Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    899s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-de
  • resource tags

    arch:x64arch:x86image:win11-20260513-delocale:de-deos:windows11-21h2-x64systemwindows
  • submitted
    15/06/2026, 10:36

General

  • Target
    A3R6C9.exe
  • Size 180KB
  • Sample260615-mnb29acy2q
  • SHA256 8fbfc27d2affd969d165d8eeb25b83aac6e5fd8e4624b3a3800c0bbd77c0f1ae
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Path
  • C:\Program Files\7-Zip\readme_for_unlock.txt

Ransom Note
  • ATTENTION! Your network is hacked and files are encrypted. Including the encrypted data we also downloaded other confidential information: Data of your employees, customers, partners, as well as accounting and other internal documentation of your company. All data is stored until you will pay. After payment we will provide you the programs for decryption and we will delete your data. If you refuse to negotiate with us (for any reason) all your data will be put up for sale. What you will face if your data gets on the black market: 1) The personal information of your employees and customers may be used to obtain a loan or purchases in online stores. 2) You may be sued by clients of your company for leaking information that was confidential. 3) After other hackers obtain personal data about your employees, social engineering will be applied to your company and subsequent attacks will only intensify. 4) Bank details and passports can be used to create bank accounts and online wallets through which criminal money will be laundered. 5) You will forever lose the reputation. 6) You will be subject to huge fines from the government. You can learn more about liability for data loss here: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://gdpr-info.eu/ Courts, fines and the inability to use important files will lead you to huge losses. The consequences of this will be irreversible for you. Contacting the police will not save you from these consequences, but will only make your situation worse. You can get out of this situation with minimal losses To do this you must strictly observe the following rules: DO NOT Modify, DO NOT rename, DO NOT copy, DO NOT move any files. Such actions may DAMAGE them and decryption will be impossible. DO NOT use any third party or public decryption software, it may also DAMAGE files. DO NOT Shutdown or Reboot the system this may DAMAGE files. DO NOT hire any third party negotiators (recovery/police, etc.) You need to contact us as soon as possible and start negotiations. Instructions for contacting our team: Download & Install TOR browser: https://torproject.org For contact us via LIVE CHAT open our >Website: http://ae4d4tbc4sbwtvse7pgexoogttfhk2hk47efz4d3qddg4yhxd4t5c7ad.onion >Login: customer >Password: L&i++dcsMHXnIcPdXir+L&Czb4OnsN >Secret: UYYm@6NuSEm3psu9TGyq If Tor is restricted in your area, use VPN���������
URLs
  • https://gdpr-info.eu/

  • http://ae4d4tbc4sbwtvse7pgexoogttfhk2hk47efz4d3qddg4yhxd4t5c7ad.onion

Signatures

  • Family: Cloak

    Cloak is a ransomware that has been active since 2022.

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (10117) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Disables Task Manager via registry modification
  • Modifies Windows Firewall 2 TTPs 1 IoCs
  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Deletes itself 1 IoCs
  • Drops startup file 1 IoCs
  • Executes dropped EXE 4 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
  • UPX packed file 54 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 26 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Interacts with shadow copies 3 TTPs 1 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies Control Panel 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 14 IoCs
  • Suspicious use of WriteProcessMemory 10 IoCs
  • System policy modification 1 TTPs 16 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\A3R6C9.exe
    "C:\Users\Admin\AppData\Local\Temp\A3R6C9.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4996
    • C:\Windows\SysWOW64\diskpart.exe
      diskpart /s C:\ProgramData\kD1aE.tmp
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4268
    • C:\Windows\SysWOW64\diskpart.exe
      diskpart /s C:\ProgramData\kD1aE.tmp
      2⤵
      • System Location Discovery: System Language Discovery
      PID:4468
    • C:\ProgramData\Host Process for Windows Services
      "C:\ProgramData\Host Process for Windows Services"
      2⤵
      • Drops startup file
      • Executes dropped EXE
      • Adds Run key to start application
      • Drops desktop.ini file(s)
      • Enumerates connected drives
      • Sets desktop wallpaper using registry
      • Drops file in Program Files directory
      • System Location Discovery: System Language Discovery
      • Modifies Control Panel
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      • System policy modification
      PID:6808
      • C:\Windows\System32\cmd.exe
        "C:\Windows\System32\cmd.exe" /c vssadmin.exe delete shadows /all /quiet
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:7056
        • C:\Windows\system32\vssadmin.exe
          vssadmin.exe delete shadows /all /quiet
          4⤵
          • Interacts with shadow copies
          PID:5932
      • C:\Windows\SysWOW64\netsh.exe
        "C:\Windows\System32\netsh.exe" advfirewall set allprofiles state off
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:7112
    • C:\ProgramData\sichost.exe
      C:\ProgramData\sichost.exe C:\Users\Admin\AppData\Local\Temp\A3R6C9.exe
      2⤵
      • Deletes itself
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:6840
    • C:\Windows\SysWOW64\diskpart.exe
      diskpart /s C:\ProgramData\kD1aE.tmp
      2⤵
      • System Location Discovery: System Language Discovery
      PID:6852
  • C:\Windows\System32\vdsldr.exe
    C:\Windows\System32\vdsldr.exe -Embedding
    1⤵
      PID:2908
    • C:\Windows\System32\vds.exe
      C:\Windows\System32\vds.exe
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious use of AdjustPrivilegeToken
      PID:5076
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum
      1⤵
        PID:4456
      • C:\Windows\System32\vdsldr.exe
        C:\Windows\System32\vdsldr.exe -Embedding
        1⤵
          PID:6016
        • C:\Windows\System32\vds.exe
          C:\Windows\System32\vds.exe
          1⤵
          • Checks SCSI registry key(s)
          PID:1740
        • C:\Windows\System32\vds.exe
          C:\Windows\System32\vds.exe
          1⤵
          • Checks SCSI registry key(s)
          PID:6960
        • C:\Windows\system32\vssvc.exe
          C:\Windows\system32\vssvc.exe
          1⤵
          • Suspicious use of AdjustPrivilegeToken
          PID:4828
        • C:\ProgramData\A3R6C9.exe
          C:\ProgramData\A3R6C9.exe
          1⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:3764
          • C:\ProgramData\sichost.exe
            C:\ProgramData\sichost.exe C:\ProgramData\A3R6C9.exe
            2⤵
            • Executes dropped EXE
            PID:6052
          • C:\Windows\SysWOW64\diskpart.exe
            diskpart /s C:\ProgramData\kD1aE.tmp
            2⤵
            • System Location Discovery: System Language Discovery
            PID:5168
        • C:\Windows\System32\vdsldr.exe
          C:\Windows\System32\vdsldr.exe -Embedding
          1⤵
            PID:1668
          • C:\Windows\System32\vds.exe
            C:\Windows\System32\vds.exe
            1⤵
            • Checks SCSI registry key(s)
            PID:5100

