Analysis

  • max time kernel
    141s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/06/2026, 19:40

General

  • Target
    2026-06-28_b4c44036eb54835362f1c0dca3e89079_elex_makop.exe
  • Size 49KB
  • Sample260628-yd2qpscx7s
  • SHA256 b6ec3f05844a5b9d09f02eb45c7bc80d6933cf07a237ff4775ae2b0a657a9b7b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Path
  • C:\Program Files\Common Files\DESIGNER\+README-WARNING+.txt

  • makop

Ransom Note
  • ::: Greetings ::: Little FAQ: .1. Q: Whats Happen? A: Your files have been encrypted. The file structure was not damaged, we did everything possible so that this could not happen. .2. Q: How to recover files? A: If you wish to decrypt your files you will need to pay us. .3. Q: What about guarantees? A: Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will cooperate with us. Its not in our interests. To check the ability of returning files, you can send to us any 2 files with SIMPLE extensions(jpg,xls,doc, etc... not databases!) and low sizes(max 1 mb), we will decrypt them and send back to you. That is our guarantee. .4. Q: How to contact with you? A: You can write us to our mailboxes: [email protected] or [email protected] .5. Q: How will the decryption process proceed after payment? A: After payment we will send to you our scanner-decoder program and detailed instructions for use. With this program you will be able to decrypt all your encrypted files. .6. Q: If I don�t want to pay bad people like you? A: If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause only we have the private key. In practice - time is much more valuable than money. :::BEWARE::: DON'T try to change encrypted files by yourself! If you will try to use any third party software for restoring your data or antivirus solutions - please make a backup for all encrypted files! Any changes in encrypted files may entail damage of the private key and, as result, the loss all data.

Signatures

  • Family: Makop

    Ransomware family discovered by @VK_Intel in early 2020.

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (9013) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Deletes backup catalog 3 TTPs 1 IoCs

    Uses wbadmin.exe to inhibit system recovery.

  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Drops file in System32 directory 9 IoCs
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 3 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Interacts with shadow copies 3 TTPs 1 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 48 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-28_b4c44036eb54835362f1c0dca3e89079_elex_makop.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-28_b4c44036eb54835362f1c0dca3e89079_elex_makop.exe"
    1⤵
    • Sets desktop wallpaper using registry
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of WriteProcessMemory
    PID:1440
    • C:\Windows\system32\cmd.exe
      "C:\Windows\system32\cmd.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:1112
      • C:\Windows\system32\vssadmin.exe
        vssadmin delete shadows /all /quiet
        3⤵
        • Interacts with shadow copies
        PID:2232
      • C:\Windows\system32\wbadmin.exe
        wbadmin delete catalog -quiet
        3⤵
        • Deletes backup catalog
        PID:3656
      • C:\Windows\System32\Wbem\WMIC.exe
        wmic shadowcopy delete
        3⤵
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3192
    • C:\Windows\SysWOW64\NOTEPAD.EXE
      "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\+README-WARNING+.txt
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      PID:416
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:696
  • C:\Windows\system32\wbengine.exe
    "C:\Windows\system32\wbengine.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2684
  • C:\Windows\System32\vdsldr.exe
    C:\Windows\System32\vdsldr.exe -Embedding
    1⤵
      PID:3444
    • C:\Windows\System32\vds.exe
      C:\Windows\System32\vds.exe
      1⤵
      • Checks SCSI registry key(s)
      PID:3264
    • C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
      "C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
      1⤵
      • Drops file in System32 directory
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious use of SetWindowsHookEx
      PID:4448

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          stable.identity_helper.exe.manifest

          • Path C:\Program Files (x86)\Microsoft\EdgeCore\139.0.3405.125\identity_proxy\stable.identity_helper.exe.manifest
          • Size 1KB
          • SHA256 f83e8a17465ee8825e520d105458e5e954a198163b5158daff101861c6f6ebb4
          • MD5 SHA1 SHA512 TLSH

          ad-selection-attestations.dat.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\AdSelectionAttestationsPreloaded\ad-selection-attestations.dat.DATA
          • Size 324B
          • SHA256 f6ab62121a43116150045f11b5c57e191e263b4f262fe8eda5107f993b986c99
          • MD5 SHA1 SHA512 TLSH

          manifest.json.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\AdSelectionAttestationsPreloaded\manifest.json.DATA
          • Size 356B
          • SHA256 259ebb79a0723940b5af5013766339cc98829f7c3dd9b5f6ef1fa94fedef1b38
          • MD5 SHA1 SHA512 TLSH

