Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20251231-en
  • resource tags

    arch:x64arch:x86image:win11-20251231-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    19/01/2026, 00:50

General

  • Target
    2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
  • Size 256KB
  • Sample260119-a63ayaby4f
  • SHA256 e55056bfbfcc329ca02ed2d9231ce7552f7f5e95d99f98c8452b4069217c6ceb
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path
  • C:\Program Files\7-Zip\Lang\readme_for_unlock.txt

Ransom Note
  • ATTENTION! Your network is hacked and files are encrypted. Including the encrypted data we also downloaded other confidential information: Data of your employees, customers, partners, as well as accounting and other internal documentation of your company. All data is stored until you will pay. After payment we will provide you the programs for decryption and we will delete your data. If you refuse to negotiate with us (for any reason) all your data will be put up for sale. What you will face if your data gets on the black market: 1) The personal information of your employees and customers may be used to obtain a loan or purchases in online stores. 2) You may be sued by clients of your company for leaking information that was confidential. 3) After other hackers obtain personal data about your employees, social engineering will be applied to your company and subsequent attacks will only intensify. 4) Bank details and passports can be used to create bank accounts and online wallets through which criminal money will be laundered. 5) You will forever lose the reputation. 6) You will be subject to huge fines from the government. You can learn more about liability for data loss here: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://gdpr-info.eu/ Courts, fines and the inability to use important files will lead you to huge losses. The consequences of this will be irreversible for you. Contacting the police will not save you from these consequences, but will only make your situation worse. You can get out of this situation with minimal losses To do this you must strictly observe the following rules: DO NOT Modify, DO NOT rename, DO NOT copy, DO NOT move any files. Such actions may DAMAGE them and decryption will be impossible. DO NOT use any third party or public decryption software, it may also DAMAGE files. DO NOT Shutdown or Reboot the system this may DAMAGE files. DO NOT hire any third party negotiators (recovery/police, etc.) You need to contact us as soon as possible and start negotiations. Instructions for contacting our team: Download & Install TOR browser: https://torproject.org For contact us via LIVE CHAT open our >Website: http://nietk3nqpdtrzcm7pblreqtrqyxhud7qbmmdgn4ras2txibwgmmmz5qd.onion >Login: customer >Password: 5+x3ZIYfe329Qbf_plkL%?sEJxoQk& >Secret: e9chg%_JTRoMMHyWq-?r If Tor is restricted in your area, use VPN���������
URLs
  • https://gdpr-info.eu/

  • http://nietk3nqpdtrzcm7pblreqtrqyxhud7qbmmdgn4ras2txibwgmmmz5qd.onion

Signatures

  • Cloak

    Cloak is a ransomware that has been active since 2022.

  • Cloak family
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (9590) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Disables Task Manager via registry modification
  • Modifies Windows Firewall 2 TTPs 1 IoCs
  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Deletes itself 1 IoCs
  • Executes dropped EXE 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
  • UPX packed file 17 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Interacts with shadow copies 3 TTPs 1 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies Control Panel 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 14 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs
  • System policy modification 1 TTPs 16 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4088
    • C:\Windows\SysWOW64\diskpart.exe
      diskpart /s C:\ProgramData\kD1aE.tmp
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4440
    • C:\Windows\SysWOW64\diskpart.exe
      diskpart /s C:\ProgramData\kD1aE.tmp
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4804
    • C:\ProgramData\Host Process for Windows Services
      "C:\ProgramData\Host Process for Windows Services"
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      • Drops desktop.ini file(s)
      • Enumerates connected drives
      • Sets desktop wallpaper using registry
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies Control Panel
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      • System policy modification
      PID:6492
      • C:\Windows\System32\cmd.exe
        "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:6740
        • C:\Windows\system32\vssadmin.exe
          vssadmin.exe delete shadows /all /quiet
          4⤵
          • Interacts with shadow copies
          PID:7036
      • C:\Windows\SysWOW64\netsh.exe
        "C:\Windows\System32\netsh.exe" advfirewall set allprofiles state off
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:6788
    • C:\ProgramData\sichost.exe
      C:\ProgramData\sichost.exe C:\Users\Admin\AppData\Local\Temp\2026-01-19_7b5438c4f65366c8ef457eef0b27a970_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat.exe
      2⤵
      • Deletes itself
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:6524
    • C:\Windows\SysWOW64\diskpart.exe
      diskpart /s C:\ProgramData\kD1aE.tmp
      2⤵
      • System Location Discovery: System Language Discovery
      PID:6540
  • C:\Windows\System32\vdsldr.exe
    C:\Windows\System32\vdsldr.exe -Embedding
    1⤵
      PID:4596
    • C:\Windows\System32\vds.exe
      C:\Windows\System32\vds.exe
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious use of AdjustPrivilegeToken
      PID:4688
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum
      1⤵
        PID:652
      • C:\Windows\System32\vds.exe
        C:\Windows\System32\vds.exe
        1⤵
        • Checks SCSI registry key(s)
        PID:5924
      • C:\Windows\System32\vds.exe
        C:\Windows\System32\vds.exe
        1⤵
        • Checks SCSI registry key(s)
        PID:6656
      • C:\Windows\system32\vssvc.exe
        C:\Windows\system32\vssvc.exe
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:7072
      • C:\ProgramData\A3R6C9.exe
        C:\ProgramData\A3R6C9.exe
        1⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2492
        • C:\ProgramData\sichost.exe
          C:\ProgramData\sichost.exe C:\ProgramData\A3R6C9.exe
          2⤵
          • Executes dropped EXE
          PID:5344
        • C:\Windows\SysWOW64\diskpart.exe
          diskpart /s C:\ProgramData\kD1aE.tmp
          2⤵
          • System Location Discovery: System Language Discovery
          PID:1480
      • C:\Windows\System32\vdsldr.exe
        C:\Windows\System32\vdsldr.exe -Embedding
        1⤵
          PID:1172
        • C:\Windows\System32\vds.exe
          C:\Windows\System32\vds.exe
          1⤵
          • Checks SCSI registry key(s)
          PID:6096

