1DCE0FA5B012B338BF4554B2162
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA
- Size 1.1MB
- SHA256 59c0ce127f09eab061bd6dbec884016b72731dc642d95fdac95ddcfb6361ae4f
- MD5 aa5d119f72d5f98cc16a78c951e856ad
- SHA1 866c59d908848e5d53d54336a90a262ff6ca1524
- SHA512 3b84cca8f5bb4925fe2e4fba94fb1e628137252dc3fbab8f2683035258058e0a1c930d05591c63268bea67101c70b77064f9e21c16ba99fe65b0ccaf9a4e6755
- SSDEEP 24576:/ahgA6/FzQuKFkDFOqVKxqQ9S1uxjlYfm:/uEzQuKF/xjl4m
- TLSH T1E9352939D9C965119E962396C511B045F67EF8CEFA40A228B95E431C33CFFC4F2ACA46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ja.pak.DATA
- Size 1.2MB
- SHA256 38e607dbd0bde4096390c1d9ef290c84b06712882d29709d92d25a2542a421a8
- MD5 ee4ab26cb31a8c309d47456435070a93
- SHA1 7939e097964065258a7e16c5033bc3cf54cf0101
- SHA512 12a0a0f93d2a3b871185d1741a79459fa12ccc9d2bc68c436198dd8cc966443949a5c6b2d99418821cca77ed0a16047f5303d6415f82cbbb5fac132f15174358
- SSDEEP 24576:cib3uvO2kQPcPyL9HDgRqNaf76+fNmJgw:uOAf7
- TLSH T17855507CE3C9A9329D6193B21C0D76E5710AEC9BEC923A36542DC034BE617CEE415BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ka.pak.DATA
- Size 2.3MB
- SHA256 fd5be5aa2c4cd8405a395744b2ba658ff30b2fcbadc0b62ab5cf865c58680df3
- MD5 16eff1f152f33f29ddd27fe5165ebd37
- SHA1 ce2603e3ccf0f770e2d23da1a9f5b4d0921c1783
- SHA512 9f369b3f4bf68fb20954198259227c68bb6e35f81f55a871c094dc593c88e5825851bf53ac5a5c4e86eb764409117d641249d45575ba18b4f2e16bb4f70c47de
- SSDEEP 12288:Ucry6BHU5b9Lt/VMwc+cXY15NeGWn/ZSmOoL:VW6BHadMwc+cXY15NeGWnhSmOoL
- TLSH T127B5605139FF77709C5E21154672BB8AB7A48C8FF0C8843FD111F1A27993A046ABE366
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kk.pak.DATA
- Size 1.7MB
- SHA256 5951f4e07f8fa53310e28fa769120f4c061b250ee1857f34e8094de0617a5cdf
- MD5 ab0976d2196bc3e253201a3c2e6923e5
- SHA1 5862fdc66a799f67904ddc75324a752325a37871
- SHA512 624e4e9879f4466a835f8e0d32916708895ca0ff13e00b353f8a7606d7091836ce660eab73693cbfc17cf2c61f5477648c7e94ee8c5be2018d7f46a174ed7cda
- SSDEEP 24576:afRrYZllGReiqKhZf130y1vOcuqtIJiWbkmGu1:GrYk1vOcuqQiWwVu1
- TLSH T1A185BB91A64BACEFA311E5922D047A092DDA14BDBFE733522415BC7F39FA270463C742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\km.pak.DATA
- Size 2.3MB
- SHA256 6e10ca9aa66e9b75368a0e6d4bc5700a7e8aef963d3c41135b8dc7fee7ee5a93
- MD5 09ff9915702e4b4d67be895f9dcc28db
- SHA1 fe013b0a7afc621856c6aa7ad662b3e42171e0b7
- SHA512 2bb0058400958ab21de410aa85483882f0be7bf3c5dcb42e7a3de8c616eaefbc6b3bf51f5bf54cba38474b60a99c2ec5c9c9457f2b9bc96024367b7397e6dab4
- SSDEEP 12288:bhpJ/HZ2O4sWAFZQWLxgrdzdGfuCsiBekWLBUOLSyW2EHmXFPUOVuL+dWAAgS1+2:FptHj/mXFPUOVuUE
- TLSH T1D3B527505E94BD75413E73C3219B6F484AAC9F738C5964CA384D3E9EEEEAF53A20204D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kn.pak.DATA
- Size 2.3MB
- SHA256 f165d14e7712421f832efa699c1af46246def03444461b2786d2ebd89114aba3
- MD5 97437dd0e57bb15869d7fb6eed9d2a6a
- SHA1 555b22c231c14ae27d2cde500035f34f4d8516c7
- SHA512 8d044827de7457457e9383bdcae8ddce1156fc199eedf77ff7ffb23ec61690f5189cda1929acf79861c1f899f9d2120875b32810310bb7a15b4c75cdb1aaba1b
- SSDEEP 12288:JCf0TylGD3xR264lD3Coi+XbdZFginjZ/IcqOsbN/5At6+JMGSzaU3KrCRLolJfK:ykrDnN3+XbdZFginm
- TLSH T1FEB5FD189CBABD301BD5106B24EC643EDFF16BE28CAA47D2F49DD7402C62C6A90875DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ko.pak.DATA
- Size 1.0MB
- SHA256 0745c794bfa31070ed4c328d3f4eeb6294851e8910bdd529f5ac0095228100e9
- MD5 1b7fdb4cb7bb2b67cadf8173e415ccbf
- SHA1 5f2f62174991b7cf2fcfb92cbbc1f41b06c5b563
- SHA512 da1f221b6ecb224993f5e32c71da110de423d1c0415a1f6f6ead91fb54a1d2498c4e20b6a0b1188d8f1d344a769e89ff6960711c1f11e3be4f36d35b86d3784f
- SSDEEP 24576:+ac+GKbVSPPxH1ZfUuryv4Ment5+wD6AWx:zcW9QP+wu7x
- TLSH T1BD35E7F238EF67C9158289826EE0FA24A381D9B3EB530294FD48CD149F156C74587E7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kok.pak.DATA
- Size 2.0MB
- SHA256 39b3d52b2ee9b72ad9628c98f538ce2499abaed0d9fe745a3f8243fedf1a0d7f
- MD5 ee3af956a4ed4e9b0f3c09a16271d01f
- SHA1 b3e4de37701d3c034164951244815bb3b4331290
- SHA512 cad52fc5bbeb678442e0991450b769bf4c7303b08390d15e822842533f1afab1a6200fa2895416749f5bd54663034407de6c11d6778da87f73a5d6aa180ac123
