Analysis
- user interaction
yes - max time kernel
899s - max time network
829s - platform
windows10-2004_x64 - resource
win10v2004-20260513-de - resource tags
arch:x64arch:x86image:win10v2004-20260513-delocale:de-deos:windows10-2004-x64systemwindows - submitted
15/06/2026, 10:36
Behavioral task
behavioral1
Sample
A3R6C9.exe
Resource
win10v2004-20260513-de
windows10-2004-x64
30 signatures
900 seconds
Behavioral task
behavioral2
Sample
A3R6C9.exe
Resource
win11-20260513-de
windows11-21h2-x64
29 signatures
900 seconds
General
- Target A3R6C9.exe
- Size 180KB
- Sample260615-mnb29acy2q
- SHA256 8fbfc27d2affd969d165d8eeb25b83aac6e5fd8e4624b3a3800c0bbd77c0f1ae
- MD5 893a39c34bce96b1ed5fef89533d52c0
- SHA1 5315f170d19f234a30d5b30e3f2d0719c6be4866
- SHA512 9a1c202db751e5713551a9afbaf321f4880e94fc0a0584e0c6786f5423faaab82fbbb2d0ff4eaa83f23d22d172699e8cf62b77049d3dbd31b48e81819aa3a083
- SSDEEP 3072:8B/5U7rXgNoku2TspaCNbH5Xj3pFoap9IzxxSybrTP/4dgovM7nsoCYDr3Vout:8R5U7rwN02Ty3jXoaoxS04dLMzN73VoS
- TLSH T17C0412ABD4A9D85FF08F1BB501D658BD1E880B6440B8B57894EF7DE2C0FA71A7910E70
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Path
-
C:\Program Files\7-Zip\readme_for_unlock.txt
Ransom Note
- ATTENTION! Your network is hacked and files are encrypted. Including the encrypted data we also downloaded other confidential information: Data of your employees, customers, partners, as well as accounting and other internal documentation of your company. All data is stored until you will pay. After payment we will provide you the programs for decryption and we will delete your data. If you refuse to negotiate with us (for any reason) all your data will be put up for sale. What you will face if your data gets on the black market: 1) The personal information of your employees and customers may be used to obtain a loan or purchases in online stores. 2) You may be sued by clients of your company for leaking information that was confidential. 3) After other hackers obtain personal data about your employees, social engineering will be applied to your company and subsequent attacks will only intensify. 4) Bank details and passports can be used to create bank accounts and online wallets through which criminal money will be laundered. 5) You will forever lose the reputation. 6) You will be subject to huge fines from the government. You can learn more about liability for data loss here: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://gdpr-info.eu/ Courts, fines and the inability to use important files will lead you to huge losses. The consequences of this will be irreversible for you. Contacting the police will not save you from these consequences, but will only make your situation worse. You can get out of this situation with minimal losses To do this you must strictly observe the following rules: DO NOT Modify, DO NOT rename, DO NOT copy, DO NOT move any files. Such actions may DAMAGE them and decryption will be impossible. DO NOT use any third party or public decryption software, it may also DAMAGE files. DO NOT Shutdown or Reboot the system this may DAMAGE files. DO NOT hire any third party negotiators (recovery/police, etc.) You need to contact us as soon as possible and start negotiations. Instructions for contacting our team: Download & Install TOR browser: https://torproject.org For contact us via LIVE CHAT open our >Website: http://ae4d4tbc4sbwtvse7pgexoogttfhk2hk47efz4d3qddg4yhxd4t5c7ad.onion >Login: customer >Password: L&i++dcsMHXnIcPdXir+L&Czb4OnsN >Secret: UYYm@6NuSEm3psu9TGyq If Tor is restricted in your area, use VPN���������
URLs
-
https://gdpr-info.eu/
-
http://ae4d4tbc4sbwtvse7pgexoogttfhk2hk47efz4d3qddg4yhxd4t5c7ad.onion
Signatures
- Family: Cloak
Cloak is a ransomware that has been active since 2022.
- Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
- Renames multiple (10132) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Disables Task Manager via registry modification
- Modifies Windows Firewall 2 TTPs 1 IoCs
pid Process 4572 netsh.exe - Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\International\Geo\Nation Host Process for Windows Services - Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
- Deletes itself 1 IoCs
pid Process 3120 sichost.exe - Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\readme_for_unlock.txt Host Process for Windows Services - Executes dropped EXE 4 IoCs
pid Process 2916 Host Process for Windows Services 3120 sichost.exe 3776 A3R6C9.exe 4716 sichost.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Windows Update = "C:\\ProgramData\\Host Process for Windows Services" Host Process for Windows Services - Drops desktop.ini file(s) 1 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI Host Process for Windows Services - Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\P: Host Process for Windows Services File opened (read-only) \??\E: Host Process for Windows Services File opened (read-only) \??\F: Host Process for Windows Services File opened (read-only) \??\Y: Host Process for Windows Services File opened (read-only) \??\S: Host Process for Windows Services File opened (read-only) \??\J: Host Process for Windows Services File opened (read-only) \??\V: Host Process for Windows Services File opened (read-only) \??\B: Host Process for Windows Services File opened (read-only) \??\Z: Host Process for Windows Services File opened (read-only) \??\R: Host Process for Windows Services File opened (read-only) \??\I: Host Process for Windows Services File opened (read-only) \??\A: Host Process for Windows Services File opened (read-only) \??\K: Host Process for Windows Services File opened (read-only) \??\M: Host Process for Windows Services File opened (read-only) \??\O: Host Process for Windows Services File opened (read-only) \??\N: Host Process for Windows Services File opened (read-only) \??\Q: Host Process for Windows Services File opened (read-only) \??\U: Host Process for Windows Services File opened (read-only) \??\W: Host Process for Windows Services File opened (read-only) \??\L: Host Process for Windows Services File opened (read-only) \??\G: Host Process for Windows Services File opened (read-only) \??\T: Host Process for Windows Services File opened (read-only) \??\X: Host Process for Windows Services - Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\Desktop\Wallpaper = "c:\\programdata\\wallpaper.bmp" Host Process for Windows Services -
resource yara_rule behavioral1/memory/992-0-0x0000000000E40000-0x0000000000E8A000-memory.dmp upx behavioral1/memory/2916-857-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/files/0x0008000000024608-851.dat upx behavioral1/files/0x000700000002460c-859.dat upx behavioral1/memory/3120-862-0x0000000000C20000-0x0000000000C3F000-memory.dmp upx behavioral1/memory/992-864-0x0000000000E40000-0x0000000000E8A000-memory.dmp upx behavioral1/memory/2916-875-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/992-873-0x0000000000E40000-0x0000000000E8A000-memory.dmp upx behavioral1/memory/3120-879-0x0000000000C20000-0x0000000000C3F000-memory.dmp upx behavioral1/files/0x000700000002460d-882.dat upx behavioral1/memory/4716-894-0x0000000000500000-0x000000000051F000-memory.dmp upx behavioral1/memory/3776-883-0x0000000000A40000-0x0000000000A8A000-memory.dmp upx behavioral1/memory/3776-898-0x0000000000A40000-0x0000000000A8A000-memory.dmp upx behavioral1/memory/3776-907-0x0000000000A40000-0x0000000000A8A000-memory.dmp upx behavioral1/memory/2916-3136-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-5708-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-5730-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-5732-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-6392-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-8572-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-13625-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-10759-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-14956-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16566-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16568-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16576-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16616-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16712-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16714-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16722-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16763-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16766-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16768-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16777-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16817-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16820-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16821-0x0000000000020000-0x0000000000057000-memory.dmp upx behavioral1/memory/2916-16832-0x0000000000020000-0x0000000000057000-memory.dmp upx - Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\dd_arrow_small.png Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] Host Process for Windows Services File opened for modification C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo.crYpt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\167.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-white_targetsize-256_altform-unplated.png Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sl-si\ui-strings.js Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\zh-tw\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\nl-nl\ui-strings.js Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adobe_spinner.gif Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.AnalysisServices.Modeler.UI.rll.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\Bibliography\Sort\TITLE.XSL Host Process for Windows Services File opened for modification C:\Program Files\VideoLAN\VLC\locale\sw\LC_MESSAGES\vlc.mo Host Process for Windows Services File opened for modification C:\Program Files\Windows Media Player\Media Renderer\DMR_48.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-white\SmallTile.scale-100.png Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\nb-no\ui-strings.js.crYpt Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\es-es\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\pl-pl\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Java\jre-1.8\lib\jfr\default.jfc Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp4-ul-phn.xrm-ms Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3456.0_x64__8wekyb3d8bbwe\GameBarWidgetUI\Icons\icon.light.targetsize-256.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\GenericMailWideTile.scale-400.png Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\AppTiles\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\AppIcon.targetsize-16_altform-unplated_contrast-white.png Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\OSFSHARED.DLL Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ACEODEXL.DLL Host Process for Windows Services File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png.crYpt Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\Autogen\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\HxMailBadge.scale-200.png Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_filterselected-focus_32.svg Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\tr-tr\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\icudtl.dat.DATA.crYpt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderSplashScreen.contrast-black_scale-100.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-24_contrast-white.png Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\libs\jquery.ui.touch-punch\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sk-sk\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\de-de\ui-strings.js.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaremr.dll.mui.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr-CA.pak.crYpt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected] Host Process for Windows Services File opened for modification C:\Program Files\Windows Defender\es-ES\MpEvMsg.dll.mui Host Process for Windows Services File created C:\Program Files\Windows NT\Accessories\fr-FR\readme_for_unlock.txt Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\sk-sk\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\dc_logo.png Host Process for Windows Services File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\en-ae\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA.crYpt Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-24_contrast-black.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Lumia.MagicEdit\Pages\TwoWayBlendPage.xbf Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxManifest.xml Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\fr-fr\ui-strings.js Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Stationery\1033\PINELUMB.HTM Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MixedRealityPortalAppList.targetsize-16_altform-unplated_contrast-white.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-40_altform-unplated_contrast-black.png Host Process for Windows Services File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\WideTile.scale-200_contrast-white.png Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\fr-FR\MSFT_PackageManagementSource.strings.psd1 Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\zh-tw\ui-strings.js Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Trial-pl.xrm-ms.crYpt Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\FORMS\1033\INFOMS.ICO Host Process for Windows Services File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\PeopleAppAssets\Videos\readme_for_unlock.txt Host Process for Windows Services File created C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_11811.1001.1813.0_neutral_~_8wekyb3d8bbwe\microsoft.system.package.metadata\readme_for_unlock.txt Host Process for Windows Services File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg.crYpt Host Process for Windows Services - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