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                am.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\am.pak
                • Size 1.5MB
                • SHA256 4697876e002040c2d5b6678737103e03fb9de299e1dad447a91ad4e48d593e8c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ar.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ar.pak
                • Size 1.5MB
                • SHA256 c1f5a34f232457dddd854fd965f77cd4c33cf5c72af47eccbe52159a02a933bc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                as.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\as.pak
                • Size 2.1MB
                • SHA256 702843d8c081e7d0830d57aec966ecff817d32131d1f51a6345345552ef6951a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                az.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\az.pak
                • Size 1.1MB
                • SHA256 417563b52095e72f56a5a00cdd8672916548d154f1b79b89731277dd04c8fa49
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bg.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bg.pak
                • Size 1.7MB
                • SHA256 959819afcc5270323d03caeac221a594f64260940df245f4f4f0b08331ea3681
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bn-IN.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bn-IN.pak
                • Size 2.2MB
                • SHA256 8f77d3bb45ca433925ba157cfe9742e1182cb6b91bef81c40ff2e7b84bac57ed
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bs.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\bs.pak
                • Size 1.1MB
                • SHA256 511c11164792c051cde25ca60b532bccfb613cdcc3f8d26afd7994c779a31a4d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ca-Es-VALENCIA.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca-Es-VALENCIA.pak
                • Size 1.1MB
                • SHA256 3fafc8bd298a85fe3614d4390e392364004b9b83962d9fb1c75f31352118fcb2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ca.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ca.pak
                • Size 1.1MB
                • SHA256 dc82b86ee7921c6da11d1e97b737239e4e22031c66cd1815305f0f34100b6800
                • MD5 SHA1 SHA512 SSDEEP TLSH

                cs.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cs.pak
                • Size 1.1MB
                • SHA256 4f7f358f503ce312b70d024523fa81de5d6ea410e088568f89f1b76dce8aec1f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                cy.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\cy.pak
                • Size 1.1MB
                • SHA256 743b46f5ad04420a6241123b8631800dff1edad76151accd89e53b08547f6447
                • MD5 SHA1 SHA512 SSDEEP TLSH

                de.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\de.pak
                • Size 1.1MB
                • SHA256 6bee640efd6e4f22d77af966daea40ee6367113b805ca284a1b65dc615b13484
                • MD5 SHA1 SHA512 SSDEEP TLSH

                el.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\el.pak
                • Size 1.9MB
                • SHA256 e5d9328483ad95b8cdaa6fa89bf5effce429eba5494f3b56db1c714101ad6ab3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                es-419.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es-419.pak
                • Size 1.1MB
                • SHA256 b8313a685397c480de0ac1345d55ff3fdc078e867c0e02634464115e049d65a3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                es.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\es.pak
                • Size 1.1MB
                • SHA256 f8d1629a3977bbbb6acfe62300708d7e0837206b7a28aea6d12c15caf145fc4a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                eu.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\eu.pak
                • Size 1.0MB
                • SHA256 efe6e482a22e7143e7236f019503a8ae518874a4c808c41a433d6522af9bade8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fa.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fa.pak
                • Size 1.5MB
                • SHA256 260f301f75bec12a8b5d77dc08399887c404f4ff825aeb65866b069d065d17ba
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fi.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fi.pak
                • Size 1.0MB
                • SHA256 6e157e4acda70e372e0a885b8890777d7783f664b59f1b26058459b29557c266
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fil.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fil.pak
                • Size 1.1MB
                • SHA256 f45369b09e184efe520c4d3996b85313418ae14334bcdb221a5ff5cbe829c4f1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fr-CA.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr-CA.pak
                • Size 1.2MB
                • SHA256 76a9787a14613b906b9458f8afb402cae98713dc188e154452c1c91f05542d97
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fr.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\fr.pak
                • Size 1.2MB
                • SHA256 ed5c380e12bdecfd8335a9b54e0bf71fde664d0c15f4c931af1d51afeae8835b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ga.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ga.pak
                • Size 1.2MB
                • SHA256 661e31a307a1fc423dcb99b7c86fd726afab7c90d4ad2b18bc9300eceddce47c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gd.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gd.pak
                • Size 1.2MB
                • SHA256 151f9a81987eebdadb820210a3982e42cada411013b6d27320c10f26db926f53
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gl.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gl.pak
                • Size 1.1MB
                • SHA256 496f38d274286279223e5cd662cd5df5751c5df43a16873befb1b21af5f3295f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gu.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\gu.pak
                • Size 2.1MB
                • SHA256 5423f678cb3a796af4750692af2ee119ce704807c43bcc7780a5c43479f37309
                • MD5 SHA1 SHA512 SSDEEP TLSH