- SSDEEP 6144:fAzL8IHZi/EnD/U1jrZF+5u8Svt0rZoYiZ8YlfHEJD6HtgX:fcA/YDq9aZoYiZ8YlfkJ+o
- TLSH T171A5334CFBB9F3584DEC789E2A090D3BEDFD2171D3B8625648A5B3DB4885CF401895A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lb.pak.DATA
- Size 1.1MB
- SHA256 2481331129a839148ee6b11b230f0c4a8026acb4480ecab50c3eca99e400d731
- MD5 05134801432bc209959cae8282317884
- SHA1 866a7120d615939448d8ed2f42a44f1c6a081742
- SHA512 080ff385b1d2161e2ece3cd399f2ce82ab57f54bf16029c498a7b35c6691ff5d90fd7effab3e59b05c9371872d705a265c93ba1281486766bb16e63dbdf6eea5
- SSDEEP 24576:9vx1YmM8HfAk1at9WseUXC9dbAWY85bhnGHSOhb91:Jxu8VUXC308rnsbv
- TLSH T176355C069A6D0D95AC412343EB11DC393D2FF36BB3A6F605749DD039232B2D6E29E48D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA
- Size 2.0MB
- SHA256 1a7dda90dab84aad071c8d4d87641bf7e0fdcac9d8c4d91a69f875134d7f4c12
- MD5 3654648e80bb43f0a0a51ab3cac93fb1
- SHA1 89a8417716eb2de3ba87693defb420eeaba6c626
- SHA512 165bcd479be993ce16e7ba254e7a0aad37bd5985672e34ede8bfcfe809fa37101559f30efa6a91f6c2ca67ca48033af12e143066525bc8761db924034c5aafaf
- SSDEEP 12288:vs1TluOKuxnFpTyR2WrMHXFE1LUjd8De6Lw+5upfG/tENYjfWIHdWi6x5m1+wExR:UhlCF2WrMHXFElu
- TLSH T187A53510A99FA2F092F413537953A6F653B58E38F0A7B8A03A5E4D785EC1D30EC4766C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lt.pak.DATA
- Size 1.1MB
- SHA256 fc4676cc644bba22c4f7e6348b6473f8c5f3e82cb3aef368512f895a3ce3f7a6
- MD5 7b62c32d12aba158ffa5ed9d88fa299b
- SHA1 05c12b16ad3c153f51ae8d64a7509094a06693bc
- SHA512 a564261aa76376a7779b2e982fc82355915449849ff620f5a4ea57e862c8f92940b99ee7a8c6a21adbf874de99b1462bd4250873affbeaa2675dd3046e0cca3c
- SSDEEP 12288:x66LSxDqmtBGgN2VFj0hF1WWAKoyw1xzbsjbNFJWhu3aAa4zd+KA:JgTu2hF1WWAVywH
- TLSH T150352B00AF93EDEB9E4123C641A08D71DDBC6245B626AD60BC6EC766D22BFC53190F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lv.pak.DATA
- Size 1.1MB
- SHA256 d511b7ad7373407973d7da74b3866834078fa34025bbf97068308c92bea70bcb
- MD5 ea7eb00ed55b1077fd0fe9d77788a2a1
- SHA1 56038d6d4d7042d6dd02f551cd8a5d55b496ff3f
- SHA512 6c1e373476509860aa9f122e1c87214015e92dc3dc4a46db371253dd9341f9a8f4629e830b0aaef9eadb47942b011ae5004eacbbb26a481282e73ae6793e438a
- SSDEEP 24576:O8Lt3eH/PUX8QYA09tCnSO8YoBSagjy7obzZasW7gaBT9/d:O0peUMQFagjy7obzZasW7gaBT9/d
- TLSH T195351A65CEC6CFA18E505EC72721D82274CCD742ED0AD621FD6D8B3A270F66432B5AE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mi.pak.DATA
- Size 1.1MB
- SHA256 58fdcb9473d7367dae6bc8c8cc518e2b0e491d724871e3da20fca66e6da33b54
- MD5 a8d212bcdb4c34e3a9ff719c7a7c17bb
- SHA1 cfe5a78b86eef4754f48b9eb8ef60a0ba2c35ae4
- SHA512 c97ac3b994169254004ce8d3d661c2104085c528906d3fbfb2e952c73af011e63feb262be62c4e322c9636f10fbf6275a47c16ff53184b1f525105ac527f4af7
- SSDEEP 6144:GJBe9Oj7YHPT4Wl5B7AJr97kXFikPabVNUSWJEWAo/wk1vSUua7KseyHjhHgzV7o:z++BsrjUuhseyCkePyNx4e9H
- TLSH T13735C890A5C1B610ED2607D627A7C923BC9F934DFD22CD177924FA263E4B3A43355EA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mk.pak.DATA
- Size 1.7MB
- SHA256 05fa1fc398d4b1d2bdb0ab93657109a2ba169ddfec57adef87fc1ba6d9a4d5b8
- MD5 830f1f05a3e662e2beed931539687913
- SHA1 789c9a46eb24c47615daf8eba3060cabb72b7ab1
- SHA512 7722e8743cdf30dba9511addd5a642ccd6fa0122530987f757a3ac2c1601400fe907f0dd93c6bf5d1bae698dd0a06a64b8ca35deccb0143d629c9f9f4c6a8431
- SSDEEP 12288:iU57T+aBSsZTyVnL7O2A0/hM/V3aq4XH/TtCQ0Zh98VSwR3/s+1fabTGgLcjZByp:iE+a0sZWLeo8ETPSwR3/s+1fTX6
- TLSH T1C28546A15B9E74CB0501F45FD808BE0A3C9B45FE3FAB875211641DBD35E20B886BA35E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ml.pak.DATA
- Size 2.5MB
- SHA256 40adeee3f40cde4a38a51ecbb914e7eac7a3808e10fe661e6887a2382e26033a
- MD5 c53e870514627e354ffe901e8aa93112
- SHA1 6b9dbc1f0db3c08d43bd887cfb76eeb16292d23e
- SHA512 1459ab84d0f6b344220478bd8b2110d488690d854b82afdb89b0cd4a07d722e72711480bb393625ff1f824c18554836f24f8dfce8bb9a17cec72c9e137f2c544
- SSDEEP 24576:ENuK1Vj/DclzEMAGN/Bdiff3Hs3NHZBhAfe6dNWsCuyhFZed44fQRnrjCu90CQ7n:yr1pXeq
- TLSH T197C5BE5BA436CD3B0FD002167B4E2FA7DD5F9FA1409F228B5869B2628D59FBD0C99031
