Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    16/04/2026, 01:49

General

  • Target
    https://gofile.io/d/fX6Mlo
  • Sample260416-b8w3daht21
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in Program Files directory 8 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 58 IoCs
  • Suspicious use of SendNotifyMessage 44 IoCs
  • Suspicious use of SetWindowsHookEx 17 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/fX6Mlo
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4148
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffffcfdc188,0x7ffffcfdc194,0x7ffffcfdc1a0
      2⤵
        PID:2060
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1844,i,15527633337648751933,5246144719236018415,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3024
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,8987486728384955035,552517935485458545,262144 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
        2⤵
          PID:4452
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1932,i,13953669265926623889,13392613147411226604,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
          2⤵
            PID:5072
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,11900903158690624611,2030424359509341361,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
            2⤵
              PID:2780
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,11887911169036928573,6791453888319386964,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              2⤵
                PID:4292
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,15665048359623485449,17517241279097762837,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                2⤵
                  PID:3060
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,5706777647704919528,10365953181547435295,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
                  2⤵
                    PID:1528
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,17179365830983278274,15934003290727117797,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
                    2⤵
                      PID:1004
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,247704681359689350,5028715972847562129,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
                      2⤵
                        PID:1572
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5232,i,1655457775812828293,862028970197246197,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:1
                        2⤵
                          PID:1776
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,4201579917684683238,7097273097448931997,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
                          2⤵
                            PID:1516
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,16983136541980073865,6594648562939869458,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
                            2⤵
                              PID:4908
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,104642725970839468,4960916058059719563,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
                              2⤵
                                PID:1532
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,104642725970839468,4960916058059719563,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
                                2⤵
                                  PID:4536
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,11137129957911933132,2792544942691609143,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
                                  2⤵
                                    PID:4800
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,17026802347303886469,9949231108564052329,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6224 /prefetch:8
                                    2⤵
                                      PID:5060
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,13785632758609329427,11420696984746469943,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
                                      2⤵
                                        PID:2140
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,6388372690972692079,15446864478796911795,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
                                        2⤵
                                          PID:1188
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,10301280829886374781,14477664546244805573,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
                                          2⤵
                                            PID:1940
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6520,i,12887979628925909987,9362563040708919994,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
                                            2⤵
                                              PID:1432
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,11583067682516085993,3685363504704332607,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
                                              2⤵
                                                PID:3288
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5148,i,14067641417555630994,13419850485072097831,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:1
                                                2⤵
                                                  PID:2508
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6896,i,13729357283279110057,4917499616410554356,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:8
                                                  2⤵
                                                    PID:4128
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,7033879353309553154,12069586958704949421,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:8
                                                    2⤵
                                                      PID:5464
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,262944839946156091,2899664566982927981,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:8
                                                      2⤵
                                                        PID:6096
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,5710847390007975730,17917599064571675430,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
                                                        2⤵
                                                          PID:5500
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,8923564434851289496,14232751954282117764,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:8
                                                          2⤵
                                                            PID:5460
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3444,i,14835983090200766227,2958304585777537796,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=2176 /prefetch:1
                                                            2⤵
                                                              PID:4720
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6856,i,7076369577281536,9226389627569791504,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
                                                              2⤵
                                                                PID:5420
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=3508,i,15479123826791931343,16919424840790633675,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1
                                                                2⤵
                                                                  PID:5808
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=4264,i,17541566481587480159,4980122931558279434,2097152 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=1612 /prefetch:1
                                                                  2⤵
                                                                    PID:5336
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6376,i,7302190016698089770,15574634263675554716,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
                                                                    2⤵
                                                                      PID:6128
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,18415530321222386352,13807337503925086189,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:8
                                                                      2⤵
                                                                        PID:5340
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7472,i,15980340016381141744,9240902215422268814,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:8
                                                                        2⤵
                                                                          PID:5428
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,10060281242275787395,4512992945892900460,262144 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:8
                                                                          2⤵
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:4104
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,739174267468230459,3932459926245328234,524288 --field-trial-handle=2260,i,15089117867318889450,11951289499729736875,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
                                                                          2⤵
                                                                            PID:5168
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                          1⤵
                                                                            PID:1532
                                                                          • C:\Windows\System32\rundll32.exe
                                                                            C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                            1⤵
                                                                              PID:3724
                                                                            • C:\Program Files\7-Zip\7zG.exe
                                                                              "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\Phantom-Private\" -spe -an -ai#7zMap5388:88:7zEvent11767
                                                                              1⤵
                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                              • Suspicious use of FindShellTrayWindow
                                                                              PID:2244
                                                                            • C:\Windows\system32\OpenWith.exe
                                                                              C:\Windows\system32\OpenWith.exe -Embedding
                                                                              1⤵
                                                                              • Modifies registry class
                                                                              • Suspicious behavior: GetForegroundWindowSpam
                                                                              • Suspicious use of SetWindowsHookEx
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:4260
                                                                              • C:\Windows\system32\NOTEPAD.EXE
                                                                                "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\Phantom-Private\Phantom\Phantom.csproj
                                                                                2⤵
                                                                                  PID:3900

                                                                              Network

                                                                                    MITRE ATT&CK Enterprise v16

                                                                                    Replay Monitor

                                                                                    Loading Replay Monitor...

                                                                                    Downloads

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1113820140\manifest.json
                                                                                    • Size 160B
                                                                                    • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1549558830\manifest.json
                                                                                    • Size 160B
                                                                                    • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_1555981734\manifest.json
                                                                                    • Size 135B
                                                                                    • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4148_2102529845\manifest.json
                                                                                    • Size 43B
                                                                                    • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                    • MD5 SHA1 SHA512

                                                                                    blocklist

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                    • Size 105KB
                                                                                    • SHA256 f00ccd228daef1e7764629352f6409e7c411bd43dff6a14e6176681c9e065b7d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    protocols.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                    • Size 3KB
                                                                                    • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                    • Size 280B
                                                                                    • SHA256 e8b794ddae1c182cd5bdf3280502fc20e0d1bbb83fa98695dd9554e580b515db
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                    • Size 280B
                                                                                    • SHA256 2d812d63b94e52acac0ff3d23d196b3c185f5ddb1e01deeb75aec3c1bafd468e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    BookmarkMergedSurfaceOrdering

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                    • Size 6B
                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                    • MD5 SHA1 SHA512

                                                                                    f_00009e

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                    • Size 19KB
                                                                                    • SHA256 d619584cd37cc6245306dc685f6067bbcf13736d410d65a4797e610586f4f655
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000a2

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                                    • Size 55KB
                                                                                    • SHA256 9bc047ac8fe630eee479777069537697dffcd514aa7c51c6d0fb8ca5b50cf315
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000b0

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                                    • Size 27KB
                                                                                    • SHA256 f94b4df65e8e28381511300d8e27332003ee8ea5006f0f05ef6c97ab39d9fb41
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000c4

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                                    • Size 43KB
                                                                                    • SHA256 fc6298ee07dcde39518a8e3b1ca6f0094ab227498ec1b286cb54c618a8094b68
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000ce

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                                    • Size 16KB
                                                                                    • SHA256 515cc848b8921ed2519677df42e6f80f6782762a317ddbb1d034e39d3c354305
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 6KB
                                                                                    • SHA256 24233704bb304a2257808320817dae5513e5abdc1792b3867ef16e246f60e8e4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 4KB
                                                                                    • SHA256 0a0d686bd52776dedf18513b1ef6b169d4c6ca89e0aea2483b541f1771230f7c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index~RFe58817f.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58817f.TMP
                                                                                    • Size 3KB
                                                                                    • SHA256 a032800c3a367475f8787b12b94a0033395baf4127af7177bb01d37a578f31bc
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    SiteList-Enterprise.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                    • Size 2B
                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                    • MD5 SHA1 SHA512

                                                                                    Edge Profile.ico

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                    • Size 70KB
                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    HubApps

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                    • Size 106KB
                                                                                    • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 5KB
                                                                                    • SHA256 2b5e0fa605951c7ec6a102d36117b3568821ea72d5013d1e9fa5624c6bbea700
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 111B
                                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 3KB
                                                                                    • SHA256 27ffc6033d57ac90b6d8b3d352995c83a2678987732ce6a0e86c8f83ede984c0
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    SCT Auditing Pending Reports

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                    • Size 2B
                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                    • MD5 SHA1 SHA512