          Edge.dat.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Edge.dat.DATA
          • Size 12KB
          • SHA256 669e452b994326f225899e9a7c57659205ceaec9ea109d0d9356d3e31b8e3beb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EdgeWebView.dat.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\EdgeWebView.dat.DATA
          • Size 8KB
          • SHA256 6470d27d37c1e9279ef708a6f7ba07fc577c6b39b01b65b1f32686f40c50a301
          • MD5 SHA1 SHA512 SSDEEP TLSH

          external_extensions.json.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Extensions\external_extensions.json.DATA
          • Size 356B
          • SHA256 3830f11a6f67b6486b3fb8e891c669b44a8c956f840b5a65e193ed6755bb7de2
          • MD5 SHA1 SHA512 TLSH

          af.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\af.pak.DATA
          • Size 1017KB
          • SHA256 1eb175b6aac72d9d9a1b03a29e4d38b3e080a8db490aea0a1b5be0ab51d2c8e8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          am.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\am.pak.DATA
          • Size 1.5MB
          • SHA256 5acc4456058fbc58fa332601c006837bbd9acdca500e215efb66ba697701bfdd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ar.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ar.pak.DATA
          • Size 1.5MB
          • SHA256 bfe8fd2a4643a1cb34bb15b9f1cffbb36ec84298687320020f0bba42459bec96
          • MD5 SHA1 SHA512 SSDEEP TLSH

          as.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\as.pak.DATA
          • Size 2.1MB
          • SHA256 628fc2e09da2ca348d8f241f283766a049896fe76b6ba1c428dc5760843bb873
          • MD5 SHA1 SHA512 SSDEEP TLSH

          az.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\az.pak.DATA
          • Size 1.1MB
          • SHA256 7c55d95f642cdd78f22fb1ac12f1e0067bf32d72c3ed2df09dde6f5b98ad80c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bg.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\bg.pak.DATA
          • Size 1.7MB
          • SHA256 47896cdd2b06f253b59a6367870d831e79c14561f3e467ec2e119eeed43c6476
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bn-IN.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\bn-IN.pak.DATA
          • Size 2.2MB
          • SHA256 3b5f37e33e0636379aff97930707cfa5a8c6e174ac986cb0d5e17e2cd3e6ad47
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bs.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\bs.pak.DATA
          • Size 1.1MB
          • SHA256 00af4ed35f02ca6f8776da13c063541b2e1fea6abb8bdfe0ecff961f49af7ac4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ca-Es-VALENCIA.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
          • Size 1.1MB
          • SHA256 61d93bb02651cf6536c7c0e3ee4be88a8bedd6e44ebe17405389bf5343855adb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ca.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ca.pak.DATA
          • Size 1.1MB
          • SHA256 14e82655c111d80ba8f4caf9cb6bc81bbd2af62cb346f550feef0dee3019b49f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cs.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\cs.pak.DATA
          • Size 1.1MB
          • SHA256 52e26f7316afa6f827117cc99efc000b8e3bb6e4771382cab2e85ed5cb359468
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cy.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\cy.pak.DATA
          • Size 1.1MB
          • SHA256 c0ab1aa1fd2d737ee29d02417443dc235c1c7be26f5205f6239335ed0c421a5d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          da.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\da.pak.DATA
          • Size 1016KB
          • SHA256 0e0c4762ac24a60434d6fc8ea2795bcc0064042a704158265a2c88d93dd487f6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          de.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\de.pak.DATA
          • Size 1.1MB
          • SHA256 45e6fa813c330a71da818462e713fd8304da8598ad8a04c103eca87bff7f9754
          • MD5 SHA1 SHA512 SSDEEP TLSH

          el.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\el.pak.DATA
          • Size 1.9MB
          • SHA256 a8f784aa45db811743e4723aea803a1479f7c9dcd0280b7d5f87c62a169f85c8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-GB.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\en-GB.pak.DATA
          • Size 928KB
          • SHA256 1cc662caf4ae3592bcf57b79d2a88494237caaf75316c207828d9920c1ff4cb5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-US.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\en-US.pak.DATA
          • Size 912KB
          • SHA256 955fc475bdc3ac3c20227e3878c95728a6a637228563fe9187419fcac17f45d8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es-419.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\es-419.pak.DATA
          • Size 1.1MB
          • SHA256 d9914b1e53f9a695fc43c9f99e53af50e04cec7e22a0e95d91b224e4904d6233
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\es.pak.DATA
          • Size 1.1MB
          • SHA256 018b49f2bc1d5e60d773b31650dbbe7f7aa03aa69a455b9b1b4aaf4be3fe3423
          • MD5 SHA1 SHA512 SSDEEP TLSH