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
- Size 2.1MB
- SHA256 c1cf0deffbb30c0d19e56262d7586dea03530eac66e8faa87a07d61f61f59f16
- MD5 1f32e038cac3fd6342661a5ad923e0d6
- SHA1 3aa38e645c51fc1b1c387508f68dc1c4767af069
- SHA512 57ba2feb472488e7656aa9bf80b695aa46c7325eb2e71165752afdfbc77f817bfc15c00e401efe5d4baa34b8a97bc2c7258a0633083d9dcda156e72216db96f3
- SSDEEP 12288:LYUFhVfSm87G1pO/Hdo5A+e0hb4qZcbL2EYMTVvb:cUFCm8aC/Hdo5A+e0hb4qZcbtYMhvb
- TLSH T15DA5E04DF77EF3644DECBC8A36580D3BD8FD21B1C3E882564895B3AB4945CB4019DAA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mt.pak.DATA
- Size 1.1MB
- SHA256 2306bbee3f1a6fba21ad69641b532922b33bd009b3a6b84fbf12738a91d82257
- MD5 0069448db54c31b2efa1e123b9253d6c
- SHA1 f2c1c9fc570c55a6be8ae3058967e5b9b47f80bc
- SHA512 0b649b1824acb71b4481aa062c13b12907c1a217c29f67f4c5fe7624dff653a0e3bcd5a5e88845863cc6036cfc4a0ff78d385f2928ca7bd5ad2452a8d96a602a
- SSDEEP 24576:RUWaRo6gruK2ePvSRctply67pt8bzz43i53dm62W2UA6d0y02lpAAkF7oBM497Vb:RsVJGW2UpK2nEf497VuSIsDz
- TLSH T1AE454B16A6F35E69DED4A28E4800C726FC5858CF2D53DC417DDE172AAB4FED192E3202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ne.pak.DATA
- Size 2.2MB
- SHA256 899d78b8f4b886ac147af53dc471a4e2c4228185471aef6597f848704a2f3b35
- MD5 0cb3575396ef53e1983b255a165f5982
- SHA1 e7300f7208f5abc9826fd618934b708d1d994de0
- SHA512 1f68f922db303973563ce657b630ef68f4cdf7920a940004400537b152616e3f78a98f95ac24cdb48721f1aa9fe4202efd22285b24d40014edafa187f777a8e4
- SSDEEP 6144:7DmQtYgqtTfJhAJRflJS8OPGLz1M9SQqERqnh6QcdYeUqebj:93qtbzAvUYz6SQ/G0QcdUj
- TLSH T11EB5194DF7B9F3A659EC788B2B4C0D3BC9A86631C3A652578CF8B3D34885CB404D9592
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nl.pak.DATA
- Size 1.0MB
- SHA256 faa4b2f3db119c2ae303e49e743f33f46e89c88a107cf4d6aac186bbc23b9112
- MD5 187915b78c21c04a65e443bddd764b47
- SHA1 3c0bdd162530c97282dbc00092c493609c5e6343
- SHA512 c53f46f649a6184de0fe38152d293fba7643c29a7f220f7cbf64eb3e3b423f6111414c4b146a55c2d160e1a15af83122d47491e9ca6932f9f991282d7563d33c
- SSDEEP 24576:9xVNY82bognQNJOY99DZwG1AVqyyZfaZwIk:xNviR8Ackg
- TLSH T1BD352C079C8D593E99C0A38AFA044A77B72EC31EC6ACD67CB8DDC1382613F9851AD5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
- Size 2.3MB
- SHA256 be96e5367153042146311b3dab19af99ab408d22e50a18e8f74800f5ab5600f5
- MD5 83d971c9d82c9dae34ec406def57d7af
- SHA1 14b77c1a5d2e671e2852f9c26718121ab88b06cf
- SHA512 2a147b4b7cf44ed20e2aaf26c105d2cc2b76f6887542778c53d9ea373ab0d20217dade21838ec1a867d9513eab25d1830f3804ab109b9480e82a62544ad9fb2b
- SSDEEP 6144:7hDdH1cbjAX8IohEFfYCqV8c3AijRWG440ZzmorPJgK0etKSrBWdfmI3EMdMIRM7:9Dd1WjAvHYCMjRWG4x77
- TLSH T149B5E220EDB8EDE69CF143A4B499E239642D03B5F9DB6BC90740A3C30922CDA4FDD559
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
- Size 2.1MB
- SHA256 2b0685188ac80bbe18926c63a3346e7a856e4675d8e4f4b7f84572a2c954059f
- MD5 fcd11ac5604a408c30e903be884a7353
- SHA1 7d0f3df8f78d13950d61aec8101e384d9e020d3f
- SHA512 4c045014f541eec0139c39f20ea79cff1ce77840f417a30e78c7bccdaba154c12eb9a6d947ef5ab29cd111e72e146c48a302b2e6c2da9d8e93f3a749c1c0fde6
- SSDEEP 12288:w+f+TKmk//RpGVLeJ6GfAYN26QPGzgdUoNBOd6j133l7WSy30XdLPjS6N6ilerBO:w+WWn/iJ
- TLSH T1D5A55600C84CE2B68FD8195D56E6977D10960D398CAFCF6D8580C65AF6D8F810ECBFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
- Size 1.1MB
- SHA256 8694efa8b1e9538df844a9246d7e3375e4bd5cde7e82e7d7f1af87a17ec4d033
- MD5 70fb66d63f3c464057f9391735591e24
- SHA1 0035f9fbb4b6949d81a9c178b6e7f81f59abea8f
- SHA512 c69014918da73c19f0b2ba96eac8428a6aa1483860346a68c6596d8d4cbf67f344342eebccaddc5de40977f62294be5ad8c4030ef1aae633d377336621572048
- SSDEEP 12288:rLhW5XK7t5M0ixA3dnEq9VNNyYsFIzXBhJ//4+g1ecbId9LRp6elhHR0iqa6qw8r:3QuPNdnEq9VNNyYsFWxHHbh
- TLSH T15E455B4DC5E1DA0ECEA009C6F5D35F3878AC848BE519C75EB45F8029730B2DE96BE498
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
- Size 1.0MB
- SHA256 00af1aa999b4c9bc31b6b6d910ec7401acf96b8d7066d5201438e4ed2b9f7caf
- MD5 24ca52997b2c9adf48adf62e09c1bfe7
- SHA1 69b6de9fa29be529a1c3782f3da192cdf5118d31
- SHA512 376173716eaa39fb7f7613745e4d0e889d67efcdda48913dd92bf860e58b96478dc716e169893da2d53a856314d003228bd09606c1812f22a773a74c28a521be