                he.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\he.pak
                • Size 1.3MB
                • SHA256 fa66241bec2446a7ff34641748900d835cd9c05147932159f9961db4bf762fa7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hi.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hi.pak
                • Size 2.1MB
                • SHA256 dbbe696cca858b0d4f2795d8e272155b24da3fc6b249d270d7d871b60f556d29
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hr.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hr.pak
                • Size 1.1MB
                • SHA256 d35132bf824d35ddb90cf7e94e4bff460cf4e9638cbbac7074a938327e93ac4d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hu.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\hu.pak
                • Size 1.1MB
                • SHA256 4055deac8aff49a871f768b15c57bc3cc68458cc6155dea938e493dcb530a58c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                is.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\is.pak
                • Size 1.0MB
                • SHA256 66b8e1296ee0ac3bcbc16332489bb042394ef72add77705e660c54fb0566c2cc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                it.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\it.pak
                • Size 1.1MB
                • SHA256 8f4c92caace6a288b628bce85a7b0b74eee2059daa5b009d13d009401a1515a4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ja.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ja.pak
                • Size 1.3MB
                • SHA256 6a2027f80387d7a549f016926fb3f48a4a18a66626780f83cdd5fc6992cb8d4c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ka.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ka.pak
                • Size 2.3MB
                • SHA256 cd0a63bd2810d2aac4769fe66ea4ae20c84953fdfa8b1aca02ab1f7f119bf305
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kk.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kk.pak
                • Size 1.7MB
                • SHA256 f8e8a378168ccf5300c84b8c0c2844e2785ff9651e1b101155e334b710b86596
                • MD5 SHA1 SHA512 SSDEEP TLSH

                km.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\km.pak
                • Size 2.3MB
                • SHA256 50fd78440999d33e6d85fd67360dd964454ca330012ed9afe50a5c19b9592ae7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kn.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kn.pak
                • Size 2.4MB
                • SHA256 12aa9a452d9af583d073abda127faa4cbedc4729fa275c108e1c478ec41b5e3c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ko.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ko.pak
                • Size 1.1MB
                • SHA256 98293c31da12578f33bb1e55c5bf033dfe615fdeff863fcff289356d740d5890
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kok.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\kok.pak
                • Size 2.0MB
                • SHA256 579f6feb0606898e4b77ae577df7661223ce297e87d65fca05f5698d7ec43e80
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lb.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lb.pak
                • Size 1.1MB
                • SHA256 a9cb8deab0383671ff4cabda32b0e5ff1a5f99375c22a78226823aef346735c9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lo.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lo.pak
                • Size 2.1MB
                • SHA256 a8c442c75fcda224ffe0a8759ead6443b92d8d656b10366e373cd56f884f966f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lt.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lt.pak
                • Size 1.1MB
                • SHA256 0cdeab8d3b65d40a0803a38449dceab83e7a6af50b5777a0e418c5b7967f70c3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lv.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\lv.pak
                • Size 1.1MB
                • SHA256 74205473381e06cf730b23e5e8327fcb148eacaeaebbdba2cc8654fd2532403d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mi.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mi.pak
                • Size 1.1MB
                • SHA256 8c2ae9321a2ba18742f3781f4cc4082270d6401946c7a6a22fec2abddf19324e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mk.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mk.pak
                • Size 1.7MB
                • SHA256 087b46773ad0a5bfbefed9de536174343064b7cf13555ba86b17daf94e27f547
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ml.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ml.pak
                • Size 2.6MB
                • SHA256 e513b5fcf42197bbe20c0b4327466ffad0e6c7619e1a2e3ec6d791584a1f8fbc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mr.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mr.pak
                • Size 2.1MB
                • SHA256 9a322a4e065d043ee3105aee2143c53d81b1e77649ce69b00bcc88edcbb05409
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mt.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\mt.pak
                • Size 1.1MB
                • SHA256 480798624d897db90240bfe78bec33fe40ebebd4117d2cc40030e2bf3c5d67bd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ne.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ne.pak
                • Size 2.2MB
                • SHA256 475ca312cf281e1d562854c456c3e9e41b25573a8405a98b1b2f2c5b65c6c6fe
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nl.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\nl.pak
                • Size 1.0MB
                • SHA256 99cd8a7751f0c6f97a334ed9050af66af435d230aafa36d3f5dbb57885b75180
                • MD5 SHA1 SHA512 SSDEEP TLSH

                or.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\or.pak
                • Size 2.3MB
                • SHA256 f3bd5442539a3f12b9aac82c441e7fc5d9f6f0f4e8cfb50e1532e03243c9b353
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pa.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pa.pak
                • Size 2.1MB
                • SHA256 ddf95f3cb8c3613733787d924fe7981cd28a5cdef6adbc11cda34ddcbb257bcd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pl.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pl.pak
                • Size 1.1MB
                • SHA256 8ee2e63946aded947cf302887273aee31bfe73b6ada076c5af03fc5373e9754f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pt-BR.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-BR.pak
                • Size 1.1MB
                • SHA256 c21cdd29be41c1728544e1f27a57b3e3cf1730dee8be12b158b4e8b34f376c66
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pt-PT.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\pt-PT.pak
                • Size 1.1MB
                • SHA256 4372f3c60e59c0401fdb04b27134499e81e2772e0a2f6cecbd0045abc8ad5e07
                • MD5 SHA1 SHA512 SSDEEP TLSH