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              am.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\am.pak
              • Size 1.5MB
              • SHA256 df1a34b7640c2b1e7bc92b5c88de248579a82fc8fb21333a6ff436c219ee2688
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ar.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ar.pak
              • Size 1.5MB
              • SHA256 9c58f6a27c5cb6556d26d42dda4461c2ffee6ad904dff3bf15b4dbf1b5a27d0d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              as.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\as.pak
              • Size 2.1MB
              • SHA256 78e5a4f49418fc6d92707cc50a1f9a2b88652a1474b3b8b05cb2f670febacfc1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              az.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\az.pak
              • Size 1.1MB
              • SHA256 4fec2ed354a3f48daf5320ba9bf20104e9428fb427cc0b44eb62827ed836b156
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bg.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bg.pak
              • Size 1.7MB
              • SHA256 38a4afb5772b0b11e178968c14e4ca9b362090b4bf5bd90fc4519193aab4dc9d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bn-IN.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bn-IN.pak
              • Size 2.2MB
              • SHA256 e57d6a23a8393438805e01e5e3a79c02eb79bce11fadbeae0e7406df67cd3232
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bs.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bs.pak
              • Size 1.1MB
              • SHA256 285015e8b634880692eeba953d3bbb296071e36f13ae7d3cf6a9f75d2255d005
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ca-Es-VALENCIA.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca-Es-VALENCIA.pak
              • Size 1.1MB
              • SHA256 2c4fc068496f280228506cfc0343c5c31d7aa1c7cf679828332a1ef886e36ddd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ca.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca.pak
              • Size 1.1MB
              • SHA256 4bd0db7a968ce1d3c4f3036458bd09a3a7999f9554aa3c93b990cab61c587fd4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cs.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cs.pak
              • Size 1.1MB
              • SHA256 f40a4b04a53040f76db192ed71bb0f3000dc14cf89abf2fab074457ceb7230db
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cy.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cy.pak
              • Size 1.1MB
              • SHA256 564da98ad85ea7a84af2a349a2d60bb095f163fdd1c534dae36a7c3d9c159e0e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              de.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\de.pak
              • Size 1.1MB
              • SHA256 a2a9db06ece2a91fb013882001972b1e30a61cf49ccc9de94956dc07eadef383
              • MD5 SHA1 SHA512 SSDEEP TLSH

              el.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\el.pak
              • Size 1.9MB
              • SHA256 e945572774cdb69984111f7a5346becb74d040a32b673d9ca3b7537f5380b118
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es-419.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es-419.pak
              • Size 1.1MB
              • SHA256 c1f37c031aa76740bd37f06ac482c807e5c30bae9ae9123ff8fdcd8cd054eb9a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es.pak
              • Size 1.1MB
              • SHA256 504e00f1f34021189d11cdd482b637849882785053fde4167e56184955e69775
              • MD5 SHA1 SHA512 SSDEEP TLSH

              eu.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\eu.pak
              • Size 1.0MB
              • SHA256 00b86474e2fb12c8d332ad2a8fa9bbd2e5e3725409c8bddc1f1fa73a37d54bbf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fa.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fa.pak
              • Size 1.5MB
              • SHA256 2c64b2c3ca98d902eb69886dd807d91071a80e7a97a825bdededaed33c911b8e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fi.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fi.pak
              • Size 1.0MB
              • SHA256 8885cea78a959bb0f567cbd8164aa83a88875b545e0aacaab12edac3468eedc7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fil.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fil.pak
              • Size 1.1MB
              • SHA256 9b7f3e16ad95c5ce617809da1902ccfcc5398c33d4a46b87567b04ae8804edff
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fr-CA.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr-CA.pak
              • Size 1.2MB
              • SHA256 d24f8bdb0e9db55fbf2f3bb1721028ba0c8ba9540a5c20bd1b71ad20b777609c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fr.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr.pak
              • Size 1.2MB
              • SHA256 54fc6d450fa85570ecdeea9f23867bae63c2d3ef7d7b381705dccccdacd5f2f1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ga.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ga.pak
              • Size 1.2MB
              • SHA256 d27b3219360b5e9dcb2a72e58ee657e14575ce9db6724b063e7dea3f0ef8bb6f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gd.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gd.pak
              • Size 1.2MB
              • SHA256 77baec05619f663d5f8a4ac5120468b381292c1049d06276aefa32283776314c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gl.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gl.pak
              • Size 1.1MB
              • SHA256 5231780de08aa626a0906472c1a3a89f4f8fc0d1c45f0df61433304ac6f7068b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gu.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gu.pak
              • Size 2.1MB
              • SHA256 7ba4e03467dfabea992a0fa4f760e55784abad8cd5dcb47eb893a027922f8fee
              • MD5 SHA1 SHA512 SSDEEP TLSH