- SSDEEP 6144:4ab3DPHjBO3LIaZQb9/iM0hho04+JD098MgT6cXwx/q07cfQIY4wKzOPVA2+5bbe:vnFV/ihq+JBY4wKzOPVwQcgZJasN
- TLSH T148352A299DCA1722052213527B099F43F1C85647ED09CA87FDEF8B1573DAFC0EA63A25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
- Size 1.1MB
- SHA256 bc7617cd43c17aa71fa5c59405d7226b17d962d66169ee0887ddeaeb4959ff92
- MD5 34222707542f6fdd16d8a2712ff07702
- SHA1 34afce61c269939de8ecf14e2511aac35319f972
- SHA512 ed2595e1924597f3f502f7745b51ed66928edeb54bddffe1dd08c65d38be382f57a7aee3f3f417de18a5c6d582e1ccf454fc1939255bc5b6e8956fd184e4398a
- SSDEEP 6144:DJU6JhkbbIbrDIqWxBh7cl1KPdqAqPrX+0CZSYIv2toPBqbCkvg7H/j4ZP/ee4Uy:bTkYXDrEB9cjyu/j4ZP/eehqs3ynD3f
- TLSH T13C35F9289ECA1722462213927B05DF13F6C85657F809CA87B9AF475133CAFC4D2A7F25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
- Size 1.1MB
- SHA256 c8e4e9fe240dba7db1e69e5a80b431ded77b4ff8944d22c35977559f1518a782
- MD5 2be4c55178b85c54a66c01a204f545e1
- SHA1 322e4214d146781e8a30eada29a0012ae18f8a01
- SHA512 58f3156b755a6e20783f485ce5a584e430f4ff27516c2a45c861a1fc5f369651f91db06e6f45a48529a732437e7e0b96e1115a62e7ed2c7767aa544e935f77b4
- SSDEEP 12288:mGBNa2a2j3fvpMZWHGOPa1tZVzr7vDELng/ohLJG:mG+f2j3fxRa1ZnzAna
- TLSH T18B3584541DEA5144BA1463C302E99C6330EAB2763C61DDE3B8791B6C1B4E8DEF1C2F66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
- Size 1.1MB
- SHA256 c40dfef2385bdd3c3330e00aefaaf9a76fd16331efa21064bb4106e0c6a99532
- MD5 e67e8a5068c1694c7c5186fe2b25a8ee
- SHA1 d075c1ba99e9bece981fb5886b8376e0cf661088
- SHA512 3c0e63870a58efaecebe1b7a61caec9ece86760b4094d15b182a0b8f3e2d1c76f87180bbbd6f39aaa938df9e129d5584826c3f71607b4c23b8c2e74314e65e5c
- SSDEEP 24576:Yrd8cSDeeY0hf69Ur4hbBCDxqt6tkO1ersVnflduUuVBRTlHPB49:Y7jBCDxqt6tkO1ersVnflduUuVBRTlHO
- TLSH T17E351B22E1C855521D4113A3B72114A7F68F519FBE01D28977DEC4B922CBBDB812AECF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
- Size 1.7MB
- SHA256 ebbf9f822168ba7e5d0e9fe9a26fe3abb434f84c2d413188aa350280a5671552
- MD5 734e41bcbbdea58062b60dda243cbad3
- SHA1 e79ccdaa0ba2a8c59815e94b5a7fce8272fb19f1
- SHA512 10a2023e6c43bffa8e4f467def00c91b25207e21e2d3ea31e7cde3bea132fa320feafd01403719f2c76926b8140bc9b2d7b27be62f3a0cfe3005f196bbbfc190
- SSDEEP 12288:43tQakSNEwYJegsjBpCChEFGABjIS5MsVwHGvZnsQ/Xcx3WHMRaDTDNcdrHPc1eK:+Qw9pv2iPho3QJup35s4p9E1pwTEY5x
- TLSH T1B1857760569A64DE1105F01BDC08BE0D7DEB45FF3FAB932229682D7E35F2024C67E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
- Size 1.1MB
- SHA256 1054616b823d12ed34dbfff3d0fd3b8cfa74c8d03e5f044bd0cac3dff80a6490
- MD5 631b3ba31a54326c4264c2b96ce19e6d
- SHA1 d986786098525a3e5103042a39315a569e28b377
- SHA512 a04296ebd86cdc804bd0e66cd62ad56e407b0c1fb61def2b1ae6bc09311cff79268f9066dd0681e837074b6ce24427286d80162ab6beb2b55950e7e771d02d59
- SSDEEP 12288:77coe8rNMKOVO8qbpUripo0MaTIGBEoBz/yA6+ldXiBJm7jwkJnD1kQp+1n7u1Bx:XcohrlVXo0MaTIGBEog8jwgGB1OB9
- TLSH T198355E7FCAD5880ACF890245DEE66410B9BD01D7884EE9A4B80F324737E3BDD86B4D59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
- Size 1.0MB
- SHA256 0fae4a9fde80a93a92b09f254e31bb6e4809d807407adc82016d993578d72a97
- MD5 c5840cd53b5107daf186db5fe0601bec
- SHA1 37e024aed088aceff8e598bbed4cf7b982e7acdd
- SHA512 4e32933d9fb344e3ea707f7719908b738036074f707b5611947f8d2e88eec34a609a52d0706a68876f4b1babe4266c035e05bed9acbf1a1cfbe78d31c8bce9da
- SSDEEP 24576:92ft3gUHifrSJqutAPdSYj3heCzEOeyLmSp:9Ctm+JoHzEOeyLvp
- TLSH T1B3353C39EAEB8E0F0D6672DBEE920A107ADC458FD241D661FC4F236923037B853AD554
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
- Size 1.1MB
- SHA256 e77c95fd0c82d48043e7bb4a1a9272badeeeb586f7e30738ec47d6e9a7e22d7c
- MD5 0f59ca87818b536590383fb7aa4521d1
- SHA1 5136e3230abb04d64c90639021a40b07ba07d287
- SHA512 6d1d92f530757e3927da5ef6421b4461f88e382caea68ac456337d922a81af31d40465ae796c38489c833cdf0281ff0e2f0d65926ef930a9564f4ed9407c8342
- SSDEEP 24576:OflbbNI8dfWrDbP7Mi9SlV+F/otI4OASE2a9uVYEibaJDYNH2N8ADF2yuKDcG+eI:whJI8dfWrDbP7Mi9SlV+F/QcVYEibaJg
- TLSH T17F35B526D9B9C776C517326A6B4009082FFD626F71E3DD2DBC8AE227057337D4268D0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