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 56989091ac3e14b97b1aeda94a6e376e662b6f426a24146926ab030b46847d6b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 17KB
                                                                                    • SHA256 e7df84f9fb6c61aa242c7d781ca46bb017bbd8d6a4b48bc9aa22409fcc116af6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 17KB
                                                                                    • SHA256 29b1ca621cf1460f6ae2d67f11400788192cd9e06aa47ab79c9003fc9cc79e08
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 13KB
                                                                                    • SHA256 310b31e937491951501607ec67ae6d15b9edccbb3ebba3c726b2cd2fb5a07c32
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Secure Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                    • Size 35KB
                                                                                    • SHA256 ab719cfe6c783fe2e490b2047460212aad11f04063fe9b6cebaea9842653da51
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4677cc91-ced1-413a-8605-093b28e5e05c\index-dir\the-real-index
                                                                                    • Size 2KB
                                                                                    • SHA256 56515ded2c7518ec4f8c14412ea7dedc5acd4849910c91abbaa553b1df5c1d9f
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4677cc91-ced1-413a-8605-093b28e5e05c\index-dir\the-real-index
                                                                                    • Size 2KB
                                                                                    • SHA256 a3c5e21d52f62821ecd9c4b565a16b0646e2960d6c76deb96fa9651719f9130c
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe59193b.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4677cc91-ced1-413a-8605-093b28e5e05c\index-dir\the-real-index~RFe59193b.TMP
                                                                                    • Size 2KB
                                                                                    • SHA256 af9763f98a7dc21ed9f88f28334feeb472e7c9235b799bf74d4db06da9399728
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\86ef5750-3d17-413c-b5bd-3e678b3c684b\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 44a8664cda7188a956ad188b5997d89f731f9086b200f879ca11dbfd145480d6
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\86ef5750-3d17-413c-b5bd-3e678b3c684b\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 9fd518c53fb8fe3bc9ac39af2172f8784cdea3dd8e16e095ed3e99fa0b5eef0f
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                    • Size 371B
                                                                                    • SHA256 24a8c9c499fd49a5581fc2e285ea9b303e487448f5cc993ff4056a4e81b86e76
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 806e6f9bf0d403876b06397ae4d79de2884291ce238268521753a382b953c102
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe596eed.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe596eed.TMP
                                                                                    • Size 48B
                                                                                    • SHA256 ea928d5e7b0a96dd552d58372020e6fd734853919a14a279c57196977ebb76e8
                                                                                    • MD5 SHA1 SHA512

                                                                                    sync_diagnostic.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                    • Size 6KB
                                                                                    • SHA256 6132d64cb2099f935289fd9d3674bbe7f60b058da98b29fac4f347ecfe1b4056
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    CURRENT

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                    • Size 16B
                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                    • MD5 SHA1 SHA512

                                                                                    MANIFEST-000001

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                    • Size 41B
                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                    • MD5 SHA1 SHA512

                                                                                    OperationConfig

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                    • Size 22KB
                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    OperationConfig~RFe5904f8.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5904f8.TMP
                                                                                    • Size 3KB
                                                                                    • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    office_endpoints_list.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                    • Size 3KB
                                                                                    • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 29KB
                                                                                    • SHA256 7bfddc29c4eca675a2e93499cb7b6847ea890434fb0798e044cd87e8c0c576bb
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 8KB
                                                                                    • SHA256 4fc454b7976e804155c55c2374322f6bcaf2960732d2d7da4420f7cd0b327028
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 8KB
                                                                                    • SHA256 f3d83d53747bd8d095c696ee4e3eddba18a0650322fda9cf36c13eba74c55628
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 18KB
                                                                                    • SHA256 f11362bc8639b12aafcd9cd7a1922220f61efcc8e49778d4a6e5569ac62ed1b1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 29KB
                                                                                    • SHA256 ba458dd6a4dbfa928c3056f24c99488c480a6f4aa706f55189114042b3080bec
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 18KB
                                                                                    • SHA256 25d9de248ff979599cf18529c7db264542bf96fcdf839cfd78e070ae89cb684e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 18KB
                                                                                    • SHA256 49c04caa8cdff39de9326bc9d43f77736c5d92bb8f9e3a85f8c6e442d17407ca
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    RevisitationBloomfilter

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                    • Size 392B
                                                                                    • SHA256 971ef281635e3b7cd9461e347f6cac0c9f5d4f08c66734b4b0d0c01f8b5694aa
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    RevisitationBloomfilter~RFe593be6.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe593be6.TMP
                                                                                    • Size 392B
                                                                                    • SHA256 02be49740c58157f066e9dc1301d010c25ae3199f900855c030d33810b58d103
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    nav_config.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                    • Size 2KB
                                                                                    • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 132B
                                                                                    • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 252B
                                                                                    • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 372B
                                                                                    • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 492B
                                                                                    • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    f1366b3f-6d8e-4d93-89bf-924eca690bdc.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f1366b3f-6d8e-4d93-89bf-924eca690bdc.tmp
                                                                                    • Size 13B
                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                    • MD5 SHA1 SHA512

                                                                                    5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                    • Size 2KB
                                                                                    • SHA256 23e11e2845d63d7edaa3bc969795f727127cb2d60a6b486a22e80b3f4b5c1285
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    8955dff7-4dad-4a70-8f86-7e4fccb74402.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\8955dff7-4dad-4a70-8f86-7e4fccb74402.tmp
                                                                                    • Size 1B
                                                                                    • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                    • MD5 SHA1 SHA512

                                                                                    9355fbd2-5ed1-4abc-af3e-f1085c56d9ba.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\9355fbd2-5ed1-4abc-af3e-f1085c56d9ba.tmp
                                                                                    • Size 10KB
                                                                                    • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    c6dda3f4-541d-445c-b8bc-93d3b0d07096.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\c6dda3f4-541d-445c-b8bc-93d3b0d07096.tmp
                                                                                    • Size 147KB
                                                                                    • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    content_new.js

                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4148_1767896294\CRX_INSTALL\content_new.js
                                                                                    • Size 10KB
                                                                                    • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Phantom.csproj

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\Phantom\Phantom.csproj
                                                                                    • Size 12KB
                                                                                    • SHA256 4c2eef505a5de92f1aa2552202bafda07711613eceb405a0db703c31152bb5ac
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Costura.Fody.xcf

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\Costura.Fody.5.7.0\netclassicweaver\Costura.Fody.xcf
                                                                                    • Size 6KB
                                                                                    • SHA256 8dc4d029096621feb54d78458803c0d2d1c6df115d0ba4de3369e1a8dc19ffba
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    FodyHelpers.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\Fody.6.6.2\netclassictask\FodyHelpers.dll
                                                                                    • Size 50KB
                                                                                    • SHA256 0e322c474f6b707212dd87fcccc0afaec442bfabf243bfab92df52b0aff2a372
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Microsoft.Win32.Primitives.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\Microsoft.Win32.Primitives.4.3.0\ref\net46\Microsoft.Win32.Primitives.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 e281d04d35118b7f3a2406014333e0581b74ea4b62f4f2388ad3ad8b32223c83
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    ThirdPartyNotices.txt

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\NETStandard.Library.1.6.1\ThirdPartyNotices.txt
                                                                                    • Size 1KB
                                                                                    • SHA256 0684b2349427ee28e392ae8914645832e59731dba8a38a984f72b3fb8769c76b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    dotnet_library_license.txt