              he.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\he.pak
              • Size 1.3MB
              • SHA256 8782c4a261254d2c0c925b76f1b7e30fa04596a76bb6b2367f4c94264e034d6d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hi.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hi.pak
              • Size 2.1MB
              • SHA256 b99cb8b39ce4df3270d2eb36f28e6dc4f7bcbf78f19c989c891339478e731190
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hr.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hr.pak
              • Size 1.1MB
              • SHA256 0f8c137a2091e2c6e69eb2b590eee03799c9c48d375cd81739b8d45eb5c777c4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hu.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hu.pak
              • Size 1.1MB
              • SHA256 210447c886f15ccfc95626c0be4cecbd118dcee3c585e4cc7fe21b750063a8a8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              is.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\is.pak
              • Size 1.0MB
              • SHA256 95618ed20e82b0c4aeb34dda772f3922c7fb10b42ac6fc2efada082dcb7acf23
              • MD5 SHA1 SHA512 SSDEEP TLSH

              it.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\it.pak
              • Size 1.1MB
              • SHA256 1539d735865c3830ba88a0eeb650f73aa0aaf6125ab0442c2c555e9ada5c2f09
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ja.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ja.pak
              • Size 1.3MB
              • SHA256 f2ebdb6800215a7e62c4de7fc981dd22d6e6371829211411c14c4726d12da533
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ka.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ka.pak
              • Size 2.3MB
              • SHA256 2a489ef1ed670fe58da8254b289764f5caf857db3d26b1849cc13df82c423d01
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kk.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kk.pak
              • Size 1.7MB
              • SHA256 7db6371b4e8aff46c842957ffc0c6824b0ea16d46dd164b7c27bfbc4337b345f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              km.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\km.pak
              • Size 2.3MB
              • SHA256 232d02e0b28ebd37c2957cfbca76ac648bf274e8f7d45df779079e267d353724
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kn.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kn.pak
              • Size 2.4MB
              • SHA256 0835ad9365a6bee8537f12c5086f5e051abb4be0d5cdc0e3181222a0480e130f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ko.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ko.pak
              • Size 1.1MB
              • SHA256 1ffbbe2ac0346f982d82c2fa61dc86483b07f168b36f86074fa1bf2904fa9825
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kok.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kok.pak
              • Size 2.0MB
              • SHA256 3fd60750ed9d21c09f877ed05da78d958a9d3c22d8c2a1a62b7d7f0d76967619
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lb.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lb.pak
              • Size 1.1MB
              • SHA256 1b44025df6694d8276e71c3d89dd953849b97925a5486f5dad2de25812668bab
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lo.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lo.pak
              • Size 2.1MB
              • SHA256 5bc5385277aadd862492188b9f72d8623a3ad40ccd3bca34410c401b596a8469
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lt.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lt.pak
              • Size 1.1MB
              • SHA256 7b91d33bd1af9900974c28e534f6b9b9cb70e6b950e7ef26e6c08f3905cf9854
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lv.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lv.pak
              • Size 1.1MB
              • SHA256 8364928d2048c86d03caa2e2d40d1101470257f0e58dc22293562ca6810fef18
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mi.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mi.pak
              • Size 1.1MB
              • SHA256 02635bf8fe0f60d01b7de40b3f3b555a7703379957550b11cf50544d5274953c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mk.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mk.pak
              • Size 1.7MB
              • SHA256 8824393f693a3a3eb75f88e9adfc52374bd597fa67dd1e6bded16944e8b5c74e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ml.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ml.pak
              • Size 2.6MB
              • SHA256 b68fa96efcbd82fe08127efde190cda58056a32ce062ad2f61d7dfc054f0a557
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mr.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mr.pak
              • Size 2.1MB
              • SHA256 bc772e8ef60320810b8a030dd6e2eedd70085e3bc13c952b4d72d2dc6f1acef7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mt.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mt.pak
              • Size 1.1MB
              • SHA256 9e29b5eb31b7bba453f41ffb3efd16b5bb2d002faf9399f39bca265fa9ee97b2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ne.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ne.pak
              • Size 2.2MB
              • SHA256 7da998e03eb9e1980d3f3528cd68b7e3d988d479e4a6ade76f685c71a1962c10
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nl.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nl.pak
              • Size 1.0MB
              • SHA256 271f10356d5150d9e6bc2c5542878e069140df11da8d86f73a48b952cde79c90
              • MD5 SHA1 SHA512 SSDEEP TLSH