- Size 1.6MB
- SHA256 19ffdfbb16adb744d729ebc92ed129f40b16267f471e2fd21b2622cff39b169b
- MD5 a88346c4a52fc6ece4b4ca709bcf2f68
- SHA1 15aa3804f7af163121066b6f321e43a61bea8d09
- SHA512 ce2020063b73c6c37373f4eeb2d5b04571815d9444f678b2f707d64299cc2111ececdb8ba49ce81cca5c6907f8941eb44f1908fc535c80e297bedff0a6c1ff50
- SSDEEP 12288:YgYuGr8LPfQh0uw05Vz7fPK9WHj1Citq34vgYNh3tBXRX8yrIsL7J3vgEfs8gn6k:Y3mPI77j1Citq34vgepgn5q3hmSS
- TLSH T163758AB1979E64DB0501F01BD808BE493EEF41FF3FAB875211641DBD35E20B846A929E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
- Size 1.0MB
- SHA256 22ffa5ffa623c0639be826e210fbc18ac5d00fdd791b5f32ba3e68fd8390c25d
- MD5 fe1dddf3371b2c9f9c0df6de2cea26b5
- SHA1 77699d9e5e35473387cd9d62380cd05121416192
- SHA512 7f1e0ed0f3f4398456b37985698495703373210fb2de5b3cfc63a8bd7158af950bda7965021391ad2d3475b234ebe07269cc00fbf192a35edefbb15ad002df1b
- SSDEEP 24576:bZ0PZSfS8wCVh2asunAa7ibuK9gL7YuJqyp9g:lFJVquKshpu
- TLSH T1EF352B78FEE76A06499323829F928750B9BD89CED590DFF23C4F921A1343F5C66B8144
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
- Size 1.6MB
- SHA256 bc605c442cbd1a220411140383194f800e7ef92f846759c9765193583e3218d9
- MD5 b673c16ae8cc0e48fc7e83c3c4c9fd2a
- SHA1 24357a7bcc847a548c1b15864a25b65c4140e40d
- SHA512 eb0881a0757906794f4f91a538e1b5ac34db83793605f1056b47f91ac9c93065353b709b2e21b3386ea61b71a4ea848e312ea96a40f00a07b04ce9b4791c0b7f
- SSDEEP 24576:b6lpoRWhMccrvrDtRD0YaaVnEBAwanNX4s1V:OpdhYVnEBAwanNX4s1V
- TLSH T1CD8567B18B9E64DB0501F41BD808BE093DAF51FF3FAB875211641DBD35E20B846BA25E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
- Size 2.3MB
- SHA256 751ef51cc1a4632d38ce58c9685b723e06fa76b2ef6badefb55997d4c821a19e
- MD5 050eacad0f3cebbdfa2a779d3970a4b1
- SHA1 95e5a46c4c733ca198c25372a72471ad16ccebb3
- SHA512 de423f627e144f0942adf5ee4f718b6aec388a551baf6dd868a73931846d37d16e81c8769dfa3fa2583e39cf3dc29b09f04a17d37a31abee3cfee966976feb4b
- SSDEEP 12288:9s6hcUv99hZr2o3djaAeM1fxCU3hFikZ0PlODHLpr8DVR2ijSY7XB6qwWW6hXBc9:9sEzkA6hXBcpSIKebpvmG
- TLSH T1B9B5C002396AD210DBE702B7352CF56C4A781B42A1D6772C1EAF9357EB47D7E0883636
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
- Size 2.0MB
- SHA256 044d28f032b016cc946631ff89bda1eaca1b2b8d27bb9c10b5dc2b4f82e2ce6d
- MD5 12aac0baafda6f27c76fafa3b4798460
- SHA1 c82216f3c9a37fea0aaba7c479afba1884ddaf96
- SHA512 fec6b43afb3a3c2755e5bd02a8ee0e752d11044d56de89404a6635727dd3df7043daf8f681e570edcf5b8511baa92aa15702ac244cc6ec8b3f23bfd87a26955c
- SSDEEP 12288:VhJ5IStIIWPLVks3klcfLYBCuaRHPukSLS65egsT//kAzFwa2n8Ta4lFEQ04QQcf:VuSuIUL1HJY/A/T4KeZp
- TLSH T1B8A58BB3724BDDD479441A5B292A7784667DAE693F73F8E000C9211A73F071A8432EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
- Size 1.0MB
- SHA256 8805870553092119c9c4d2dce5ad73eddb20e3898eeb52c7f28497ce4f116176
- MD5 49867d07110bf45e07ccb0e9ddb368da
- SHA1 f16387cd4921dbac90c1471bda7875f9f22bcf7d
- SHA512 5193f6c4e69aaadc76f239735e6a12a10f0a48646d5b2498de78959607f9b6e43592a056e12d3cfda64a4aa105c634af0405e288e3e85fceb6336e4926888b22
- SSDEEP 24576:0zmrWPvLeVRsTIItIMvfsEVQLdxdeBeyN1NVjLheU+TWZ0yTI7DAj7GQgo:0gWbeVR4VQgXheU+TWZ0yTI7DAj7GQgo
- TLSH T18835D9417CEF681C8F75279BC5A50966F89F07A7B330E54ABA1E9636370739703A260C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
- Size 1.6MB
- SHA256 b441b65e8f9f68d135350ab428b1eca334d000e2a2133b10c7254137b20f322e
- MD5 337ebae895950f08506dc2193b23ea32
- SHA1 3ef47fc0bb9578746cea7a7be62e65e48846a7a2
- SHA512 bba49a51e0e77da13c40aef066224526c2fa9d783d608f950bb1467fc0bb049d7f68be8297753f35c2bb586a0c10979f94ea2a64088c22335a5a6590112a2528
- SSDEEP 12288:9omufcr6ufKYA3KOAnKxEjc6OruVVXl/D5NGCLahqlH71w7x:ib02v7xE1VVV/9N8qq
- TLSH T14385DC51A68A28EF9241F2462C05FB487CDA44FD3E0B7622641DBD7D3DE327403AA75B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA
- Size 1.6MB
- SHA256 14a808d61b7cc91e713d520692ba3f044df44ad12a9cf7eb1a0ce150df309b63
- MD5 5d643d24e025901831da4dc11046b063
- SHA1 cc36c765cfc45581c49d683e77585e8ea887978f
- SHA512 1e8f0c973b012b7c0c25b986bb4a23b6d1091efe5ab756a9d52338b541480c8092239f2ca122bd849257bc12c7e51eecd38a2e13fc3cdd6a7058f8afb41c3e0f