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\NETStandard.Library.1.6.1\dotnet_library_license.txt
                                                                                    • Size 9KB
                                                                                    • SHA256 f1db688d8481c91a452fabcea5060a23da9ea5088329b58c478a040e2e426297
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Newtonsoft.Json.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\Newtonsoft.Json.13.0.1\lib\net40\Newtonsoft.Json.xml
                                                                                    • Size 550KB
                                                                                    • SHA256 e07b03ace898d12864e033ae88d1e65c3db4b6caece769cd67d6c354ce75f125
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.AppContext.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.AppContext.4.3.0\ref\net463\System.AppContext.dll
                                                                                    • Size 21KB
                                                                                    • SHA256 54508702f2af059594d21f24a513e3be570eafc0b3a7eeb20e0fe243c284349a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\System.Collections.xml
                                                                                    • Size 290KB
                                                                                    • SHA256 a7a3e22bd3b01c9702919f58881a07be9e895f921c05099915d519182f2d92a1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\de\System.Collections.xml
                                                                                    • Size 304KB
                                                                                    • SHA256 6f28b3d7a32aa5f2c027e2a85b96d3f51a2a7a361837b4710bda5e21aee4cf6b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\es\System.Collections.xml
                                                                                    • Size 301KB
                                                                                    • SHA256 c0daf5783ebe07fa5cbb8d19aefda403e540bb56ffd04e9a6d0bd8d0c219a792
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\fr\System.Collections.xml
                                                                                    • Size 299KB
                                                                                    • SHA256 22270f6544e4e26741f8293398f4ea19fbd7f78ab916ce062d7c00e56383c8f6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\it\System.Collections.xml
                                                                                    • Size 304KB
                                                                                    • SHA256 1e10f259aca48fa9457696bea1a6a6180827dc809e7059e916a479a1c04607a3
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\ja\System.Collections.xml
                                                                                    • Size 322KB
                                                                                    • SHA256 24152ad449af6ff2a89e3c0d74af3f999646700dc5a3fd2a50aeaa170c8d2a59
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\ko\System.Collections.xml
                                                                                    • Size 307KB
                                                                                    • SHA256 0add30340c81751aa971a6de6f93505cf10ab0b553ef4e3ddac73052c3164a10
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\ru\System.Collections.xml
                                                                                    • Size 388KB
                                                                                    • SHA256 a5d544efe75cf82e66fc05e9795d242dcc66f63fe14d66f00ca8041693426b9a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\zh-hans\System.Collections.xml
                                                                                    • Size 276KB
                                                                                    • SHA256 352af63342e5ec1ef484e8f113907c73eea33fcd1b5f7c38c0899b025b2128d1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.4.3.0\ref\netstandard1.3\zh-hant\System.Collections.xml
                                                                                    • Size 277KB
                                                                                    • SHA256 8d6adc6b72eb2e455762fedea7ad5674665a3cee04c253af48d225297e6298a7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\System.Collections.Concurrent.xml
                                                                                    • Size 127KB
                                                                                    • SHA256 6e0284817cbe7fb1a95579deed14c1f33f14e24b686593ad64b0110179d4fe0c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\de\System.Collections.Concurrent.xml
                                                                                    • Size 135KB
                                                                                    • SHA256 c5b74064c914290d3c01294b8e29f28fb008595a48720111fb0b53d381be759a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\es\System.Collections.Concurrent.xml
                                                                                    • Size 132KB
                                                                                    • SHA256 bcbf0e0542f1bdcc70dc003e0e1c5a48c66ad2fd91c9484a4170fbd37c494614
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\fr\System.Collections.Concurrent.xml
                                                                                    • Size 132KB
                                                                                    • SHA256 c91cf8d042ac061d662c3b27a55756f106973f27057e0bee6ed35f15d67c0fc9
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\it\System.Collections.Concurrent.xml
                                                                                    • Size 132KB
                                                                                    • SHA256 f0d00039823d8e59726d705c2febcfba1918412ab2dac140e6464b8d28aaba24
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\ja\System.Collections.Concurrent.xml
                                                                                    • Size 143KB
                                                                                    • SHA256 3f01d5540c57fea9ed5587a6d3f6b526e447190c5a8e7384c2f237ddc8aa7423
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\ko\System.Collections.Concurrent.xml
                                                                                    • Size 136KB
                                                                                    • SHA256 8c6d3e3d5610c414d0f918f5f16f833cbbaa1f68197d56a46fcce0949f17146e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\ru\System.Collections.Concurrent.xml
                                                                                    • Size 170KB
                                                                                    • SHA256 948da7ff9aa5e73ead860f3edd7bc8f5c638fc618f70025d5f10cccb54ef4d2e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\zh-hans\System.Collections.Concurrent.xml
                                                                                    • Size 121KB
                                                                                    • SHA256 3db76ca0e7828f666b304a5b03142737afce145eed1e1916ff8ffc212b1765aa
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Collections.Concurrent.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Collections.Concurrent.4.3.0\ref\netstandard1.3\zh-hant\System.Collections.Concurrent.xml
                                                                                    • Size 122KB
                                                                                    • SHA256 a9faab19252be1346e1f5f335472a5fa58a22f0cf24e0f849db57acf31d15cb0
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\System.Diagnostics.Debug.xml
                                                                                    • Size 30KB
                                                                                    • SHA256 b8da460ba03eb246a72bd289c7cf6680c928ff818e2c87eb2b64c3e054ecca5b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\de\System.Diagnostics.Debug.xml
                                                                                    • Size 32KB
                                                                                    • SHA256 58be664248a829fbbf5cbbcb5bccd5b813b9b2c48649561c2db04af89f2437fa
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\es\System.Diagnostics.Debug.xml
                                                                                    • Size 32KB
                                                                                    • SHA256 c9fb4a472d7e18bf9e6137e83501bed7b8be595f0fc8fd157d8d92d0ff6d9134
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\fr\System.Diagnostics.Debug.xml
                                                                                    • Size 31KB
                                                                                    • SHA256 96db2d608b096fa27b9a4e83b53b17b0e02aa7732cda0695a438dcc2942c82d9
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\it\System.Diagnostics.Debug.xml
                                                                                    • Size 31KB
                                                                                    • SHA256 cef9c5c8eb837153374f4b9f3a4d6ca839d660585d6c14f285666a0065230a8e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\ja\System.Diagnostics.Debug.xml
                                                                                    • Size 33KB
                                                                                    • SHA256 0b52c590ddef58504500d1ac2f8c7705e8fcca4e9b9b14e7e75ae9b2a632c9b4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\ko\System.Diagnostics.Debug.xml
                                                                                    • Size 31KB
                                                                                    • SHA256 1dd5e8d9ceb5a3bd3203e3ad7cada16c577627787b6555c3877c0b24259d81b7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\ru\System.Diagnostics.Debug.xml
                                                                                    • Size 38KB
                                                                                    • SHA256 702c423aacec5b039433984ee74b5682f8e6593a8cde946dcc36b7b5037e6b31
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\zh-hans\System.Diagnostics.Debug.xml
                                                                                    • Size 29KB
                                                                                    • SHA256 36349128bebb8662dd547e2939f6fce5350757661063bdffd4fef8791e3a66b1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Debug.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Debug.4.3.0\ref\netstandard1.3\zh-hant\System.Diagnostics.Debug.xml
                                                                                    • Size 29KB
                                                                                    • SHA256 18aa7b9e341c0759329ad8879d2075634b77a47189c900b2d58b7ced9f78318d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.DiagnosticSource.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.DiagnosticSource.4.3.0\lib\netstandard1.3\System.Diagnostics.DiagnosticSource.xml
                                                                                    • Size 28KB
                                                                                    • SHA256 1784132ae3698467a0985b2507d63bdcf19a7970afe3a39d86e36c018c98b29d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.DiagnosticSource.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.DiagnosticSource.4.3.0\lib\portable-net45+win8+wpa81\System.Diagnostics.DiagnosticSource.dll
                                                                                    • Size 33KB
                                                                                    • SHA256 a83a46fe737c51694b9dad4e0ccd004a3c0b3e6e3bd5d595ea1f1d4b14bab417
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\net462\System.Diagnostics.Tracing.dll
                                                                                    • Size 36KB
                                                                                    • SHA256 3a7f44e3b20a03cef6fe8b164a5c193d50bd30ee0aab26a7857d6b1944da64fd
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\System.Diagnostics.Tracing.xml
                                                                                    • Size 60KB
                                                                                    • SHA256 7b578e46d847a69090a7fba007c48710766bb1bc2ab04249032069ed312fd6e4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\de\System.Diagnostics.Tracing.xml
                                                                                    • Size 65KB
                                                                                    • SHA256 ed113b8b59b39dbb382cb6e93b85556ffab02c7354d4088e359969d6f20fdd6a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\es\System.Diagnostics.Tracing.xml
                                                                                    • Size 64KB
                                                                                    • SHA256 9359c78c14614fb18151cb184f95b3804ddee43855c9e80cff91acac3cf0caca
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\fr\System.Diagnostics.Tracing.xml
                                                                                    • Size 65KB
                                                                                    • SHA256 b8ffcdc8bda1276acb2c8be3cf7176cc276accfa2eaa5376935dd2945e4694e4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\it\System.Diagnostics.Tracing.xml
                                                                                    • Size 63KB
                                                                                    • SHA256 9755d5931a3185771a62e3fa0461ad15df1f8ee24fc76f8d7362edf33b4db54c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\ja\System.Diagnostics.Tracing.xml
                                                                                    • Size 69KB
                                                                                    • SHA256 e0ebf527fd801d01d71b97f6eba1871b25c47f66e5bb5eebbe86dcdf44eb9816
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\ko\System.Diagnostics.Tracing.xml
                                                                                    • Size 65KB
                                                                                    • SHA256 2a2679b4d6fb42c29f1fb09509a78057051198d03091a41a3e0e020304544ddd
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\ru\System.Diagnostics.Tracing.xml
                                                                                    • Size 83KB