              or.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\or.pak
              • Size 2.3MB
              • SHA256 2f69d3d1809db6efa5ba609a3ad8faaeb8d231b6705e810c43ce759d4a6889b9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pa.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pa.pak
              • Size 2.1MB
              • SHA256 952f4a890435e780706e7fae43489b5ccd6e24bd15226c9e8bae64c46845bae1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pl.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak
              • Size 1.1MB
              • SHA256 184871b6c941dffe0a6233c15ff376b366b0d5c79a1e9a5e26681357cb23c5a2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-BR.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-BR.pak
              • Size 1.1MB
              • SHA256 4a1a1f1b0e334309f832dce745e6ef292c48feff18b4c6b101d38a4df2918721
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-PT.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-PT.pak
              • Size 1.1MB
              • SHA256 50aac06e5b026b7f3f435d08a9288b28a49cc65cb787eaf9d445a7d57499f3bd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              qu.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\qu.pak
              • Size 1.1MB
              • SHA256 51fd0956b568068dc82b93c816c004c70155eba47215621d59248441b8ba5e33
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ro.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ro.pak
              • Size 1.1MB
              • SHA256 b4250d3e9d7b8632689545f6182bd826c1d78751de34c714c4c9a7567e976e35
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ru.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ru.pak
              • Size 1.7MB
              • SHA256 db50bbcc8e4f29d15c0d763a030368c277e4bccb2555269c338f9a17dc32f92a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sk.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sk.pak
              • Size 1.1MB
              • SHA256 0f517973ee821a6d4e12641e1c3ec95a22b458911b92766cba9edd5eb921550e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sl.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sl.pak
              • Size 1.1MB
              • SHA256 7df39d82b0968633268bf6a3397b9407d08ab2eec5d196e5569f0c27914c912d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sq.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sq.pak
              • Size 1.1MB
              • SHA256 9d912af9c4cef3670baf6f37e718fb8b82cabd49293e6a4bea0417c4c73ee5c1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr-Cyrl-BA.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Cyrl-BA.pak
              • Size 1.6MB
              • SHA256 280674ee360851dc9d2714fe8a88c979200f95809f683815e64499e5d7280d28
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr-Latn-RS.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Latn-RS.pak
              • Size 1.1MB
              • SHA256 c25057bee9715661148e32464c38b57ae23dafb8d547f510271574c5227ed4ba
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr.pak
              • Size 1.7MB
              • SHA256 759610c7fcb001524710420eb67479521c0a7ab8a3ce74d3f23ff2911605c8c9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ta.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ta.pak
              • Size 2.6MB
              • SHA256 c5714b9db3e4f55d7096bb2bf74384bef6c4d70ad8d8389237782a48629b32ba
              • MD5 SHA1 SHA512 SSDEEP TLSH

              te.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\te.pak
              • Size 2.3MB
              • SHA256 5d09ffe4331afaf263e2be9318ee8b3639786924941e1a1582aff0db16aa4018
              • MD5 SHA1 SHA512 SSDEEP TLSH

              th.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\th.pak
              • Size 2.0MB
              • SHA256 09fa72ae30fb9d656c14619693feadbe1b4e4f4217963372256c4df87d7a53f7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tr.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tr.pak
              • Size 1.1MB
              • SHA256 827d1655ed0777abd10f90a72759ada3fe9343ba7f31ed58db4ca77df7893769
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tt.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tt.pak
              • Size 1.7MB
              • SHA256 038966e40daa056df50e8483042500d9007379fd4e717e780a690c55c732dc77
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ug.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ug.pak
              • Size 1.6MB
              • SHA256 60901e70fd4d6221397044e6f83de50b41bf0b512808eb86ab9932de031ea7cc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              uk.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\uk.pak
              • Size 1.7MB
              • SHA256 61af745a967b1bb9a8380b23c3f7995cc687d5c840891f69d15d0e371e18db82
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ur.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ur.pak
              • Size 1.6MB
              • SHA256 74c7f306e4a614b37bf51baf8301fa543e9bda8d0fe9a443e48e3281b9e81a4b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vi.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\vi.pak
              • Size 1.2MB
              • SHA256 9f476d725511501758d49842cc7f6a3a9983b49adb714f4195fabe5e6a17c532
              • MD5 SHA1 SHA512 SSDEEP TLSH

              manifest.json.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\WidevineCdm\manifest.json.crYpt
              • Size 1KB
              • SHA256 d224ed43104c85d0726ba1684f06eda4e5faaaca47c1f3739a4e7aad010a1a52
              • MD5 SHA1 SHA512 TLSH

              msedge_100_percent.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_100_percent.pak
              • Size 1.6MB
              • SHA256 5d3b7d0c6290bd80aab8141433f79e85edb2285019c57eb2278ca6eafcff1089
              • MD5 SHA1 SHA512 SSDEEP TLSH