                qu.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\qu.pak
                • Size 1.1MB
                • SHA256 b002b90829d1f15868435b5c1b74c615c51b1c0f2547028e89bb4b06e401076e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ro.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ro.pak
                • Size 1.1MB
                • SHA256 a2f8e349280c7b55c772a2ca107c44b918585d59be10a8053c38580dc8634c58
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ru.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ru.pak
                • Size 1.7MB
                • SHA256 05f9137a26cf3f674bc0065c6fd7c6409ac38808d242c5297190039bd45b6a67
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sk.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sk.pak
                • Size 1.1MB
                • SHA256 7cc206c436ca20b0ab8a65b4a31a8badb04fff7888950fe854bd75032955d73b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sl.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sl.pak
                • Size 1.1MB
                • SHA256 baa698015903cf83f8b4da3b21c2a973318d9baea5b5ce5d737aae5195940577
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sq.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sq.pak
                • Size 1.1MB
                • SHA256 51e64d532de96bd6b474b50fb33b795d2000bba7d61b6ce929c34200ede864ce
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr-Cyrl-BA.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Cyrl-BA.pak
                • Size 1.6MB
                • SHA256 a97192fd8025b4e12ae5cc117065208adf59236c9e97487b8f8887afce168a49
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr-Latn-RS.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr-Latn-RS.pak
                • Size 1.1MB
                • SHA256 29e0b0beed471b31f13d5a7a4521d73d5f7a49ea2dde7cba78e22a306d210a86
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\sr.pak
                • Size 1.7MB
                • SHA256 4ac105a6fcae6f00479382349e77ca956bb0b788fddffa12ff570d7e28ef5710
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ta.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ta.pak
                • Size 2.6MB
                • SHA256 846f7b82c646288e5ded201079c7eecffdf501c40e920ec877e98c210207d3d4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                te.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\te.pak
                • Size 2.3MB
                • SHA256 f3c96dae29cb1f70d5bb9940908e476f09a20235b109e027b8fcd67fef87c5a7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                th.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\th.pak
                • Size 2.0MB
                • SHA256 135b69de9c7d2b4daad28f84711d9c434b62d645bf7d62bd4039a9df945a7bdc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tr.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tr.pak
                • Size 1.1MB
                • SHA256 e78b07ef2610f5c7fd55991e2ae0743bcf2aa07e817827ea52ce9587e0d8f96e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tt.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\tt.pak
                • Size 1.7MB
                • SHA256 ef74f9ec9d3850a4e67146ab4ff57273e0d372a5540791eb3d40450e81f7bd6d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ug.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ug.pak
                • Size 1.6MB
                • SHA256 f55196f9e05eb2d0ed796329e61405421da345a9402e0e253a1f147ac7baf572
                • MD5 SHA1 SHA512 SSDEEP TLSH

                uk.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\uk.pak
                • Size 1.7MB
                • SHA256 aa55715d681fb71ff232669ff18e44dff2d008a52a1a1f90dd962d7a5602c5cc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ur.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\ur.pak
                • Size 1.6MB
                • SHA256 30966e37ad6ca87ffd3fdd222e54c2a2a3300bb86ff4b959a5c6ed54918443aa
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vi.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\Locales\vi.pak
                • Size 1.2MB
                • SHA256 4843732979b93edb18d4734dc1452a2f055a01e0d07d7dcb0c7740ec82e153b4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                msedge_100_percent.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_100_percent.pak
                • Size 1.6MB
                • SHA256 0d7ab102b0b29d6e351f10f0a9eed3147dd5cbf399e2b363d8bd023b0991cef2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                msedge_200_percent.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\msedge_200_percent.pak
                • Size 2.3MB
                • SHA256 9930ebfda49aa307049e7424f0704a125bf3ccc7d395e7d0305f5c8dbfd30532
                • MD5 SHA1 SHA512 SSDEEP TLSH

                am.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\am.pak.crYpt
                • Size 1.4MB
                • SHA256 1ebe40eba90b319ae1de9fc27f9f2696f7310d42f2bddf120e52d17acc24bd6c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ar.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ar.pak.crYpt
                • Size 1.5MB
                • SHA256 f9a3a8307258beaac30f62665fdf839a86c5a8b6dfa059b7e9056eff02e92ebc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                as.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\as.pak.crYpt
                • Size 2.1MB
                • SHA256 a4dae8ebecee614641c1be06fc580ed205e0b43ea2058e5f6f1f752fd0c1ce6e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                az.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\az.pak.crYpt
                • Size 1.1MB
                • SHA256 578f35e3081755d8b416f159cd2f02906a444a2120711c6e0f23655dec352e7d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bg.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\bg.pak.crYpt
                • Size 1.7MB
                • SHA256 4e17a4d1976b12739c095cd2181ec4c2318451028468bd6e49d1a3b16959c9fb
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bn-IN.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\bn-IN.pak.crYpt
                • Size 2.2MB
                • SHA256 b1d80097d02675cb282537d23d03ab8c42f8f78134036be5e2fa17baa945a244
                • MD5 SHA1 SHA512 SSDEEP TLSH

                bs.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\bs.pak.crYpt
                • Size 1.0MB
                • SHA256 fcf072872e996ae2c340d6669d2b19409052a328108baddcc47f362da9fe99f0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ca-Es-VALENCIA.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ca-Es-VALENCIA.pak.crYpt
                • Size 1.1MB
                • SHA256 390e454fd451c87e1100d0f136ced1274119068330e6e57a84673df16df9ee3e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ca.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ca.pak.crYpt
                • Size 1.1MB
                • SHA256 a0d83402d5808cb8034578bc6723b10191a520dbdecff213b31d2fc36c7fd290
                • MD5 SHA1 SHA512 SSDEEP TLSH

                cs.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\cs.pak.crYpt
                • Size 1.1MB
                • SHA256 293b09d69e80757a5b855f1ff1e0edb713f5b52649fa9255443589f3c68d4ca9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                cy.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\cy.pak.crYpt
                • Size 1.1MB
                • SHA256 1995d3c2e1c073d737ff7b29ada7fe8642e1b309b0d0c7c02e19bd5588c845e2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                de.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\de.pak.crYpt
                • Size 1.1MB
                • SHA256 a756d82b8c4a7541011842012111a64ae9495442fea77602f359392f65c61221
                • MD5 SHA1 SHA512 SSDEEP TLSH

                el.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\el.pak.crYpt
                • Size 1.9MB
                • SHA256 4ac3f0d8f5412484ed7d875c5d0f26bca4a7fee444258e8c2e67805113727935
                • MD5 SHA1 SHA512 SSDEEP TLSH

                es-419.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\es-419.pak.crYpt
                • Size 1.1MB
                • SHA256 11fcb8d1c2307d423cd653710308b0f5f05aa72bccd97e39ddb0cc15867b8560
                • MD5 SHA1 SHA512 SSDEEP TLSH