description ioc Process Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe - System Location Discovery: System Language Discovery 1 TTPs 9 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Host Process for Windows Services Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language sichost.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language A3R6C9.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language netsh.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language A3R6C9.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language diskpart.exe - Checks SCSI registry key(s) 3 TTPs 26 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_Msft&Prod_Virtual_Disk\2&1f4adffe&0&000003\ConfigFlags vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName vds.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_MSFT&PROD_VIRTUAL_DISK\2&1F4ADFFE&0&000003 vds.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName vds.exe - Interacts with shadow copies 3 TTPs 1 IoCs
Shadow copies are often targeted by ransomware to inhibit system recovery.
pid Process 4280 vssadmin.exe - Modifies Control Panel 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\Desktop\WallpaperStyle = "Center" Host Process for Windows Services Set value (str) \REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\Desktop\TileWallpaper = "0" Host Process for Windows Services - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services 2916 Host Process for Windows Services - Suspicious behavior: LoadsDriver 1 IoCs
pid 4 - Suspicious use of AdjustPrivilegeToken 14 IoCs
description pid Process Token: SeIncBasePriorityPrivilege 992 A3R6C9.exe Token: SeIncBasePriorityPrivilege 992 A3R6C9.exe Token: SeManageVolumePrivilege 1496 vds.exe Token: SeManageVolumePrivilege 1496 vds.exe Token: SeIncBasePriorityPrivilege 992 A3R6C9.exe Token: SeIncBasePriorityPrivilege 992 A3R6C9.exe Token: SeIncBasePriorityPrivilege 992 A3R6C9.exe Token: SeDebugPrivilege 2916 Host Process for Windows Services Token: SeBackupPrivilege 1268 vssvc.exe Token: SeRestorePrivilege 1268 vssvc.exe Token: SeAuditPrivilege 1268 vssvc.exe Token: SeIncBasePriorityPrivilege 3776 A3R6C9.exe Token: SeIncBasePriorityPrivilege 3776 A3R6C9.exe Token: SeIncBasePriorityPrivilege 3776 A3R6C9.exe - Suspicious use of WriteProcessMemory 10 IoCs
description pid Process procid_target PID 992 wrote to memory of 3428 992 A3R6C9.exe 84 PID 992 wrote to memory of 3780 992 A3R6C9.exe 99 PID 992 wrote to memory of 2916 992 A3R6C9.exe 104 PID 992 wrote to memory of 3120 992 A3R6C9.exe 105 PID 992 wrote to memory of 2128 992 A3R6C9.exe 106 PID 2916 wrote to memory of 3360 2916 Host Process for Windows Services 109 PID 2916 wrote to memory of 4572 2916 Host Process for Windows Services 111 PID 3360 wrote to memory of 4280 3360 cmd.exe 114 PID 3776 wrote to memory of 4716 3776 A3R6C9.exe 121 PID 3776 wrote to memory of 4412 3776 A3R6C9.exe 122 - System policy modification 1 TTPs 16 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\EXPLORER Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoClose = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableChangePassword = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoLogoff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\StartMenuLogOff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableSwitchUser = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableSwitchUser = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisableTaskMgr = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\HideFastUserSwitching = "1" Host Process for Windows Services Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SYSTEM Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoClose = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableChangePassword = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\HideFastUserSwitching = "1" Host Process for Windows Services Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoLogoff = "1" Host Process for Windows Services - Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\A3R6C9.exe"C:\Users\Admin\AppData\Local\Temp\A3R6C9.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:992 -
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:3428
-
-
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:3780
-
-
C:\ProgramData\Host Process for Windows Services"C:\ProgramData\Host Process for Windows Services"2⤵
- Checks computer location settings
- Drops startup file
- Executes dropped EXE
- Adds Run key to start application
- Drops desktop.ini file(s)
- Enumerates connected drives
- Sets desktop wallpaper using registry
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
- System policy modification
PID:2916 -
C:\Windows\System32\cmd.exe"C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet3⤵
- Suspicious use of WriteProcessMemory
PID:3360 -
C:\Windows\system32\vssadmin.exevssadmin.exe delete shadows /all /quiet4⤵
- Interacts with shadow copies
PID:4280
-
-
-
C:\Windows\SysWOW64\netsh.exe"C:\Windows\System32\netsh.exe" advfirewall set allprofiles state off3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
- System Location Discovery: System Language Discovery
PID:4572
-
-
-
C:\ProgramData\sichost.exeC:\ProgramData\sichost.exe C:\Users\Admin\AppData\Local\Temp\A3R6C9.exe2⤵
- Deletes itself
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3120
-
-
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:2128
-
-
C:\Windows\System32\vdsldr.exeC:\Windows\System32\vdsldr.exe -Embedding1⤵PID:1316
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1496
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum1⤵PID:928
-
C:\Windows\System32\vdsldr.exeC:\Windows\System32\vdsldr.exe -Embedding1⤵PID:860
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
PID:1904
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
PID:4800
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1268
-
C:\ProgramData\A3R6C9.exeC:\ProgramData\A3R6C9.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3776 -
C:\ProgramData\sichost.exeC:\ProgramData\sichost.exe C:\ProgramData\A3R6C9.exe2⤵
- Executes dropped EXE
PID:4716
-
-
C:\Windows\SysWOW64\diskpart.exediskpart /s C:\ProgramData\kD1aE.tmp2⤵
- System Location Discovery: System Language Discovery
PID:4412
-
-
C:\Windows\System32\vdsldr.exeC:\Windows\System32\vdsldr.exe -Embedding1⤵PID:3600
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Checks SCSI registry key(s)
PID:1236
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Direct Volume Access
1Impair Defenses
1Disable or Modify System Firewall
1Indicator Removal
2File Deletion
2Modify Registry
3Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\am.pak
- Size 1.5MB
- SHA256 51f646f4da38a17ca2f6a102396f9d0edf3374d53d8d0c473078c89b3316f948
- MD5 3a9f6e0db4aac03a6d23b11a1a510fe4
- SHA1 ec9d8728854677eafc86995c4befbab3cc672ec8
- SHA512 a7227c2056254c0c0b7531e70421de83e694b54db6ce5314f04873144d361db95c3fcdef67c8cbc61d2a58f9623e5d7a0f6033d8faf6609d3e278e0883856c72
- SSDEEP 24576:gZohBP3mb9zphAVYHmAi0v/9ORFzbFaLE37dvsgMJMPaLoztCsPLvEqWhQl2+rBR:R6OL2s
- TLSH T1F665ED547DF9F7170F8E8A1994211D4FA598AE4692802C38D35BE3FC2B2EF5B4CDA214
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ar.pak
- Size 1.5MB
- SHA256 a19da359b96b3cfd54834ccd64dfaa740447c987060841039ce7c7e87274693b
- MD5 434776a8effabc03f0efcc25f95f9501
- SHA1 63c074097ec46db29df3b6398002916f7bb3c5af
- SHA512 730ea8ffa32918c74f866440955e93108c92352ef10052016efb396a41671f09891635a9c3a3335737b3cfcfd0621845f480880fcb155e061fb1b5080b01da67
- SSDEEP 12288:IXqBXQVBfxsX37nX0aXJ3rIGGqrgUwEF32cFqEPGc8oY4Vh+DgJnXsJIeiwQZE+0:AqmT2nJ3rIGGqrgUwXcGRn
- TLSH T1CC75CCE21A2684720B96DF1FC1D2356CE872AE23EB4BFD3134974A2157D7513E28E235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\as.pak
- Size 2.1MB
- SHA256 341f4213c99c23fcd1a395e3400b44eae00c445032bcb33a759f2bb45810eb72
- MD5 d632489d40ba35f2e3ae2ab846acdb48
- SHA1 9758865dbaac6d86c53aef969b29730b5625e2cc
- SHA512 8a986a043e0db965d6c8eac48e598ab4c7eeb82a247d4471a014077e167b6ee5ed6a55dda54472644bcb2b887914b2a7aec3f7cd2c2d5efcb2104347a26e62ba
- SSDEEP 6144:1PT6x3vNuMMd0qmdUTr5HjaMFUKnbFDLbwwikEBs/9fgsRYri0aB7rOQlIRUrCWz:1r6x1GHtmGhLJ/ZTKBz+unW8fWEE
- TLSH T133A546248CAD55B6A8D5DCC91F0C6330C127AD5AC7A5F708CC0BA214799ECBC8DAADF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\az.pak
- Size 1.1MB
- SHA256 3e598b27fdef0c07000b8eec4b70e95c41ec9dd69466e6af25ccc07cc49427da
- MD5 84e28896dd7ba878595f50d9dc749caa
- SHA1 aa1f92f130d83732793b0d7f531260146a3c7e1c
- SHA512 2c46cc0f0249230bd16b987cf85c9849bceea3406a5c1760b3687faaee7621d13a3d67bddbfc9b4fc214551b97cafb389a081d47a7b354182662fde413e78a91
- SSDEEP 12288:Ny+WSPYq0Os3f9/H6UD07EVBc85fM6qoXxyK1aoC153BlQGBEy6+sQlDcORJWB1q:12nOs3Q7EVBc85fM6ZXffgHFRJWzAP
- TLSH T1A545F785694E8C0C47ED13890862AAB6F84D7BDF719261577A89521C338FF639FE034B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bg.pak
- Size 1.7MB
- SHA256 444a299693f5c4763f6eea9b3ec7454e3144a3c3bc3d796846e9475b6b2e548c
- MD5 678838d3224354b3428ebf35658283aa
- SHA1 c86c456f186ff899e9f82f7fe3ea44e431e62891
- SHA512 0f5615280e375cec2d6ad48c734fc8d286418eb08d84e99c378a09aa82a7f3a4fb81ce83a657ec7ba04ec4311276ea860ee108250f99259a259f75e4b121ea16
- SSDEEP 49152:WjCihKY/BvE38msAnEp0XfmGZg6KH8migjPJTRudxgdH162d:fg/5FcmXu0Y2d
- TLSH T1A88556A15B9A68CB4101F45F9C047E093CEB94FF3FE7C79211642DBD39E20B486AA61D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bn-IN.pak
- Size 2.2MB
- SHA256 8294c8d00049c1176ffb47397ff0e905ac7b12cab511b099f12b0bdeb3abf9c7
- MD5 7f51b801713406fab7fcbabe8544fd0d
- SHA1 a125fd240749f4e715296a43b69798b670a23d62
- SHA512 dc3ef93c02a192ff9c9fd2dad4f099893f6193b5cfd4188fe9cc7fc3c3a016a68c3f008e83ae9e5ef52f4b3c13f644d07ea36b633ea882a95005e436acf71d62
- SSDEEP 12288:g/veb+bEgR1VcYNBofhkNohDJ7VWzbElRaIvWR:C8UEFcBofhkNohDJ7VWzbElRaIvWR
- TLSH T1D4B5F3209C6E91B2A8C1CDC9434C6370C113AE979B66F748DC0BA2553D6EC7C8DADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bs.pak
- Size 1.1MB
- SHA256 f223b2faf6780a764222f65618cf6b74093b7e9521afc146fc602739daf64903
- MD5 4e5d87d6acdd7e86c70a4101309f2b02
- SHA1 e878892c34e018891e1c7f4ca76bd5abc9ec3e0c
- SHA512 2e8012344ff4534d3b47bb9333b2b641b14ab35621adc55c874a604004b90684b7bd63f62c4229a97ccac4b297a9f139e53b93b7edbb21525b4d7af63b436b72
- SSDEEP 12288:3DDpeZNI2idMYrt3WKuMkIUOs005W6QhSxKJZHdiupeQasNk:3PpwIvMA3WKrkIUOs005WoxK/drTk
- TLSH T1E2352B79FEA69B0649936382DF96875078BC49CED454DFB6385FA22E0303F4C62F9109
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca-Es-VALENCIA.pak
- Size 1.1MB
- SHA256 84beaa89a1ee3b7d05fd026c7c13264d1207435d7ff07a5b2b29e21895d1a48d
- MD5 44256f0727ff6b9c40652460a318eb99
- SHA1 8d034d265c3ad524c45a6aaa93521a6e41078891
- SHA512 5cd46fb06f4e05988a1508dde097d5b002b89738b1c0d66a510b2cfe5d7e422abb25e23fe7f5e44d8f1f5ca6f4789716be4073a0d927d50f9a0481d2d6226e48
- SSDEEP 24576:ix/VelUCgynilvPPEJlYON2XAgcWPUkummKK4H8SUkn:itolglvPPEJlYON2XAgcWPUkummKvH8s
- TLSH T17E35F822CBCD6B6285C2331BAB41C527B09CE9867A15D244F4AF061933CEBDCD277AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca.pak
- Size 1.1MB
- SHA256 27989145898e0902fccce42667fa570723c0cd88354eedba745065e5c94087a4
- MD5 8a3bebda1372b752b96d2af21795ce97
- SHA1 065e875b9def5f79c6f06683b9444ccecb6decaa
- SHA512 8ea26e26e1916b43d65ca42a87e90da87d9c0adec0778b401401e0aba8782284cff487eb3b14495bb0709a339802d5ffd9817d614cb2a6cd5ff32910dacafb5c
- SSDEEP 24576:vOKb0e1fIobJCMO4rfR4569rZhTvVSpG1WkWyQMmZEwS06/o51RHiDqoWUXPx/aZ:rIMJCM9VSpG1WkWyQMmZEwS06/o51RHD
- TLSH T16C451A23CBC97B6385C2325ABB41C227B09CD9867A05D254F5AE071633CEBDCD273A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cs.pak
- Size 1.1MB
- SHA256 58f3b403f876a0b22f4d0ffd075792c2f7a20afe5422d4ff6a9937d631f566ec
- MD5 434d1fdc15d72cc954216872012b1688
- SHA1 b9d077d4edd42b8d0290038bf0ebad8ba131765e
- SHA512 795ae2a84e4f28bfc61fc77e1b182e72dce446f643bbc43e3f512b084edf237ed1b6edb00b1283eaf982a8a7219d5eb3d6535f803eb2417660e8365f1c708483
- SSDEEP 24576:Z+LG8VDctjGQlF1XW49m6xuW40yUjNjZXgWSXSlyQds:ZoGFm6xu6yUjNjhVSXsds
- TLSH T10F358D2ED9A6E521894013493FB94024FD6D43520A6AE9AA7C8F895437777FECFF0C18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cy.pak
- Size 1.1MB
- SHA256 2fd505c35c6859165440dbec5f29452aee0336d3481b1f59bcaeaed0e42ed2cb
- MD5 43f196e40928fbf6de2abf5863a0cd65
- SHA1 a0e61c686c6dd5dd948df91c0055329b358bb365
- SHA512 0cd06b5453652cb38f6fe97e1772d767b3cc3fe0b2f3066e82c068b14d49e50be1910c5edcc165d0599fdda915de54725b13feef50ba9c320f76d3230d90ee63
- SSDEEP 24576:hnvdfthWJC72yO7UXQiC5/QPEZVrl43ZAeXV10l:xFVL7hRKeX4l
- TLSH T15F354B0BE8858F97D20977A1C85B8E39B92AF57BF5D5D4C0701D092D27233A0EAC978D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\de.pak
- Size 1.1MB
- SHA256 f768fcb97e3ba8a9f5c3943711da8c6bb44ddbc53c796275acd95c70650d0a8f
- MD5 ac29e69bbee57fe44c2ae6a2d800b451
- SHA1 5f2d338dbbb49a627a812b9d435de0e91243f193
- SHA512 b8fa9412830739614a8b5ca8e13545d3d3b843f89b19786cd9aae4016d50ca76ec4cd769c1f30ebf52ba44160ef2c57d2fe41d6042263469d05b22df27296413
- SSDEEP 24576:oSqApn0mp1nVT16Gl7Hy2iNQhp80J4msZg3RzwN5aC/:Lc+20JRsZghzwN1
- TLSH T1C5352A13DCEAB29EC64737652601CCB7772EE3AFC389B259605DC07A270B3A5829D171
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\el.pak
- Size 1.9MB
- SHA256 20b41cc7aadfc91f2e253392c0ea1727ad28efeecc8b28603d4160fbcb7f4aaa
- MD5 a82b0c8d9f355111aa4dcc2c210beb7c
- SHA1 da2503c866b379acbd899ae55d1a11df2007a3df