                                                                                    • SHA256 856f1632377338fa4e821c7e7ddafe83d2ec3084d61a8092522d3c73716a1cad
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\zh-hans\System.Diagnostics.Tracing.xml
                                                                                    • Size 56KB
                                                                                    • SHA256 a1078073eb82e620b0f13a4f0ae3548381e81ddd50f6f1f0c8ecfef79f6556e7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Diagnostics.Tracing.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Diagnostics.Tracing.4.3.0\ref\netstandard1.2\zh-hant\System.Diagnostics.Tracing.xml
                                                                                    • Size 57KB
                                                                                    • SHA256 8a39ac9acd89b650c227f230771eb07a6bd9e66885f969b5ca5c8ce025321527
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\System.Globalization.xml
                                                                                    • Size 179KB
                                                                                    • SHA256 e8f2d2e1c77a852325122f479ed000813d7a56cd14197574bf362baea9bd947c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\de\System.Globalization.xml
                                                                                    • Size 194KB
                                                                                    • SHA256 a30626d7ff25dc1458ca72183d39deac82860223df17779d7cb102a77856dd72
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\es\System.Globalization.xml
                                                                                    • Size 189KB
                                                                                    • SHA256 f7bbbd4e66dd3930316e937c93f11caf104fec096c17efc023fb60e8b9f21e5f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\fr\System.Globalization.xml
                                                                                    • Size 188KB
                                                                                    • SHA256 2d9bbdd8a0a3e65346bf9532be23c39b3aeb25674a296450a8061a05872b48f6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\it\System.Globalization.xml
                                                                                    • Size 188KB
                                                                                    • SHA256 13fa53fe9da3b59a4378d58ac75c137e66c8f33e65daa736ab7ef1893d78b96c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\ja\System.Globalization.xml
                                                                                    • Size 195KB
                                                                                    • SHA256 7f14e28ba9329e5c1dd82bbd431fb780346065cbbad270af9d7bf2bbfa57278d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\ko\System.Globalization.xml
                                                                                    • Size 188KB
                                                                                    • SHA256 17be09b8ace4e5ec1665a5c137655764b5296f6fec1cf70ae31cc1dd2150dbdb
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\ru\System.Globalization.xml
                                                                                    • Size 250KB
                                                                                    • SHA256 9d255f34020572fc0bd2b9f67b1395f93f11c9ae11328a9407b89e3f0868ff3d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\zh-hans\System.Globalization.xml
                                                                                    • Size 168KB
                                                                                    • SHA256 fb86466914ade9d77fd2d44f49e041932801db324d4117c635c449fde13c6c23
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.4.3.0\ref\netstandard1.3\zh-hant\System.Globalization.xml
                                                                                    • Size 168KB
                                                                                    • SHA256 d709c8407e412ae7f3bca4b51ae38bbc3f5ec99b59feed7735f33dd2fde18825
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Globalization.Calendars.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Globalization.Calendars.4.3.0\ref\net46\System.Globalization.Calendars.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 8e5a549c6c0339a5f88217e6b5b75b745a3c20fe97081b48062b684c4fa5d441
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\net462\System.IO.dll
                                                                                    • Size 21KB
                                                                                    • SHA256 965bb6510f6871c984a940b68ed24c6145e326e22e6fa66104d0a3bfccf9feea
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\System.IO.xml
                                                                                    • Size 184KB
                                                                                    • SHA256 e8acf733be7c9ae5a897eb8c63ab053f2434d9b02b69e2d1e8f2c3586a81b803
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\de\System.IO.xml
                                                                                    • Size 196KB
                                                                                    • SHA256 511c17d409707894f752f8400863683f607d8a5611a7bc258d27f0556bd06958
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\es\System.IO.xml
                                                                                    • Size 195KB
                                                                                    • SHA256 7cb9bd7be473f2329722660d816c0efe15753544e16252a567c42995310e9314
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\fr\System.IO.xml
                                                                                    • Size 196KB
                                                                                    • SHA256 3cdc745efe3893f1667f4dcca97607d06eb36dd406460443f2df401857ce7982
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\it\System.IO.xml
                                                                                    • Size 193KB
                                                                                    • SHA256 879720e8af0cc7c728805a5d6fc46fc868958e5bcef8f7d2090befb59f2f316c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\ja\System.IO.xml
                                                                                    • Size 213KB
                                                                                    • SHA256 09e3aaece661fa2bba7df0dd54ae0558491e9ea0248c15c66a387ae119d36b85
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\ko\System.IO.xml
                                                                                    • Size 198KB
                                                                                    • SHA256 0235b4d0c64cf5f2e93a9392e4d507cdfec44512f0f0266d1646c50af031d4ed
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\ru\System.IO.xml
                                                                                    • Size 256KB
                                                                                    • SHA256 16b9223527a69e5c69822b14ab9be2da71a3c4e9313be4078a558212779ab608
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\zh-hans\System.IO.xml
                                                                                    • Size 171KB
                                                                                    • SHA256 1d0731e846faf7185e87e8c6e15c901d691f2257d54516d1a89c96d812908613
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.4.3.0\ref\netstandard1.3\zh-hant\System.IO.xml
                                                                                    • Size 177KB
                                                                                    • SHA256 698f68f22678112b54bfe0520a2d854298395e48a7e4cd51c84b1f83e262487a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\net46\System.IO.Compression.dll
                                                                                    • Size 109KB
                                                                                    • SHA256 b963eb95627b5f223e813fce8a53e6c9d72891714923de7263111473faebf3ef
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netcore50\it\System.IO.Compression.xml
                                                                                    • Size 40KB
                                                                                    • SHA256 a8d32760e36365cfa92faf4598a283b60122c86c489676919b1bff7cd89608e7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netcore50\ko\System.IO.Compression.xml
                                                                                    • Size 42KB
                                                                                    • SHA256 d4687a9adcaafd73d85308f2010ceb980e62d3728f10befe52944e70c53dc3bf
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netcore50\zh-hans\System.IO.Compression.xml
                                                                                    • Size 36KB
                                                                                    • SHA256 9ce9137f13aee148a8e528fe201a97600c7e7d2a002397468af58192a4e1f393
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.1\es\System.IO.Compression.xml
                                                                                    • Size 40KB
                                                                                    • SHA256 5e4591e785bfb7154bbc9270f90bd65c167abee716086491e8ce993b0f2aea0d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.3\System.IO.Compression.xml
                                                                                    • Size 39KB
                                                                                    • SHA256 3228f6d2d83d14545a49d46691d49e1c81c9411d017bdb3f26eb6b0236e8b2f6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.3\de\System.IO.Compression.xml
                                                                                    • Size 41KB
                                                                                    • SHA256 462e16e105af3c76db1a3202b036ef038a0a1a208d466dadf63f195ef5bc816d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.3\fr\System.IO.Compression.xml
                                                                                    • Size 41KB
                                                                                    • SHA256 fc3bb0db40e72f4416c5ae9790af8e2c051eb18a6d4796ede80abcedd1b0f143
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.3\ja\System.IO.Compression.xml
                                                                                    • Size 44KB
                                                                                    • SHA256 8aa7ad5cf8671d26afa27ff13c3f970f75a9c2ebbb601775dbce71a4741b11c6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.3\ru\System.IO.Compression.xml
                                                                                    • Size 49KB
                                                                                    • SHA256 6c20e43abd28ce326dd12721fe42178d2c4f7e54bed9620754284fb996eda330
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.4.3.0\ref\netstandard1.3\zh-hant\System.IO.Compression.xml
                                                                                    • Size 37KB
                                                                                    • SHA256 a45a9f8d2145ed936f1623131e9484cd8bfc1ac7d63b740feecc277356c06bde
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.Compression.ZipFile.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.Compression.ZipFile.4.3.0\lib\net46\System.IO.Compression.ZipFile.dll
                                                                                    • Size 24KB
                                                                                    • SHA256 b5c12e9099643e2eda9b49edd0d98bdaed153c72a7e8e6235d8e78714402d16a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.FileSystem.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.FileSystem.4.3.0\ref\net46\System.IO.FileSystem.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 2d917d520488b56673e74ac9dc610a2488ae70a7ebbbbff097c2e855ba1ef590
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.IO.FileSystem.Primitives.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.IO.FileSystem.Primitives.4.3.0\ref\net46\System.IO.FileSystem.Primitives.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 02a6f9601aa48557fc5c3bfed80e31762a0785b9f78ec568c9f2f0722eeb9c0b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\net463\System.Linq.dll
                                                                                    • Size 23KB
                                                                                    • SHA256 4372c6bb9fe879f6377a0d60b52909041089aa963c1bc2903262ef56bcb4cf76
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\System.Linq.xml
                                                                                    • Size 166KB
                                                                                    • SHA256 a2612416949ecec128115255b4240484371857aba2c3c745ce0a717cd1ab49d6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\de\System.Linq.xml
                                                                                    • Size 178KB
                                                                                    • SHA256 6a55fca7ca7b0c1ee4599af3dabefca2b50b1739c8629a36b1711bf495583135
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\es\System.Linq.xml
                                                                                    • Size 175KB
                                                                                    • SHA256 364fce9a1f404e39c1c80ee59e6acbfb2ea867dbae0f02a0da0b98acf0f9d1b0
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\fr\System.Linq.xml
                                                                                    • Size 175KB
                                                                                    • SHA256 6883712d7eccd3c2dd7619d16f8b9d6cc1e17b45bcb2f1bc93d60a0a4b8eadb8
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\it\System.Linq.xml
                                                                                    • Size 172KB
                                                                                    • SHA256 f1059728fe52ceba93d137e6c646dab3a7510c50da31740eaf603b420ca7ccf1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\ja\System.Linq.xml
                                                                                    • Size 178KB
                                                                                    • SHA256 ceb0eecbd8b95e170c3844b3c28fa51c5ef5e8c7af65f02b8305d448030b8c83
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\ko\System.Linq.xml
                                                                                    • Size 173KB