          et.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\et.pak.DATA
          • Size 1005KB
          • SHA256 bcd86f2c9730d187984b518eeadedede0590f25caf4f899864b63948f5ab16f1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          eu.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\eu.pak.DATA
          • Size 1.0MB
          • SHA256 e50af21a1a114595d7c0901ed0072bc282e72fbeab6926bfbe9ca38b3d115e70
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fa.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\fa.pak.DATA
          • Size 1.5MB
          • SHA256 8183a71e867f662d4d76a0c8715bdd9537e3816955d42329e852473492aa1056
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fi.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\fi.pak.DATA
          • Size 1.0MB
          • SHA256 36479c98b8cde91517df5c2bd9184a88efed5bd9887a718c5db7ecc3f7682103
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fil.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\fil.pak.DATA
          • Size 1.1MB
          • SHA256 216726730741f643ba21707fbb18e62b6812fd4b6f146c1f9ee99cca6a0466dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fr-CA.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\fr-CA.pak.DATA
          • Size 1.2MB
          • SHA256 8c8a2fa8e1b1078cefb305e52a8de1741739655ab17ac2708e6c676724286896
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fr.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\fr.pak.DATA
          • Size 1.2MB
          • SHA256 3ae8df748888ed3f84024478740d6878b65acd82a18d000dc39b3dd5b6b9acd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ga.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ga.pak.DATA
          • Size 1.2MB
          • SHA256 962e3dca2302b4476000b4f102b9886d580fb6ed38ba04884951a1ac1cd3bc9e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gd.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\gd.pak.DATA
          • Size 1.2MB
          • SHA256 223c03065db6d7b80e47201736984b18feeecbe18cba5d53cce1e2c1c4f31b07
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gl.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\gl.pak.DATA
          • Size 1.1MB
          • SHA256 7cc4448f3d1b5a3cfbddd360d068a3c655cc76f79525c4df69d73bf6bb8b4d4f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gu.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\gu.pak.DATA
          • Size 2.1MB
          • SHA256 c5a39fed9e2ebcd8daaf76452b7795d5012f579afd62d55e20564543436a4ba0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          he.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\he.pak.DATA
          • Size 1.3MB
          • SHA256 2c8c31f51c471a15df0cc529a623a7ff4b1f0823b57753b368ee27f936ba262b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hi.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\hi.pak.DATA
          • Size 2.1MB
          • SHA256 1681993f602f75c7bcc7e86a721bbeeea9c188fbb433fa5daf4aec77651fa12a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hr.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\hr.pak.DATA
          • Size 1.1MB
          • SHA256 c62a97b7a4a65b16e2faa7fd6178394711e52999f510284c85cb070d96e1beac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hu.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\hu.pak.DATA
          • Size 1.1MB
          • SHA256 e743ab03d9caf300c349ad361c9c8d4b80ab8cf0bdaadf1f3279e6488af793bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          id.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\id.pak.DATA
          • Size 997KB
          • SHA256 5be5890beb86c323eae4da2c1076cb57de36d268ee1bcfdc30e6128fe2fd448a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          is.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\is.pak.DATA
          • Size 1.0MB
          • SHA256 ad993e0a8d542ed0dc157861598096324ffb4f77d0f19a3e024ef43acd7fa41e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          it.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\it.pak.DATA
          • Size 1.1MB
          • SHA256 ddda37463f4d87cdbf68a6d340c58bde282a805f986e3ef3c6bd27e7ca654c14
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ja.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ja.pak.DATA
          • Size 1.3MB
          • SHA256 df2b952d3fa3ca9e4205acd193969db75e02d3f33a611a1ba9c1862fb3489de1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ka.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ka.pak.DATA
          • Size 2.3MB
          • SHA256 e23f0f2b06f8fc7f9f494861c316c81b41bd6de3884c8167de170e61fc9d44bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          kk.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\kk.pak.DATA
          • Size 1.7MB
          • SHA256 2813dcf3fb9c09ddba35532a2555347a304097f372650f57cf497dc15d329146
          • MD5 SHA1 SHA512 SSDEEP TLSH