- SHA512 a321495211c6c2ed5ea872461b645a6840d1e3331cdd5f960c4576b1c03e917a14a9295e93e06d787d8b3f41253d1a91711637e92d93f86facec2bdc1d464cab
- SSDEEP 49152:NjkmlxnSM7UFLqQXvJOd+AkEbE4fTi6jcRRGd0z6jKGYCmM72je1bz8ZhpEUwivC:CA
- TLSH T18695D0EFB4582DEE8045950785D8A07C37866D6DEB49CBD8722DCB20BEF90719A11E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es-419.pak
- Size 1.1MB
- SHA256 8b9490538b8a16d40999398fe5de650c5cca81307a12ef5dad0c0936cdf76eb8
- MD5 9415a624306b7f34210300f79da9294a
- SHA1 2bd7eaf3f0aee94e9f78a68a1c71c24953fdf950
- SHA512 9ce00a2bb2bf93b9e6c15ac0a923bc17a9641bdfdf3c403079b2b188eb5a3cbe496effb1134c06ec852dcb8ff72628808012e168825c1a3637f7bf2f178efaa5
- SSDEEP 12288:0ElLnoBzKGuSJ4tEgqtJGh0wSOgFwEkklGQTycmBFq3J:0ko1R8EgqtJGh0wSOgFwEkklGQTyfrs
- TLSH T1F9350826AAC81F5350D32386B743C667F0D49587B408C29AF8EE866933CDBCCD567E91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es.pak
- Size 1.1MB
- SHA256 2391d1cecae760eb70285a53b049bc55c56e3ef838f58d473fd93ec3340be118
- MD5 3525b92950af475d9ca1d062a1c5aefc
- SHA1 55eb9b162fe8f785d591052d8354d5d115da4b5d
- SHA512 73196762e910d2b9aa72f141ea21bea2ac8bf836c486c3c958b24de21830f0fde939ae6f3934a98d50e5ee4531110c3523a1653f29997857e90f52e4c44ba3b3
- SSDEEP 12288:eDborJUBOIBl5c/ogVtlef1BiOe+RXdqOfOL5/Ac8V:sorSB7OogVtlef1BiOe+RXdqO2tIf
- TLSH T1D3350826AAC81F5350D22386A743C667F0949587B408C29AF8EFC67933CDFCCD567A91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\eu.pak
- Size 1.0MB
- SHA256 e931bbde1b3625d3e90f0e9a99e01023bf993675eaffe3366a290c6932de9a02
- MD5 04e16c8e22aa1a5d3927988af39579a9
- SHA1 d8649884755138b0dc5d6a6ca6b0e7d89ed84778
- SHA512 aa98ee269d13c77b104428c2015ba621c391ab7bb96c0467029c027f1d01f66a8e39064962cde7a9a89233482015b46f8acec6f30ce9ad8bd6b012ebd63c84d8
- SSDEEP 24576:aqiGr3PPFZkJD6fasFhX3xD74h8Jhdn99E6pyuIaUkBhb7I2OM0E1Et9xtfw:TVbPZxD74h8Jhdn99E6pyuIaUkBhb7I8
- TLSH T181352B2AEA16A3718D1023FE561008643DE9969F9B09FF51F42FDA2677037DE15A33B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fa.pak
- Size 1.5MB
- SHA256 6fcc922e90bc9e626316923a6023b849d989bbafe683976cb18c6f1108475bc8
- MD5 378b2e86a861bff94cf897c12925b375
- SHA1 6efa698cb50a1cc48483d3be10b7df03aca9b111
- SHA512 f97baf43fabdb0417bd695d466e920939138df5ecfd5a53da449dfa64ea9dabf202a6cbd0c91cd48f9b20a3c46e17d7df7bccff80ef931772e79ad93e7f6e3c2
- SSDEEP 24576:mmcpsUOhs8pGnApdyiKhxPwFdjT3zTTxLsVYriFYfYBYgGVm2RGoPuhqwwOplv+f:m0
- TLSH T10B75F1956AAC8AB25746C91341D33838C773EF13D348EE40F8A107661DA6B179B4FA37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fi.pak
- Size 1.0MB
- SHA256 ede8977b967a7bdb79bb57b28ac63f4b312c61b3ca94fd37c1185a22c87b198c
- MD5 7713d0b03e4fd406a99e8d9b93e43349
- SHA1 0118548879ba94167aa5bc255785a68f588f7b15
- SHA512 881ab136cd3b52475ed8fb17e48bf303dd133bf562cb7eab5f6f95ec363fba35a437b126010be6a36e2c903176aa660236fe19612dffe6fe09b112f3572d9d74
- SSDEEP 12288:9U5mCwIia+++PlD+1PlpkpfbDcA/8DRUJKwVX9T2:9UYSq++9D+1PlpkpfbwA/8FBOXk
- TLSH T1F1354CA1814AC2117B84529F5DA09439F1E8D3DF8824CD99F94BD2F90BD76C879B232F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fil.pak
- Size 1.1MB
- SHA256 645d43fe8438052c44728b9182e600b8842ddefbc2cbcf45e9407f3b56728205
- MD5 de6300ba04a8ccff5b80c59398911332
- SHA1 4fdc63ec654260f11cf014ecdc5f6e9927770a1b
- SHA512 f2e5888262d41ce9ec7f6603bace90a536f47fe88da5c265ccf1f19abfb0ccee100af8e48c26c72a01b362cb4f129a0e422c1bd6da666d6b91d866b34ac36b91
- SSDEEP 12288:AXqLtOuFcCHcxatarg9s6uY9DYMB5W7Ef7bxmBMEFXsX:TOycCHcxaj9s6uY9DYMB5eubxmVXsX
- TLSH T19835D619A7442744EBC212E60660AC2F76E420BE3F816C6E6FBF279737A7CD4D270156
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr-CA.pak
- Size 1.2MB
- SHA256 a31658e12992008e5965738603beb0d2aff934efa5d6b1871e3394ac3c8485e8
- MD5 04032ab541b70f7cbf3096dcedbd398f
- SHA1 67c5ef931ccc5d85a34665eab323c61a92c139ea
- SHA512 cc4f65443109ba07876d13744520f318780f0e27e76a2c49cfbf2a93ee8c301ec26f9cf7faba555e081ab5503e8cbda7d95559234c218335576d992ceb2e8e47
- SSDEEP 12288:onmvqrACrNlbw5CGkTDVTdcIVjdboTnBC5qNrQ8xPMy656jbtjiTm3lZxNZPEcs2:+my5ecVTdcxWIjbtjiTaTuVCf+lw
- TLSH T1BD45F75FE9C465C749C21263BF02D663E938C299F205D700F8AF4295238B9ECD39B5E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr.pak
- Size 1.2MB
- SHA256 9bc9511beb8790aa8682578bef5b4ca16790a17523b77f0976b7c8bb599b9e8a
- MD5 36e7608e055c34f70268a402a4958ce1
- SHA1 e432ae85ee5821860d066a20b62da45a50ebf321
- SHA512 7c8ac8d489fbd07bc56ce09bb630126886467bf1c56af31fef2e6f92179d9e6298f8c23f0c796ad50f5c0404edfcf15ae99312483cf8acdffa32b80707c086db
- SSDEEP 12288:nH+6kASmHqmbbCjouVD0tZV67b46fB6koUWn+xPsS656Ab6jmbdpxBNTjCv0kkOL:nTrWVD0WxWIAb6jmbrfB3ZxM
- TLSH T13A45F85FE9C465C749C21363BF02C6A3A938C299F205D704F8AF4295238B9ECD39B5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ga.pak
- Size 1.2MB
- SHA256 2b73e7d53fab1eb7f8c9685555a703b42fb9c403b281609ed3f4d524118be317
- MD5 86a7c797cf3d0f980622633b0860c0fb
- SHA1 724c1debd1a294340ea4b575b4fd269248226ac6
- SHA512 0d943ce7cd24607ff302f7c47df14221e65d74b15621ffbafcffcdca8b1b52faa8d0b71e67c7e6c2766bdbac0c32a461424714a49c08b1298c8f3344ef522ecb
- SSDEEP 24576:je2FdTG8WPJlQFyc8sisgovh1Q1+yRwAUThAjtcnt67L3/C0ydzYiJ:0p9LjtVl8
- TLSH T1974519B755B462E3E053728B4381D766F024D5BBF484C8C1388D6A7E2B276CDCD16ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gd.pak
- Size 1.2MB
- SHA256 2f24487f0e032eb10c1cf358b3003ac59ffa4be17f0b00624ce380079275f0ee
- MD5 3927ac2396a3e2051f665dc532a042c4
- SHA1 996e47d1013b490c5b64ff3fdbdca9e39da58f2a
- SHA512 7e59009cfca439a21b39070953f1c2afe9af024cab34a2aae7268e85021d8ff98f97f4a3b57941bb9d16e2ff4b8e38fd22b1095abb1243f77abe9dc03d21c1d2
- SSDEEP 12288:9E9GECza+9vywT9y+MlV4iu5YIcDTNCBMSck8pssJlMz5t1NG4Li37D3UwuLhwMs:nECzbXSI50NCBMSck6BwNGSyoANQJa
- TLSH T16855C8AFA7ED93E3C843D2A50141D0712424DCBAB113D55039AD643A2B17AECEFBDAC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gl.pak
- Size 1.1MB
- SHA256 a9a9762e13b7ec2315b3a80427883e2df6921563fb68c8fd22fc13af9ed63d71
- MD5 5443d751f9f8a848fa39e1894d9b4c11
- SHA1 5b2651f88cdf3b1fc30fbda8b43fdde1bf415a71
- SHA512 011ed3308c2ad5db0f3408e300069d40c83682e24ffa2ddaa682d9cf71161748c836fbc5cfbec4a0098b535d073faebc3c30107b89a23590d4c34a1db3306bd5
- SSDEEP 12288:kfspv6lxEy5wrCuzf2ZRVi4jOkogrztQd:kfMcEmyCuzf2ZRVi4jOaK
- TLSH T1E135F96A9ACC2F22541233897B43D163B5C49147B504C38ABCAF467633D8FDCD167EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gu.pak
- Size 2.1MB
- SHA256 8f62e57f433488baaf934159f9f50c91fdf16d18cc0f85efea81b941bd00cabf
- MD5 077b5f501de527a56ac6bb8cbbff3b5f
- SHA1 1f9635ca38ac48d4655536e94d34ceab6ff84b19
- SHA512 d73440d02698d5febb88748095a2ae343ff5952010ec180cbe7a5a911e79fb7742f9cf14c79c7e9bc2c3551d5268fbe050f82b859d18d5f23cb436e4d9c715df
- SSDEEP 12288:QfB3D34QSGq3qVpwka3lZbypF3rPxH0OLtuTLGbz:sB3Dow0Y0bypF3rPxH0OsTLa
- TLSH T1DEA55ED1C3B9F07159C99F7E819E5120C6699343D67D230011CEEE998802DDE3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\he.pak
- Size 1.3MB
- SHA256 f6a4a38d4a44306b06f84b7b81e486097ab53ee8ff4417c802eb9297390af7e1
- MD5 fd0ad82f042a7da7b9720e61db37525a
- SHA1 c8ae66a8ccdeecc8757a827a9c82cf9b9c19ebaa
- SHA512 fb248c3443ec0d24b0b099fbfe5957d66f2f1e256d17268d05f43a710fc81efdf8559f85d501c2298dfafdb0d15a0129696e98068996d4c13bfca07e2ed1bd6a
- SSDEEP 12288:tuoqW8LybHloJ/iTkSQPux2aYymAkNZXti8IyrrZobRZ1wJQCTVwAYxbJ6JJgtVC:GIiiTu5bw1wJQCTVwAXgznH6EN8cA33
- TLSH T17B55CCC4A1D8522591317AD38FA5FA286FF3C7B62CA27516DB08126CAD374F0BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hi.pak
- Size 2.1MB
- SHA256 70b8c1e4d4bf2f407057537b5ce5eff86563e69f2c986d36203d12560a5b0f6e
- MD5 25014b5728f26a2046374eb9c11ef686
- SHA1 11a0d237d40c6f142302e5008261ba17ad18d9e8
- SHA512 b01c1cedbf7a1a5f50cef4362aed2090d8aa8d43fd2cc2c6c47af7835ded3eb27745992b45dc619f70b43c7bc3f43d4dfac0f882f8b8e44cc5f845e509c8206c
- SSDEEP 12288:TwYo8qcQEqSgX19gbvS0IEEgfC6PaZz01mwuGCPgz7S8yB:8YEPSgfgbvS0IEEgfC6k9PF8yB
- TLSH T121A5370CE7BEF3B55DEC3C9A36880D37C5AC3670A3E5525348D5B3EB9944CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hr.pak
- Size 1.1MB
- SHA256 4a271038837ae558e86560e3cf955ea18e095a28ab2e944071b689aea133822c
- MD5 12a9621e9e91e5c99d2f22ce9030dabe
- SHA1 c4c3abbf4edb3e0125865842caae9fba5a9b0be0
- SHA512 a64227e5fd58cc2854cf8a79eb31350f551e1eedae308fef8e601417b7e0bd189e838e73f9ef5a4fdb1ecf442890bccb4f72cf960a49913c470e7f72a17a0d8f
- SSDEEP 12288:r9Fc/e2YuE4XDKkLH9aY6iC2qsvgYgpMXXU/Wl+5re:r9ye7j4XdLH9aY6iC2qsvgB+U/Wlqy
- TLSH T17F352A79FDF29A064996B3869FA2474475BD45CEE510CBF6788FA12E0303F9C62F8109
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hu.pak
- Size 1.1MB
- SHA256 d91e81e3adcf66d9a0a088b513790500479a1ca0d8cc44db384c519d52f8dff7
- MD5 216de735e27081019c37a69a5a4acd39
- SHA1 7d16cf7e173b95d7592747975f52666b7502a1bf
- SHA512 75ea88399b7c02ade6caefb82c720c1d59a5c5fd68e5c608b7f39ab0253283636406e0554c85d1452d87c55df7c069f0d25e2b25650557aa5a9b1f21874496c3
- SSDEEP 12288:xuNz4AbsURXTp+Lcw3V5yP8SVfJarSrrfomxlfVC8GzeKPamns:x+0dk+IEV5yPBCSrrfomxlfVC8Gfimns
- TLSH T1E9455B7BC765D441EC681BD32C242E19602E841B5A2F6AF73CCE886D35937CC5D938AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\is.pak
- Size 1.0MB
- SHA256 a731a774f3f56ceefdb9ef48cc53d952f71a71a3b2c39188fc2aa241a8b40e1e
- MD5 cf2158da854f7a24b98186bec6f5fea2
- SHA1 5cc2c2bde21bb11bb5dfd747a7e6006c067a15c1
- SHA512 d71e0d1147576ac54cab5e11edac75a48f6936c8f32d78e777246d238b47b9973c410cb883ab9b8a7bc9fa26e9147a8feb0f1ee524bdf099a553097b78b5c6de
- SSDEEP 24576:SmGCfbIwBxxVVO8oO3InO9DYW3cRHThaaCt2kMjdv9NU:xOO9DAHVj6
- TLSH T157352A06B907E21F3ABD23E44A940F653799B7E69CE1DCE0FA5B0127238BF455472272
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\it.pak
- Size 1.1MB
- SHA256 b0469acaf657a9be90d174ff7771f9554d9d2868be23a1d877285da0faaf52ab
- MD5 366658b961e431aea5ccc6e1c63b2f9f
- SHA1 7147f6e2b495b663edfc9cca0053f2ab36f0d506
- SHA512 f9f782710b6eaef381155ab31e1c6808d923d4aa47f3ffd75b4d8e7854f0499040d3bb04f243f75d84419d092ee16e98420d5314671a38bbcc0e715ad943ff96
- SSDEEP 24576:rHZU0dx3KB9O/jFqDFOqVKxqQ9S1xV3C5EfyAG:dFHKSFuV3C5EfzG
- TLSH T155352A3AD9C961119E962396C511B055F67EF8CFFA40A228B95E431C33CFBC4F1ACA46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ja.pak
- Size 1.3MB
- SHA256 91310bc72746351609197b7995c9922ded94928005dfe850b82f799a1307b2e2
- MD5 0f29304878bd613783c0f0714df0dc1e
- SHA1 35c73f8836b2477549f42a863e7426c15f882e1d
- SHA512 473a9ecbe39fcade232bdf79f6f06af10a1357343cbbf46f96b8892b9c9ad56340f0fd697f09bac5f270ca777721529d29ed200f73949b8eda24f2659ea7c6ad
- SSDEEP 12288:mPMsEggM45yVcE3YFyzIrLCHDgRqNaf7VWLwS+kvHVMVo/wMY88i152z:mrEgr5316LCHDgRqNaf7YL/+kvHOA5Y
- TLSH T1E555507CE3C5A9329D6153B22C0E76E5710AEC9BEC923A36542DC034BE617CEE415BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ka.pak
- Size 2.3MB
- SHA256 d1442c0c1eb3be16308a088a701ea10220a09c624f3a4e4b676e15cfa109d6c2
- MD5 0fbe725f0e8b38067de9b42e5eeb2784
- SHA1 b8b5afe5f3b264b5daee5f49e9126b14ff07bd1a
- SHA512 97dbfe63a60f73c89dabb7aca17689ac173035a6b1c76891a71fa1b9b0920c80b640a54ee88acc85363ff1af4a40d346507663a8631595fac71cdc085848ee13
- SSDEEP 12288:JHcp5c+M9lz8Ycc+cXY15NnQarTqQeQWZ4:Sp5c+MnwYcc+cXY15NnQanBeQWZ4
- TLSH T136B57F5139FF77709C5E21154672BB8AB7A48C8FF0C8843FD111F1A27993A046ABE366
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kk.pak
- Size 1.7MB
- SHA256 ce2ec325931e7cdd7d256147159dde452ea288df258acf9a1c0a254a1cadcdc3
- MD5 04c0e643fa472c83831824bb3d3db995
- SHA1 446169e5c32ffcdd5fa607213d1f451c68387eb2
- SHA512 b793700beecd94b7b1e54636685fb5ca17a3189f5036202d3d612de18620630279d8b18c6bf13346eba6b848cddb4b157f75bc0012ba9bad0ea38c681516e6ce
- SSDEEP 24576:6mUd3DReiqKhZf1tqSvOcurDbL5qiWIZVPu0:6mHSvOcurDboiWITu0
- TLSH T10985BB91A64BACEFA311E5922D047A092CE914BDBFE733522415BC7F39FA271463C742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\km.pak
- Size 2.3MB
- SHA256 de1032c370384fa1bba624a41e69905d3bacfa9991eec56921fcd2bdc5389df3
- MD5 f75c36990808a815e72a01a44c9dc641
- SHA1 e0e884b921d74366200a2572743bbe0c67e5d6d8
- SHA512 7a1111916804535a71dcb33dc20dfec65dadf317773fa3fbaa64aaa9c4cb6d4adb96b355150ae2e0d3f2c3d5b211646ee35dbd5af7a2279c25e43fed4c2fa22e
- SSDEEP 12288:RpAhG6ATCHaYKRE7neU3SG4sWAFrgWLxgzmkdAxFKsHPubBUOvSyjNjmXFPUOVuA:PAhGvTC6Lm7nb3PkmXFPUOVu+XN
- TLSH T150B517505E94BD75413E73C3219B6F484AAC9F738C5968CA385C3E9EEEE6F53A20204D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kn.pak
- Size 2.4MB
- SHA256 dec18200942feb4d0cd534e36252de71fe28f77b94775c43e0d552442e972933
- MD5 24b967e0454fc1e0d95713bda5914e9b
- SHA1 cb83fe2fe6fd8476e5c2fb140d19d0b02436c0ea
- SHA512 6724d0d2019ab8875eb4acae97b5a2fa1f42a4c1fe9c008461f4f619181be70db68ccb9c8db889cd7ff087f5f531439db9e82bf9eaf4c938e876ce7911ab26af
- SSDEEP 12288:VXwZqdsuOeSLUekmtmlT34QesM+XbdZFgin++BqOsbN/5AMKDYRBObyhHsR6LrLG:xwZ6ONL1T1+XbdZFginX
- TLSH T148B5FD189CBABD301BD5106B24EC643EDFF16BE29CAA47D2F49DC7402C62C6A90875DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ko.pak
- Size 1.1MB
- SHA256 7c6efc597e3cbcc1801fdbd1bda95f62ca8f30d17564ae6b6e1261d66be8929c
- MD5 cec889795344859cef20c21ade88ec25
- SHA1 4fc7591ca9356c94902da960b4cf7f3ab366a4c4
- SHA512 63cf432f1b313f85be3e39eaea5fd8eab835569453191fd80178f1fea68745fec46503c0c3f5169d0e7db5a1bfb68fae8dbe1adcb1b702335f416addbdf70e0b
- SSDEEP 24576:qHRFP0zJbJtSPPxH1ZfUutjRNOItEiQiFe7I2:uROgNJnQic02
- TLSH T19135E7F238DF67C9159389826EE0FA24A381D9B3EB530294FD48CE049E156C74587E7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kok.pak
- Size 2.0MB
- SHA256 67c892aabd11ea5b0ec7921db88fa69e15dbac044ea0bc5203b1a0fbf9db0534
- MD5 94731d41729dd497f13c3a8ec777e855
- SHA1 ec235a881e1300827f7aae1a3b95fb3ef776c583
- SHA512 c581e739e7f0ac3211bdb51574dabc987516de5b48bce5a5db743c2afdf51af1ab4505ff8a4827cb37ccfec9c44370c95d39cde34ca055838b1c63622a26ed43
- SSDEEP 12288:pDDK1FLi+j9zNb5nCZmiZ8YlfCIY9wYx8le:CFvXFdiZ8YlfctxSe