                                                                                    • SHA256 35eec1a0c302818ab124e9e0f6d7774aedeff0d3d05f20db4e24c4c309177f30
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\ru\System.Linq.xml
                                                                                    • Size 240KB
                                                                                    • SHA256 2ca6a42a8efbf8148e6716eecd5573b7d3079b97d53cd99aeebdbed43291acfc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\zh-hans\System.Linq.xml
                                                                                    • Size 159KB
                                                                                    • SHA256 e28e701915a565465734d4d9431367ff5ac3232d2fd418186caa2b3b9260a0d7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.4.3.0\ref\netstandard1.6\zh-hant\System.Linq.xml
                                                                                    • Size 160KB
                                                                                    • SHA256 50cdd7cacd4cee3d89ed348715ee5a02b37af4b7babc99f448c985cb5451594a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\net463\System.Linq.Expressions.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 8787bf413189639d069854f156ccc3208405312832d253b4ca856ac5c8ed99e1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\System.Linq.Expressions.xml
                                                                                    • Size 504KB
                                                                                    • SHA256 5f0b3894e3e84ad91fea1421fb6ec0edc7fdce380178d2d8c3d527bd84dc879f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\de\System.Linq.Expressions.xml
                                                                                    • Size 537KB
                                                                                    • SHA256 ecfd0a3c5fd5008e00f33ee1e04f1bf71fb5a80909dd7bf18cc49af9af794d29
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\es\System.Linq.Expressions.xml
                                                                                    • Size 527KB
                                                                                    • SHA256 0cb3bf168c9f8faa630072e53aa17c702d28566054e22def87f4c3e08d0670c3
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\fr\System.Linq.Expressions.xml
                                                                                    • Size 529KB
                                                                                    • SHA256 9a9b0c75cf6aaf4d5abcc15e50d097b1166aa0509378c5b5b147bb533382f5cb
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\it\System.Linq.Expressions.xml
                                                                                    • Size 525KB
                                                                                    • SHA256 25c3ec7f123f3d6133a73e7ecc93fc2a97ccf8bc5a95a6e476316db9ded9e45e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\ja\System.Linq.Expressions.xml
                                                                                    • Size 545KB
                                                                                    • SHA256 1994c660be94bc299a92f02cdc5ea7f8523058f6296563f91b8d21f1ea6bb96e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\ko\System.Linq.Expressions.xml
                                                                                    • Size 522KB
                                                                                    • SHA256 9fb2569ee10135791235b81725c0c5b31429645d40f83261f3c570ab485c1f47
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\ru\System.Linq.Expressions.xml
                                                                                    • Size 656KB
                                                                                    • SHA256 e648c6111eb579e4ae24e5e0a7c665416f9fc6d8c49547d0e8f7420884f6a8a4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\zh-hans\System.Linq.Expressions.xml
                                                                                    • Size 490KB
                                                                                    • SHA256 8d7e45e8236d685b8080243a3f6b90094a4ff15c5442b472049339fae71dbf4f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Linq.Expressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Linq.Expressions.4.3.0\ref\netstandard1.3\zh-hant\System.Linq.Expressions.xml
                                                                                    • Size 490KB
                                                                                    • SHA256 72baccdf68c686432c33a51004d36d3d912c725e8de5d124d1313b17923a9be7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\System.Net.Http.xml
                                                                                    • Size 201KB
                                                                                    • SHA256 dd18068cab95ac00ffe010775714455bd3b931aa7043172c9cd3edddc25a63f3
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\de\System.Net.Http.xml
                                                                                    • Size 214KB
                                                                                    • SHA256 2dfeceff8943a5401273b2ee691e28757e58e94701e1977fc72037d4bdfdbdc5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\es\System.Net.Http.xml
                                                                                    • Size 210KB
                                                                                    • SHA256 4b14898c77c9bdd51f82685edd17ab809a90ceddac1b6f872cabb8f5abc23cf7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\fr\System.Net.Http.xml
                                                                                    • Size 209KB
                                                                                    • SHA256 34e5dbc7a5329f0ade1075a72ebb0b8caf13a04f4ea4fbc8b6263cd111871c21
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\it\System.Net.Http.xml
                                                                                    • Size 211KB
                                                                                    • SHA256 f5ddab4b3ac2caf5d3ab4831cbaf972867d32892c31062c57e7dd4496b83ecdd
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\ja\System.Net.Http.xml
                                                                                    • Size 229KB
                                                                                    • SHA256 4d157db9f237dbdd172accc37f9f5a81f699adaea23e71cbb3aa414521b0342f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\ko\System.Net.Http.xml
                                                                                    • Size 221KB
                                                                                    • SHA256 ab485c1709e5cd4061f75bc867c5612587080274e18af9142d223d02a65105b1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\ru\System.Net.Http.xml
                                                                                    • Size 268KB
                                                                                    • SHA256 182e7d267216eeb73458a6c8bbcdc65411318533a014c60307a7b8b404bba7ce
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\zh-hans\System.Net.Http.xml
                                                                                    • Size 190KB
                                                                                    • SHA256 da0172f8457625a4b75a5fdd4ad7abcd948a25a635d5d750841333e91bcb01d4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.1\zh-hant\System.Net.Http.xml
                                                                                    • Size 192KB
                                                                                    • SHA256 f855ea33aa5b5d6111f22290b5d52f050446ff5238ddfcd101c670b37c377c5f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Http.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Http.4.3.0\ref\netstandard1.3\System.Net.Http.dll
                                                                                    • Size 43KB
                                                                                    • SHA256 122ba6729df3fc3a7c1c8d9830e0976e671608adb142d12b2afe06d158d95ff6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\System.Net.Primitives.xml
                                                                                    • Size 113KB
                                                                                    • SHA256 a175fcadf6910909c610938e088813ef93179ee5e9717003d12498b53b715ce1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\de\System.Net.Primitives.xml
                                                                                    • Size 121KB
                                                                                    • SHA256 2c9e3f158ea01c6a4a320d8e4f813bc85b0babd09224373b22a9ed2ec8cb0b15
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\es\System.Net.Primitives.xml
                                                                                    • Size 119KB
                                                                                    • SHA256 0309ef90a26b8b6afae011443ab4478ac52c44ef52fdc86f04a7f2cac9e98d5a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\fr\System.Net.Primitives.xml
                                                                                    • Size 120KB
                                                                                    • SHA256 ef0af0c17abbcedb80a691bf8d9e9f9379a9d0a28294f5093c57dc665d53c110
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\it\System.Net.Primitives.xml
                                                                                    • Size 118KB
                                                                                    • SHA256 739d071db299f49427e23a77f424766601c9e9a75b4e346c2598a64e71bfe605
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\ja\System.Net.Primitives.xml
                                                                                    • Size 131KB
                                                                                    • SHA256 182ae2e7fcb2068a0b5954d2ea9f34047063e843b4fd8cc1615069bd3cc661f6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\ko\System.Net.Primitives.xml
                                                                                    • Size 122KB
                                                                                    • SHA256 984d107d5ece7bc877ddc424aa35c8f641db3633b83a5fdf1cd40d4d66e5848e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\ru\System.Net.Primitives.xml
                                                                                    • Size 152KB
                                                                                    • SHA256 ebaf0b908839489da80c16659a239966a3d37f3f3bf6a1ccc86daee7683691e6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\zh-hans\System.Net.Primitives.xml
                                                                                    • Size 106KB
                                                                                    • SHA256 f1438cf62a587d54125aacb375e41b0ec3010a4256a7c56927cca19f78d0e561
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Primitives.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Primitives.4.3.0\ref\netstandard1.1\zh-hant\System.Net.Primitives.xml
                                                                                    • Size 108KB
                                                                                    • SHA256 506f6f0116b4a2e52cf172985657e717896173ea80baec2fc97b39d182a7d4c6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Net.Sockets.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Net.Sockets.4.3.0\ref\net46\System.Net.Sockets.dll
                                                                                    • Size 45KB
                                                                                    • SHA256 eefa668da7a0d5880f794ad9a9205637997e88ea1fc084e402702eb62d1da120
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\System.ObjectModel.xml
                                                                                    • Size 65KB
                                                                                    • SHA256 0ec61333a70a589cdc400cd496a6b5390f1dbaf125360da2e3e8dd49ea2c2e7a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\de\System.ObjectModel.xml
                                                                                    • Size 69KB
                                                                                    • SHA256 540f76285912420f9ff3c10c877eac05d72d646331cf6a6801c0b1b84cdc812c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\es\System.ObjectModel.xml
                                                                                    • Size 68KB
                                                                                    • SHA256 20f1d07fcbd6a1e7fbf61aa5eda1a6308baf61fbfcebede42a301828767f59ae
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\fr\System.ObjectModel.xml
                                                                                    • Size 68KB
                                                                                    • SHA256 5d907b73a338b48b921e99279130a256cd0977420433cde513feff5ae498dbfe
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\it\System.ObjectModel.xml
                                                                                    • Size 68KB
                                                                                    • SHA256 def9638e7625e37f7602c483ce227e930c158950b9fbc1d9ba483354d0364fa6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\ja\System.ObjectModel.xml
                                                                                    • Size 73KB
                                                                                    • SHA256 bf7fd5b0486cf70e853a7c42c80e9aa2fcb26b12d5942f566cda8747b01b4303
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\ko\System.ObjectModel.xml
                                                                                    • Size 69KB
                                                                                    • SHA256 7ae34d63fd9168d3912a75e1ad59fb9a19dbc5ff5b067ca3161ad3e65f9e51f5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\ru\System.ObjectModel.xml
                                                                                    • Size 85KB
                                                                                    • SHA256 62985dfd44924935bc1add001a1c872609d444e3a03600398383e0a736021bbf
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\zh-hans\System.ObjectModel.xml
                                                                                    • Size 62KB
                                                                                    • SHA256 b13c19eb8f7b889c9eecb38a14451739bca6d7db37f8ed03077cff8b8684b24a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ObjectModel.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ObjectModel.4.3.0\ref\netstandard1.3\zh-hant\System.ObjectModel.xml