                es.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\es.pak.crYpt
                • Size 1.1MB
                • SHA256 0250ad3aa57322ffc46fb8f0dc03d28452d7f1f0df8406d8d1697b2082a944d7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                eu.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\eu.pak.crYpt
                • Size 1.0MB
                • SHA256 171b152377208340fc71265cab1f9994d622c0258288d152ecbe18f958a139ef
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fa.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fa.pak.crYpt
                • Size 1.5MB
                • SHA256 cb681696c0660539cd4757f1dd1a0d16d212b82917c04958f60c159b1e3eaa6e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fi.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fi.pak.crYpt
                • Size 1.0MB
                • SHA256 55f32d3e88b49a261ace728aed89577769742b8f6612e1aa5ae22105ef7120a1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fil.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fil.pak.crYpt
                • Size 1.1MB
                • SHA256 f8119c3a9d564cae9b31fe2a2aee9ab05b629d7edd821d3a7d018136f054b9c4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fr-CA.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fr-CA.pak.crYpt
                • Size 1.2MB
                • SHA256 b8d93b4a2ca36d97d46c6a6aecf54c11fbb895b7289a92171b3ea7e7a718450d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                fr.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\fr.pak.crYpt
                • Size 1.2MB
                • SHA256 f806338585fae7c2f8df1d1ca6fe196f1ec0f88d528fa3ea31642037ad803788
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ga.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ga.pak.crYpt
                • Size 1.2MB
                • SHA256 7aade5d504f1b9723981d279ddf193c0313807abc4fb9ba65f6f0e1c5a368534
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gd.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\gd.pak.crYpt
                • Size 1.2MB
                • SHA256 e8e9556c5501936ba559b7a1ae182b198bc63d59461f129ed4f2f15c4a8e17e9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gl.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\gl.pak.crYpt
                • Size 1.0MB
                • SHA256 48aa09a9d98c4dd57a1f0d990baf181d20da9425af5ace668ec2b6469a17250b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gu.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\gu.pak.crYpt
                • Size 2.1MB
                • SHA256 9e680764f8363ca1fdaf4e97980f4d026e015a26fca3ecffa757c726ce607b0c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                he.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\he.pak.crYpt
                • Size 1.3MB
                • SHA256 7cda94bea16e4fa0508728a425ddc5bffbcaf8b4068be620b6ab1cf7ca9ede87
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hi.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\hi.pak.crYpt
                • Size 2.1MB
                • SHA256 262ed0d8d259f69c45a6a152baf08f425657a519bad50f64a37c0c368b8d8264
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hr.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\hr.pak.crYpt
                • Size 1.1MB
                • SHA256 529ae9edbaea911c984535a2ffb3015c7981849657b7e21b2858d8635bab6804
                • MD5 SHA1 SHA512 SSDEEP TLSH

                hu.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\hu.pak.crYpt
                • Size 1.1MB
                • SHA256 d53b7b1a513be6b55cc91f584ecbe94b38f4bac94ec5be080a4058f3314fe03f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                is.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\is.pak.crYpt
                • Size 1.0MB
                • SHA256 be83d68535f165513f8f868bf4deb504f135c3d94bd21b891571a72373374616
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ja.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ja.pak.crYpt
                • Size 1.2MB
                • SHA256 00ca5dfe6bf2af7e61fff7e5fd3adf994a0ea79f2259386cd68fb7ac075b5f0d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ka.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ka.pak.crYpt
                • Size 2.3MB
                • SHA256 f3bad971334b89b23d9eb26db806a0b7099e482b278d420e16b5158bc9fc8ca7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kk.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\kk.pak.crYpt
                • Size 1.7MB
                • SHA256 845afef6ebcdf1f5336db5494b1b5e0bcf39b95da7c9464c254a9ed7bb443d88
                • MD5 SHA1 SHA512 SSDEEP TLSH

                km.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\km.pak.crYpt
                • Size 2.3MB
                • SHA256 22194a7362eb3d4e5450a1788c9a9b535b4eb9fadc8f88098b2630a5355eec8d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kn.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\kn.pak.crYpt
                • Size 2.3MB
                • SHA256 ecc55e2267541f2f9916aacf409fcee297fed9949b5f171cc731ea6e63d976f3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ko.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ko.pak.crYpt
                • Size 1.0MB
                • SHA256 95c9afc86304c2d18220df49f3c09da6327b505fbc169c6f724bee65aed3dd6c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kok.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\kok.pak.crYpt
                • Size 2.0MB
                • SHA256 6e10c787b885f48550026971193360dd1dea8a05339e9f945fff191bfebb7466
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lb.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lb.pak.crYpt
                • Size 1.1MB
                • SHA256 6b5afcc6443b0ea18c48c8e135fea97d1e69b62fd52871d37164b7bfaefc5b57
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lo.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lo.pak.crYpt
                • Size 2.0MB
                • SHA256 697d20ac083f307bb617e497239d69ee3f5ef04791f39216c38cf82590f5704e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lt.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lt.pak.crYpt
                • Size 1.1MB
                • SHA256 7385258ece4a6b3ce93b79ff9e60edf2cb6eb53f8592a90395fffd33ac8ba969
                • MD5 SHA1 SHA512 SSDEEP TLSH

                lv.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\lv.pak.crYpt
                • Size 1.1MB
                • SHA256 8c020613990612e64cff2effb6a38dd90fcc9d9a6b91594de0b0289e5318402e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mi.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mi.pak.crYpt
                • Size 1.1MB
                • SHA256 dc3f50be273ba5c8d046e36117a9ab938d3ab707b767451adabbb6cf453949b1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mk.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mk.pak.crYpt
                • Size 1.7MB
                • SHA256 e9e22c8da3a779458a19303dd1397424a23c642a23d075695b0090aebe93c0e2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ml.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\ml.pak.crYpt
                • Size 2.5MB
                • SHA256 44da12e9d0a207f3ef10851f843d627ab7b625258ec1070abdfb859263d73490
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mt.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\mt.pak
                • Size 1.1MB
                • SHA256 694b3e51a0158dea655163e032e9a63cef68cd1a9843affa2eece6ab24487fad
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nl.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\nl.pak
                • Size 1.0MB
                • SHA256 c53ad43a3b45031260a86f5b4a1ca804068c814f64f5730ec082d47177cf0020
                • MD5 SHA1 SHA512 SSDEEP TLSH

                qu.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\qu.pak.crYpt
                • Size 1.1MB
                • SHA256 527e2e1b7f6a70187ce3a13b508b6eae368cbf60d37f6d5e1dc895581f64a6cc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr-Latn-RS.pak