- TLSH T126A5334CFBB9F3588DEC789E29090D7BDDFC2171D3B8629648A5B3DB4885CF401895A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lb.pak
- Size 1.1MB
- SHA256 022975830e481f5c57effb8d7a29ed69aed5a4e1bdbe50603bd1c51280f7d7ee
- MD5 6bb9b5d21a243dd444d7a5913e9cf36c
- SHA1 dd6fbc83b0765863b537653fc95d3b27edc44850
- SHA512 a1f9f0660852dca5ae8e95989afe59d8baf399adfca39967f8044d381c92e3cd79919baeac565bd7e467b282ace1e7f9189edb2cf4a3e56c04e37e6599e6098f
- SSDEEP 24576:JPhoScqWTofAk1at9Ws4U8u+ElbA2nE2bh0LMHSOh3DN:jcT+U8uHpEWAW3B
- TLSH T1E6355C069A6D09D5AC812743EF01EC393D2BF36BB396F604749DD039631B2E6E19E48D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lo.pak
- Size 2.1MB
- SHA256 a1dfd929b293c776547152deb5e3c7691e96d4f6ac79fa5b014722053b04c690
- MD5 b96a95ebeb54cd4fb2a076904b96f48a
- SHA1 4c4567a58f2e43890a917eba448c40018b95478c
- SHA512 7b033c48940e661c3f5a580dfa0b395550d8ca5f0f60ac288de2d149204d5a6f0c4511add64611a0e6bb01bdccaaa12daeb3df09174865e3378e604c757d5f00
- SSDEEP 12288:0+rvzAi2o/ZOXRxlHGgqCpXjTFfd2WrMHXFESlElM5hDC3OXgvTrkENUOLpL20WM:0+r8McDxGU2WrMHXFEQw
- TLSH T12BA53550A99FA2F092F413537853A6F653B58E38F067B8A03A9E4D785EC1D30EC4766C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lt.pak
- Size 1.1MB
- SHA256 a44e1087ae7fcbf2068a1bdd3286b58b4187a800ffe4118fb20d582cd7b2874b
- MD5 e75f597bae0f309b3cc477e817b62b62
- SHA1 12175aceb2e4f0149a91a8482720d4de12192c27
- SHA512 3500431e595f0553e9334dcd05902452e2ca72eb907b92a78ddc64d61b57154ae876ea5f181b5179689f3085fb8489f1953dfcb0e4d2ad89e90a872124900209
- SSDEEP 12288:TA6mhCmMaX+HU9greLo3LqehF1WWAKoywuLrLI/TRGKYnNu34O8oVd+X:7mcR0448hF1WWAVywqam
- TLSH T1C0453B00AF93EAEBDE4123C641A08D71DDBC5245B626AD20F86EC766D62BFC53190F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lv.pak
- Size 1.1MB
- SHA256 5fbe1c8365ef0ff62b4cf5be9bab30a30081155dcc7f8180cda48168234d7b83
- MD5 bd351de45e27bd8e256723dbd2775900
- SHA1 9143c64c66b0d271459d5f712d4276d8c9d889c8
- SHA512 17b4b941e54fb9cbc6469a77915bd8e2900b393bc579292f785249bbef7c37dcb613f7b83356b28e94c057b9ab7b26e915f08ce3619cd7ff4d94cb9ed0c642b4
- SSDEEP 24576:qv9qkmJ6c9OA09tCnSO8p6Fo5Cm5vU3zEQasf7vx3P64:qv8J19q6Fm5vU3zEQasf7vx/64
- TLSH T1E5351964CDC6CFA18E505AC72722D822B4CCD743ED0AD621FD6D8B3A670F66431B5AE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mi.pak
- Size 1.1MB
- SHA256 fa0819a1228b105990b9475af0f0fec949ad99e7200e8b3efc4b2659613e14fd
- MD5 99f16f7003d69be196c11e372c2ecfd3
- SHA1 5aefb5fc2c1132bd5a40940eaf1bbd39be8ec15a
- SHA512 6238f83d2a2bd6a815efc8022c5ddda1bc57bb508255a87480f57625718b5197d74d2e6e9cca2f6244efdce7ff1c9c8d278e24383200b7b75659abaae869f36f
- SSDEEP 12288:dRzvEybJ4qglJtI9gH2UubAVWOPkgx4eYd:fj5+lJtI9gH2UucVWOPkgx4eo
- TLSH T12535D790A5C1B600FD2607D627A7C927BC9F934DFD22CD177924FA263E4B3A43355AA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mk.pak
- Size 1.7MB
- SHA256 b69a02bfc521755f0f675124a20d5f179130741159c182d4f9d48f5237b89c07
- MD5 77301f7886ab362fd061ad86097865af
- SHA1 05277a218f790fd7a4d51a391c58c2e9cd028efe
- SHA512 d94b66bf8f2d378dfd747481d975f6b4617b2cb2fcc994f4063f3ebe445dbf53bfbff89d191cda8d605b11d35a4b52335f01f7f99725549badf73449ddc62e4a
- SSDEEP 12288:eW7+hzC7bs18OVnt/CnUgTWq1XOTtCQ0Zh96VSwR3/s+1fzDo2xmtlKPV9mBQQc0:T+hzC7q54RuTRSwR3/s+1fr/6l
- TLSH T1108556A15B9E74CB0501F05FD808BE0A3C9B45FE3FAB875211651DBD35E20B886BA35E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ml.pak
- Size 2.6MB
- SHA256 572da5f01df57dcf79ff54b16f7132c5a0d4e9174d331351cfdb41df1c4947a4
- MD5 1c233c14187ce135463fe8cbf42571ac
- SHA1 f05d7e8a6c8cbc4eeee0329579d548055ad9b780
- SHA512 80fd11bd209a0b938e532b484f44853b4a7f9b8424ac44a1b1db52a62738f5c6a667e8bb41903c4f67fdfc738430c02e7d1c9eb2763b03ad28e5f3e4dfb988b8
- SSDEEP 24576:G/rOjHhB0ptfzln7LMmGN/Bdiff3ymL3/77mhioP/hm6meLy+eHxaQnrj99eCQ5J:wSKjM
- TLSH T1D0C5BE5BA436CD3B0FD0021A7B4E2FA7DD5F9FA1409F228B5869B1628D59FBD0C99031
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mr.pak
- Size 2.1MB
- SHA256 5d73362b009bca0366597c3bee4ece843b29be8706fa66c50a9b12e66baeb49d
- MD5 d7d4faa4e06136528c7456f79058988c
- SHA1 2db18bd325ae2caca9a4b3672ca01972c60d743e
- SHA512 0c3bd931454b5db89c1f2c9946f2b1b8e4351fc673270e02d5a63f81137a02ac1153772501f8bbc47e0a5c8f3408856beb7884b692798fabe7820682378ad1be
- SSDEEP 12288:+EHDTGI5uZjcpQxouQuH5V5A+e0hb4IZ7Dpj45H:+aDTZ5kWLuH5V5A+e0hb4IZ7D65H
- TLSH T19DA5F04DF77EF3644DECBC8A36580D3BD8FD21B1C3E882564896B3AB4945CB4019D6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mt.pak
- Size 1.1MB
- SHA256 69ec040dfcfd36518518c0d87a330fd909844cb31f9876bb26f26e76e0c0b679
- MD5 e506eb1c032bda5c9c9fc4889895ab34
- SHA1 5bede13940312aa0b7549568b7122693426a78c3
- SHA512 94a343f5825105f38b26429a33ada4e9072d3c95aff53af6d4ea67ecb83e27eb8e7c995f0d81d0ce95807c15b467fae4c8ae158e0373b7cb854368942196417f
- SSDEEP 24576:INVpbqhpLpbdrZnGwxvSRctply67pnRHzz43ign6muwKMd3sjAYwF5hEBs7TRVuM:IYhnO7fuwK5jucsnRVuSIsYE
- TLSH T1FF454B16A6F25E69DED0A28E8800C736FC5858CF2D53DC417DDE172AAB4FED592D3202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ne.pak
- Size 2.2MB
- SHA256 38487df61c1b9327632b4ef8122d70634b54d6564d29ae8de0ac60bd4b695f43
- MD5 dc0c5213d486ef91d7c8ac0fea5148e7
- SHA1 e0e8e2cc6d7fcf10340549672f780e32b84d7cb2
- SHA512 4b374a775b5bfed9c68b6d99a648ecdadbb879f8cdd33a62a4668c07383452510bbe3d2dd3966eb725d1f1c5403590d59b43aaf60f3620a1c140952f815f2524
- SSDEEP 6144:vdP0rEqAOhdPzeZ3rTnONlHgGH38/Qcsphny:V6EyeJrZaiQcsy
- TLSH T10FB5294DF7B9F3A659EC788B2B4C0D3BC9A86631C3A652578CF8B3D34885CB404D9592
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nl.pak
- Size 1.0MB
- SHA256 d7e7d83d2159f2cf7352a4c3de5c9bfc03f81e806a990f21025fd4006713ca03
- MD5 121f9aea5a0c2d3dd20a7d522fecab97
- SHA1 0312a8d312f06c22e5ec66de11c4dd3e0bea73f9
- SHA512 e852eb93820f6b579cb7388a7a310481d631aaf407e797b7812fac44b9f2dda040f28a8279f43ca9c1e09b9457c90ab3690808c3bab1707a60c40132b890911d
- SSDEEP 24576:+hg7/fYV0Ab1gnQNJOY99DZgTaPpAU4guh2bN2B:+O7/fxgm2N0
- TLSH T1BF352C079C8D593E99C0A38AFA044A77B72DC31EC6ACEA7CB4DDC1381613FA851AD5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\or.pak
- Size 2.3MB
- SHA256 6c3dca6a483290cbbd113da16c916ea35830775bfa91989469530f7a568c56fd
- MD5 47d8d82de5ba71509ff6ab1230e8dd37
- SHA1 bb2d3caf86b65a41f3634ec59d0495290223dd6b
- SHA512 61d8a269c2631cb36f6907d221b63e3f263914a60aaa395e5fa65a16c1a1024e72f4a7cda4014d31a1c98eba5dbe5f855ac570aca2ad43cd33a5d553b375f5b2
- SSDEEP 6144:1LystyBgp+n4PE/UVrYkqfh6Fx4+H2yQrForrJgK0etKfrb3cOZFEl60xMoJuQpl:Vyq44PwUCk8Y4+H2yGz5ZFE9
- TLSH T1B9B5F320EDB8EDE69CF143A4B499E239642D03B5F9D76BC90740A3C30922CEA4FDD559
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pa.pak
- Size 2.1MB
- SHA256 32eeb25537d80cb64d95dae54f21e7592c28800b524607c26950532c692fbeba
- MD5 9bafde0c9373ca82e9b56d44ccdef235
- SHA1 f66a766f95b529998ce7e7b1aca0f82d8e405db7
- SHA512 9b98e1a4d8aad3a5d621fc98716a61679ee7e1321a0ed9a545cd087816c15490daa90a5617f68b55a9a76a9fa3d3465548ff2c99213f1d3000b633eb9211b510
- SSDEEP 12288:Ze47OYZNS2L6qzAHiEL/PHXxGJtNMosQdAZ/z8ygN+nvjy5tw5q83py3IXqTEtzL:POY+NhYC
- TLSH T1ABA56600C84CE2A68FD8195D56E6977D10960D398CAFCF6D8580C65AF6D8FC10ECBFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak
- Size 1.1MB
- SHA256 d7c531e360d3218694d656492c5f1553e4e6cba735bb4c37d3fa451ac488cd71
- MD5 05f98ecd461ca28407fdaf92171154bd
- SHA1 1b9f3ae1ac5133a1370bf908308e3a4dffa71580
- SHA512 60fea8f61ec80dc6136684cecfb21bc6a0cdb308e67890a22b8cf6e2aac406d2689527db69384a61b77f5365a673c4ce7ec7157707a18bb65ac9c852106fbc14
- SSDEEP 12288:lLIyNQ4qT7jcHsy5NxdMbU2VKKEq9VNNyYsFu+KU+hqS/4p1ecbItP4paTbuQi88:lLIMPqTcMQjd0sKEq9VNNyYsFRw92bso
- TLSH T119454A4DC5E5DA0ECEA008C6F5E35F3878AC848BE519C74EB45F8129730B2DE95BE498
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-BR.pak
- Size 1.1MB
- SHA256 c4f2a6155a67888b1a3ea81a853eb2fb14c22920c1ef25167347c828c77f6cc2
- MD5 d1599464777ea73f4f746223cad6fb29
- SHA1 004a1dde82f56eeacbf69780466e1ed2a3947572
- SHA512 044da84cb7b8faf07149b75bdfdcca8602c86a4bba28d8584dd4723503c120e01d7fe6d518f0f8fb13e1a8b473a0a4b02e07c8c41a6d2a847c7a0b3e036c2f01
- SSDEEP 6144:I+SnuNeJSPvTJKPA/N8uXQcGBqaQ+098MgT6cXwx/q07/eh0Y4wKzOPVAdw5CyLm:Bv6cGB/QfBY4wKzOPVTLzbl6aor
- TLSH T177353B299DCA0722452213527B499B43F1C85647FD09CA87FDEF8B1573CAFC0EA63A25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-PT.pak
- Size 1.1MB
- SHA256 6c97709173e591ed7f137a8d0f20dfac3d16ceb0354237513f318afe1a3a7487
- MD5 f322f666b06754347e78cdeb9f9627a8
- SHA1 c7cba30e6984a4b6c8ab2edd0c35f78fc0986946
- SHA512 404375a235ca961350a2c6e69753ef92e1b1ad8673b185c69d87e6341a4770df27aebd3e598705ce0d58d33f227340c1779049cc7f5fe905cb82caddacb80965
- SSDEEP 12288:gBKMuK+W+Jv+IJ4obNv/j4ZP/eeRqcXMfmzSq6W:gQv+IJtNv/j4ZP/eePEy6W
- TLSH T13A35F9289ECA1722452213927B05DF13F6889747F809CA87B9EF475533CAFC4D2A7B25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\qu.pak
- Size 1.1MB
- SHA256 bdfa3223a260bdd4969f7c83b4a8e09d722cab90f83785dcbb484273647735e2
- MD5 37384edcb63f804849f6973eb56a6ce3
- SHA1 7ffb4dc087e383ef8abf955808b83b372c29ee58
- SHA512 d328641de9f364d74288a14c19a0e9d31aa9f12b9f355d4a8f841159b2978737808884998c00ad6bc5907a68ff553745994c29f075213b0063c37320a5415573
- SSDEEP 12288:ROJey5O05+KjpBMJRrOya1hUD5f6Go3F3zLVm/BaAi:R3y5O05nCpa1S0RJVr
- TLSH T1C135849419EA5144B91463C302E99C6320FAB2763CA0DDD3B87D1B6C5B4E8DEF1C2F66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ro.pak
- Size 1.1MB
- SHA256 d0ece1ddee3e69b641752a263ee7521def6cdaf738ca2121e21f68da38aaf814
- MD5 8b118e28226efa22ceba586cb9b8a0d7
- SHA1 38ce702ea3a1f3942fd4fc6cba96e36336adcd7d
- SHA512 0beda35957bf6f6e92123dff3d57f810598ff729e6fb8682330b08000cb065c3b2d351800a42ddb2ae520cd0fabe998e92f383ac4c5a8f9eb4ae40924600d9c0
- SSDEEP 24576:vouNv09/0hf69Ur4h8bCDGe2uXsl1efHQHflduUuVBRTlHCBq:vNvzbCDGe2uXsl1efHQHflduUuVBRTlD
- TLSH T1D5353C22E5C856521E4113A3B72114A7F68F519FBE01D18977DDC4B822CBBDB812AECF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ru.pak
- Size 1.7MB
- SHA256 8c391a0b3e23764fefa8c45841e631e906bc10f79330fe7dadf392ee1e60f40f
- MD5 702d8560286774c0b57aa44042eb6eea
- SHA1 42f900a73200257c2d3405bcd82ef22643c2397d
- SHA512 a2dbf7538286287c61b93ddfd38fe0f07119801f0b114c9716cb7c566e2a98e6fa846a9d586e5cd0513de8d8b277bbaa641447fc20c7a4008f8fab257063ce68
- SSDEEP 24576:F4P6md2iPho3QJux3Os4u/xjjJM/Xc3/EWy:Q67+s4u/xjjJM/c3/EWy
- TLSH T12A857861569A64DE1105F01BDC08BE0D7CEB45FF3FABA32229682D7E35F2024C67D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sk.pak
- Size 1.1MB
- SHA256 4f0fcf0886b78b7d7f97b35b8479a0c5b7fdf5949be3846b396802549a30af9d
- MD5 8af0b97b714f54a4e4f88fc2c6c1afd0
- SHA1 2e4f7c526947384c90cfb95b4bf958e83c334333
- SHA512 0be63d9a845cb9ee98bd1799fe2e195d95315cf69a0e03756f156e8beb9d349da121eee54aba794e77c358ebf8a804bce833de7b7f2d47f96a0a55933685a013
- SSDEEP 12288:16FpxpY/GFiQpfTdbjwoBXmgU50qo0MaTIGBN1bNHA+A6dX5BJzhZGHJkctdNOWG:ADxG2ptUpo0MaTIGBN1jdcJzq3lfz5t
- TLSH T156456E7FCAE5880ACFC90345DEA66410B97D02D7884EE9A4B80E324737E37DD86B4D59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sl.pak
- Size 1.1MB
- SHA256 f28954e21b7c43cf5f7fac6b1ca8b7e1d74ff0c4bc55e2974851c178d2d30a03
- MD5 a8a758c411bf3b87c3de1865da9caeca
- SHA1 c97406acf3b68c67b4f6711954b2234ae34af08f
- SHA512 3ffc25678bc81c896fc257874553dc637b42a6c70724bef33edd4cb0c3f30c1473e8f1ac4fd09e14279043b32b09dc5e48f09149bf70763c1b8ad5a52ddb2081
- SSDEEP 24576:8l9+oDUXy+x0utAPdSYj3eJ2AJBEOeyszbDN:8L+oD8nxRgAJBEOeyKHN
- TLSH T163354D39EAAB8E0F0D6672CBEE9206107ADC458FD241D661FC4F336923037B863AD554
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sq.pak
- Size 1.1MB
- SHA256 98ad0513a01c7d80aaa4ec1dff7be5682a047a83aee33dd3938acec011b5ad72
- MD5 15a985d0cb228bf8005ade8d4fce3199
- SHA1 f7add701c763faaf735cfc28d13fa00e14181ea0
- SHA512 0f6010fad6a38a89ce076f0c3a40de953193e2f4f56f65894f092e950bf6b507bf1f886b6638a36ee68705ff2f5d3e9e7dc433abbf805f60103e27d29c029b62
- SSDEEP 24576:CKAuT1MxAqg4mT0OP5MiaV+F/BtI4OASE2a9IVY8bKbg2MtqVDzQ7kQ12N8LxPqM:z1MxA54mT0OP5MiaV+F/xCVY8bKbg2Mx
- TLSH T15F35C526D9B9C776C517326A6B4009092FFD626F70E3DD2DB88AE227053377D4268D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Cyrl-BA.pak
- Size 1.6MB
- SHA256 83f3566eba5dfa3f9af602980148d2ddeaed89ca4df05238f31c116d252d58bb
- MD5 e973cef542d0f17d22e1b7a285e46533
- SHA1 bb0b58ccf53e941d4dfd43dd4d3292064f60f843
- SHA512 dba41cf8cf9e76dc0eb5dba6fe39753c5a99dc8272e1acd1b2ac14f0af3a09b799b5bb5854a0ed3f05da65b8a8fe24d888964cda427bb089d0060df05b47d573
- SSDEEP 12288:EVxrKI6Q0up05Vz7/hs2zuj1Citq34vgXBc3FodqXl4M8n2qkFya7cEfU8gnrmSO:w6rSj1Citq34vga1p7gnrmSipfxdg0
- TLSH T117859AB1979E64DB0501F01BD808BE493EEF41FF3FAB875211641DBD35E20B846A929E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Latn-RS.pak
- Size 1.1MB
- SHA256 4478c2bec114407adad9ebee3b557fa06ce1cbbe37b38c97f458b0277eb53dad
- MD5 7e34f3dbdd3f6456e610a98be3426acb
- SHA1 755f5f5959d52beb1b3198870756e271e6323294
- SHA512 60b82e8306e4ca70959148b36ae8576e1ae2f53cc748f8c2655fa04c390aa546678c358c3760bd557ebebcef6f000783a1565db71bdc9278842ea99a11a00b0e
- SSDEEP 24576:RJaHQNMRrh2asunAa7iI/MgKdYurWV/upMf:RkbRrt/qi2p6
- TLSH T19E353C79FEE76606499323829F928750B9BD89CED590DFF2384F922E1303F5C65B8148
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr.pak
- Size 1.7MB
- SHA256 ca47474174c2f4689fbdfe92cc8497ae58caf85821dd8188f3326208af6ea412
- MD5 c3dfee60f081a781e45f1bede0ac0afa
- SHA1 0cef1f27d117de9e450b8362190c6021dad9e586
- SHA512 5c5bcd8ee942cd98a8f5b891e7cf77df9d9584ac47c01dc7e482a8974065368700f8e63b0b2efe68da98e6ffac6624422641dbd738f503c3f42fd7466ad74628
- SSDEEP 24576:NeDCVDgJYnErvrDtRD0Ya0FVnEBFza/pdnNtTRAHC:oFVnEBFza/pdnNtTaHC
- TLSH T12D8569B1879E64DB0501F41BD808BE093DEF51FF3FAB875221641DBD35E20B846AA25E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ta.pak
- Size 2.6MB
- SHA256 b39d8631b485a7dde56eed2428ec8ca8831b97c71295ec0cbeed79685023e41b