                                                                                    • Size 62KB
                                                                                    • SHA256 2908fea913bcb74f5df3e08bc0fcb9d08188ee86f5bee6e9630f09dd2de4fbb5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\net462\System.Reflection.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 f6dee242301db210f911807e6725c3fd4b2a71a981c1d6bd4a420e9740ecdbea
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\System.Reflection.xml
                                                                                    • Size 98KB
                                                                                    • SHA256 910dcac9da51fe26677c62d4a3f2baa2c67e42b0b5a14c718eb5eae39c39fb86
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\de\System.Reflection.xml
                                                                                    • Size 106KB
                                                                                    • SHA256 2c8729ffec6a753cc08e285a819360879cdc16c4432aa0068b8c40d42c358e81
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\es\System.Reflection.xml
                                                                                    • Size 103KB
                                                                                    • SHA256 95cc963af8c1f5d1cabffa8eb694b00ba52c0ca1a9f3650371fd6b9e89230d1e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\fr\System.Reflection.xml
                                                                                    • Size 102KB
                                                                                    • SHA256 d121eba84ed6f01fedaf9c96ddb480528c6d99fbc633d37bf83d4b6663fd9abe
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\it\System.Reflection.xml
                                                                                    • Size 102KB
                                                                                    • SHA256 e18d256f93c610cc82f472c395228e80d87e95385d84fe8523a5d27c8707adff
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\ja\System.Reflection.xml
                                                                                    • Size 117KB
                                                                                    • SHA256 e816484b5454ddd20fe523209d79076aeb9f9c1ce18c464822a17fdfe4d69efc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\ko\System.Reflection.xml
                                                                                    • Size 107KB
                                                                                    • SHA256 678a634d8f5dc55bc6b77b0a8e3241d08fce01ad22ea175105453df84e99a2a8
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\ru\System.Reflection.xml
                                                                                    • Size 140KB
                                                                                    • SHA256 3e2d2463f926309ebcaa2c4757b88ff894c59fed296bffc7ccca89761edc9644
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\zh-hans\System.Reflection.xml
                                                                                    • Size 91KB
                                                                                    • SHA256 1ec2bf45228b8def1d9c956bd204564640df8a923b86b5bb0c432ae39705742a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Reflection.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Reflection.4.3.0\ref\netstandard1.3\zh-hant\System.Reflection.xml
                                                                                    • Size 93KB
                                                                                    • SHA256 8c02c4c3596f7121f21a5ab1330c228a57d20837b7bd189e0b1d8b1ede5cf59f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\System.Runtime.xml
                                                                                    • Size 1.4MB
                                                                                    • SHA256 3ec029ac16594883af331eded34eb8621a36a58e419deb08f9311353356f009b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\de\System.Runtime.xml
                                                                                    • Size 1.5MB
                                                                                    • SHA256 0c89ecd20d32f44b3fe5004248138d8405a9d6a732aed95d132e039a25fb90e7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\es\System.Runtime.xml
                                                                                    • Size 1.5MB
                                                                                    • SHA256 27e644696b0824912daf4d0a7c4a922813081b19749277cfd3a1ae9044458c28
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\fr\System.Runtime.xml
                                                                                    • Size 1.5MB
                                                                                    • SHA256 3224e0a2a1251f8a09ac9eaf3754d9b8570af569c2e47d9fc119104b534dd81a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\it\System.Runtime.xml
                                                                                    • Size 1.5MB
                                                                                    • SHA256 225ca47c2669570b56f08b5088921467717e3911b5cfb1ed82acd8ef685d425b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\ja\System.Runtime.xml
                                                                                    • Size 1.6MB
                                                                                    • SHA256 5744024221fba38e841e3e96b6d4931d42856ce7b3cd6373628546f96d3653d8
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\ko\System.Runtime.xml
                                                                                    • Size 1.5MB
                                                                                    • SHA256 06ec22dbafcb5935eda03702ab1b14b71333afabca662326c6dcf7a2dd244b67
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\ru\System.Runtime.xml
                                                                                    • Size 2.0MB
                                                                                    • SHA256 d7fa06ca7f0fe1d8292e53f1b4dbab8f693490da6305e1327357a16939d2b004
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\zh-hans\System.Runtime.xml
                                                                                    • Size 1.3MB
                                                                                    • SHA256 bb3f5b6f7d9c4dc389c4d7e1171779b8ce554b09001fd2f0e21af7a56e122a4f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.4.3.0\ref\netstandard1.2\zh-hant\System.Runtime.xml
                                                                                    • Size 1.4MB
                                                                                    • SHA256 14f420f536a5b0b592bedae238e50abbcc655bee549e034ed47b6106a86c0a80
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\System.Runtime.Extensions.xml
                                                                                    • Size 302KB
                                                                                    • SHA256 24f0392c97a08d3b178b6511b180ef10e3df77be935d2f224b7192f49e0239c2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\de\System.Runtime.Extensions.xml
                                                                                    • Size 324KB
                                                                                    • SHA256 ea84f637b557512129207f7f816aa3c62b0296c6917cbff34cdb928969196b3a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\es\System.Runtime.Extensions.xml
                                                                                    • Size 316KB
                                                                                    • SHA256 4ccb883b823eab712662dbd27446bbba26633f30c6f3dc48035fc984f2f175dc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\fr\System.Runtime.Extensions.xml
                                                                                    • Size 314KB
                                                                                    • SHA256 326c8c1206e7331bfc80ba9948a0638a8882bb83939e7920be6d192cb81ef3db
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\it\System.Runtime.Extensions.xml
                                                                                    • Size 312KB
                                                                                    • SHA256 fbc7abcb604f7519a57dcec5310e02238d98475ec9cca3c944b905b0ea24e6a2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\ja\System.Runtime.Extensions.xml
                                                                                    • Size 327KB
                                                                                    • SHA256 f89c29b39c7bab72ff59a3b9b00478a1a84db0736ae70da9142817ef24882eb2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\ko\System.Runtime.Extensions.xml
                                                                                    • Size 324KB
                                                                                    • SHA256 6545ed04ad31e0695f4077be9f1677fc7bbea19bb130a64997facfd52101074a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\ru\System.Runtime.Extensions.xml
                                                                                    • Size 438KB
                                                                                    • SHA256 95195486886010253c43771007c40efcc3d935047d7dc552789492f58f35f4bf
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\zh-hans\System.Runtime.Extensions.xml
                                                                                    • Size 285KB
                                                                                    • SHA256 ba8b4096516b2a148cea07f3f0be9957defb3729465290d09eb54750ade6f854
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.Extensions.4.3.0\ref\netstandard1.3\zh-hant\System.Runtime.Extensions.xml
                                                                                    • Size 291KB
                                                                                    • SHA256 c3bf90cd37b3a20d435ced0b3f8efc7d85ad616c7e729edda731bb2570875c86
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\net463\System.Runtime.InteropServices.dll
                                                                                    • Size 25KB
                                                                                    • SHA256 bad0d5b969a91a17bdd0ac3005a8f547e317673b9ffdf664525baddd6d7e4430
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\System.Runtime.InteropServices.xml
                                                                                    • Size 376KB
                                                                                    • SHA256 61e34e67b8b618fba5e516f1eeab40e37087132516986844a898ab8c211e1cd1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\de\System.Runtime.InteropServices.xml
                                                                                    • Size 402KB
                                                                                    • SHA256 7b9f8d777ac21103aac8b664bc58b3839d4867e365135bbe83e63b6fd6afd48e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\es\System.Runtime.InteropServices.xml
                                                                                    • Size 398KB
                                                                                    • SHA256 d0c00892fbbd320086732d49c8be17d2651f86acc9f96849e9f0f7c729c44c14
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\fr\System.Runtime.InteropServices.xml
                                                                                    • Size 396KB
                                                                                    • SHA256 c29ddc3902c368de31e340e6c0be998f56e16c0bcf892cad59db7b46a002326e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\it\System.Runtime.InteropServices.xml
                                                                                    • Size 394KB
                                                                                    • SHA256 c087e9275c5ae5e9e312fbf2ba1af216aa128564c2866bc77fad614e95727abc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\ja\System.Runtime.InteropServices.xml
                                                                                    • Size 434KB
                                                                                    • SHA256 ead41445048ce43cd488aa3a06411afcd55d1ddb0632fc03c9f4f920496f7b08
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\ko\System.Runtime.InteropServices.xml
                                                                                    • Size 410KB
                                                                                    • SHA256 a3d59d40239a8417c7ebfc28099eb83654429256cae12907283f8f195940525b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\ru\System.Runtime.InteropServices.xml
                                                                                    • Size 511KB
                                                                                    • SHA256 376ee1a05f16cb9042659d917e59ab68a29c73e1c2a602270421df4494e5ec66
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\zh-hans\System.Runtime.InteropServices.xml
                                                                                    • Size 354KB
                                                                                    • SHA256 1041595ee24dea387f1d1f82c773e747c0827ac9b0168464fba47d39ba274095
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.4.3.0\ref\netstandard1.2\zh-hant\System.Runtime.InteropServices.xml
                                                                                    • Size 360KB
                                                                                    • SHA256 443c4b51cc071068c4d270057e785a245f61b08a36b1628a7ce275ea23619c79
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Runtime.InteropServices.RuntimeInformation.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Runtime.InteropServices.RuntimeInformation.4.3.0\runtimes\win\lib\net45\System.Runtime.InteropServices.RuntimeInformation.dll
                                                                                    • Size 32KB
                                                                                    • SHA256 2f141b72a2af0458993e27559395d8a8cdb0b752d79b1703541a61e728b55237
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Security.Cryptography.Encoding.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Security.Cryptography.Encoding.4.3.0\ref\net46\System.Security.Cryptography.Encoding.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 91c7c02d46f754193b3988c28050135c804e47dc3456d0c3dde028ac0341fbe2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Security.Cryptography.Primitives.dll