- SSDEEP 49152:bVj4Lt84svVPdVgQu0uKMe8ILppZTdD4HIfKiuAOT5A2BuIRF9LUsxYl7j7khtWT:9
- TLSH T1F875CEED62650232AE47E91EC352B024DB3A3D338F02ED59F1476205CD871697BCAE79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
- Size 1.7MB
- SHA256 d358cd91757a9927761b9b67ef750c64774981f37ebde222c69cd35c06a2dad7
- MD5 2ca5632a78cf6ee98715d768f736dba0
- SHA1 ceccb99c82b05a0da5b4444f93fa76c51a76d655
- SHA512 ad82321aa6eb3dc0f3d126fd6409a5b07ebbf1575621a02fee4d1d26d5f78eda568810ee167324b41ac75ff3a599149d35cf11badcf15c4dec3fb15f81550cd5
- SSDEEP 24576:ueOxPibFwyIz7lpia/HLkTO7MKr56yU7bZVM85ut:UxnLkTO7MKr56f7bZVM85ut
- TLSH T1BD85A9A59A9D58DF0105F05BE8487A0D3DAB41FF7BA7871625683DBF39F2024863C329
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
- Size 1.5MB
- SHA256 98322278021c3b3be0868e7fc8d5d2818de21b64a0dc2d18737c7e6e2dba05e9
- MD5 ef852dc58d841f60d4e50ddaaa55720a
- SHA1 a7faf99cb8248176d05b7a91773255d4b33f17c0
- SHA512 f435e70e7f1ec6b465f8e3098d61e24782689d217c1df9babf844a41d2eaff63427c1b347b0d65f1e52064aeb376d2c6fc42d4a71c0a7ba0a190d193706ee1fc
- SSDEEP 12288:UtiDPdnWc+Pd2h4l42BUNBIwvcayDAdWOgEukqLWU1CbAKHCzZcPJKD7jfIyYN7p:Uti7+gbNUDAdphdN
- TLSH T1E07500D2E6BC85B28A21996780D33C34CB239F13D34AF285F56246C54EDA1135F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
- Size 1.2MB
- SHA256 a1e97236a90154e19c5abbb2f88a3cc28bbb343306ff0c59bda98cf5c424bbd2
- MD5 c670aa749ad552d98f012858fda52422
- SHA1 3d8f2b5b27b0ca32378a229c41f299df16b4319b
- SHA512 235a70db9e188cee24b97436e6999ca9be31b0e8b4f7a72984c8d667289058da2fa1c12ae131f2fdc7991d9b53d7f6ece4238443857f7046d2ebc7f2b720d7b1
- SSDEEP 24576:PXZBUMEd72mFeK/yCiBkYqTsJpzXluDJTUFPws29GhLpFTA6v6bJn5a8hIKoRwlQ:P8M4NFoT
- TLSH T1B745941106D4702281AC563EC5CD540EBFCEE46FE781CFE53AE8197877232A46F25B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA
- Size 1.5MB
- SHA256 26cba87a00afcc471014b598d0ce52e7f25b7d7a1499bf599806a28488fe217b
- MD5 0c6054db054985f0f2b7a84e7ba8d78f
- SHA1 745d0fe5a16232d39ceff740934d3ac7a182d40d
- SHA512 647643a4d08a40d7c46f7ac47f0cddff22b73e7c37b4673db77ea9b7b92db873a8cdcad41e0f5eb497b875c56fc1f24c6b59cad0777f4f3eeac1776f1762da1f
- SSDEEP 24576:63VB3w6mDSOC+sSX+nKiPWjAhtepL7/5GmeQCet7OwnHjddl8PzrwSd19J/uoh0y:63V5wXFX+nMu6P/5Rhj7njddl8PXL9p/
- TLSH T1476522E7B371EC3EDA6B1673536725B1ECB30E6916A1010E5B4AE93D6932B4884C47C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA
- Size 2.1MB
- SHA256 29ef086747e3f9e7d089d75c6aa3c48d1865f38c4e8450a53f4316e9cddadb3c
- MD5 1af1c7ccd8141ea76ed4e7de06f8068f
- SHA1 6ddb5e33a3661a79ad7513e6807bce8f1d7b7307
- SHA512 92dc758ba254e09b9792a8937cbd43ef88191973534619a16e411dfe234cdf2949e817fe256a5de892599dba13cfb8e472bf73441f91c2060a696b8f67a00743
- SSDEEP 49152:b38MiAQzZFX+nWcC3/HZbhxRqv7Ijddl89tCvAla+ppaurk04:YnAQfXpcC3VhxSUjdj8zcAlaIa704
- TLSH T1FEA523D7A3B1CC7DCD2B4AB3526B00F4FDB2197542B6101A1B26AD3DA532B4498DA7C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Content.crYpt
- Size 6KB
- SHA256 026b370a00f9d29793a8259f0db0d2664da91b2fe156864fd11131816b6b808b
- MD5 265581405ab05a51d3aa79cdffd043fa
- SHA1 4e621c7e7e6e58b2467838ebdfea10bfae22a476
- SHA512 724eef8e5371e1b9e6a42e8e37ae0a001f18b2f0bfb9f89df6cb46f0fb8ddf5d4b021d2fde8f0c08b2a9e1a409371f2459e3ce87895619fca458f2bf25f33dbd
- SSDEEP 192:SUkmPaEPLAxw9OLxUzRq/X5bme5t0EjQd6r78LsbEdw0ZC55M:SUrFPLAWbO5bX5ttjbr7Sd+5O
- TLSH T192E1BE5410FE1E6B0BDE6F7490750FF2CA01582D42426FF891928FC6875A17528F86DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising.crYpt
- Size 2KB
- SHA256 88084f84ec9c942f9a776d7f18db2b887083ab11c39cdd12d2302be74edc7305
- MD5 aad62e850fa40da1c972f3fbd2c2216a
- SHA1 db1ba320e142c990c8ca2638c9d39d894f60fe73
- SHA512 6e126e55a081bdcc8f318c29eb8be5da497aa977775da6a183e3ffc6fcedec3a8cfd73c227fc98f9bc464f266ed7479336139c240b194b28de6c35a334a74014
- TLSH T116514C49CAC5349162AAAE103DE126578B2003B59E70B52B311EFD6122F240D3572BCE
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics.crYpt
- Size 648B
- SHA256 8e25a66f8a406f4298497627bd68e411ca9ec900031eb5301ddb1da484236570