              msedge_200_percent.pak

              • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_200_percent.pak
              • Size 2.3MB
              • SHA256 09bce136ca5bfd72290b0b4c2582b6bf097596ae979ffb586f612980d9340893
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ta.pak.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ta.pak.crYpt
              • Size 2.5MB
              • SHA256 7ef772224f0d236e2bb643c2e8c1b0408baffc2c7da6bad57fa7efb0308b352a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              am.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\am.pak.DATA
              • Size 1.4MB
              • SHA256 b315498baaeca0f580c0613d2690cfc2eb5808ecfc69d1bcf6cc8b9e423c40cb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ar.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ar.pak.DATA
              • Size 1.5MB
              • SHA256 209a82abe7b52988dbde45116d18b8241f5ef520731e0278538effed1937663c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              as.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\as.pak.DATA
              • Size 2.1MB
              • SHA256 bc5a762bf0329cb8da73ee355a062da74e6aa3659b31cc52ca94409aff8ceca2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              az.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\az.pak.DATA
              • Size 1.1MB
              • SHA256 4b56469dbf961e7669af64796af6e13ff41ef802335005cb469d961b473b3fc9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bg.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bg.pak.DATA
              • Size 1.7MB
              • SHA256 b2998f85180e83724b719fc6d99f79ddbf71a0b9fa0d2712502c357694900c87
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bn-IN.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bn-IN.pak.DATA
              • Size 2.2MB
              • SHA256 41d635b3dd35339c847177ec4ee586ad24a099fd3077772bdbf9796955daf7dd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bs.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA
              • Size 1.0MB
              • SHA256 655fa76a0f249ce66c80aa965c3e3153648b3193954f8bfef4fd13e66ddd12dd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ca-Es-VALENCIA.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
              • Size 1.1MB
              • SHA256 daf9c1ed9a8b345b1bf6526159fa69d904b0e4be782b91a99e03e0feb9aaddb7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ca.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca.pak.DATA
              • Size 1.1MB
              • SHA256 76ed26876b09220d9efc0ba833c09a36c6d31ba598c1d08d2f12bb7f7ecb8ed3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cs.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cs.pak.DATA
              • Size 1.1MB
              • SHA256 8e85d08caf2183006f0e06e3c2b3272193e05c54bf52701575311dee691c3b74
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cy.pak.DATA.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cy.pak.DATA.crYpt
              • Size 1.1MB
              • SHA256 a1d1ba96e23d9348ac8e28c8fc69974779e58542500710d3f0ee1fa93249d7fc
              • MD5 SHA1 SHA512 SSDEEP TLSH

              de.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\de.pak.DATA
              • Size 1.1MB
              • SHA256 1820825aa818fac35d50a3138ecaf0d3ff3bb3d28f6a18ea0439bf65c0a4d2d5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              el.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\el.pak.DATA
              • Size 1.9MB
              • SHA256 74bf0037672ea5678e9caed02772ff7daa8968e2df312cb2b04165c0d7de3d22
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es-419.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es-419.pak.DATA
              • Size 1.1MB
              • SHA256 d8cb3ea707cbc44c0094fd3afdb6e548f0bc17742ff16f7bbebe954220acaf0e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es.pak.DATA
              • Size 1.1MB
              • SHA256 ab1ee3d0c9b6ea9cfd5816fe9ccdad22b391e5c90901d27223988118b4b76d18
              • MD5 SHA1 SHA512 SSDEEP TLSH