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sr-Latn-RS.pak
                • Size 1.0MB
                • SHA256 9871b81af531aef0914ff2f7b022abea803d01b9a78d5fa6e35ecf2eb17ce355
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sv.pak.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Locales\sv.pak.crYpt
                • Size 1000KB
                • SHA256 4a0d1ba51f8cdb6f950ca2ac56421b02619d3d4b9e4d7e42b00582ec3f56fc65
                • MD5 SHA1 SHA512 SSDEEP TLSH

                af.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\af.pak.DATA.crYpt
                • Size 1003KB
                • SHA256 41b8cba7b94a59d23203791dc8ab44ec3e2d018108cefb620e3c821efb32d2a4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                da.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\da.pak.DATA.crYpt
                • Size 1001KB
                • SHA256 945b66d1ea7c0ba589f339bb9ba36269934e13a066209ec8cd4e74903f5f4abd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                en-GB.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-GB.pak.DATA.crYpt
                • Size 914KB
                • SHA256 6dd9ffe4963624258c543d65042dce45960a2fd88e68a10788b1ea0d55672732
                • MD5 SHA1 SHA512 SSDEEP TLSH

                en-US.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-US.pak.DATA.crYpt
                • Size 901KB
                • SHA256 7127832585917a89381d4383ef7a830c06e4830dcd2f429b40d933ab4d8515af
                • MD5 SHA1 SHA512 SSDEEP TLSH

                et.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\et.pak.DATA.crYpt
                • Size 990KB
                • SHA256 665a6e8764250519c8d0e8113bcb6279db451d613c16263a0e6f352f5a6bace4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                id.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\id.pak.DATA.crYpt
                • Size 983KB
                • SHA256 7187dc0637cd0390c7fcafda0c9e5110d3e5c9d75ffe9561c139c0e1eb82c809
                • MD5 SHA1 SHA512 SSDEEP TLSH

                it.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA.crYpt
                • Size 1.1MB
                • SHA256 5270e27ec7ccc05e56a5a88391ba26d09c93794dd94ecab5135372f6870af68c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                mr.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
                • Size 2.1MB
                • SHA256 5ab07d674c49188ff2546f6a776e3d0273e401abb2f462dc9582a19246794695
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ms.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ms.pak.DATA.crYpt
                • Size 1012KB
                • SHA256 1c33aa68b670e26aa45d79101d0447380e6ea16535e24fa4137a136dad5fa377
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nb.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nb.pak.DATA.crYpt
                • Size 975KB
                • SHA256 9bcb95d1bef3679decb2c66cacd6a92f6c1fe89500fe710560bef97eb0e38075
                • MD5 SHA1 SHA512 SSDEEP TLSH

                nn.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nn.pak.DATA.crYpt
                • Size 978KB
                • SHA256 c230ff719cc2fbb9a94a4dd4941e5a790226e60ae2a89852cf88dae6a0c993a9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                or.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
                • Size 2.3MB
                • SHA256 2145fad72d12c01d597659e9fda0176dd893e48e99a20ee160ecad2eb43bb65c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pa.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
                • Size 2.1MB
                • SHA256 31dac21cb8bafcfae91dc1ba02ffbbfe58078139820861e2c1d5ac76ed7d8100
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pl.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
                • Size 1.1MB
                • SHA256 9994d914ae902e6609b06475d7aeb02b1a37875f44c0dd4e682453f73d95c883
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pt-BR.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
                • Size 1.0MB
                • SHA256 3cba6ad7fec6c0e4e0db4d18515206b92553944fdc0998d28e7fcd476dfcf914
                • MD5 SHA1 SHA512 SSDEEP TLSH

                pt-PT.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
                • Size 1.1MB
                • SHA256 7e09e8c647e1a511fbeab7c5b95d1a0dc003106ceba87b48bab3d98940b9a002
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ro.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA.crYpt
                • Size 1.1MB
                • SHA256 eac470cbe629b83a62674ec80a071aefcb8c7d32d180ea056b0f7ffbfbf12f8d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ru.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA.crYpt
                • Size 1.7MB
                • SHA256 c52239a4b2f08f0720203227f05dd7fe05faeda73834efb21773ce44148b62fc
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sk.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
                • Size 1.1MB
                • SHA256 8cda5e4708e561b4d6de53b03636103ab1ae5cfa0bdf46080ae65117194f1bf5
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sl.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
                • Size 1.0MB
                • SHA256 d1202987d39436def31fe8bd2855ab1592f04b27ee0aa58ed458bea98987394e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sq.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
                • Size 1.1MB
                • SHA256 b9c1b91a9b0eacf9d6b3078b7874c4354527c64e422b372b326242b06bf0849d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr-Cyrl-BA.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
                • Size 1.6MB
                • SHA256 1712519255edb73f6a9d97aaec7cc3d26853293a9a24354806d6a76ee2141737
                • MD5 SHA1 SHA512 SSDEEP TLSH

                sr.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
                • Size 1.6MB
                • SHA256 58b993968c70ad7130d6ad9adcadefd0a9916cf23ae1f1bf3f3589bfbe5d815b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ta.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ta.pak.DATA
                • Size 2.5MB
                • SHA256 85b4c7a6405cee4a07405b0f121d5ccf7bc273df53a9f0676cd49d23e35d7f10
                • MD5 SHA1 SHA512 SSDEEP TLSH