- MD5 747285f775018ad766b1665ab98593fc
- SHA1 00f36c5247c864c1e4f71470eb217d711e0ab1c5
- SHA512 dc4d38ac098e7496ca18eba07d5aa61b6d3c33e3b1f0963336199464ff2d9c4ff5255a9d0831f0d9884b9cdf9420f87efcd5fc367c5c52a279d02a6ff555548d
- SSDEEP 6144:3ZlozG/nn9MaT15qKBeRQWoTsM1vQo01kFyj4Xb4uQ1nXJlcAKSE9GhVY0Pj8H7a:bYUneaJsKPXTzGpY0Pj8H7/JnqMuG8
- TLSH T123C51ECE923EEE890F93288F0318536912986255C47BE3A67C765E1198ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\te.pak
- Size 2.3MB
- SHA256 5eeefc7a4f0c88d50c39574c6d63d0904463fc3835988d26ced35f8abc4ae144
- MD5 6c4e0bc8baa00f5e9da690b3304117f3
- SHA1 5710926028b8b23b6ded43f60f695aa24307d49a
- SHA512 9dd6c78f6a8713f1a4522bd44215ea93e054bf4f23cb43ec9b0f1ce17f5f6f514500cdc1a861616b86250bd03e04fc08d064c6d0d5530f58a42090aab5f8c8ef
- SSDEEP 12288:g5qRtrFRXvl7lHMHWAQr2o4uFaAeM1fxCU3hkNu9pX3SHLVr8DVR27nlYkAB3cW9:gYRtbfdlHM2U06hXBcpSIKcXv6J4
- TLSH T199B5D002396AD210DBE702B7352CF56C4A781B42A1D6732C1EAF9357EB47D7E0883676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\th.pak
- Size 2.0MB
- SHA256 6a3eac61febd37c034145f2119df8bcbaf8459cbc549657488b480e1d831c80b
- MD5 0bec08415a6d286237377331fde7b5f8
- SHA1 cf1c31da21596dcab337bbea00f617c6fb633aa4
- SHA512 0f4391c70a61c58f7225cc642d6d6afcd38b6d0628450726ce2047dcdc421f48c2d32d263d5a5cd1428346e5ce1fdf06550b63bc05ef11521d561b76e6c100b0
- SSDEEP 12288:0eWe2Y8BLOp3BA5jLklcnLknCiayFSfZkSLLh5egAI7aMzaIVv8IaSEBWUZUepUc:JWw8Ry3mWY/A/T4KeZYH
- TLSH T1C7A58AB3724BDD9479441A5B292A7784667DEE693F73F8E000C9211A73F071A8432EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tr.pak
- Size 1.1MB
- SHA256 c100920c905d611d15692e16c5fbc018e85213f49b1c8d74588662fc4570cd6e
- MD5 dfae0a8ba6ea63e8807da822ff467778
- SHA1 d867d0add4f1dcf46620e59f7a85f51ec94d07c5
- SHA512 76a2ad6bc0522a89d3d167bc29a5616cc5f352448aedc752ba6884af6d391f243567bc1a298e0cd5e371e165d2f15f1a1b6e3fb5ffb2a348316436c05ba79c6e
- SSDEEP 24576:1JX6R4GMh1KyRUTIItIMvfsSl8OFlTcNhauIU+TWGVtSa3I7DALqxGvLy:PHKyRel8O9uIU+TWGSa3I7DAOGvLy
- TLSH T1BB35E8417CEF681C8B7527DBC5A50976F89F47A7B330E54ABA1E8626370739702E260C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tt.pak
- Size 1.7MB
- SHA256 e477c2453e0eaf31e91713f5e27198198e60d85280504f36b5cb76342911f0b3
- MD5 c7811d5c597b524618712c2286c471e5
- SHA1 85e857ec75f54444bb4394dd21ce0c17757e1a19
- SHA512 918ea9c3377523db9504e230bb1cba4d7ca2565f7e603ec0d2706b0c0f41fc443451a09c7800f5c454c01fb232c951b2c99d6a62e22c43aea2bf80b474728326
- SSDEEP 12288:tb9vzwjiud/Zkqj9+53GGOl5EBVW90SuVVyyGKwyNFPxIzVPeEwiNwIN:tJw/ZkyQi5EDFVVyyFbNBmVaK
- TLSH T1B285DC51A68A28EF9241E2423C05FB487CDA54FD3E0B7622641DBD7D3DE327403AA75B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ug.pak
- Size 1.6MB
- SHA256 228ad04a178f62959f921fe858ce527d560754f15245c10d90b5888746197659
- MD5 1f1a8bc76deab0d5753f12d09150acea
- SHA1 683e9e5bf8cf81575d014f5f91dce6683835437f
- SHA512 36f9cb1a011ba124d479156cf2cc8a6ebb9efa779b5d610d1af282a80d789dffe6cf657bd1d10b8a85eda0e98096edc8e90038a9662aacaf15c3f9a27559a1b5
- SSDEEP 49152:ZiEwBXwLgR8Z2a9P3VhKXHjKMT1Ik8hi3sn8ejH1D4CIfyylTWzA2HkQRo44Rl7m:MEN
- TLSH T1CF75CDED62650232AE47E91EC352B024DB3A3D338F02ED59F1476205CD871697BCAE79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\uk.pak
- Size 1.7MB
- SHA256 38ca97c9feffdc79126e9b5982c7337afb46e73dd835bcf5db7c983c15337aa2
- MD5 987b0f33af1b74d8a016cd0683b910ff
- SHA1 4ec54bc0fe9a2c97a995e7d4b849b71daa7283b4
- SHA512 897a735c2ee1975cf3b948af8dde864a10427747009424afc68a8239919ff68ddc686edd7292fdde5aecec3edcff2a8728d18c3658d2434646d277b1751ab5e5
- SSDEEP 24576:IV/0QpnaOFwyIz7lpifV+HO7QSTElfEO56Y87bZVM855:isaV+HO7QSTcMO56t7bZVM855
- TLSH T14385ABA59A9D58DF0105F05BE8487A0D3DAB41FF7BA7871625683DBF39F2024863C329
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ur.pak
- Size 1.6MB
- SHA256 b69ee76a76cf7c61fa537991035e1958febf13a2cf35dac4c6f9e457368d4034
- MD5 573bb7ae3d8760e21b2bb5884a785b8d
- SHA1 f925e535312ce681a943f9c4554a42e11937bc4b
- SHA512 5855c791926ef0168fe2a9b3f5f567088e5ced855952a9e56a64356919332c4f358d4b4c63803a1517734ea6fe6464101e901d38148fb89b1a9170d6457656d6
- SSDEEP 12288:CJEQLYHQ5v9AOmBIFbpbyDAdbEfO7PU6t16fE3CzZcPJKD7jMczoqUOUgPzeganp:CGRHc1AsFADAds31i
- TLSH T1CB7500D2E66C96B28A21996780D33C34CB339F13D34AF285F56246C54EDA1135F6CE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\vi.pak
- Size 1.2MB
- SHA256 e7b64813c136666c821c3695ba39b4e991504d2caddff989509b8f83fc8717ad
- MD5 c2ad90f60a6ee551e4caa947815b2f8b
- SHA1 52c74d3e06819ecb81e3d70cf93ad6c858f63b5e
- SHA512 b72ac9d86cf60711a5373ac003bca480ac423a930e79fdce614398d3d655cdd9df173b41ba838b4f42d65209425f1cb8b5aba59f3f6fd591c6df0f425dd2a866
- SSDEEP 24576:hGv2j4SIIKckCiBkYqTsJcEjTrqVluxxrUC9VTPpDroAGho2qT6ZWXNilJuJotwm:54Ho7
- TLSH T15845A41106D4702281AC163EC1CD540DBFCEE46FE781CFE57AE819787B232A56F25B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_100_percent.pak.crYpt
- Size 1.6MB
- SHA256 8f593f8c6ed887fa120c611558195cbf74242da14a174385431aa6f93fa4287b
- MD5 c27d946c6226756c6f4473fe72cea93f
- SHA1 b67adbb02fa5125c9b982e680653600bddaa0060
- SHA512 2fc6aa3d6296cfb1b8e7daf7a0818373b4d046dda58a27b3cc2c6b2f94b7f7476be9ed181e6fa36b0377ae3b594e9b48660dc70bb812ae35a046e4c3cfa5472b
- SSDEEP 49152:N3VnMw4X+nMS6P/rRhne7njddl8PJjw+TucKsDc:nMw4XfS6Pbezjdj8PJjRTuSc
- TLSH T19E7523E7B770EC7DDE6B1373936A26B1ECB30A2D1691510D1B8AA8392532B48C4D57C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_200_percent.pak
- Size 2.3MB
- SHA256 170faebc85ff708d0f985326e4423b50c6191107fea55cb3e87eed8b8d2adf43
- MD5 50ae738d8f313c305b430fb6c3b7d8b4
- SHA1 80f9dd0c401ea14fba061b7748d0f6c2ba5415b9
- SHA512 aeb9d16616240926eb91ab88c12f7ba4105d59c5bc34f2ce2c8e3ac466f744dcc02bdd2b40b203cc15c61c12b6fe01a0d178ef2168a00f112569ff32814b198a
- SSDEEP 49152:/T3DMsOQbMFX+nWwC3/gZZc8khvfRqv7Ijddl8oqzuSXADUNaTaurkbH:3DOQ6XpwC3tJhvfSUjdj8haSXADUUTaH
- TLSH T183B523D7A375CCBDCD2B0BB3826B01E4FDB3156A0272111A1A36AD3DA535B4898D67C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\am.pak.DATA
- Size 1.4MB
- SHA256 417176600fa3a35cb1a24bb0b10b7f1e768e1577aaec7ceaae4796c4e7fa51fa
- MD5 170dbaf856e68e9364455ae2c88a935f
- SHA1 3b9e00d98136b5fb5e50245b564b9a664b07f81f
- SHA512 1e1cb3f9987db1a9d873a421afa4cfac45a538d09f29f69326f8d20ff52b609e8894079af4cc715a11b186aab9573d04209bcf228839070b228d7881f132cb97
- SSDEEP 24576:EL94CtfP3a8WIxhulYHmAi0v/Sl0zEjbvSGnzmwJRAelNTLwPZvYqyOQF2UwEneR:a94CPRo6
- TLSH T1D565EC546DF9F7170F8E4A1994211D4FA5A8AE4692802C38D35BE3FC2B2EF5B4CDE214
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ar.pak.DATA
- Size 1.5MB
- SHA256 c761e6ffd8ffa7c019fe79bec154618db002eeeea6c29effbc6ee2461d11d580
- MD5 4b17faeee4c8699c51e8c632dadf2f85
- SHA1 a919d9adef12ce9d73731326bf41d45e376fe68d
- SHA512 7e1c70c8856adf7944138909b8f62024983524c738f1fdf535a196d11d490f0c0e984c037430b19bd7c0de4d1d5d5c96ae22e8543ae18dc57d333fdbcefa3386
- SSDEEP 12288:baz23z6Ungj/HNxkjgmOi505xJ3rIGGqrgUwFA3FccMGQ4Hb2AxkeTsqO7leiwQx:baziz6Ung0OJ3rIGGqrgUwcc33J
- TLSH T18865DCF21A2684720B96DF1FC1D23568E872BE23EB4BFD3134974A2156D7513E28E235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\as.pak.DATA
- Size 2.1MB
- SHA256 83d01eea0656eb2a7e110b8df3567c438ca31c91e8badfa2dab6c33c9b49934d
- MD5 f4381600d6d2e2aa94a3d152161e180a
- SHA1 144c3fbd6da2e5631572665f5bb968763310c93a
- SHA512 70afd84fb32a574088b3edf95a1e08332ab9e4aeca964d4b84974bf4f80a6910deab3bf443e25487a80c3d5e74baccc3d2c145114b977f1038a59f683d2b14cf
- SSDEEP 6144:r8L/6vE6OYCUjyHUZzsaiJxFgov7HonWjDEXIoE7jLjCSvIBjU9YWKi0I0qrKplZ:aCv+YCUjyYDa97/slHSfdnWoCSEX
- TLSH T1F0A535248CAD55B6A8D5DCC91F0C6330C127AD5AC7A5F708CC0BA214799ECBC8DAADF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\az.pak.DATA
- Size 1.1MB
- SHA256 c3e32c8bdc96e778ed7c2c73b01aeedbd3dbcd1cef567c2296589709c9d8b0b4
- MD5 e33a78afb11c86722b57d15ba9c049fb
- SHA1 e815dbcd05db5d07e0bd19a066b0abd4cba8faf1
- SHA512 51b2ef8a9eb3b8f16de0b40a3c8a07b9a7927690687e97407c8db2b2fc8c2e0d788503f21ae9d377d823eb74406b61213921e7d0d3b31199ec3f9715c072b42a
- SSDEEP 24576:UhDuel3/4gTS7EVBc85fMRGXoVzPVTh5I7t:4K4azPVh5Ih
- TLSH T108450845694ECC0C46ED138908629A76F84D7BDF7192A2536A89562C33CFF538FE078B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bg.pak.DATA
- Size 1.7MB
- SHA256 a1fb6fa1e8f190cfe9f3286a4cbc695ca967767450b6be3337609317c516681d
- MD5 d83cf82fab6976f0d38fbd73b833503a
- SHA1 650999afc35f436d015d585cb2be0683d4d65d53
- SHA512 a144c26327b663db7dfb4bb4736359d1e4c32204d65e4fd7bc1af5e9bb9ba831b3a0704b7d4d043aa0844de9a8abfa2dfd27e457ddec7b5126cb4862fd64a560
- SSDEEP 49152:/ywuhKO/jm28eVOEpknYmLWLjNmtuzLMgJkPRucSg1gQs2u:56/rkupJVam2u
- TLSH T1D28546A15B9A688B0101F45F9C047E093CEB94FF3FE7C79251642DBD39E20B486BA61D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bn-IN.pak.DATA
- Size 2.2MB
- SHA256 8eb9e4b909ed28c01cfad5c558c2cc9b2211f204964529abd87cd3664869bd96
- MD5 e4ac15a78e892fb49635dc9fb5155dad
- SHA1 6b72bb75d57560a6b0515e7d6652db8222d53b7a
- SHA512 49177d0bbca22ec0db202e5b11a4258424d4114af61931c7514ebae77e7893796e2e483d976d67a2194d3c97431ae52460f722100e8c9d2c5c69f6ea018a7bea
- SSDEEP 6144:bFYazEEOPJ3NMiasKyKwu3fzV633ufFNmpWx9fhkNohDJAgYqxMKEBZ6Uajxvjt:pqT9+XzZAgfhkNohDJAgrxMxj6UaVvjt
- TLSH T125B5F2209C6E81B2A8D5CDC9434C6370C113AE979B66F748DC07A2553DAEC7C8DADCB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA.crYpt
- Size 1.0MB
- SHA256 e62ade90c7c881b140a1044e0732a0b039912846e6b60b897e4d517b1b807a0b
- MD5 120ee719bd27567f2171883f7b6caa9b
- SHA1 a938f8ee701abea1d6fd1827d239467bb8279321
- SHA512 d78cedd6bc0d527cc7f79d9cb848ca49c637c826140d710ec28aff617eb924c610b202e36f8ac6c67ce9feb3d4eec4a9fb39d51c1e4bc29ec1df02106b82c3f1
- SSDEEP 12288:HzHK7cFxPgXVg/maAoKs0kPUOs0053NTeMpH5pW/ZYEwBqHY:HzHvFN8qAoKNkPUOs0053bpZp1q4
- TLSH T15C352A7DFEA69B06499363829F96875078BC49CED454DFB6385FA22E1303F4C62F9108
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
- Size 1.1MB
- SHA256 51b1f2191590deb391cee037c98bfc497e09e663fa02274a60d32b8d3290477d
- MD5 6fa25a60a813dddf63802aa80fba2d86
- SHA1 8b18738f550be42b622c75bf38bcf4a5fc5ca223
- SHA512 c1f515943ee8dbac28116b2eefb4b21cdeb2f500c4435b6971bdf2e8a9ac451baeb4c7790ac853ade1038faa667ca1f53d0a5b32f79f66c443daf045b9e5c427
- SSDEEP 24576:6i75JUhQllXogynNmVtTZ1N2ybzhTvP8UAmnkl46c8:uhElumVtTZ1N2ybzhTvP8UAmnkl46Z
- TLSH T16F35E822CBC96F6285C2331BAB41C527B08CE986BA15D244F46F062933CDBDCD677AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca.pak.DATA
- Size 1.1MB
- SHA256 e6a292f96f5b2d68f9b5ce5a739f606d34aff4411d9237ca148250c1fd5a6df7
- MD5 56edc113b747830565d1de02ae68e398
- SHA1 525296f6078105d5e335aec81176707f8c3c5933
- SHA512 e144bbc7083008ef46093226ac1abbb10876c425d720c07e4e6f617774190b3fd0f8292f9c7a651f017e10aad9a6b415a52b044b31ce48b15b03786f6c91aaa4
- SSDEEP 24576:wfL9u7ZWeCIj4rfR4569rZhT/aHGLZQMGhjDx0X151sHiDBEsUWUbPxGUTyiN0ds:M9u7QeCIkaHGLZQMGhjDx0X151sHiDBC
- TLSH T13C350A23CBC97F7284C2325ABB41C227B08CD9867A15D294F56E061633CEBDCD277A95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cs.pak.DATA
- Size 1.1MB
- SHA256 50719054c058962112a802ea1d99e25d1cfd28af9c417383d06e5e5fcae99444
- MD5 0e86ed3d967d0a29fc923778ee5c3f62
- SHA1 a34ff8df26de810e0937f5a380f54278dc030d39
- SHA512 70b4018878f56ebc53cac4daab2665e2ade5d104c132400a6faca75c7686833490def895ed832e49efeff07a8e6ff1af0c9c029d30c7b73ad84b3692dad1ee46
- SSDEEP 24576:CJ0skVjGQlF1XW4a0q4cbHPbFv3Xg8hPlyUZg:q0ybHDFvHNhjZg
- TLSH T15C358C2EDAA6D521894013493FB94024FD6D43560A6AE9AE7C8F895437737BECFF0C18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cy.pak.DATA
- Size 1.1MB
- SHA256 ab93185302f0fc839c0c52db0045060c6d9edad0b8b0b3e73c9237d73ea8e244
- MD5 f27e77f7e1232ef8ffff0f8a46c0ca03
- SHA1 c82bc036d94ce0bfb9717a05e05e8b6386491f97
- SHA512 746cf0812f7d421439f1c51398851d288402211eb51cd85357abcfbd93afb06552af39b562ff8d693ba78e633610e300be3a7691dbf6106b743c9f52d4c0c862
- SSDEEP 24576:ajfnPdC3pyO7UXQiC57QoklN/n202XdQt:w43Jox2X2t
- TLSH T108354B0BE8468F97D20977A1C95B8E39B91AF17BF6E4D481701D052C27233A0EED978D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\de.pak.DATA.crYpt
- Size 1.1MB
- SHA256 13eb17d6fdb3c8f7be89b2f694d33361ef0195b38546a7716fe0727471b18546
- MD5 e0b3b4c7858ce409c09f307250387bee
- SHA1 3ccd9ea8c5b812189565cd19799761cde3dd7c18
- SHA512 f597260e4bc7095d654ad4c55fc6bc902c2f5d1ac1c815894d6933d79a94ae6f98adcde9bb15620c08c071c56dd5ccaa1f55be8bba0b646b2375062ee8736c1f
- SSDEEP 24576:RX4bGespn0mp1nVT16h1RfGiNQ3twsCdRnZcKGwt5rCP:RX4hTsWsCPnZcKGwtq
- TLSH T1EF351A13DCEAB25ECA4737652701CCB7771EE3AFC389B65A605DC07A230B2A5829D171
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\el.pak.DATA
- Size 1.9MB
- SHA256 9dfd493d4f165491155656530c01afdd1ab02689320b4ab47b948afa2b836311
- MD5 6bc040331d3e81396df1fab2801872fc
- SHA1 ceefe5df7e63814f9c8713f32a8fcf5c61224988
- SHA512 bcee8c031b73cede668f442fe1fc16b16e2b3958b2443e29b75ed8e0aa88a1501f26693ba1ef5c14ea9490d6cb089f6906d3fb9d66f858006952cfae6485932a
- SSDEEP 49152:cnAM9nDMiUFLVKLhDFyxXvpEbEFfUz0QM/cRRGd0SYZ8GYDWM74Zjn1bz8ZylHp2:Ks
- TLSH T1E095D0EFB4582DED8045950785D8A07C37C66D6DEB49CBE8622DCB20BEF90719A11E0F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es-419.pak.DATA
- Size 1.1MB
- SHA256 1ae92b3390c2007eadd5b2aaeda6a0c19fc596f95c0385ff8509b31d23ffc270
- MD5 040421dc519031c9dacf319e2a0bbdf1
- SHA1 178bde05e5d5e769012e8d58c3c1622f9c82bf35
- SHA512 a31767b7dec40af2f811c65d91c9ef51abb0eb592ebef3f286abd1d7581ad416089de25ae52b9485bdef9009ec0e9bfb90508da22ca246b725cd52a368411546
- SSDEEP 24576:RyNu8NrEgqtJGh0wSO2xDIpTL6OkiDBvAmP:7BxDIpTL6KDBvAmP
- TLSH T1D235F826AAC81F5340D32386B743C667F4D49587B408C29AF8AF966933CDBCCC567E91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es.pak.DATA
- Size 1.1MB
- SHA256 35e3e688080e71a595c225ec85f0e14821f175ac56bf35732ec52e0fce207a6b
- MD5 c0e2ad1e1a8e2c4bdee50b29b9af077f
- SHA1 e112b8dec6dbd1d5a2ccc7a2cd034b362cb6c88b