              eu.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\eu.pak.DATA
              • Size 1.0MB
              • SHA256 ebfcf0450084588b25e2b13acc93a98d5221a80dfcffc03b56e7d4fffe813492
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fa.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fa.pak.DATA
              • Size 1.5MB
              • SHA256 e3cac9fbb432bb223bd9cd556f53270152b45907415e69886e8cafb6a9f3d758
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fi.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fi.pak.DATA
              • Size 1.0MB
              • SHA256 c3af3ff2de7a888a3e9392f63cd8bdecadecd3a350513fb14fd0fb94dc7093d2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fil.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fil.pak.DATA
              • Size 1.1MB
              • SHA256 81f055cc41aa3cb70659936d5e07c541ab1a9f12949eb25b88e74e8d2af433c3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fr-CA.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr-CA.pak.DATA
              • Size 1.2MB
              • SHA256 5e19f230a77cd9d00026fd5430c518d178bf612416b5950ce6c10b3996735c0b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fr.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr.pak.DATA
              • Size 1.2MB
              • SHA256 f929847d71d5f314335018c1f15f04ad98d92168a026b6a4c84df3ee14697a3e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ga.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ga.pak.DATA
              • Size 1.2MB
              • SHA256 f4ba8c98cbe62c18c2373d25e808a1271410a46988ffd0def002f6de8dd3c236
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gd.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gd.pak.DATA
              • Size 1.2MB
              • SHA256 94ccc176667a68d44295ed4bb6c12e630b61520239524cadfda272fc60b91c82
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gl.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gl.pak.DATA
              • Size 1.0MB
              • SHA256 2679633216b1ac643b93c803bdcea55e623ec7883ea5c0df004c991e33fbc1d2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gu.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gu.pak.DATA
              • Size 2.1MB
              • SHA256 25db4dd197f574761fc70d744720598737159e92f31be8fe6d04ba0259aabb6d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              he.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\he.pak.DATA
              • Size 1.3MB
              • SHA256 4d2825827ca8f9eaebfcccbe4bf1de7f1f359c584ea301d1cf2ecc2009a28270
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hi.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hi.pak.DATA
              • Size 2.1MB
              • SHA256 3912b4c90123b5f9b7fbb545ec7e0d896eac3955a779a013ea1fd773bf49bbf0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hr.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hr.pak.DATA
              • Size 1.1MB
              • SHA256 fe39efcc13e3bd5a9c57be087d3c1941d7b6393ce6cc11fb986a867eefc480bf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hu.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hu.pak.DATA
              • Size 1.1MB
              • SHA256 08742311261c40b7822456656bc337494e9bda8238916d860c98bae70fafb34a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              is.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\is.pak.DATA
              • Size 1.0MB
              • SHA256 b4f1bb121e9ebfef4c0084c6bf4000c72105bc59a36f0effe72f89661e09bbdb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              it.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA
              • Size 1.1MB
              • SHA256 59c0ce127f09eab061bd6dbec884016b72731dc642d95fdac95ddcfb6361ae4f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ja.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ja.pak.DATA
              • Size 1.2MB
              • SHA256 38e607dbd0bde4096390c1d9ef290c84b06712882d29709d92d25a2542a421a8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ka.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ka.pak.DATA
              • Size 2.3MB
              • SHA256 fd5be5aa2c4cd8405a395744b2ba658ff30b2fcbadc0b62ab5cf865c58680df3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kk.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kk.pak.DATA
              • Size 1.7MB
              • SHA256 5951f4e07f8fa53310e28fa769120f4c061b250ee1857f34e8094de0617a5cdf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              km.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\km.pak.DATA
              • Size 2.3MB
              • SHA256 6e10ca9aa66e9b75368a0e6d4bc5700a7e8aef963d3c41135b8dc7fee7ee5a93
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kn.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kn.pak.DATA
              • Size 2.3MB
              • SHA256 f165d14e7712421f832efa699c1af46246def03444461b2786d2ebd89114aba3
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ko.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ko.pak.DATA
              • Size 1.0MB
              • SHA256 0745c794bfa31070ed4c328d3f4eeb6294851e8910bdd529f5ac0095228100e9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kok.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kok.pak.DATA
              • Size 2.0MB
              • SHA256 39b3d52b2ee9b72ad9628c98f538ce2499abaed0d9fe745a3f8243fedf1a0d7f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lb.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lb.pak.DATA
              • Size 1.1MB
              • SHA256 2481331129a839148ee6b11b230f0c4a8026acb4480ecab50c3eca99e400d731
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lo.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA
              • Size 2.0MB
              • SHA256 1a7dda90dab84aad071c8d4d87641bf7e0fdcac9d8c4d91a69f875134d7f4c12
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lt.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lt.pak.DATA
              • Size 1.1MB
              • SHA256 fc4676cc644bba22c4f7e6348b6473f8c5f3e82cb3aef368512f895a3ce3f7a6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lv.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lv.pak.DATA
              • Size 1.1MB
              • SHA256 d511b7ad7373407973d7da74b3866834078fa34025bbf97068308c92bea70bcb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mi.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mi.pak.DATA
              • Size 1.1MB
              • SHA256 58fdcb9473d7367dae6bc8c8cc518e2b0e491d724871e3da20fca66e6da33b54
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mk.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mk.pak.DATA
              • Size 1.7MB
              • SHA256 05fa1fc398d4b1d2bdb0ab93657109a2ba169ddfec57adef87fc1ba6d9a4d5b8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ml.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ml.pak.DATA
              • Size 2.5MB
              • SHA256 40adeee3f40cde4a38a51ecbb914e7eac7a3808e10fe661e6887a2382e26033a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mr.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
              • Size 2.1MB
              • SHA256 c1cf0deffbb30c0d19e56262d7586dea03530eac66e8faa87a07d61f61f59f16
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mt.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mt.pak.DATA
              • Size 1.1MB
              • SHA256 2306bbee3f1a6fba21ad69641b532922b33bd009b3a6b84fbf12738a91d82257
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ne.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ne.pak.DATA
              • Size 2.2MB
              • SHA256 899d78b8f4b886ac147af53dc471a4e2c4228185471aef6597f848704a2f3b35
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nl.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nl.pak.DATA
              • Size 1.0MB
              • SHA256 faa4b2f3db119c2ae303e49e743f33f46e89c88a107cf4d6aac186bbc23b9112
              • MD5 SHA1 SHA512 SSDEEP TLSH