          km.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\km.pak.DATA
          • Size 2.3MB
          • SHA256 7bbcb2a75305c03e505e39a846adf410b0e5f569d8dc716e7acac1c4dd81d762
          • MD5 SHA1 SHA512 SSDEEP TLSH

          kn.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\kn.pak.DATA
          • Size 2.4MB
          • SHA256 dc8ba77aa09baf30574bfd47b882388e6dd246ffde5112031b038ee4ee813171
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ko.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ko.pak.DATA
          • Size 1.1MB
          • SHA256 ee575562afe094c54984a880414f51dcf350efebda1b2c158bd77d0dbc034af8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          kok.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\kok.pak.DATA
          • Size 2.0MB
          • SHA256 5ef752a57baa0b5f314609314e539d6a8137394063c647a80b3422ce36d3f305
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lb.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\lb.pak.DATA
          • Size 1.1MB
          • SHA256 4cfde755b06949cc53dddba2cf521a406cc64bb25cda760928a3fa8aa477d4a1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lo.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\lo.pak.DATA
          • Size 2.1MB
          • SHA256 59a84cdcca1e6d5a884747892b75dbaf3a4ddf5a8184b962a9e0c5c2ad517b07
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lt.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\lt.pak.DATA
          • Size 1.1MB
          • SHA256 0ec87d3478633a1f48630008cb3b9562490ffbf09cbbc2d0b38423b545ab4a12
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lv.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\lv.pak.DATA
          • Size 1.1MB
          • SHA256 f161f3310ff13d989eda5ec91a50ed61cfc0fe6fe23abdf0e9398103b773cee0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mi.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\mi.pak.DATA
          • Size 1.1MB
          • SHA256 7e822a302a036932696f446a50b7c3f7b9290648058cac89b2fe7e6ed4d37b10
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mk.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\mk.pak.DATA
          • Size 1.7MB
          • SHA256 cc8758ee0c58ec05580f84e5a414699b7004f2b8e14fb2b4f8f85da4dc896885
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ml.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ml.pak.DATA
          • Size 2.6MB
          • SHA256 17e946506ac6c5fa23147f58ee202e154ec0c856216ee065110b298aea649c85
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mr.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\mr.pak.DATA
          • Size 2.1MB
          • SHA256 9ffc5c3da72f0910ab80e696c1bb0bede27e6bbbc4f6cc4a1fd160170e53d128
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ms.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ms.pak.DATA
          • Size 1.0MB
          • SHA256 4285c62b5b086ace761ec36e5916b5e5cec9b80a15c913c4ca7b3af618f7a03c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mt.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\mt.pak.DATA
          • Size 1.1MB
          • SHA256 f2712d0ee39246a0b7a3e4f6d9a1cd42735ef494ebd21404097bae80ecb6c162
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nb.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\nb.pak.DATA
          • Size 991KB
          • SHA256 fee8991e94c88fbe416813c11e7a11cd3fdd418c44e1a60b32165bac428219b1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ne.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ne.pak.DATA
          • Size 2.2MB
          • SHA256 1def46e946d771e5799f2ac113c969505a28fe8f5a4fb2a28301cca7d417318e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nl.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\nl.pak.DATA
          • Size 1.0MB
          • SHA256 15aec6a7437012f5a34fe850ae6e65792dcd267c8c46cb1c167f72d4335d9327
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nn.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\nn.pak.DATA
          • Size 994KB
          • SHA256 240ebb262daea2807e3865e790e682b76de9631b7d78c389c9159a7676198c9b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          or.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\or.pak.DATA
          • Size 2.3MB
          • SHA256 c2fb5a36490b34d0cccefaf995f215dc61c1481fe6148984dbd961b395948ff8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pa.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\pa.pak.DATA
          • Size 2.1MB
          • SHA256 8eb0f978cf78694be71806f330859bc0a1bb01ed0a24033d41b58c4a27ec8fdd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pl.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\pl.pak.DATA
          • Size 1.1MB
          • SHA256 6841bd03dd83936789d25fd3d0561a96eb0ea10b7d9a6f19c97429a8e46447e8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-BR.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\pt-BR.pak.DATA
          • Size 1.1MB
          • SHA256 f371770a05c3955116436d8fd8ee4435bbb847a0e8f5cb52008c953c9b8da818
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-PT.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\pt-PT.pak.DATA
          • Size 1.1MB
          • SHA256 135936165635c2d6853b9635edebebcf7ea69ef421f37cdb7d1e7bd0fde38a0b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          qu.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\qu.pak.DATA
          • Size 1.1MB
          • SHA256 9308be67a97d889cab747e7ae43ef90ddaa3dbac73556d99d4644fdb21cfdccb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ro.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ro.pak.DATA
          • Size 1.1MB
          • SHA256 075387e05f752bae0332bb2a34202f96a97878cfba620170305bfe9edf17e6d4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ru.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ru.pak.DATA
          • Size 1.7MB
          • SHA256 e718e8f929f47226046754b2fe8338ec34f498cf0740c4dc166f25334fa74e7c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sk.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sk.pak.DATA
          • Size 1.1MB
          • SHA256 520f527d7a7732622c23f1a38f1000bf4ef495675b1ba9aba9c99042f2ffe74a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sl.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sl.pak.DATA
          • Size 1.1MB
          • SHA256 11fa82736f9dbc2beaf5147671a825a067a244cd897a7407937d5b8855bf0694
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sq.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sq.pak.DATA
          • Size 1.1MB
          • SHA256 d9c6096b10ae9d20c10d8b6ba053ae6055bd2df1b14d5e01f23366e098ed307a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sr-Cyrl-BA.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
          • Size 1.6MB
          • SHA256 b8f0e85bbfbd69ee2b9cd4e196fdf064b3b80ad6f16ccf81f719b3a4e84e4396
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sr-Latn-RS.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
          • Size 1.1MB
          • SHA256 464e910b177c8c770d873c62b798d6304616903ffac51275e7963e7fd11e2a47
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sr.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sr.pak.DATA
          • Size 1.7MB
          • SHA256 88e34a7237e8834cba19f3a339b2200490b553a8adc4ee48ea43c85cf01be7ee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sv.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\sv.pak.DATA
          • Size 1016KB
          • SHA256 e9bff6201da5ef6051ccb654284895b82e23f130b9b843fe1772ccd3439e6004
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ta.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ta.pak.DATA
          • Size 2.6MB
          • SHA256 1d7c98cb5639c844458cc751bd4cbe2752a8812baa39b0b96e5d876dbcbc560d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          te.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\te.pak.DATA
          • Size 2.3MB
          • SHA256 9b8bfdf1b16a1db03a1c7f0dc57859c2878ce3161144942ececab4dc6911ee4a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          th.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\th.pak.DATA
          • Size 2.0MB
          • SHA256 ae8bdc2a468938586eb4bdfa5b858cb6cf516c86b77cfb074b3c80936c17df9b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tr.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\tr.pak.DATA
          • Size 1.1MB
          • SHA256 97cae3703c7c2cc5a9cf43660d25f2ad74dac74c8cd49ae861c1e0f1d4d03975
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tt.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\tt.pak.DATA
          • Size 1.7MB
          • SHA256 c0bd04fb6933762b22317940a3a028aa5b4be6c03b4731c61f5015570d80951d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ug.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ug.pak.DATA
          • Size 1.6MB
          • SHA256 99d34782cb7d44cfc731949c73dc8c4c780f9f231dd182fcc0a3601af70bb549
          • MD5 SHA1 SHA512 SSDEEP TLSH