- SHA512 7bddebfecada96e90478f57222900091416fe72b222b5fa5fa7325f03b0d5747f132e57c3708bf0aafca35fb685aaf81856c31fd1e64f43bf42630a522acdd52
- SSDEEP 24576:S3zxugIcQFogVtlef1BikKXpzHR3XkNJ+Wf:9ARKXpzHRENJ+Wf
- TLSH T1FE35F825AAC81F5390D22386A743C667F0D49587B408C29AF8AFD26933CDFCCD567E91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\eu.pak.DATA
- Size 1.0MB
- SHA256 00e0f91a270a7cc67114cd43975937e7ba628439dabff908bf9bd900c3393e63
- MD5 485f6a1fbf26427c19bbb7ea00622067
- SHA1 5cb33bb77b1ea980c20f96bbf69ac17892416ad0
- SHA512 fb59af00ab20f7f8ed3b393af45f4f33a7a5d04caed601b964dfda784b5fb145c1997219971a26ac73b415474528cd944f0528095ceb056fe447d9b359a80580
- SSDEEP 24576:0TkZu8HzwYeVJgsOAZkJD6fasFhX6oh0CWHRjuIdTkBhb7IPZDwdh138m7ahAeCG:BHAPOZoh0CWHRjuIdTkBhb7IPZDwdh2f
- TLSH T1F1252A3AEA16A3618D1023FA56100C643EE9969F9B0AFF51F42FDA2577037DD15A33B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fa.pak.DATA
- Size 1.5MB
- SHA256 a01bd1ae690e293787fa049fefcd12c7cf7bdd2197ecfd2358b1c98a42587167
- MD5 2b317b5fda7693a0d9d6557701c352f2
- SHA1 01dafcd4fca3e3cc71a0f8cda20e4946f4479464
- SHA512 18b668bed75d230dcfaad24fa1ef7b45afcc729f5c63cd30846a8aadef2d65687198be9fb5e990297592b78ac3c16b24640c7124abe48fbdec425b52ee557ba5
- SSDEEP 24576:jF5WpsUNP18pZypNJEy//b6u+yif8KgdasVjitt/pXsYi1oBm2xh8oPuh5wwOplJ:Tn
- TLSH T1A375F2956AAC9AB25746C91341D33838C373EF13D348EE40F8A107661DA6B179B4FA37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fi.pak.DATA
- Size 1.0MB
- SHA256 3a61a96b58007e132ac871950d4ad80746fe10803b0e7a3b75f51d9ef0510430
- MD5 6b0d80b4567e5ca03a926fca51571ecc
- SHA1 3a3a45090f63efb487b8a27d932f65369eb6715c
- SHA512 2d3720cfeb6c77a82971883d0afb249de1820a3ec068084f893965e438eb9932f4af0a8ab8d179d22b03906412e59c85c044056564b5e97def0d9ce08925e452
- SSDEEP 12288:Lba+uwd+xi07fBPuL+1PlpkpfbpIkSkYeJMyo25Xd+z:LbFTd+I07JmL+1PlpkpfbrfYea6q
- TLSH T15E353C61824AC2117B84529E5CA09439F1E8D3DF8824CD99F94BD2F91BD7AC8797233F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fil.pak.DATA
- Size 1.1MB
- SHA256 779859fb79eb67437eca71960cb1dc825b15821cd0660d1b88d47329f590cd2b
- MD5 05a860ef9deab63da443da9c98fdb1cd
- SHA1 ff81445c195ae5613a7e61565eb425d809448856
- SHA512 37d5ce2e7ea27c9c059aed4694241dc6c32d4ba8af6ed7f5b91d08b5d56c097c12febf882ffa632102368047fa9e04ceb588fa747036e1fc69f9db0326efa6bd
- SSDEEP 12288:nbQkwWNASLJca+iVs6uY9DYMBNib5E4MbMLknEpjOj:bbICJTVs6uY9DYMBMybMLhjw
- TLSH T11235D619A7401B44EBC212E606606C2F76E420FE3F816CAE6FBF279637A7DD4D270156
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr-CA.pak.DATA
- Size 1.2MB
- SHA256 79c5f6e563b6a20006dc0393efe622a5e2e294dfbb4484e1225c255d4d6ebabe
- MD5 8df1104b51c5831f21da81af841debec
- SHA1 aeb792046a7f427a75252b64ecc9e58a42806ab5
- SHA512 af4ccd80ef5362a39964e0d7a83cc992a62a6d5f38f99541a56d07896e3a6e6f89f290b244c9ae3eac0ea2e809e7b8b7036745c6114c32ee2eafaf69d11ca4e8
- SSDEEP 12288:qWflXm62Q+nxfN4b12sBkK2V+sN+wf4bATnB1y3brl8xPMy656jbtji6brYJQjcE:/fU9NV+sNxWIjbtji6EM7KrGLj
- TLSH T10245F95FE5C461C749C21263BF02D663E938C29AF215D700E8AF8295238B9ECD39F5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr.pak.DATA
- Size 1.2MB
- SHA256 7bdae7b0b2be43e4c8b7fce82bb11cd2df49a83b4301234647861d0e20e98c6a
- MD5 dc5af9443a48ce8eb57fc972cfa0a6ac
- SHA1 4828d5971ea06190ecb97358cd5e1e9f32a967c1
- SHA512 3a8033d5d527f860508753939ac018fb27d54902c2a3514dc024233256b13a86cb5edd597e6a0a5c90aa1e50468a69f1108c566eb66de18c36ef5626a9ccbc05
- SSDEEP 12288:voJZUfbtkZsnqGbDCjNFVca+tic9bq6fBB//DWG+xPsS656Ab6jmzvvrZkkuhDN+:eyouOVca1xWIAb6jmzTXTxOK
- TLSH T1E845F85FE9C465C749C21363BF02C663A938C29AF205D704F8AF8255238B9ECD39B5D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ga.pak.DATA
- Size 1.2MB
- SHA256 3b2cf8b3b90412e2b510268bf421132ca4931557bb4e80cfc3f56bf8b222de46
- MD5 fddd992d2e809c303b86969d8a12c91f
- SHA1 969b2ddfcba6715d42e9a7b6e9a2a9f762eb1171
- SHA512 08ce96a7a77b1940d3fa10b27b90fa9801f64856d7421c36fc563df018f3022d35922b6e940c1473a93a6622cb8f429151831a5d6683dbfe9dad6e2abed7b67b
- SSDEEP 24576:AHXInGgXWPJlQjho8nlMkjg0rcHw8TTXAjtcn267LJB9E65:ACnPljtM
- TLSH T1AA4519B795B452E3E053728B4385C766F024E57BF484C8C1388D6A7E2B276CDCD16ACA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gd.pak.DATA
- Size 1.2MB
- SHA256 2bd83b41cf2dfa98a9a97000564416222736c8369bc93f92acc330212594922b
- MD5 d78e8b5a19702b387631973733e7c342
- SHA1 453f5e999f479e3e61cd783a05ae2e0de02a97e7
- SHA512 f3d2cfa974bdec4fe5c28824816b18c2110106dfd32eb4f7222a8fb066f6378439545c147e30f84d03b46660ca23be202aad315ea29e3412a39891c46e29e1a4
- SSDEEP 12288:z/CFOUr2zVwh/ZXTep9y+T95ihuzWcnANCBMSckRs+dVzjdkzupqEB8WuLND0XXJ:WFOzzMBajIuANCBMSckRJ8RioAL9p
- TLSH T1B645C7AFA7ED87E3C843D1A50105D0712824DCBAB113D55039AD643A2B17AECEFBDAC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gl.pak.DATA
- Size 1.0MB
- SHA256 e57b106ec61d76d1a83c04f94801f47a64bab41deb1ba1898381125260c4ccb0
- MD5 e11320ec27166c5a13fd4645471c59d4
- SHA1 bf524553bb0d5f489175da56624588f9ab81c507
- SHA512 e24bb04a6499f70f9ede0585839252877262d032dd26ba47325981eec10e6e8c9bcfd935e9f46902af12b67d9373f66600e090720e83a279e8e8c013758c4f36
- SSDEEP 12288:L31mcdMtSG98pnCuzf2ZRVAlej8RClabAWU01:L1LmydCuzf2ZRVAlejso0
- TLSH T12435FA6A9ACC2F22541233897B43D163B5C49187B404C39BBCAF467533D8BDCD167EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gu.pak.DATA
- Size 2.1MB
- SHA256 4b8f5e149fa3bc861460c608389bbcb1dd7e30250a5d1b0b93ab259147e0d977
- MD5 1395218ee7a63101dd104ca9402768f4
- SHA1 7cebeacdb056913245d67c1347ced6efd1014c86
- SHA512 b6cba2e11bce3a02e33cc70d61eb2b8c73203f8c5de47a1da03d6783db5b8f768c0ce08aa094ec19b702a20990cb56a78ad47021bae6018bbe9e5d17eca5f6d3
- SSDEEP 6144:J4xbUH/4CMw+CoL28LXTNdIQ69LnCmLl5ypF3rPxH0zxV6Go0K0tcxnpPNCgi9Q0:btaDNdc9LlXypF3rPxH0z20tUxTUtAy
- TLSH T10CA55DD1C3B9F07159C9AF7E819E5120C5699343D67D230011CEEE998802DDE3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\he.pak.DATA
- Size 1.3MB
- SHA256 995d4affd9078787e4e9013928fd1c72ee470647edc691f0f479a8031f54f60e
- MD5 01b47922b014ba5a88d038358e39621e
- SHA1 7c69909b027aee46af465633f3838a9153aea3e4
- SHA512 726108545cfb2b61cdc3224276f46c77557fd4d4026464e82723ca34a4c3d34dd300eb69e564d427f645e143d3a23c25e85693605f44f1abe43b63ae2ca8d374
- SSDEEP 12288:2FMjAAO/Db1RS+tZ6aEkfZ7nXdIyrrVobTS1wJQCTVwANR7bWaVgRigY8t0G3sOA:2/AWLf1wJQCTVwAs3JTGT838
- TLSH T1B955DEC4A2D8522591317AD38F65FA286FF3C7B22CA27516DB08126CAD774F0BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hi.pak.DATA
- Size 2.1MB
- SHA256 40cfc47a5dd1f1a42e538655789c8d4825fc694afd8a73b490f21baa04196827
- MD5 92b695e78b1ebe6d99e4232143330034
- SHA1 f44fa8dc3b76183a48388566a3d2f2fa88337293
- SHA512 463d3d63ff27d6fe784326d27b31675f73a6e6ea55cb89e23b9e0695db3d0f9bfcee25ed7a6431d35389fdc4a095270dfeb9dbca3739f0282fc1518fefb77d88
- SSDEEP 12288:cRMaokgvHhyZoDPDVnQ6rgbvS0IEEgfg6rT1mwuGzz6Lck:WM7kgvsZoDr5QEgbvS0IEEgfg6r8Lck
- TLSH T1E7A5370CE7BEF3B54DEC3C9A36880D37D5AC3671A3E5521348D5B3EB9944CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hr.pak.DATA
- Size 1.1MB
- SHA256 9b7155f05e8a4a4ec5fad523b7996c0e1bf099f2a7d8fec353f8b7b374621f53
- MD5 179330bb03876908ebe44b758848181c
- SHA1 44e3ff22dfcf0dd2d9c9297b6a2611fcb1a37490
- SHA512 8731fdaa2ee4e254897bc71c56dfdf986235923e357a847d8b8ebd9f4fcf8e970553502df0c061c96311a057613c2ef150e2c899c7bcab1c767844c242851ff0
- SSDEEP 12288:0Mt9Q/QaGU5Y81GiZSkGH9aY6iC2qcNW9G0RJuuin9hT:0su5pGiTGH9aY6iC2qcNJguuwf
- TLSH T14E352A79FDF6DA064996B3869FA2470475BD45CEE510CBF6788FA12E0303E9C62F8109
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hu.pak.DATA
- Size 1.1MB
- SHA256 c94cdb45f645e0a0f35e13bdb875b980479839d98c889e1d48c498885a39b3b9
- MD5 aba5394907784debd91c7e95494e0600
- SHA1 f6271a3e3bc8e0234778ca9066cc76d19d7a2783
- SHA512 e1e2613c046230533576427d3bd08479a885549d28aa921575965e54ce4830d75c8619ca736bf6b914dbe7bdbd4fb1fdb68235adf933cd25db5017739c3709fb
- SSDEEP 12288:WjlDUfEFqjGXlwxYFfXRGVrrfomxlfVCzyR/dR4Hn:WBGE4jGXlwc8VrrfomxlfVCzK/dR4Hn
- TLSH T13D454C7BC765D841EC681BD32C242E19701E845B9A2F6AF73CCA886D35537CC4D938AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\is.pak.DATA
- Size 1.0MB
- SHA256 b9185a3452656de8701968db9f397f28c204f7c9a2a6c70dc7dbf4fdc6e80cae
- MD5 2c9e90e234802e4153ec2f1b41a400ec
- SHA1 2aec3f3b650e9c6b904a7322517bc9fe767f9bf1
- SHA512 3311cc59298091a930304fbcfa576c4d4b82a78d8e48de54512f8d8c7bfafbc420206cc068d305d2ea09bdf2d3e785f6d72e211cca0d0f0a5dbf83bd5e2bb4ca
- SSDEEP 24576:c+ZOIXmwtwxtpBxxVVO8oO3gJlabyW3tXCOhOtabv9kYjIjx/:npm8wQ7abx9jo
- TLSH T187352A07B907E61F3ABD23E486540F252799B7E69CE1DCE0FA5B012B338BF4554B2162
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA
- Size 1.1MB
- SHA256 d339b1b5f32dbd173c0e5a2fd687cd894c568d411cb966e08358b58b3d00a8d1
- MD5 010a7fc510c6ba856ec4122f64b4fa67
- SHA1 2cbdb08a7ac11d5adde3fb27629a50abc7f9df44
- SHA512 1ac688fdf9ed6ecb054c31295742db2163d99c2a85e3271962fb3ef1bd9318cf87404efeeec6a4d25e4f342e6639c6614adf21afb07c657821039b15f9d339b8
- SSDEEP 24576:/ahgA6/FzQuKFkDFOqVKxqQ9S1uxjlYfF:/uEzQuKF/xjl4F
- TLSH T1C2352939D9C965119E962396C511B045F67EF8CEFA40A228B95E431C33CFFC4F2ACA46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ja.pak.DATA
- Size 1.2MB
- SHA256 304baf237a205efd87b67eea03761746de613da8370be02edce78692cbc55850
- MD5 c329999d0128f3034250e84261a36e1b
- SHA1 4d00b2172c060769180ccf91b91ec704c132c4f8
- SHA512 331c1bc3b6e80db8bf05bd859c9baad951541c38629df7ce263cc8184785bcd8bebb0eb7c6bd2dd86d91c1361c0e4de46a174f2807bc329aad90fc668477f916
- SSDEEP 24576:cib3uvO2kQPcPyL9HDgRqNaf76+fNmJgE:uOAfr
- TLSH T1E455507CE3C9A9329D6193B21C0D76E5710AEC9BEC923A36542DC034BE617CEE415BB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ka.pak.DATA
- Size 2.3MB
- SHA256 06e1706a98f7dfaebad4518d1782050132c7a2da204727f6fc8988a658f9c07e
- MD5 9f63e05d74ef69ebfa33de7673b7e700
- SHA1 2b49486e0c20e452cf81f25a1fc17abd47b9f7ab
- SHA512 2028ad67b7f5438abe2100c23e10d6872b891d54cc7d4266305aa34850b0eeb999f0286e738e4b4513846af5389a904bdff7523de1eed448152cdc75006eb710
- SSDEEP 12288:Ucry6BHU5b9Lt/VMwc+cXY15NeGWn/ZSmOo7:VW6BHadMwc+cXY15NeGWnhSmOo7
- TLSH T166B5605139FF77709C5E21154672BB8AB7A48C8FF0C8843FD111F1A27993A046ABE366
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kk.pak.DATA
- Size 1.7MB
- SHA256 db29039e424317de2f94ec1b56ee4da96c8d8a8473828a27e087db6461e66188
- MD5 8efabc8c14613116bc995da2d09fce92
- SHA1 90bf3caed2e639f94742779535516e8f81bdc112
- SHA512 941fd44f6aed393ba94f45e9a2d738b89767dd522c9076be48fd18a40900a7c8230ab835e2d50af9b6bfb28f9b3177927317dad565054a0b7652b88079f39392
- SSDEEP 24576:afRrYZllGReiqKhZf130y1vOcuqtIJiWbkmGuE:GrYk1vOcuqQiWwVuE
- TLSH T1E685BB91A64BACEFA311E5922D047A092DDA14BDBFE733522415BC7F39FA270463C742
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\km.pak.DATA
- Size 2.3MB
- SHA256 69cdde9c1d9d86f61df7f509a3dc45641169946c95472fe4602be908a8e16831
- MD5 af5b63fca600ad4f8e095352b5defa46
- SHA1 579fb66d4d4deed6409eaf1362ea54373f587b47
- SHA512 40e7a2c22773ef18e37e78ee811d920ee93d63a038bacbf8ec18802f08d6d38a973d29db76ab39604c195b68d55f5fac67378b3d337650b56402699062c9d893
- SSDEEP 12288:bhpJ/HZ2O4sWAFZQWLxgrdzdGfuCsiBekWLBUOLSyW2EHmXFPUOVuL+dWAAgS1+8:FptHj/mXFPUOVuUS
- TLSH T1E6B527505E94BD75413E73C3219B6F484AAC9F738C5964CA384D3E9EEEEAF53A20204D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kn.pak.DATA
- Size 2.3MB
- SHA256 d99396ff0dd1876b61729efc82ebf9f6a302dfcf3a5eac7e16b4cf8611e41e7e
- MD5 cec7040220bb3798063a087c2144971c
- SHA1 ce7752da1f7a05c1b259794fff768aaf5cd0f32a
- SHA512 71855e02349d640b8d3d8e98f7b8fac8c233cdf9d2d44204318f476878e3118459696039ec0aabd0f8c415046cd11cced92cf81cc2a48f9ab97b1e61ffc4eb58
- SSDEEP 12288:JCf0TylGD3xR264lD3Coi+XbdZFginjZ/IcqOsbN/5At6+JMGSzaU3KrCRLolJfK:ykrDnN3+XbdZFginO
- TLSH T121B5FD189CBABD301BD5106B24EC643EDFF16BE28CAA47D2F49DD7402C62C6A90875DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ko.pak.DATA
- Size 1.0MB
- SHA256 83e8b6daf1021c9a99825ad1ab7008b7bb3da0c6f5addb516ea2df122cab22fe
- MD5 3834c1ab918b5b8078d6f7ae6eb21468
- SHA1 6de0731d40c3c1b0a1f80d30d68b5dc4beec934a
- SHA512 51f6f8c93f9e26f7e2b1c6ff3cd9b209aaafcbe7aae23c99cd219770e209a75557418bbc462c23955e62fd15e759a033e8f0ed13c9a65f986a1eadd0f7aea9c3
- SSDEEP 24576:+ac+GKbVSPPxH1ZfUuryv4Ment5+wD6AWW:zcW9QP+wu7W
- TLSH T11A35E7F238EF67C9158289826EE0FA24A381D9B3EB530294FD48CD149F156C74587E7E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kok.pak.DATA
- Size 2.0MB
- SHA256 e4567644c534bbab398d4513432741a26579a39648f9a543fba59b8b7df9be76
- MD5 4fc978f787d9912fa59bdd4a75eab0ec
- SHA1 e55650e2470cdd2a4e01325019abf94f5715614a
- SHA512 b321bfaa7742cc69afb689e197ee9663f417ec7bd86b7082d97119cc54d7ca7200e8c0e926f8a63429f1de103d9a6671d4d908751a3206babba82e9e6a67ffb5
- SSDEEP 6144:fAzL8IHZi/EnD/U1jrZF+5u8Svt0rZoYiZ8YlfHEJD6HtgZ:fcA/YDq9aZoYiZ8YlfkJ+W
- TLSH T14EA5334CFBB9F3584DEC789E2A090D3BEDFD2171D3B8625648A5B3DB4885CF401895A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lb.pak.DATA
- Size 1.1MB
- SHA256 389ce167e3bae191c82bcc755f269d19895e97d93ea003942e61f46e484b5e4b
- MD5 71b9e4f74849cf647059eefacf546ca8
- SHA1 86dc1814886a232cf55b4e903df1f016150d6e5b
- SHA512 1e2d7e2d2b07afaa09a78f58de832893b3c55209c3ba99a7334d1f56fe3af3d989d95bb314163e146d98a1be7555656f796a6feac2b934c3d33b8f6a8391f52c
- SSDEEP 24576:9vx1YmM8HfAk1at9WseUXC9dbAWY85bhnGHSOhb9K:Jxu8VUXC308rnsb0
- TLSH T177355C069A6D0D95AC412343EB11DC393D2FF36BB3A6F605749DD039232B2D6E29E48D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA
- Size 2.0MB
- SHA256 26f2c9df171f42c49a489eac33db79f4153c4ecee4eff606b58a50263215095b
- MD5 7b52f7b1ccf20316da259743872fd5c4
- SHA1 9062402543d52448a0f13d41c1c77a71cd5ae234
- SHA512 ff0370338c9c124c2418efb75c7ed2a2ef8f2ffe09295a08c7b316c489537c367202c72fe6b3350a963b101b1be07dd373b5fcf768944523d855395afe53c934
- SSDEEP 12288:vs1TluOKuxnFpTyR2WrMHXFE1LUjd8De6Lw+5upfG/tENYjfWIHdWi6x5m1+wExg:UhlCF2WrMHXFElb