              or.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
              • Size 2.3MB
              • SHA256 be96e5367153042146311b3dab19af99ab408d22e50a18e8f74800f5ab5600f5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pa.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
              • Size 2.1MB
              • SHA256 2b0685188ac80bbe18926c63a3346e7a856e4675d8e4f4b7f84572a2c954059f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pl.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
              • Size 1.1MB
              • SHA256 8694efa8b1e9538df844a9246d7e3375e4bd5cde7e82e7d7f1af87a17ec4d033
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-BR.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
              • Size 1.0MB
              • SHA256 00af1aa999b4c9bc31b6b6d910ec7401acf96b8d7066d5201438e4ed2b9f7caf
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-PT.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
              • Size 1.1MB
              • SHA256 bc7617cd43c17aa71fa5c59405d7226b17d962d66169ee0887ddeaeb4959ff92
              • MD5 SHA1 SHA512 SSDEEP TLSH

              qu.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
              • Size 1.1MB
              • SHA256 c8e4e9fe240dba7db1e69e5a80b431ded77b4ff8944d22c35977559f1518a782
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ro.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
              • Size 1.1MB
              • SHA256 c40dfef2385bdd3c3330e00aefaaf9a76fd16331efa21064bb4106e0c6a99532
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ru.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
              • Size 1.7MB
              • SHA256 ebbf9f822168ba7e5d0e9fe9a26fe3abb434f84c2d413188aa350280a5671552
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sk.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
              • Size 1.1MB
              • SHA256 1054616b823d12ed34dbfff3d0fd3b8cfa74c8d03e5f044bd0cac3dff80a6490
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sl.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
              • Size 1.0MB
              • SHA256 0fae4a9fde80a93a92b09f254e31bb6e4809d807407adc82016d993578d72a97
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sq.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
              • Size 1.1MB
              • SHA256 e77c95fd0c82d48043e7bb4a1a9272badeeeb586f7e30738ec47d6e9a7e22d7c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr-Cyrl-BA.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
              • Size 1.6MB
              • SHA256 19ffdfbb16adb744d729ebc92ed129f40b16267f471e2fd21b2622cff39b169b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr-Latn-RS.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
              • Size 1.0MB
              • SHA256 22ffa5ffa623c0639be826e210fbc18ac5d00fdd791b5f32ba3e68fd8390c25d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
              • Size 1.6MB
              • SHA256 bc605c442cbd1a220411140383194f800e7ef92f846759c9765193583e3218d9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              te.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
              • Size 2.3MB
              • SHA256 751ef51cc1a4632d38ce58c9685b723e06fa76b2ef6badefb55997d4c821a19e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              th.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
              • Size 2.0MB
              • SHA256 044d28f032b016cc946631ff89bda1eaca1b2b8d27bb9c10b5dc2b4f82e2ce6d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tr.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
              • Size 1.0MB
              • SHA256 8805870553092119c9c4d2dce5ad73eddb20e3898eeb52c7f28497ce4f116176
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tt.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
              • Size 1.6MB
              • SHA256 b441b65e8f9f68d135350ab428b1eca334d000e2a2133b10c7254137b20f322e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ug.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA
              • Size 1.6MB
              • SHA256 14a808d61b7cc91e713d520692ba3f044df44ad12a9cf7eb1a0ce150df309b63
              • MD5 SHA1 SHA512 SSDEEP TLSH

              uk.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
              • Size 1.7MB
              • SHA256 d358cd91757a9927761b9b67ef750c64774981f37ebde222c69cd35c06a2dad7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ur.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
              • Size 1.5MB
              • SHA256 98322278021c3b3be0868e7fc8d5d2818de21b64a0dc2d18737c7e6e2dba05e9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vi.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
              • Size 1.2MB
              • SHA256 a1e97236a90154e19c5abbb2f88a3cc28bbb343306ff0c59bda98cf5c424bbd2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              msedge_100_percent.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA
              • Size 1.5MB
              • SHA256 26cba87a00afcc471014b598d0ce52e7f25b7d7a1499bf599806a28488fe217b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              msedge_200_percent.pak.DATA

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA
              • Size 2.1MB
              • SHA256 29ef086747e3f9e7d089d75c6aa3c48d1865f38c4e8450a53f4316e9cddadb3c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Content.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Content.crYpt
              • Size 6KB
              • SHA256 026b370a00f9d29793a8259f0db0d2664da91b2fe156864fd11131816b6b808b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Advertising.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising.crYpt
              • Size 2KB
              • SHA256 88084f84ec9c942f9a776d7f18db2b887083ab11c39cdd12d2302be74edc7305
              • MD5 SHA1 SHA512 TLSH

              Analytics.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics.crYpt
              • Size 648B
              • SHA256 8e25a66f8a406f4298497627bd68e411ca9ec900031eb5301ddb1da484236570
              • MD5 SHA1 SHA512 TLSH

              Content.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content.crYpt
              • Size 264B
              • SHA256 c7b77c4cfb11cb85aff35b02fcaa2fc3ca5e58483d5f0f00da9b16e692621741
              • MD5 SHA1 SHA512 TLSH

              Cryptomining.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining.crYpt
              • Size 248B
              • SHA256 86d56c682ad8179e6762d2f2a069f5e45aec63bac15ff80de019074633e74cf0
              • MD5 SHA1 SHA512 TLSH