                te.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
                • Size 2.3MB
                • SHA256 e4aeaa2600966ec213ca778f798e719b243e201eddcf90ea108965d40b29bb7a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                th.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
                • Size 2.0MB
                • SHA256 6c8b4739b9a44495a44497c198afcea87732c4c62f32e9a07f2e4b1cd1811043
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tr.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
                • Size 1.0MB
                • SHA256 065659614fc0bae304ec04ff74caf7cafa41f8ec59dadcb45270183f5c17df9a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tt.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
                • Size 1.6MB
                • SHA256 b5ceca4fda93727949e1fd0bb4c21bb5dcf9452d08270f23707e2b3709693ebf
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ug.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA.crYpt
                • Size 1.6MB
                • SHA256 28b61a6b4860ac431a7dab94d2117d8592eb1149a3d361ce57cd315237a39e02
                • MD5 SHA1 SHA512 SSDEEP TLSH

                uk.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA.crYpt
                • Size 1.7MB
                • SHA256 d4a8df22ce9e343b230eca46e0d57a0a2e1d2f74c8ac28ae2c82bc3253eb0112
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ur.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA.crYpt
                • Size 1.5MB
                • SHA256 1d4fc0911c0f088b1305b0d349af1dfe71d99c370bcc9b108ee322c6f9fe618f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vi.pak.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA.crYpt
                • Size 1.2MB
                • SHA256 d23a7e2a2d6d5ae111f3ac8fef27dd413bb08c9de9c8913451d7850500c80a37
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Analytics.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Analytics.DATA.crYpt
                • Size 648B
                • SHA256 1892fa5bd39c2fa8c8c465b3f468e558f27dd88a21169221efec61f299817026
                • MD5 SHA1 SHA512 TLSH

                Content.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Content.DATA.crYpt
                • Size 264B
                • SHA256 557e51191314d7d98441a17741395bc8032b137112c45586d233a3ec225e6643
                • MD5 SHA1 SHA512 TLSH

                Cryptomining.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Cryptomining.DATA.crYpt
                • Size 248B
                • SHA256 a7d05ea052359fc8322e44070577f928bf1cf4b133e51d7e91017ead8155b762
                • MD5 SHA1 SHA512 TLSH

                Entities.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.crYpt
                • Size 42KB
                • SHA256 0015217431dce28c6d1bfbe59a527ba99dd06374b398301d59f108304538a6d0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Fingerprinting.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Fingerprinting.DATA.crYpt
                • Size 388B
                • SHA256 1418a26007229fc9931499af114eb1ee0b9dfc84ebc92c88e93f2c67734c2409
                • MD5 SHA1 SHA512 TLSH

                LICENSE.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\LICENSE.DATA.crYpt
                • Size 282B
                • SHA256 9cf7aebe0e22536e5852e0e6fb1f7a0de4bd01d17d43cf8191141d4dcfcd07d0
                • MD5 SHA1 SHA512 TLSH

                Social.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Social.DATA.crYpt
                • Size 3KB
                • SHA256 8eaa9488b37ba4358795bf830ce62eac3c8e852c9f946447bac6d56d840969e0
                • MD5 SHA1 SHA512 TLSH

                Staging.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA.crYpt
                • Size 16KB
                • SHA256 29fcf17a4fa07b232bbf105ed26987cf7c119bbc422e16809e31244127bb4c53
                • MD5 SHA1 SHA512 SSDEEP TLSH

                camera_mf_trace.wprp.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_feedback\camera_mf_trace.wprp.DATA.crYpt
                • Size 24KB
                • SHA256 4c527504f3018bbc6bb93970247beef17fd26a2464f3d3e65cd0ab5b59460781
                • MD5 SHA1 SHA512 SSDEEP TLSH

                EdgeGameAssist.msix.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\EdgeGameAssist.msix.DATA.crYpt
                • Size 1011KB
                • SHA256 b88d5ff6e84826247b0dd0ef89b5daa3cfdb3ef6cfcebcaa49c933dce8ce90d2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                VERSION.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\edge_game_assist\VERSION.DATA.crYpt
                • Size 226B
                • SHA256 309573e26dc18fe51f96c8d13ee286f796d3d10c334bd3ed63559a2ec61df40c
                • MD5 SHA1 SHA512 TLSH

                resources.pri.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\identity_proxy\resources.pri.DATA.crYpt
                • Size 3KB
                • SHA256 31384a0c27754651726a18bb825938ff54c662dc3038161a2784359748383eec
                • MD5 SHA1 SHA512 TLSH

                identity_helper.Sparse.Beta.msix.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Beta.msix.DATA.crYpt
                • Size 53KB
                • SHA256 69b6e27bdddb5e1f63508ff106425217ae62c84a2a69ad774e69d0ec2aba5f41
                • MD5 SHA1 SHA512 SSDEEP TLSH

                identity_helper.Sparse.Canary.msix.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Canary.msix.DATA.crYpt
                • Size 53KB
                • SHA256 f0799239f3993826973dff453cb904c55a8940d5e8227d019b17c287ebfdf468
                • MD5 SHA1 SHA512 SSDEEP TLSH

                identity_helper.Sparse.Dev.msix.DATA.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Dev.msix.DATA.crYpt
                • Size 53KB
                • SHA256 f9947930112d6dc48228e8b0eefacde1e1370f361c32eb2a4b101e80a0e64f6f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                msedge_100_percent.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_100_percent.pak.DATA
                • Size 1.5MB
                • SHA256 1fc52a863afab09e5fb003e2310dfb7eb4a04981a04d1386bde090136bf9891a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                msedge_200_percent.pak.DATA

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\msedge_200_percent.pak.DATA
                • Size 2.1MB
                • SHA256 6b8f0cffe00edbddfc1bd4f38424739089429a490b60e518f559c7c5bb1446c2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Advertising.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Advertising.crYpt
                • Size 24KB
                • SHA256 df656716760a550e649af74dc5a38e89bfac3e99b06ba124c41a4bc9e50eea42
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Analytics.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Analytics.crYpt
                • Size 4KB
                • SHA256 53525f003ee2b07c8140aead4d238a33090c66f56db90ba1412da72d37eb43ee
                • MD5 SHA1 SHA512 SSDEEP TLSH