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Security.Cryptography.Primitives.4.3.0\ref\net46\System.Security.Cryptography.Primitives.dll
                                                                                    • Size 22KB
                                                                                    • SHA256 5a6c8f69a8dea8a775331273aaae707eee2a2743fb1498c3cc4dbab679125d11
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\System.Text.Encoding.xml
                                                                                    • Size 94KB
                                                                                    • SHA256 9bc676405dc6628d74bcaaa427b171c164b85c950ecaa31a236fe92b0ba6d46b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\de\System.Text.Encoding.xml
                                                                                    • Size 99KB
                                                                                    • SHA256 4b80f4693521d49a2adc07b58854a6d7f0f316e6c679f19c1e285583f785d727
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\es\System.Text.Encoding.xml
                                                                                    • Size 101KB
                                                                                    • SHA256 62755dfe04ac6079d7f552930b582dcae4ef10064632e3581a629c52360f54ef
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\fr\System.Text.Encoding.xml
                                                                                    • Size 99KB
                                                                                    • SHA256 274dba60a8bef18e3c6b72c1d321df8bc6bc0397ad8805eb8f0a99d1081b51ff
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\it\System.Text.Encoding.xml
                                                                                    • Size 99KB
                                                                                    • SHA256 cd0261a5f6793b3e814dd46ea6ffcbdee629701321a2d63626631d8c546ea053
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\ja\System.Text.Encoding.xml
                                                                                    • Size 111KB
                                                                                    • SHA256 5f048a40d1b5fc6fe15d3450da02cfc42a339f26b15885909e7d07934904e16e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\ko\System.Text.Encoding.xml
                                                                                    • Size 101KB
                                                                                    • SHA256 929854f412a25cd4f2dbaf952ecc30952b577221abb2f7828a80b5c3f2adba96
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\ru\System.Text.Encoding.xml
                                                                                    • Size 134KB
                                                                                    • SHA256 76bf0ec613a8352ba25b5d99572cc8ed18a19449f5012eddbc7851f8cc489af1
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\zh-hans\System.Text.Encoding.xml
                                                                                    • Size 88KB
                                                                                    • SHA256 e2f4f6ccc45bd9d1444c0e73275233d72d27c148f1ca8c11a60657a0f8bc724a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.4.3.0\ref\netstandard1.3\zh-hant\System.Text.Encoding.xml
                                                                                    • Size 88KB
                                                                                    • SHA256 7f44364cb5bd53020480a68393515d6e9f792682724aa8f20fdf087e72dd6ad4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\System.Text.Encoding.Extensions.xml
                                                                                    • Size 104KB
                                                                                    • SHA256 96cc6271f8c5bcbffeb2e7cc3a69e9911b3d2214021bc1d7ee20400b10f4c5a5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\de\System.Text.Encoding.Extensions.xml
                                                                                    • Size 108KB
                                                                                    • SHA256 ed4adb246dd77cfb04197a4eecb9f4ad5ef76a94a0111a2f3d6cb8bcf3d4f2f5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\es\System.Text.Encoding.Extensions.xml
                                                                                    • Size 110KB
                                                                                    • SHA256 076224f36e12b86654b0ef633c20d369473737f40c732412eb389ab58d29b897
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\fr\System.Text.Encoding.Extensions.xml
                                                                                    • Size 107KB
                                                                                    • SHA256 cec9d53ca43b0ee5c65fe28958b1f358d3c552f0123b713056abb1b23aa3ebd2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\it\System.Text.Encoding.Extensions.xml
                                                                                    • Size 106KB
                                                                                    • SHA256 c4b2700dbe40a88d1c7b8d801f657cf66d0a3b003b023929e82c7b907b56f895
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\ja\System.Text.Encoding.Extensions.xml
                                                                                    • Size 116KB
                                                                                    • SHA256 473e1663171d6fbe42cac8f7a02b87e3a5cca9cf5e6090074688698b8459a692
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\ko\System.Text.Encoding.Extensions.xml
                                                                                    • Size 109KB
                                                                                    • SHA256 0ff9648aa9d68471e824d41a01414b523522fb4030a5ec92a72d25eb8b683f88
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\ru\System.Text.Encoding.Extensions.xml
                                                                                    • Size 137KB
                                                                                    • SHA256 411988f0b7ca0eb01c4c67a4c02199075eb758f8499d3ebcfba24e149f6d7d33
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\zh-hans\System.Text.Encoding.Extensions.xml
                                                                                    • Size 99KB
                                                                                    • SHA256 d441900423cf0364b1fb4336eaac10dfc4a41f9dcd21bd04113a5d8bd729530c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.Encoding.Extensions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.Encoding.Extensions.4.3.0\ref\netstandard1.3\zh-hant\System.Text.Encoding.Extensions.xml
                                                                                    • Size 99KB
                                                                                    • SHA256 0ae0e4b9721d5a3bee05682bca26f6bf11231fb316bd52fc067cb8cacaf7aaac
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\System.Text.RegularExpressions.xml
                                                                                    • Size 83KB
                                                                                    • SHA256 27e9a1fb2c4f67dad6ac90fba0292a9200f09aa58a57271a67cc3f72624066a9
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\de\System.Text.RegularExpressions.xml
                                                                                    • Size 91KB
                                                                                    • SHA256 33ad3dc7e7ce87f893fa86380a945c40afe4050b866a73c6456a09897a23b3fc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\es\System.Text.RegularExpressions.xml
                                                                                    • Size 89KB
                                                                                    • SHA256 ab27211860d03a619133468bbcb6438339d8e0aa3533c936095492b34dbf35aa
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\fr\System.Text.RegularExpressions.xml
                                                                                    • Size 90KB
                                                                                    • SHA256 469c8ad0ba720725f0e16a6439a6508d8d6eb13ff712230af5416a4c5a7cf505
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\it\System.Text.RegularExpressions.xml
                                                                                    • Size 88KB
                                                                                    • SHA256 7fc6bb35237f31c01499779b1a9850b8b65ebd4848ff986043ab936ff96b9e25
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\ja\System.Text.RegularExpressions.xml
                                                                                    • Size 93KB
                                                                                    • SHA256 c0265fddc8e591e529d852f5daaa9f4c9729c15de0e4f1f1b69b629c0663e8ce
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\ko\System.Text.RegularExpressions.xml
                                                                                    • Size 88KB
                                                                                    • SHA256 0ace8f4924ca8c77a5a2788da3b9852599e2bea6dd21a3ee3ffc2da64381a9d7
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\ru\System.Text.RegularExpressions.xml
                                                                                    • Size 113KB
                                                                                    • SHA256 dff18d92e829e24d933cbbf507610f5470a4694ef15b2918e237280493da521d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\zh-hans\System.Text.RegularExpressions.xml
                                                                                    • Size 79KB
                                                                                    • SHA256 d1073497cde4860567c589cb88ea4e99bff7e597643ee9fc305c06103d2624be
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Text.RegularExpressions.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Text.RegularExpressions.4.3.0\ref\netstandard1.3\zh-hant\System.Text.RegularExpressions.xml
                                                                                    • Size 78KB
                                                                                    • SHA256 e608fed3c455e1a6a427c6e4cb54e89aa31525a71c218b9d44f9dd812fd986bf
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\System.Threading.xml
                                                                                    • Size 185KB
                                                                                    • SHA256 6b7cc2661cf1f1f1e49d8bc7229aa4caef41338260669b3b0ba9a4ec8859a18d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\de\System.Threading.xml
                                                                                    • Size 201KB
                                                                                    • SHA256 1d18d895d7bd20a363b8c71ed3474db2eea2906e90d2b35ff3a13f4a3c9e86e8
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\es\System.Threading.xml
                                                                                    • Size 197KB
                                                                                    • SHA256 d9c0f7f29d5df8bc08680a2a526dbf8d57e74e5e58177f63673b21d70569febc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\fr\System.Threading.xml
                                                                                    • Size 196KB
                                                                                    • SHA256 cb1adeb8e552c8d2a34c8bc14ac7d25bddc0ecb054546cfd0963205771019e7d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\it\System.Threading.xml
                                                                                    • Size 197KB
                                                                                    • SHA256 d71f7d8ceb8939481e93a506427267c470287eb3153dd3d6fedbed2cc94d9c10
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\ja\System.Threading.xml
                                                                                    • Size 215KB
                                                                                    • SHA256 64fe7b5ad865f386737b88b56e4ebe3b4a7ee493fbe3f403e90981d8cf43530b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\ko\System.Threading.xml
                                                                                    • Size 201KB