- TLSH T1C7A53510A99FA2F092F413537953A6F653B58E38F0A7B8A03A5E4D785EC1D30EC4766C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lt.pak.DATA
- Size 1.1MB
- SHA256 b60d19958d89f406a67440ab1aafc4b945a347658ab7c15f554187aac5745b15
- MD5 e9199e53c842854cf05b9519133ed3dd
- SHA1 cb5945095f40ef02a28b8ad80b113bae597383c1
- SHA512 418722869c9a7ecba1bdaec46d4964a21ca2ae5bb8fbbaed6f1f991f152cfbff5767b20bd070b2c4c0d70a1470d31dbdc435611b44661698350a0f36cf18d583
- SSDEEP 12288:x66LSxDqmtBGgN2VFj0hF1WWAKoyw1xzbsjbNFJWhu3aAa4zd+KN:JgTu2hF1WWAVywa
- TLSH T128352B00AF93EDEB9E4123C641A08D71DDBC6245B626AD60BC6EC766D22BFC53190F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lv.pak.DATA
- Size 1.1MB
- SHA256 316fba27d6b21744149e36ff69f8969ca405adad0f2b69f83b9e984ec332283a
- MD5 c96b86bb9ddd6cbcbe6540ee0884e0bd
- SHA1 896836964802760d33d656dc114efdf96526c1a9
- SHA512 40bcf24975d6d41abb05625796966d93874f84ba86f4f8d35d04adc92d7143e58b9e11845f8fd1cf6eb873daa540fad15281ddbb9d17f3afb31c80eca714d25f
- SSDEEP 24576:O8Lt3eH/PUX8QYA09tCnSO8YoBSagjy7obzZasW7gaBT9/Y:O0peUMQFagjy7obzZasW7gaBT9/Y
- TLSH T1B7351A65CEC6CFA18E505EC72721D82274CCD742ED0AD621FD6D8B3A270F66432B5AE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mi.pak.DATA
- Size 1.1MB
- SHA256 c24ea6dad1c10575e9d33c1d3012c1bdfbfd1e1d15e52c8d09f8f966edd34414
- MD5 79a3f66564b129586c2e40e067e74d55
- SHA1 446a60a6ae33ad39bce61c66b393fe3bf33f688e
- SHA512 fb7ee3672a9b55483672a5fdb8c0a8a6026a14fae8cba83273a912237d3f9c791849434bdb316b7f12e0406f1e66fae7bd691caf6243caa99730b73766d29c5b
- SSDEEP 6144:GJBe9Oj7YHPT4Wl5B7AJr97kXFikPabVNUSWJEWAo/wk1vSUua7KseyHjhHgzV7s:z++BsrjUuhseyCkePyNx4e93
- TLSH T17535C890A5C1B610ED2607D627A7C923BC9F934DFD22CD177924FA263E4B3A43355EA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mk.pak.DATA
- Size 1.7MB
- SHA256 fe87638cf3e65df0f749bb615f38f34bc8a90e1a0e35b6407a29abab55107a42
- MD5 42e0a506c4441ec996d8b52c03e3e19e
- SHA1 ff6bc3ae22d22010a1dc4c951f4906915a497e68
- SHA512 14b289a03f79850b4d19d2d6462a1957974d8b0d2055a5897c8340bcc1112bed7bb23fb257b2e56864b76e47b28c457ff621d1e3fd6aa284d823ccbb182901fc
- SSDEEP 12288:iU57T+aBSsZTyVnL7O2A0/hM/V3aq4XH/TtCQ0Zh98VSwR3/s+1fabTGgLcjZBy7:iE+a0sZWLeo8ETPSwR3/s+1fTXs
- TLSH T19B8546A15B9E74CB0501F45FD808BE0A3C9B45FE3FAB875211641DBD35E20B886BA35E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ml.pak.DATA
- Size 2.5MB
- SHA256 a83f1fc15d0ff10b5591519763515ea3a98d512633a1507da3ab2cc2cc589576
- MD5 b780e837c9aff4a0ba4a597fdd0dc281
- SHA1 d8e9c1e7cbc13f7c2e7a21191a2aa3ff2dd4418f
- SHA512 cb5b4a20d8e2ed7c0e1326646acad79f2d1e9d8a97f5fb1d80fca97763b58884a7552a5b7e0e3828b8223f20764f0e5f1b0db38d9427b3bcb910ffe5ca677d45
- SSDEEP 24576:ENuK1Vj/DclzEMAGN/Bdiff3Hs3NHZBhAfe6dNWsCuyhFZed44fQRnrjCu90CQ7c:yr1pXeZ
- TLSH T1B0C5BE5BA436CD3B0FD002167B4E2FA7DD5F9FA1409F228B5869B2628D59FBD0C99031
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
- Size 2.1MB
- SHA256 aff95623f4e14cfbd6c92b9c030dff527df20b0e5bc559506b36f337ae5d0cb9
- MD5 f02f2a1824b70fbb63ad997fcafefa55
- SHA1 ff51f2d687894c8be522ccbf612b763d38a99c0a
- SHA512 c9a2d0d4a4c561a3bfa18419236d252d9d10eee699b6e852831cbd34443395060d5cca02781875bfd6ac1b1f024276cbd2d0ace8e26c91e6f6bb990a7bc2d1bc
- SSDEEP 12288:LYUFhVfSm87G1pO/Hdo5A+e0hb4qZcbL2EYMTVvR:cUFCm8aC/Hdo5A+e0hb4qZcbtYMhvR
- TLSH T159A5E04DF77EF3644DECBC8A36580D3BD8FD21B1C3E882564895B3AB4945CB4019DAA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mt.pak.DATA
- Size 1.1MB
- SHA256 624120585a729ae8687df5252527a40dca0ed710d89b7e016fc04e608f252ccf
- MD5 60b098222eb58569ea4c589f789914d8
- SHA1 a9415357f38d1e8022d4772c105fa683692d7956
- SHA512 b173c1899337f3b9b94704dde51953e6fe2c580e4ea7ee39cd1ff3f3f3862ac437d33fa1567fca7f7f75cb84aef507f8d7a2d7a30e571057bfa66c90338dd1e0
- SSDEEP 24576:RUWaRo6gruK2ePvSRctply67pt8bzz43i53dm62W2UA6d0y02lpAAkF7oBM497VL:RsVJGW2UpK2nEf497VuSIsDz
- TLSH T108454B16A6F35E69DED4A28E4800C726FC5858CF2D53DC417DDE172AAB4FED192E3202
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ne.pak.DATA
- Size 2.2MB
- SHA256 89b081a9474177588719b0629cf549ded7b3e9384184b245a8da8ea8cf728657
- MD5 79b711b890250a6d9ed40c7b71ecf985
- SHA1 9b5d8cc6f0c7fb227ec5f4c50b0fb6b7f0e5fc90
- SHA512 7dd5b064f0b87a9c962835db2ee9cc978a6be718ea4e01333b0c95d8a0606b4696eb823a53ddaa8c93ad97295f4a708c2110dda6ff1c524d13a0f1e6c04c61e5
- SSDEEP 6144:7DmQtYgqtTfJhAJRflJS8OPGLz1M9SQqERqnh6QcdYeUqebN:93qtbzAvUYz6SQ/G0QcdUN
- TLSH T1DFB5194DF7B9F3A659EC788B2B4C0D3BC9A86631C3A652578CF8B3D34885CB404D9592
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nl.pak.DATA
- Size 1.0MB
- SHA256 f3285dd30d42bfcacac317b69451d72d7b54801e3c4ff182860ff3f1515820bf
- MD5 39356edd132264fbbcd28e19831457b6
- SHA1 ea9c2bf78bfe204b800318e8169030db7a9eed0b
- SHA512 eed2a8b18cdc4de7c830191d0437a7c8acee18d7beaa644ca6064dd5fd69906b090303c2ff52308d7968f52984e12ac30f11fe4b8597f0d30699ae4f107a1884
- SSDEEP 24576:9xVNY82bognQNJOY99DZwG1AVqyyZfaZwI5:xNviR8Ackd
- TLSH T186352C079C8D593E99C0A38AFA044A77B72EC31EC6ACD67CB8DDC1382613F9851AD5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
- Size 2.3MB
- SHA256 c37ee006ef8280c2725bb4c26210cf2195a527cc94acc05c0d03c37584e2426a
- MD5 8422ea473b578150c591300f5f130501
- SHA1 0ebfed4c0a359c55d2aa9f9d9132202f4f0afae3
- SHA512 26a1e12fd43bce3f769dff97a8992fe604e3872d3fbf9fea57e68c33e390bf7d879f781f65166c17ae8493e9fada5e42fcd6501b1bafdf697b0f013a6d583727
- SSDEEP 6144:7hDdH1cbjAX8IohEFfYCqV8c3AijRWG440ZzmorPJgK0etKSrBWdfmI3EMdMIRMs:9Dd1WjAvHYCMjRWG4x7s
- TLSH T1D4B5F220EDB8EDE69CF143A4B499E239642D03B5F9DB6BC90740A3C30922CDA4FDD559
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
- Size 2.1MB
- SHA256 03fc4278887499c45123ba66c376a3dfb6ae4359d5ec4715105cd7aa42b79aa2
- MD5 1fd49698f058e09a3b8174cd8ddc600b
- SHA1 4b888d74f31ee6e484d4dba86927438e6133cc83
- SHA512 c56ea2faf0bec8ec6466f532892091b7c14244a2963f2bdd75a48c77ee8fe0ff5125e271751b25db8113cd145fc6aab1435780b1524b2fea82865cf9ff197041
- SSDEEP 12288:w+f+TKmk//RpGVLeJ6GfAYN26QPGzgdUoNBOd6j133l7WSy30XdLPjS6N6ilerBz:w+WWn/i8
- TLSH T196A55600C84CE2B68FD8195D56E6977D10960D398CAFCF6D8580C65AF6D8F810ECBFA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
- Size 1.1MB
- SHA256 e3dc311beced96b7c9415bf5e0faa8cdd8227afde7e6a77fdf73950777d4c71e
- MD5 acfc95cff3f759233856258b8e1d378f
- SHA1 95038ab8b7139dc2027c254394e1f743099ce3ff
- SHA512 86c77302d880187a8572393b958ab252942506dcb3ded3aeb1b10a1607ba2de755d4bbc8ac85c43c0d29d30061660ec622d43c4c0229828388b2c5745b49ffbb
- SSDEEP 12288:rLhW5XK7t5M0ixA3dnEq9VNNyYsFIzXBhJ//4+g1ecbId9LRp6elhHR0iqa6qw8V:3QuPNdnEq9VNNyYsFWxHHbL
- TLSH T1EA455B4DC5E1DA0ECEA009C6F5D35F3878AC848BE519C75EB45F8029730B2DE96BE498
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
- Size 1.0MB
- SHA256 504af55e506dd5fbe64f3b4ef8c3a99a3f880b6133dfa7580db4dff307a3d8f1
- MD5 c05215b8c5378c3925397c72e2f6d6a9
- SHA1 d47e365e3fdc1e6b6b9d379a6c8a8192db98d8f9
- SHA512 e6578b06383d2dc4205fef73eee5f0f7dd9709a5e9c099e813814230b9fa26d4dab85c72e989f6a33a5425b1f1db659b138f9f13412d62b0a1df41b3017f19c7
- SSDEEP 6144:4ab3DPHjBO3LIaZQb9/iM0hho04+JD098MgT6cXwx/q07cfQIY4wKzOPVA2+5bb5:vnFV/ihq+JBY4wKzOPVwQcgZJasG
- TLSH T168352A299DCA1722052213527B099F43F1C85647ED09CA87FDEF8B1573DAFC0EA63A25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
- Size 1.1MB
- SHA256 d3a5907416d3204471f2b8e18554be9f3b65ee16a3e5a2610174dd325d0c4a17
- MD5 eb89b112a76a821adccab633dc782da5
- SHA1 851c2553df4909758d8a5fed04dab57fe5c0a441
- SHA512 b0131eca6b66bbe2e17dee3cccb1b3ef626d9d7c86652c9ff9f57bddbaf292c22bad3874dee790db51641089bf3004971369673f9e22f423fab0ab7fa01dff92
- SSDEEP 6144:DJU6JhkbbIbrDIqWxBh7cl1KPdqAqPrX+0CZSYIv2toPBqbCkvg7H/j4ZP/ee4UB:bTkYXDrEB9cjyu/j4ZP/eehqs3ynD3I
- TLSH T15F35F9289ECA1722462213927B05DF13F6C85657F809CA87B9AF475133CAFC4D2A7F25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
- Size 1.1MB
- SHA256 68fef81c9ba9cd8e10095bd0553e6c40c6ed75bfe19832652a13893f22b3e220
- MD5 324a5351daf86deb310ef9ce3ef364c2
- SHA1 4c72ede588ed9f66365773b49bf0886acaa3d292
- SHA512 d5f35f258d88cab8b2c35904340d010d71abae874bbbd21d3bdd6a876f7a2d758f95a7af980eda5db132d0992d4ebe9964ae67edd44c13fb278bd9a1a0863c6d
- SSDEEP 12288:mGBNa2a2j3fvpMZWHGOPa1tZVzr7vDELng/ohLJn:mG+f2j3fxRa1ZnzAnz
- TLSH T15C3584541DEA5144BA1463C302E99C6330EAB2763C61DDE3B8791B6C1B4E8DEF1C2F66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
- Size 1.1MB
- SHA256 97decba3731f3cc8e2d5a088a291fbe6b4e49dbda5d03231b2c43b19020fb38a
- MD5 fb1c596c8532fcf2058c4e42d21bfce8
- SHA1 baef14cb43ed3d2163d38d710ce7e1e7b126eeea
- SHA512 7ea78346abe1819081e8615d612e73b5eb8f765a2612deb8ed41ac4ab72f68e19b55e6fe98196b8ae8766813d725067b25240339214599433d07f174f3926a87
- SSDEEP 24576:Yrd8cSDeeY0hf69Ur4hbBCDxqt6tkO1ersVnflduUuVBRTlHPB4G:Y7jBCDxqt6tkO1ersVnflduUuVBRTlH5
- TLSH T1C0351B22E1C855521D4113A3B72114A7F68F519FBE01D28977DEC4B922CBBDB812AECF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
- Size 1.7MB
- SHA256 368dd41306880b8c4bf387fd03bb5beae68002e9c35d69b69f6cbad2f150f894
- MD5 83dd4db1c29e5dfc304ea548c3396bef
- SHA1 c7bca77d63507d9f2e46b81d818343179238ef2d
- SHA512 c8599fc1cf77ae163d571b777f109f638bcc221ec7b77be337c657297bec7383227bb8704c3c8c7a170e0f21078506c3cbe12a7b04b38763cac97b649aa3c802
- SSDEEP 12288:43tQakSNEwYJegsjBpCChEFGABjIS5MsVwHGvZnsQ/Xcx3WHMRaDTDNcdrHPc1eM:+Qw9pv2iPho3QJup35s4p9E1pwTEY5X
- TLSH T160857760569A64DE1105F01BDC08BE0D7DEB45FF3FAB932229682D7E35F2024C67E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA.crYpt
- Size 1.1MB
- SHA256 e828f5301dd7487f89ba5e6b896967cfaa687ab2b5589c0879eaaf53bd1f4349
- MD5 8e6d4fdfe95d2eabdc193a34408c86b4
- SHA1 7b91ed8fb2cfd0af75430ec22f55d215ffd81a76
- SHA512 b236bdef0b8ce1622e6b3c742ae260bb0eab938dcd2bc78773ff59f7bff108278643fecf36e50ac915b8b79e7e9c0bc628c14742aeafa7c08397c7f2cb4550ea
- SSDEEP 12288:77coe8rNMKOVO8qbpUripo0MaTIGBEoBz/yA6+ldXiBJm7jwkJnD1kQp+1n7u1Bt:XcohrlVXo0MaTIGBEog8jwgGB1OBJ
- TLSH T1A0355E7FCAD5880ACF890245DEE66410B9BD01D7884EE9A4B80F324737E3BDD86B4D59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
- Size 1.0MB
- SHA256 762b2d1e49acebccccb1ba6abe270039aacb5e5ad5881100f2030ed11681a9a9
- MD5 a16542dbe1337d6b0adc3885dc966432
- SHA1 37beed8b1b8a95e932df2ca22b414ed2215fdd00
- SHA512 71925b1437dd0eaf2cdd7bb4dbab7406170588a0bb40e64fff42999b5cf3e6e9fbd7fc97a2083fc014a75249b0bd010002147077e132a20d738080f65e4e39d9
- SSDEEP 24576:92ft3gUHifrSJqutAPdSYj3heCzEOeyLmSg:9Ctm+JoHzEOeyLvg
- TLSH T1CD353C39EAEB8E0F0D6672DBEE920A107ADC458FD241D661FC4F236923037B853AD554
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
- Size 1.1MB
- SHA256 a6634840d4f56e807504e2963aac8081eaa1255fda37f59edc02d836c29433af
- MD5 91e5051df1505ae3b9add4fedecf8adb
- SHA1 a94ec262d2ca2bb45118998bb7ac8dba69d73fb0
- SHA512 20eceb0883aac1e23ad9f4334bf5875795986ecca3ec39c5681d98924a640331222f4801a275577c43fb311525a6bec5c2a1dcc6f403805846b6b2c7db592be0
- SSDEEP 24576:OflbbNI8dfWrDbP7Mi9SlV+F/otI4OASE2a9uVYEibaJDYNH2N8ADF2yuKDcG+eF:whJI8dfWrDbP7Mi9SlV+F/QcVYEibaJ9
- TLSH T14B35B526D9B9C776C517326A6B4009082FFD626F71E3DD2DBC8AE227057337D4268D0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
- Size 1.6MB
- SHA256 f0c6b19420ee7d0347ccdbc65cb0b15d4d10d1844efeba7f458a8c47a06a539a
- MD5 53ea04fe690413eded546f5114fb649a
- SHA1 6a972511d4193ff2cf29af619dd54fa4b9ce6738
- SHA512 ba0babf5297f58485ebed07e95aeb93787c86c581ebe783aac46ec92bb880137382300fbfb683d3a35e8696281dd6a4dd961526c25ca0a31ba3a3a67c6e59c9b
- SSDEEP 12288:YgYuGr8LPfQh0uw05Vz7fPK9WHj1Citq34vgYNh3tBXRX8yrIsL7J3vgEfs8gn6H:Y3mPI77j1Citq34vgepgn5q3hmSJ
- TLSH T144758AB1979E64DB0501F01BD808BE493EEF41FF3FAB875211641DBD35E20B846A929E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
- Size 1.0MB
- SHA256 4212446b3a609fad7521d3e2b214b73422200b5376ee64612787ec6fa304e73e
- MD5 31888aaa4fe4c967f6f6718fcc13c0b7
- SHA1 51eaadffbd950a15eaecb7cc7a23b8bbea3e7853
- SHA512 23895789d643566c4f44763c79e2ca6efc8f370831ca7956f151c07f027ac89cc3a01fea8f4b7ceeb1341ae836b10f2dde5d707f83e1d515f49dfb95d9c4208e
- SSDEEP 24576:bZ0PZSfS8wCVh2asunAa7ibuK9gL7YuJqyp9l:lFJVquKshpf
- TLSH T148352B78FEE76A06499323829F928750B9BD89CED590DFF23C4F921A1343F5C66B8144
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
- Size 1.6MB
- SHA256 19cbe26700b098df1bf637f97ea2d0af971c9cef232a4e9a934923a779d4e859
- MD5 dc15256229ad40b6ffe57c7396c2e1c2
- SHA1 432d26f3e5dbee3e789eba89775671a10dd8a608
- SHA512 08addb0c6389109a415686359b5220ec95ecb8565f4429201ad6f2d324b323c02bd8f799d9aedfb7e70634e4a42d168dd0f3338dae282dc877deb3fdce9baafd
- SSDEEP 24576:b6lpoRWhMccrvrDtRD0YaaVnEBAwanNX4s1g:OpdhYVnEBAwanNX4s1g
- TLSH T1B78567B18B9E64DB0501F41BD808BE093DAF51FF3FAB875211641DBD35E20B846BA25E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ta.pak.DATA.crYpt
- Size 2.5MB
- SHA256 91ef21d131144d973080e21f1c686b33e687aeea062da91a65d73075019d3d99
- MD5 9dbef4646172551aed8f44549c3bec68
- SHA1 3727ab4f7f9ece75a11598e81eafd0db6d074a9d
- SHA512 8e1c9c1d73eb71825450dd80b893b21b59599fea336662a42edf09a3e3c398e47cebf4c8d123d9d51bb7a33fdfa9519b0b796836796c8f11d00314287b8a427e
- SSDEEP 6144:nLhdrmHqW9C9VImM6qYavQ7zKV3oE2MvQo01kFyqoXb4uQ1nXJlcwKSmOY0Pj8HO:dpkCQD/vQ7z9GLY0Pj8H7/J76Ui
- TLSH T1B6C51ECE923EEE890F93288F0318536912986255C47BE3A67C765E1198ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA.crYpt
- Size 2.3MB
- SHA256 ad5ab70d6628d5b6d2f0d0b1931f3a7dcc17fc0a853b18b184bf059c27b65193
- MD5 8fae7ba296dc1a69f87183bf6992fc2c
- SHA1 b3318ebd40a52bdcc0deec372ea211579cc4810b
- SHA512 09fde851ae7f040ee3760f8fff4adbe45e8235d3179a4eb916f16864d48cb15bbd3eb8a097ad30948bd44c19d70fd5fed62cc88e2d3047de6daa880c2c35f492
- SSDEEP 12288:9s6hcUv99hZr2o3djaAeM1fxCU3hFikZ0PlODHLpr8DVR2ijSY7XB6qwWW6hXBcS:9sEzkA6hXBcpSIKebpvmt
- TLSH T1F0B5C002396AD210DBE702B7352CF56C4A781B42A1D6772C1EAF9357EB47D7E0883636
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA.crYpt
- Size 2.0MB