              Entities.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Entities.crYpt
              • Size 42KB
              • SHA256 ed65678b9559b2dbf99dbeb6e893d85e4b47f19ed15a75c6f2be673ad7141fe0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Fingerprinting.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting.crYpt
              • Size 388B
              • SHA256 883471911e08bead296359eb0f277787fa5ee58319b6cf9c6878295eaab7e84e
              • MD5 SHA1 SHA512 TLSH

              LICENSE.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE.crYpt
              • Size 282B
              • SHA256 3c5e96dabfec191d581a172bcf3df772cbe7c9e44805e2301d26df19f5799974
              • MD5 SHA1 SHA512 TLSH

              Other.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other.crYpt
              • Size 307B
              • SHA256 30ef90ac6fe90484cc9ce53795b7f49325db518b5c8c7e06bf5991e4be07ed61
              • MD5 SHA1 SHA512 TLSH

              Social.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social.crYpt
              • Size 3KB
              • SHA256 5635e33b9a7411e77b1fc38707c970390e58024628166f487c8b10a4a469b90e
              • MD5 SHA1 SHA512 TLSH

              Staging.crYpt

              • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Staging.crYpt
              • Size 16KB
              • SHA256 fe50148753c5efc58840d3566e90794cdfe543cb185d8a5914b7ca69bef64d49
              • MD5 SHA1 SHA512 SSDEEP TLSH

              stable.identity_helper.exe.manifest.crYpt

              • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest.crYpt
              • Size 1KB
              • SHA256 bd1e8350ea857db299f7b7f3debe94fec4295c048eb1b09d1de5eb33334b50ab
              • MD5 SHA1 SHA512 TLSH

              readme_for_unlock.txt

              • Path C:\Program Files\7-Zip\Lang\readme_for_unlock.txt
              • Size 2KB
              • SHA256 2407f9f7af8d8b7da127ddaf61beb6057b0add8b3d45cfc1819a5441210f2cc9
              • MD5 SHA1 SHA512 TLSH

              A3R6C9.exe

              • Path C:\ProgramData\A3R6C9.exe
              • Size 256KB
              • SHA256 e55056bfbfcc329ca02ed2d9231ce7552f7f5e95d99f98c8452b4069217c6ceb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Host Process for Windows Services

              • Path C:\ProgramData\Host Process for Windows Services
              • Size 69KB
              • SHA256 1748a26b0fedb7a35218d087d17d99c15c74517cf80d1798375b621559a0f2e2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              Q9acAd3.vhd

              • Path C:\ProgramData\Q9acAd3.vhd
              • Size 16.0MB
              • SHA256 c902ce599db4134b17ac52a817c04b5a60cc587f983b3517b97c58634c13cc18
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kD1aE.tmp

              • Path C:\ProgramData\kD1aE.tmp
              • Size 34B
              • SHA256 0977e976a701e82d9d4f1f1b1eaf8a495e1bd92cc33a86a398d0bd536d86a73a
              • MD5 SHA1 SHA512

              kD1aE.tmp

              • Path C:\ProgramData\kD1aE.tmp
              • Size 132B
              • SHA256 82350eee2b0b078b4dd06fee1242d227cb9bc4a5a61d01ee42161d8c8e1efc80
              • MD5 SHA1 SHA512 TLSH

              sichost.exe

              • Path C:\ProgramData\sichost.exe
              • Size 43KB
              • SHA256 092d4fe86aec6c3a44499e7539e88e50a31b451250e53847d0ab23d116a7cd8e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              memory/2492-856-0x0000000000EF0000-0x0000000000F35000-memory.dmp

              memory/2492-862-0x0000000003DA0000-0x0000000003DA1000-memory.dmp

              memory/4088-13-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-0-0x0000000000ED0000-0x0000000000F15000-memory.dmp

              memory/4088-1-0x0000000002A60000-0x0000000002A61000-memory.dmp

              memory/4088-5-0x0000000002C30000-0x0000000002C31000-memory.dmp

              memory/4088-6-0x0000000002C40000-0x0000000002C41000-memory.dmp

              memory/4088-8-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-820-0x0000000002B30000-0x0000000002B31000-memory.dmp

              memory/4088-827-0x0000000003F20000-0x0000000003F21000-memory.dmp

              memory/4088-7-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-11-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-12-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-20-0x0000000002C30000-0x0000000002C31000-memory.dmp

              memory/4088-32-0x0000000002C50000-0x0000000002C51000-memory.dmp

              memory/4088-34-0x0000000002BD0000-0x0000000002BD1000-memory.dmp

              memory/4088-25-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-24-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-18-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-22-0x0000000002C00000-0x0000000002C01000-memory.dmp

              memory/4088-17-0x0000000002C50000-0x0000000002C51000-memory.dmp

              memory/5344-867-0x0000000000760000-0x000000000077F000-memory.dmp

              memory/6492-869-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-5326-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-836-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-16218-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-13361-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-8160-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-5324-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-16216-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-5323-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-2909-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-10066-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6492-14645-0x0000000000BC0000-0x0000000000BF7000-memory.dmp

              memory/6524-847-0x00000000001B0000-0x00000000001CF000-memory.dmp

              memory/6524-835-0x00000000001B0000-0x00000000001CF000-memory.dmp