          uk.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\uk.pak.DATA
          • Size 1.7MB
          • SHA256 a6e477aab3901284ca34dc7c0f9c64fa5c5bd4bd6b9dd46cc12fd49d4d6e482f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ur.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\ur.pak.DATA
          • Size 1.6MB
          • SHA256 dcebca208bc6fb50d320a208e3071a37e5bc2e5c756cf233e24529e6bf1722f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vi.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\vi.pak.DATA
          • Size 1.2MB
          • SHA256 8e5fd374436a9481e2769b0cf8035a9fe65be7c747d57dc8c8d302d64588f01e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-CN.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\zh-CN.pak.DATA
          • Size 873KB
          • SHA256 dd2b24f3515118d6576a12c961f968e79272bde083b436df318836730338127f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-TW.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\Locales\zh-TW.pak.DATA
          • Size 901KB
          • SHA256 9af1d83ed481199640d3aaa591eff28f3914fbdb2cffa0e74bf2712f0044ab87
          • MD5 SHA1 SHA512 SSDEEP TLSH

          manifest.json.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\MEIPreload\manifest.json.DATA
          • Size 468B
          • SHA256 1fa566feaceba32b57ad590923484ad4e4c33047ef505548fb391a9efe891f84
          • MD5 SHA1 SHA512 TLSH