                CompatExceptions.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions.crYpt
                • Size 905B
                • SHA256 cc84850879cf725d0b40eeae3f4f7c8198231458a50a7a984728ab5776e05925
                • MD5 SHA1 SHA512 TLSH

                Content.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Content.crYpt
                • Size 6KB
                • SHA256 6db4990c57473b83a6ccf603889d91b86ddc218447a83a3d412e9d59bd7d401b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Cryptomining.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining.crYpt
                • Size 1KB
                • SHA256 58586825b2c1cd71aa9a47bc8816f04164b1f69c7b2c31fc4fa71dc8fa1a769c
                • MD5 SHA1 SHA512 TLSH

                Entities.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Entities.crYpt
                • Size 68KB
                • SHA256 a513293238116d6febb1c7444a11ef33b144736f59d7461b86532cca455e58f7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Fingerprinting.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting.crYpt
                • Size 1KB
                • SHA256 b9ccd18a197411680eaeb7abd825832a8294e77020dc7e284a78a15a666d4682
                • MD5 SHA1 SHA512 TLSH

                Other.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other.crYpt
                • Size 307B
                • SHA256 a8161806ab7a89cf283c6c4997dd4249271f9f59b2db6eb8b129fe780af00094
                • MD5 SHA1 SHA512 TLSH

                manifest.json.crYpt

                • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json.crYpt
                • Size 348B
                • SHA256 ec2b3748f5e1071ed565dc12140c8fe08e938722cf942a9f7d782d746b6c00b4
                • MD5 SHA1 SHA512 TLSH

                readme_for_unlock.txt

                • Path C:\Program Files\7-Zip\readme_for_unlock.txt
                • Size 2KB
                • SHA256 8bd7bc703f8e32786793790c7810beaff64ce943815dd51659537d965a428984
                • MD5 SHA1 SHA512 TLSH

                A3R6C9.exe

                • Path C:\ProgramData\A3R6C9.exe
                • Size 180KB
                • SHA256 8fbfc27d2affd969d165d8eeb25b83aac6e5fd8e4624b3a3800c0bbd77c0f1ae
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Host Process for Windows Services

                • Path C:\ProgramData\Host Process for Windows Services
                • Size 69KB
                • SHA256 9e5e20b9ac696b12570847aa4cde99580fdf65d4bc9d2c71c3d5e40f5dcf4a69
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Q9acAd3.vhd

                • Path C:\ProgramData\Q9acAd3.vhd
                • Size 16.0MB
                • SHA256 c902ce599db4134b17ac52a817c04b5a60cc587f983b3517b97c58634c13cc18
                • MD5 SHA1 SHA512 SSDEEP TLSH

                kD1aE.tmp

                • Path C:\ProgramData\kD1aE.tmp
                • Size 34B
                • SHA256 0977e976a701e82d9d4f1f1b1eaf8a495e1bd92cc33a86a398d0bd536d86a73a
                • MD5 SHA1 SHA512

                kD1aE.tmp

                • Path C:\ProgramData\kD1aE.tmp
                • Size 132B
                • SHA256 82350eee2b0b078b4dd06fee1242d227cb9bc4a5a61d01ee42161d8c8e1efc80
                • MD5 SHA1 SHA512 TLSH

                sichost.exe

                • Path C:\ProgramData\sichost.exe
                • Size 43KB
                • SHA256 092d4fe86aec6c3a44499e7539e88e50a31b451250e53847d0ab23d116a7cd8e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                memory/3764-1069-0x0000000000A20000-0x0000000000A6A000-memory.dmp

                memory/3764-880-0x0000000000A20000-0x0000000000A6A000-memory.dmp

                memory/3764-913-0x0000000000A20000-0x0000000000A6A000-memory.dmp

                memory/4996-14-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-15-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-850-0x0000000004060000-0x0000000004061000-memory.dmp

                memory/4996-33-0x0000000003D30000-0x0000000003D31000-memory.dmp

                memory/4996-24-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-23-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-843-0x0000000002C70000-0x0000000002C71000-memory.dmp

                memory/4996-861-0x0000000000660000-0x00000000006AA000-memory.dmp

                memory/4996-16-0x0000000003DA0000-0x0000000003DA1000-memory.dmp

                memory/4996-17-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-19-0x0000000003D90000-0x0000000003D91000-memory.dmp

                memory/4996-0-0x0000000000660000-0x00000000006AA000-memory.dmp

                memory/4996-11-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-12-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-10-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-31-0x0000000003DA0000-0x0000000003DA1000-memory.dmp

                memory/4996-871-0x0000000000660000-0x00000000006AA000-memory.dmp

                memory/4996-7-0x0000000003D60000-0x0000000003D61000-memory.dmp

                memory/4996-6-0x0000000003DA0000-0x0000000003DA1000-memory.dmp

                memory/4996-5-0x0000000003D90000-0x0000000003D91000-memory.dmp

                memory/4996-1-0x0000000002BA0000-0x0000000002BA1000-memory.dmp

                memory/6052-894-0x00000000002E0000-0x00000000002FF000-memory.dmp

                memory/6052-892-0x00000000002E0000-0x00000000002FF000-memory.dmp

                memory/6808-16816-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16828-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-875-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17076-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-1359-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-5314-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-5682-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-5684-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-6710-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17073-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-859-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-14619-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16728-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16730-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16739-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16768-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16771-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-9372-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16807-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16812-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-12499-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16815-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16773-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16855-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16858-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16860-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16873-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16899-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16902-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16904-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16942-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16945-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16947-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16978-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16988-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-16990-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17001-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17030-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17033-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17034-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6808-17056-0x0000000000C50000-0x0000000000C87000-memory.dmp

                memory/6840-856-0x0000000000880000-0x000000000089F000-memory.dmp

                memory/6840-874-0x0000000000880000-0x000000000089F000-memory.dmp