- SHA256 08f75a392f9b3178a8c44e4a61a834b951723a17c7687844312e7810100bb04a
- MD5 77b71673fc8beb8b3b7e88b02e6a5a43
- SHA1 8cf430919483a02eaf4b92a47e46915b312b775f
- SHA512 c5e68e4b3f09c8f90041e81ebd7dd9b4395e2d15d7fa695feac03282bad4ecfa685720e52e2dbd0341e272e4657ddcd94784137ab13955a3fb0ad12a6d412eb8
- SSDEEP 12288:VhJ5IStIIWPLVks3klcfLYBCuaRHPukSLS65egsT//kAzFwa2n8Ta4lFEQ04QQcE:VuSuIUL1HJY/A/T4KeZC
- TLSH T1A2A58BB3724BDDD479441A5B292A7784667DAE693F73F8E000C9211A73F071A8432EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA.crYpt
- Size 1.0MB
- SHA256 9ff4f650ba599cbc594b7c8124b827f1eb6fd0679e2ec04b041b8b955cfd3b52
- MD5 b5094f2cd5dbdbeb28ac06a293b08b9d
- SHA1 d502e025b8af6fc04c246cf8189b1fe9f9483864
- SHA512 4ee918e64896c527ee637e861055bfe4da2c517090bd8844b27de0eb70e77fda0f6ac89ca8414a8d06d0e36b8065c8c87f68136cc70b440cd7c83626f6429cd1
- SSDEEP 24576:0zmrWPvLeVRsTIItIMvfsEVQLdxdeBeyN1NVjLheU+TWZ0yTI7DAj7GQgh:0gWbeVR4VQgXheU+TWZ0yTI7DAj7GQgh
- TLSH T14235D9417CEF681C8F75279BC5A50966F89F07A7B330E54ABA1E9636370739703A260C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA.crYpt
- Size 1.6MB
- SHA256 e2546e411361ebfb76e2f4d778e31b6fbbddf0107a6d7e2761a0a12454c56041
- MD5 6f1d65a0a44526354b33433f3dca9e85
- SHA1 b5e6cac59460c726d9e1337853efc51490bdfe1d
- SHA512 aa964c6489d557a5abc6ed267de11b8b5b51f5c61879cec88f9002eb6a17854d5f60c2af1d00eb2bc0d99d8a53de341b168fa230926994ff165c322d743c8e83
- SSDEEP 12288:9omufcr6ufKYA3KOAnKxEjc6OruVVXl/D5NGCLahqlH71w7D:ib02v7xE1VVV/9N8q0
- TLSH T19885DC51A68A28EF9241F2462C05FB487CDA44FD3E0B7622641DBD7D3DE327403AA75B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA.crYpt
- Size 1.6MB
- SHA256 4a1214760d9a6a4a04a7a3c379be77c5166910f50fcf187ccde0139d32ff9e17
- MD5 f526598048bc1e7fae08ea2546b5ab03
- SHA1 eb6bb5b0bb83cfbb44303d27e80f8a82f7e15bb4
- SHA512 e5e83dbc0af83782869636c526e96c3433928e272921756630b65e710934845dd919ba08f737d6d2c2734df8de7ff4ce1a983e2373d32195bd833637002c959d
- SSDEEP 49152:bVj4Lt84svVPdVgQu0uKMe8ILppZTdD4HIfKiuAOT5A2BuIRF9LUsxYl7j7khtWu:U
- TLSH T17275CEED62650232AE47E91EC352B024DB3A3D338F02ED59F1476205CD871697BCAE79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
- Size 1.7MB
- SHA256 a9bfab1740826aaf1abc9e00c80bc0bd4b49c2a24a47a9695ebac70ef0a11b60
- MD5 c8ffc9413d27e3cdfc2ceaf8e3faf55d
- SHA1 e64a6b3d0a40200dcf03b21029c11d10796e1267
- SHA512 691fcdec213081fae13b36c710e4db33d23f4cec4c6de6b1a161998cce5196c41f238c90b75325c4a77046e014d2691516989db035ad87a545cd4d63c1fae032
- SSDEEP 24576:ueOxPibFwyIz7lpia/HLkTO7MKr56yU7bZVM85u0:UxnLkTO7MKr56f7bZVM85u0
- TLSH T11F85A9A59A9D58DF0105F05BE8487A0D3DAB41FF7BA7871625683DBF39F2024863C329
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
- Size 1.5MB
- SHA256 757fde87411ee447bab79c6a316f1d3c2641ec1c0dd60ea01bc522dec8bd1505
- MD5 3d15cb341d0bfc88cf1e510e89834405
- SHA1 871d21a35fe9aa0e6c260777fe77664d83168640
- SHA512 4f78d559041325133e9ba4754cf71d958615cdd5b78b42a7bc787f4d90d0e58b40d3956ee909d2ece8ce4deb71d4d5af3110a969c860fa624a223c03ad3e01ed
- SSDEEP 12288:UtiDPdnWc+Pd2h4l42BUNBIwvcayDAdWOgEukqLWU1CbAKHCzZcPJKD7jfIyYN7U:Uti7+gbNUDAdphdo
- TLSH T18C7500D2E6BC85B28A21996780D33C34CB239F13D34AF285F56246C54EDA1135F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA.crYpt
- Size 1.2MB
- SHA256 cc6edecf1f3513c965ad1b5b2b6296c50f296261aca756164de2633c62eb15dc
- MD5 66b2c02558ce3ebd0d5dbf960f264257
- SHA1 d7e9dabb2ecb3751b6c061065d7942fca77beca8
- SHA512 280665e80175990b2f4835a4824f826247517e4af41af3299e2b2f8f3bc0ca40c7564746f2eca29d7583f77819ed03ca11cb1b6fc91157bc71911ee950246465
- SSDEEP 24576:PXZBUMEd72mFeK/yCiBkYqTsJpzXluDJTUFPws29GhLpFTA6v6bJn5a8hIKoRwlH:P8M4NFoI
- TLSH T1B745941106D4702281AC563EC5CD540EBFCEE46FE781CFE53AE8197877232A46F25B9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoCanary.png.DATA.crYpt
- Size 29KB
- SHA256 ed731bd40e1bf5b09aae21b83f0f4f584af11864de6e4b52c0f1337f80835734
- MD5 b30121fdaa8629590ade94f15b4addda
- SHA1 ac93cb2f50d4b83c4af27ed59adc8baaa73ef871
- SHA512 4a8427aa2598c81a51c3a3a72bfa0976dc62d81852285162b11d9e556747bd0de2c0e452e310788dd52d77fcd8c043310130dafab1effb7664cdb888451a0187
- SSDEEP 768:vQ1NpC9WZ5JhODfR2ZHKREmb35RASRf8ohS8kdsAMup9i2vaJytLYR:4VUWTJGfUBKREQ5lREohhkd5p9b8mC
- TLSH T184D2E1832EB49850788BCEED75A14CC8E7A69AF25E1715982C7341882379F0B06E53F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\VisualElements\LogoDev.png.DATA.crYpt
- Size 29KB
- SHA256 e1716445ec28f7977f824201ae1c32a33354dd13c4dc3517a4b3098d357336d3
- MD5 9d0580122b56b4cee1ff91377f62516d
- SHA1 fbe19fa05d1f478132d72adf541f3fbd5d80cf6f
- SHA512 ba8579f09313072a0920b44a99993713414059c0d98f7fef32ab3c8c13f534a3469fd3772b681329ea7a310a2c1661e4fc959cdad9b1ae246171fed970757276
- SSDEEP 768:RGWRIM2U8ldIiWB3pbflN4A7D56pq02RJosnurYPRQy:RvI9qZDlN4AH8psRvJp
- TLSH T10ED2F144F300A1C605DE7F91BBB3DB5448999ACDCA77C5456F2326288A3F81D198C8DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\WidevineCdm\manifest.json.DATA.crYpt
- Size 1KB
- SHA256 7e669431919de6105b1cabd26a1a8b6c8a289e2d28837bd65e8f3ce2bda22a3f
- MD5 36383e6e24e8a8c82a58b561f3b8af6b
- SHA1 db9ada0b68013c86d69d1f1381c815aedc064022
- SHA512 908e724f7b0cc2041c5088b151a95d328c35f28dca8ffb3ed6d7394dc47e3ea0b5090403dde7f87656b2eef4e33bf85de45e19dbe6286d55421dd02125b9f24f
- TLSH T1BD21B74644AB9BB515919BEA401A2B31F1A2F032DB29D58AEF47344674E532B30CFC3C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_feedback\camera_mf_trace.wprp.DATA.crYpt
- Size 24KB
- SHA256 cdc9e31c12349a425b2adf5898f4d1b9528260576746e36a0583be850c108d06
- MD5 a7ec426fa6cb5d8f6470c2ae31c61c79
- SHA1 2457a39cbbb9e996f1625e8fd1e30bac59f34136
- SHA512 93a77d17d4de3e1b73c78789541343723a08d4168df59a63f59fadf19ab52b34d2d32da50e08680746cdcfb1fb70eaf7e409e4ea751bd1c998293f9fefaa9040
- SSDEEP 384:RUGdlCYWLFFTu5rSl8x1nSflilwYN955b16yeEtn9ja5jXXylM:neLaM8wMwYh14yJeBSS
- TLSH T165B2F10C5A6E123AFD43C74C8B915CE0826E01D3964A85749E9DF1A5B983F7370DB8BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\EdgeGameAssist.msix.DATA.crYpt
- Size 1011KB
- SHA256 70af9d3d1cc05672147d1705a36387cb47be62c75ebd447da0972ab608b9e231
- MD5 33b202a8a408ff5ea6578c2439cf9a16
- SHA1 88b4b0b1b2e5decbd81b040127bf0c7c650c8b52
- SHA512 9da320279c12b0cb27c61862839a9b8f8e2807a3d6748950e7aa1d2794e097b0dc6bee6cd81103bf96dc58c78b3244bf63e4da031810602dfb40d8c08d02b337
- SSDEEP 24576:ccNmnzhikxQWujZ5JbIZcqau/3XUVhmKxNFNzkp+/yH:ccX/VTgcM8hhxz1oH
- TLSH T12D25336B0B0D7F30B8640F8C047E765D721470101C22994B76B6A5EAFF622B59FEA34B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA
- Size 1.5MB
- SHA256 2ac3f3116593247d58b96c4ea6e9b56775eb898567b31b52f541e81eaa623a00
- MD5 0a82986e280c222213425e993d1a186e
- SHA1 be118ac39823249e90fe322b5698c8fab3dfba8b
- SHA512 cddbad5192b19ac671b70b3458696e2ee720b01547c2a8193ce56532beff112c608cff8d31157dc3deb39abb08c23101668ef9c49affed723f586ed3da4c25ac
- SSDEEP 24576:63VB3w6mDSOC+sSX+nKiPWjAhtepL7/5GmeQCet7OwnHjddl8PzrwSd19J/uoh0o:63V5wXFX+nMu6P/5Rhj7njddl8PXL9pJ
- TLSH T14F6522E7B371EC3EDA6B1673536725B1ECB30E6916A1010E5B4AE93D6932B4884C47C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA
- Size 2.1MB
- SHA256 7514dd5ca17d164e67d19757a5c8272b3e5f8d9755d70e13765b109b1887a537
- MD5 5f0e775af90d99ee4e63520c6d34777f
- SHA1 f0d4e7acb236f539c376d8769f38b8ef696e59f1
- SHA512 25ae6a13d80b321c8cb3187b32e351b9edbd256f96f2be31a3ed23c0511dad80132875f4259ccfc05b24af62af67877c3676f7e34363d260fffbf16144ba23b4
- SSDEEP 49152:b38MiAQzZFX+nWcC3/HZbhxRqv7Ijddl89tCvAla+ppaurk0H:YnAQfXpcC3VhxSUjdj8zcAlaIa70H
- TLSH T15BA523D7A3B1CC7DCD2B4AB3526B00F4FDB2197542B6101A1B26AD3DA532B4498DA7C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\LogoBeta.png.crYpt
- Size 29KB
- SHA256 ec45a8a36289bf619b8824af93d9d9b48c25069e6a503204ab89573aa239db54
- MD5 d727d97e92ff2e99cb890d5cdc265f90
- SHA1 50bb59c2281b9b491ed37973f171fc8f5f4de248
- SHA512 0f4b7c16eb99945036d4d1f65dfbe0e7f24d4d2165ea7785c93b472542cbfa628f51b843845dd103968ae3cea4da28a59681cfaed9b4a14d38709f4e076f1f62
- SSDEEP 768:g41L8WG3hZNxZOMEgQVwd/Aw/fFRboelRBDl:gsL8W4hZjAMlUwNt/NloQl
- TLSH T16BD2F1050E31742AA7A823E7F9AA67A02D77E9C2DFC9E519144F3F000F2061D69AD77D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogo.png.crYpt
- Size 15KB
- SHA256 ad5ab5620f03acc6b9a33417879a17a89834e6fddafcbb493bd1b84e05285ab6
- MD5 70daf859671d17d1037020a99c75c787
- SHA1 e21c7fb4524179b055fd343c5b93032dc9d286ff
- SHA512 eb1d4e780e98e8f586c791d85adee8e772f955093a3238caed3cb77903310655d218a221756cbc72cd80bad7a60b4e23f0614777ae77d1ee39ce6b268e18f885
- SSDEEP 384:9kXKKhwVo+NuBiOwBnx4SEjmK+pUxJjBfV34GBpRiGkATMfz8j:9IDhwVLucZxYPmeJRVIqpRnkA4La
- TLSH T13C72D1F8B1EB86083326365909980E2A0B6F986F0F37498DFC3D16D73C1515A6D2C5BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoCanary.png.crYpt
- Size 14KB
- SHA256 141657a7b458a400ea4ea9f0a7577462835f493ad198ff67e3e627ba964d2aec
- MD5 3e042b79096cb491338246aa8ca7c94b
- SHA1 83b61f2a37958f955832b06fff366d4a4e482fd0
- SHA512 4445b14462ca5c3ba594ef3d39d0622ca6d2f6036ebaad0056491b56e3ec3fc16e6b4a7b214ac438cdfe7abf61a76cfe8e07543f26a169aa323f33b776a8bb45
- SSDEEP 384:FpJx0sSnU6R7pc8TB/6x3uh0jY+xu+bszpkziqdfVz:hx0TU6s8t/6QKjozptqddz
- TLSH T1A862D03BBF251BDDE5C7A436043DC90DBF41FE6E4A79A61868E3A1CB856400747D9822
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\VisualElements\SmallLogoDev.png.crYpt
- Size 14KB
- SHA256 f35ebb21110a4b901b3103fdc626af721e7b2b911ee6cf36506c1f6c28c5ed11
- MD5 df5446454ffa9d121c33e19538ff598a
- SHA1 4dafbbe59e3b0e2291863f9b84b91c2a3f07cd37
- SHA512 2372a684417c69dd27ffd0a8ebb6d8361f990cf5ad612ffb20a8715bf44adbbb7b39c8f0986cbaf9b3e00c123b2fb1d2e36af487f6b11db9e6a24a81b3921cc7
- SSDEEP 384:wpJKBR4To5P33Hn2H5dvZ8YaNcbsdTTUyi:enKPHI5dR8fNsyvUyi
- TLSH T1C062CF29C181FBC39DDD90EC28F19964FF90191AE1011985997FF3751B0E8DA6D8CA26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig.crYpt
- Size 1KB
- SHA256 046ff8091a87de45727caeb042080098e4dad364f25eabf50698c9334990e585
- MD5 946af7b601f0d4174be8d1e3b838adef
- SHA1 ad2c7fc0ac5d8078b46fcc73a934265d3dec985f
- SHA512 4f6b2c46c7ff7f43368aa0a80ef11680c19004e374e7a8938b97b729ca8be9fe24fea0c0de357ae452f00ec478853be09aba025ee499ff286c09e816ee7c4a03
- TLSH T1A7310A01E0FB42625CADD6118C0877D5CB6E2C5E9EF81524B366D42B71E154B9C09AF6
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\7-Zip\readme_for_unlock.txt
- Size 2KB
- SHA256 8bd7bc703f8e32786793790c7810beaff64ce943815dd51659537d965a428984
- MD5 446c8178483cb423cab8a5cdb21ba413
- SHA1 908619f360f8b85f0cc46d50cd5f27525a81b410
- SHA512 ec38cdd7ab94e389cbc00e283afd999fc0c60bab522153d6c2b781642d7f1496e693eed613d32b61fed73937a1e9d99c0eb2d4a18bab429b4703b059c1074a4e
- TLSH T1E251665FB70A41576D4236D2717DA6827617A40C333F19163CE6805C33A99AF2B3B2AD
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\A3R6C9.exe
- Size 180KB
- SHA256 8fbfc27d2affd969d165d8eeb25b83aac6e5fd8e4624b3a3800c0bbd77c0f1ae
- MD5 893a39c34bce96b1ed5fef89533d52c0
- SHA1 5315f170d19f234a30d5b30e3f2d0719c6be4866
- SHA512 9a1c202db751e5713551a9afbaf321f4880e94fc0a0584e0c6786f5423faaab82fbbb2d0ff4eaa83f23d22d172699e8cf62b77049d3dbd31b48e81819aa3a083
- SSDEEP 3072:8B/5U7rXgNoku2TspaCNbH5Xj3pFoap9IzxxSybrTP/4dgovM7nsoCYDr3Vout:8R5U7rwN02Ty3jXoaoxS04dLMzN73VoS
- TLSH T17C0412ABD4A9D85FF08F1BB501D658BD1E880B6440B8B57894EF7DE2C0FA71A7910E70
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Host Process for Windows Services
- Size 69KB
- SHA256 9e5e20b9ac696b12570847aa4cde99580fdf65d4bc9d2c71c3d5e40f5dcf4a69
- MD5 576ed9b1ae69f23356abe930d8a05db3
- SHA1 8595f6adbeb33722fbd965441e7fb7e0ba52c097
- SHA512 8998ba52b1aa9aaf3668920fc6caa174ded5dd218a93c960169169d1a3d4f3fd6d89d84462313b7199e6c3f5ed0cfa51cf228e705af734dfee242bb69c1b7f8a
- SSDEEP 1536:mkLPmz3hNW4fyN8o+6R8Idtf76R7W1F866YLo4nDsn1YxelYnouy8:3b8RNBfyN8/SfmoF8wLq1VQout
- TLSH T1F963019BF7C2498ACF9EC23E23FE307E3D0002255AC600BBBA7864765592B5D7D416D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\Q9acAd3.vhd
- Size 16.0MB
- SHA256 c902ce599db4134b17ac52a817c04b5a60cc587f983b3517b97c58634c13cc18
- MD5 449a62bf153f4fb72e2ee7a86c774b45
- SHA1 efe19f472d460d7210e568e3443e164fd1f51855
- SHA512 c7198185e0f2bd2502cb3c24fc870fb621b8d421c5f00397f180b145035292ccb4900b17948cd5a166be39e5dc584bc9f22216ae050c20e87d44da485e820d18
- SSDEEP 24:cdmOETuYmjvKPSa3q5wEtGsx/Cz0hPXR9GiRMvYgqvq5wKaZH:cSiYgvKPSa3raj/tFhsYHrKax
- TLSH T15FF68622334C9B0CEDD6997141A7FD301B72782D9A34905772526B0C3B717147FA1F95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\ProgramData\kD1aE.tmp
- Size 34B
- SHA256 0977e976a701e82d9d4f1f1b1eaf8a495e1bd92cc33a86a398d0bd536d86a73a
- MD5 4eb9ba2b74923cfdd5bf1b7d361916c8
- SHA1 38bb5cd2e7c48a369d7e73852749bac403165519
- SHA512 be4227c1d478476813f164b8e5389d46be10877839530e85e0ab51f744f6006810823751e5ec08ad345298c966082f48a36f0aa6ba12d47522bde95176cf203d
- MD5 SHA1 SHA512
- Path C:\ProgramData\kD1aE.tmp
- Size 132B
- SHA256 82350eee2b0b078b4dd06fee1242d227cb9bc4a5a61d01ee42161d8c8e1efc80
- MD5 40525e4d5526164ffeeefb2e335c869e
- SHA1 855aea5785873f5b13605de8765d94edf62143f7
- SHA512 b5334c2d1f8713f4316673754f112ae59d2b8854aada64380888cb40323927862b753ba40691f0923c8e70c7b624cf3cd315be7e84bf8202c293f2f71c02afcf
- TLSH T193C0222EB3020B0CF002A0F08B3CAC0F8302E0C8228F800CC08002028008B388280383
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\sichost.exe
- Size 43KB
- SHA256 092d4fe86aec6c3a44499e7539e88e50a31b451250e53847d0ab23d116a7cd8e
- MD5 e6a8f3973380e37f13fc76a9d27e79ca
- SHA1 24bd0e0662f0dca89698c1323268f15d30d36d96
- SHA512 b5afbc690962fdfb9469a4bc96404e629c097b5bb60627f830e2a00879625e75590e3f3c2bbff7765d701d0d61481c49769c0d36fe74182027555444ae2f2534
- SSDEEP 768:PW1wBW6mR0DadKA0KKwFe2iVw0AYkGzeUlZ8Rv5mo7bsm2GhoINlFnbcuyD7U:PIwBjlaEA0zsKw0ADGzeUlZkMQ8GuINJ
- TLSH T14713F219A1DFE6F9C86800357C3AFF442871DA89ADA807DF8DD02573C7C17A8A761359
- MD5 SHA1 SHA512 SSDEEP TLSH