                                                                                    • SHA256 89f7b5bbcc1d71f3ff9fb8ed0af066c6f007992936c73780cbffcc6b189f50c4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\ru\System.Threading.xml
                                                                                    • Size 260KB
                                                                                    • SHA256 42cc5e38f811469e4f7d11d64ca77a9550524410bb408595ab345eda7b267174
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\zh-hans\System.Threading.xml
                                                                                    • Size 174KB
                                                                                    • SHA256 d037823f729b263b83f4f5676e0297a266054ed3be9ab58880138028fc1ad9ba
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.4.3.0\ref\netstandard1.3\zh-hant\System.Threading.xml
                                                                                    • Size 177KB
                                                                                    • SHA256 1a4ca9e1303a09c72a9ef906a81daa225c6a3fc9ffcda40e41003c7b023677f0
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\System.Threading.Tasks.xml
                                                                                    • Size 385KB
                                                                                    • SHA256 d4ba72db859e3576f072f5912f0efa893b6405f97fcfb64676a35718a2c46897
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\de\System.Threading.Tasks.xml
                                                                                    • Size 409KB
                                                                                    • SHA256 d7c8bdb12d0c7ae70d5984ece354f4954d5f6023e314dd61aa1b50b434c473c3
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\es\System.Threading.Tasks.xml
                                                                                    • Size 401KB
                                                                                    • SHA256 5215b494036447d39b6718f3d9402215e0a83d4afe0c194393a4bc4409ca5560
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\fr\System.Threading.Tasks.xml
                                                                                    • Size 396KB
                                                                                    • SHA256 0689d619ae0c25b8131bfcb84a67770e2d1dc88c1f447c291061104b58225fca
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\it\System.Threading.Tasks.xml
                                                                                    • Size 402KB
                                                                                    • SHA256 612d97af7ae68afd40e03526c88c80ed8ebf274be6915eef6e3ec18dc74791ab
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\ja\System.Threading.Tasks.xml
                                                                                    • Size 420KB
                                                                                    • SHA256 f456990a2fdf1cd651a761949c31bd035fd0dd920394367ea47fba7eb53b7b11
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\ko\System.Threading.Tasks.xml
                                                                                    • Size 403KB
                                                                                    • SHA256 d29224b3224a4748dfc36cb495782bf05b2153cbb9b6c99a3d21b15d4ab6b882
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\ru\System.Threading.Tasks.xml
                                                                                    • Size 512KB
                                                                                    • SHA256 413e44b8b4096cd36f72b852de0ffe91ffb79493b33a3ce35288502c371e6ebe
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\zh-hans\System.Threading.Tasks.xml
                                                                                    • Size 363KB
                                                                                    • SHA256 c1fdececd31eefcc55df144d3ac45d1f9ce23ba7449243aa9bb587368a366d36
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Threading.Tasks.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Threading.Tasks.4.3.0\ref\netstandard1.3\zh-hant\System.Threading.Tasks.xml
                                                                                    • Size 366KB
                                                                                    • SHA256 1af340fcbec865ed511adfd833b54698b81ada4958e70c1554d74aaf30fb937f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.ValueTuple.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.ValueTuple.4.5.0\lib\portable-net40+sl4+win8+wp8\System.ValueTuple.xml
                                                                                    • Size 83KB
                                                                                    • SHA256 b5c69cb0668b009900333ba825e11e70a5c0bef1d06f934f9cf60889a027aa73
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\System.Xml.ReaderWriter.xml
                                                                                    • Size 295KB
                                                                                    • SHA256 d3a217859cdc6d66666d1c6ed34bbd6e633465ea85a7ee03e71409adc4d0a1a4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\de\System.Xml.ReaderWriter.xml
                                                                                    • Size 314KB
                                                                                    • SHA256 6e34ca8dd867d5d039c613e15d2efdbf4bc10b13933a8e7806f4cc17e4c0c3ac
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\es\System.Xml.ReaderWriter.xml
                                                                                    • Size 310KB
                                                                                    • SHA256 c3b1bc468591d0381470bd2ab1f55b9426c8458a755f43d3561be6e2038be795
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\fr\System.Xml.ReaderWriter.xml
                                                                                    • Size 309KB
                                                                                    • SHA256 b7a152dbb9944c3e09c00dc8289a43968fb90acf389544f2e709eb2812afe9b3
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\it\System.Xml.ReaderWriter.xml
                                                                                    • Size 312KB
                                                                                    • SHA256 11504e8eb5db30404dad9ededf5576a3a30a49e48f70903196f3445a88faffb5
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\ja\System.Xml.ReaderWriter.xml
                                                                                    • Size 330KB
                                                                                    • SHA256 66c6207597ab2b413c4b846de0761a96e80576d1a560d0e0d46044716b9f7c09
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\ko\System.Xml.ReaderWriter.xml
                                                                                    • Size 314KB
                                                                                    • SHA256 014aeca3055d18d8357f8d0b66dd6e86730f1b6e1a59d37444e3a459b9ba1a4e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\ru\System.Xml.ReaderWriter.xml
                                                                                    • Size 389KB
                                                                                    • SHA256 8dd53a11d758008e3beee77efff6f977741e7329a24ea5c16d85d5f141804da2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\zh-hans\System.Xml.ReaderWriter.xml
                                                                                    • Size 280KB
                                                                                    • SHA256 22422344ac34ffa848dc7fc0f67cfedf4956bf1fde085de1770a6562701d6ff4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.ReaderWriter.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.ReaderWriter.4.3.0\ref\netstandard1.3\zh-hant\System.Xml.ReaderWriter.xml
                                                                                    • Size 282KB
                                                                                    • SHA256 3b4d8c1e3550543e81ec22d370478afb17c10517b0bd67068de4e9ec22eb1daa
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\System.Xml.XDocument.xml
                                                                                    • Size 155KB
                                                                                    • SHA256 9fd6843c586bebd309a60f356f677b48d9230e14e0fe3583cf3ae49e96ca0e1d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\de\System.Xml.XDocument.xml
                                                                                    • Size 164KB
                                                                                    • SHA256 6510cf3333821c91129d860e6c29b0290a919eb409a58e6046a7276fae1dc814
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\es\System.Xml.XDocument.xml
                                                                                    • Size 163KB
                                                                                    • SHA256 839c64b679e0e30e39c22b6943163960bbc30ae4772e859a1c484226e83fe07f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\fr\System.Xml.XDocument.xml
                                                                                    • Size 161KB
                                                                                    • SHA256 682aa5c055cbe2679cfb54669fd442cc606466ab352e9256bd1960928497d8dc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\it\System.Xml.XDocument.xml
                                                                                    • Size 163KB
                                                                                    • SHA256 b67c206bbaddca1cfb14088d6776f7ec1b97afdea6b75498aa09e382cb2ee696
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\ja\System.Xml.XDocument.xml
                                                                                    • Size 170KB
                                                                                    • SHA256 10d7a49742818403b9f441692eb5b5511e85ce4b88415f4597ca02a9a35ecf28
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\ko\System.Xml.XDocument.xml
                                                                                    • Size 163KB
                                                                                    • SHA256 898c1f169d8c0bfe9b4219c84de18c7272b210cedd540c9bd2b7d0f16d35c510
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\ru\System.Xml.XDocument.xml
                                                                                    • Size 198KB
                                                                                    • SHA256 3e9da418c6704070cd9c44688bc131f96158d1d9873fc9da391bf034ad88089b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\zh-hans\System.Xml.XDocument.xml
                                                                                    • Size 149KB
                                                                                    • SHA256 e5202aa78ef345dd490096fb34d442ef2d22435cca4002c2b7acea3b1e04aee9
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    System.Xml.XDocument.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\System.Xml.XDocument.4.3.0\ref\netstandard1.3\zh-hant\System.Xml.XDocument.xml
                                                                                    • Size 151KB
                                                                                    • SHA256 8e951f2ffee8e443f8bf930617df65acda35df61e47804d79be37c096a11ed40
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    dnlib.xml

                                                                                    • Path C:\Users\Admin\Desktop\Phantom-Private\packages\dnlib.3.5.0\lib\netstandard2.0\dnlib.xml
                                                                                    • Size 1.8MB
                                                                                    • SHA256 db38da18a628bb610c4dd3f072e729c74c7cfb6a3fe5ab2840beab09c0b3d336
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    memory/1532-47-0x000001B14C400000-0x000001B14C5A1000-memory.dmp

                                                                                    memory/2244-3827-0x000002A83AF70000-0x000002A83B111000-memory.dmp

                                                                                    memory/3900-3858-0x0000028894450000-0x00000288945F1000-memory.dmp

                                                                                    memory/3900-3846-0x0000028894450000-0x00000288945F1000-memory.dmp