- MD5 9354bf827d75720e1443e22b74091974
- SHA1 6ced553641e7c4293782b3d5afdc9d59fc077957
- SHA512 298433cb9ad80284c5c015d4e6625e3673932e345bd8eac0db8db8def159ffd23787621605ee72fe3cce3d109cfb134f3249750880d39f208d777bfa66987077
- TLSH T165F0830F0D25CCC83D88A7AB6916C19DE8278ABAC4C4F2028414C0C9C848127690A76C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content.crYpt
- Size 264B
- SHA256 c7b77c4cfb11cb85aff35b02fcaa2fc3ca5e58483d5f0f00da9b16e692621741
- MD5 2710229bd6afed6164d087eef5a492c2
- SHA1 cda8cbe1d216ee57f3241126c3b95552bde8d9ba
- SHA512 0581ce40092839c910086d7cf69f0a106555e34c9c449de680b55f057ed3d0296cf9cc41196eebecef40227f9412ae8146a484dbf3472304ed1050e58f8f4aa2
- TLSH T1EAD0953498507F50F54A4A067F76C7D39DCAC55112440B55F5A192E4A3F4B974B8A150
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining.crYpt
- Size 248B
- SHA256 86d56c682ad8179e6762d2f2a069f5e45aec63bac15ff80de019074633e74cf0
- MD5 721e777ea93be44c3f6fd23a343cafe1
- SHA1 b4a4e0b3155b851b727a9eceb90723de1aba2889
- SHA512 27cc87f1d420bdeafd124da8f428a850a42ab5b25143f49138b90c6747ea82c2da41236693463490b4a37ab838487cc1172e8f3daa875a0a232dd1f82c827681
- TLSH T1EAD09510D560FE52516485774914304ACB35B75F2C070F1361CE8274011C5490DE5676
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Entities.crYpt
- Size 42KB
- SHA256 ed65678b9559b2dbf99dbeb6e893d85e4b47f19ed15a75c6f2be673ad7141fe0
- MD5 5d6f7dda0fc1e505a0cfae1257a51803
- SHA1 3e1beae6d5ee58049b673a678cf69e98a2cd57cc
- SHA512 23a9cfc833f5d60a672e1410667c8112fe9fc7039f5e0aca73f5a0432a7ec8a0b73c0e9a72043abaefbd7fd5b1a5f3e3405889224acc36139492a3d46f178b08
- SSDEEP 768:BsOUU/CF1pAxAboLginC7+sp3q7fel1JKZM4jKfmet3CITaZdX98FjcUKw1vF1:yjUkp0ooLginCqY7l7KZM4mF3CITuw4Q
- TLSH T19E13F18C96F72BC71226F77E4F5D8945C268427F3190CBA93FC7D489A53E8304816A5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting.crYpt
- Size 388B
- SHA256 883471911e08bead296359eb0f277787fa5ee58319b6cf9c6878295eaab7e84e
- MD5 54cc05e4811cd83a87904d255683a7ae
- SHA1 bb41b500340cb5bc4ac5fb0d43834f13e65a47da
- SHA512 b30971b5421dc280925e3b1d725b8e2fcd6759d5d6a69d4ce32b6cd7d30cf1eda03b7ac20b65eb852a458a06e473c45efd952d971fc86b5d61cb21dc346123ae
- TLSH T1E1E0F81B88CCB2F2E408B51E264B18D80FB1013A10ACF2F341C9969B00128CA181722C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE.crYpt
- Size 282B
- SHA256 3c5e96dabfec191d581a172bcf3df772cbe7c9e44805e2301d26df19f5799974
- MD5 7d0fa4c4682ca0cc36a7549319bd914d
- SHA1 738b6bc1d0ba541bc03d5f92b451f29d443c6c44
- SHA512 3d44fc713b641c9e4fb8eef5f097f9cbfd4f3f5e00973992b25b7e5699b4c1be48e24bf561f969e4d76f9653c9375cabde52fe52e5a28fd76fd3f9b49d6f5e3b
- TLSH T1FBD0EB8849E0126CE2E08E2010380B62AA8C2E242B70BB4922BE800B888C49BE005933
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other.crYpt
- Size 307B
- SHA256 30ef90ac6fe90484cc9ce53795b7f49325db518b5c8c7e06bf5991e4be07ed61
- MD5 9b4aebe7eb5d77410ecffa24f59624b0
- SHA1 6c00a13d488734207aff3113a3c5b7b84ee1ebdc
- SHA512 c864587b570fed545a4c960e05f7e3759152b5931d618a34a2e6a4f236d05cd15e7e37928e801cab19c96050597e43cadff46d152b1add7438caa2a80124bd1e
- TLSH T1FBE07DEFCC0AC950849C0603D618159389DB6BF5F04EE34A0862180BF6115C16C4B028
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social.crYpt
- Size 3KB
- SHA256 5635e33b9a7411e77b1fc38707c970390e58024628166f487c8b10a4a469b90e
- MD5 22fa7dac289703e8dba49a33fba5af95
- SHA1 aea8e8d2d49422f1db8608257065de81df39a91c
- SHA512 46a55142acedad536f513585c112a3193addd8b5f7c73ef08c9cf6575ebaacf3ddc9f89f6ba30cba1533b31c421596571a48a7fff43ae9e670d605088bb944ee
- TLSH T188715C0B5962930B96F5CC170240716F2C062C105425697FF80CA0BD6EBBF6F2B663F1
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Staging.crYpt
- Size 16KB
- SHA256 fe50148753c5efc58840d3566e90794cdfe543cb185d8a5914b7ca69bef64d49
- MD5 670f7238cd35c08554f882c952aeabe2
- SHA1 b9183b33eb7adfafc42c97dd35ddc99544e1355a
- SHA512 63ff04a88a9e116160906dce9b0526d81c8bf13eb72bc4a9f91eda2994804266fe87e79c8d2ded5ff11c1c8a595e75246288a3c345eee16f4b39e87226559191
- SSDEEP 384:APge3cnPCOI5DAPSAZyy26EOZ/QdlMDRRsxi32TWDpkzauosI:ogtzIBAaAq6Ei2AMxG2IkzauosI
- TLSH T19E72D0C493A72AE9AE2FA5C7FB495ADCD0E32041707740FD6D7A7700C46C184481A97F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest.crYpt
- Size 1KB
- SHA256 bd1e8350ea857db299f7b7f3debe94fec4295c048eb1b09d1de5eb33334b50ab
- MD5 173fe80577ed853c652c41c4a89518de
- SHA1 c678fd21d7b3bcb4a45e05c12475187a939f48a7
- SHA512 9907f4d5bec23a8109d59ab7288900e266d4d839d5e7323807d9b00f50dc5a6dc29051334380b5105a65778d9d4dd03d8856d1348c02ef9ef8d1d047ce80860f
- TLSH T18931D832579DFFB7230D2CD95DDD933809AB604351C882DC63D4EB09967A40A31D9E48
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\7-Zip\Lang\readme_for_unlock.txt
- Size 2KB
- SHA256 2407f9f7af8d8b7da127ddaf61beb6057b0add8b3d45cfc1819a5441210f2cc9
- MD5 3fe973e26252e457f5e4d3914110d2ea
- SHA1 aca6d0ef3b0a776817bad61b6a45fb5743d9b23a
- SHA512 07b10322f0a3268db00bd42f54d96897d70b053967197ea996822a31f455b0b9ed30877bf9d3cf3686e51a26c56996d94ab1db205cb1c7001fb467ff9765d64c
- TLSH T1B151895FBB0A41162D4232D3753DA6917617A41C333F191B3CF6801C33699AF2B3B299
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\A3R6C9.exe
- Size 256KB
- SHA256 e55056bfbfcc329ca02ed2d9231ce7552f7f5e95d99f98c8452b4069217c6ceb
- MD5 7b5438c4f65366c8ef457eef0b27a970
- SHA1 3b26745108896dc8f089be776f6bed4ebf5b9529
- SHA512 ebbf078f88203ddb9944a886206dd206349a034f4121e71c5a3929278d802c872c509c09899892687915714856d554d6a56ee5c5157d6f5a1a857377aa531304
- SSDEEP 6144:Q17+eW9Olanw/ZbCvVp64ZuVc3t/m+DmFIyQP3X0gh:Q89rwtCdVZz3c+Ddy6nFh
- TLSH T14144D011B1C194BBD97219302660EEB2852DF9301B5468EFB7CE4F795F702E29239E63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Host Process for Windows Services
- Size 69KB
- SHA256 1748a26b0fedb7a35218d087d17d99c15c74517cf80d1798375b621559a0f2e2
- MD5 7c40a760e7b4b61ab1aa537f8d9c880f
- SHA1 c963bd5aa1fd6758083a67a529d0c98c11d5461b
- SHA512 fe88ca5b42d86a2fb87c9598c31975c74b4b6efdc193c709f46a524e64fc233c4c63bd90b312c36c8951a6f8fc8cd834ff6acccd4f34c9103071857f2c0b7362
- SSDEEP 1536:DkLPmz3hNW4fyN8o+6R8Idtf76R7W1F866YLo4nDc6GC2n0PSjnouy8:Yb8RNBfyN8/SfmoF8wL9GC9PSbout
- TLSH T1F56302DBF7D2985EC798873D21ED353D7C0017182AC148B6E67834AA9D637597E231C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Q9acAd3.vhd
- Size 16.0MB
- SHA256 c902ce599db4134b17ac52a817c04b5a60cc587f983b3517b97c58634c13cc18
- MD5 449a62bf153f4fb72e2ee7a86c774b45
- SHA1 efe19f472d460d7210e568e3443e164fd1f51855
- SHA512 c7198185e0f2bd2502cb3c24fc870fb621b8d421c5f00397f180b145035292ccb4900b17948cd5a166be39e5dc584bc9f22216ae050c20e87d44da485e820d18
- SSDEEP 24:cdmOETuYmjvKPSa3q5wEtGsx/Cz0hPXR9GiRMvYgqvq5wKaZH:cSiYgvKPSa3raj/tFhsYHrKax
- TLSH T15FF68622334C9B0CEDD6997141A7FD301B72782D9A34905772526B0C3B717147FA1F95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\kD1aE.tmp
- Size 34B
- SHA256 0977e976a701e82d9d4f1f1b1eaf8a495e1bd92cc33a86a398d0bd536d86a73a
- MD5 4eb9ba2b74923cfdd5bf1b7d361916c8
- SHA1 38bb5cd2e7c48a369d7e73852749bac403165519
- SHA512 be4227c1d478476813f164b8e5389d46be10877839530e85e0ab51f744f6006810823751e5ec08ad345298c966082f48a36f0aa6ba12d47522bde95176cf203d
- MD5 SHA1 SHA512
- Path C:\ProgramData\kD1aE.tmp
- Size 132B
- SHA256 82350eee2b0b078b4dd06fee1242d227cb9bc4a5a61d01ee42161d8c8e1efc80
- MD5 40525e4d5526164ffeeefb2e335c869e
- SHA1 855aea5785873f5b13605de8765d94edf62143f7
- SHA512 b5334c2d1f8713f4316673754f112ae59d2b8854aada64380888cb40323927862b753ba40691f0923c8e70c7b624cf3cd315be7e84bf8202c293f2f71c02afcf
- TLSH T193C0222EB3020B0CF002A0F08B3CAC0F8302E0C8228F800CC08002028008B388280383
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\sichost.exe
- Size 43KB
- SHA256 092d4fe86aec6c3a44499e7539e88e50a31b451250e53847d0ab23d116a7cd8e
- MD5 e6a8f3973380e37f13fc76a9d27e79ca
- SHA1 24bd0e0662f0dca89698c1323268f15d30d36d96
- SHA512 b5afbc690962fdfb9469a4bc96404e629c097b5bb60627f830e2a00879625e75590e3f3c2bbff7765d701d0d61481c49769c0d36fe74182027555444ae2f2534
- SSDEEP 768:PW1wBW6mR0DadKA0KKwFe2iVw0AYkGzeUlZ8Rv5mo7bsm2GhoINlFnbcuyD7U:PIwBjlaEA0zsKw0ADGzeUlZkMQ8GuINJ
- TLSH T14713F219A1DFE6F9C86800357C3AFF442871DA89ADA807DF8DD02573C7C17A8A761359
- MD5 SHA1 SHA512 SSDEEP TLSH