          preloaded_data.pb.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\MEIPreload\preloaded_data.pb.DATA
          • Size 8KB
          • SHA256 0a0d53df74fee57e404b2bed636f0ca8bd2031e6ac03d4518477b00e7bb2fd88
          • MD5 SHA1 SHA512 SSDEEP TLSH

          delegatedWebFeatures.sccd.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\delegatedWebFeatures.sccd.DATA
          • Size 17KB
          • SHA256 9b2b6e33f58f10f4f432a575026ea7004439c1923b0f226c509dc21210465b4f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          camera_mf_trace.wprp.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\edge_feedback\camera_mf_trace.wprp.DATA
          • Size 24KB
          • SHA256 3d8d92a3636197abbb48e4d49f4ae9afe11745283bfd010253b2e31339b64a93
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mf_trace.wprp.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\edge_feedback\mf_trace.wprp.DATA
          • Size 12KB
          • SHA256 87d0c79bfe422be363f5fa3f95af4ee67a24c51b934ec0fe1b0c08b78a2901d6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EdgeGameAssist.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\edge_game_assist\EdgeGameAssist.msix.DATA
          • Size 996KB
          • SHA256 2f240bfd7852bc9c9f8461e5bb3593d914ecef29d9ce12092e9cdefc4438310a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          VERSION.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\edge_game_assist\VERSION.DATA
          • Size 228B
          • SHA256 ed7f4230fb18c994b211a4301615eb77067d92ceb1d27766fc3c11362bcf0a43
          • MD5 SHA1 SHA512 TLSH

          icudtl.dat.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\icudtl.dat.DATA
          • Size 8.1MB
          • SHA256 6d725f49aa66b1482ba497396c32f02a439e2509138e1ed1e91d7bea9056f8de
          • MD5 SHA1 SHA512 SSDEEP TLSH

          resources.pri.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\resources.pri.DATA
          • Size 3KB
          • SHA256 4daa079cfab46be1ae016afdbcfb6aaa2fc5e849142a6ed2fb7b8294d6de4d18
          • MD5 SHA1 SHA512 TLSH

          identity_helper.Sparse.Beta.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Beta.msix.DATA
          • Size 54KB
          • SHA256 052995db019836c6b989e6e177b514d47b0fb0bd8f5b96fb0d046099a91132d3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Canary.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Canary.msix.DATA
          • Size 53KB
          • SHA256 052171b3bc8ba12abaa9fa4d70c758140dc642725ba1191578276c773205954a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Dev.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Dev.msix.DATA
          • Size 53KB
          • SHA256 c60d9213aff8ec9d23214316fd39cc34668586c18d554648c6c90f546e0fa939
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Internal.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Internal.msix.DATA
          • Size 57KB
          • SHA256 075d93c5343c1da671f2a66940394675972ba1ea1ce8a43662c4fe4062dc318a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Stable.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win10\identity_helper.Sparse.Stable.msix.DATA
          • Size 57KB
          • SHA256 a73dbdf025d164ecd8ab7cc3185f50eb50db491cf58c486aa6f10a579b8dcb8a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Beta.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Beta.msix.DATA
          • Size 54KB
          • SHA256 a4c8f29e039e336dccb6a55c662f8e810b3856009ec5682ebf3bcdff868849c6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Canary.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Canary.msix.DATA
          • Size 54KB
          • SHA256 f4e4d35fa5aa752788a882264a30bfec4a3b69fa9c184b564e805625060c9c5b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Dev.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Dev.msix.DATA
          • Size 53KB
          • SHA256 8de2a76669522c90a67eec63cc64ac072542e49e1e35651a56848edbe5db69e3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Internal.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Internal.msix.DATA
          • Size 57KB
          • SHA256 89bb77e394d5af5d758cb01b2c55cebcc0a6bc54d0be3030925ee35378bcc1c0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          identity_helper.Sparse.Stable.msix.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\identity_proxy\win11\identity_helper.Sparse.Stable.msix.DATA
          • Size 57KB
          • SHA256 ae06d90c16cc9df61d4490f7a7c1525b5ed9aad1884c04f27435a6000a566fb8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msedge.dll.sig.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\msedge.dll.sig.DATA
          • Size 1KB
          • SHA256 6789d79732b80bf20426e6f5758966181df16d097ad268f55f5fa07f708318cb
          • MD5 SHA1 SHA512 TLSH

          msedge.exe.sig.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\msedge.exe.sig.DATA
          • Size 1KB
          • SHA256 8a6a4c9a5b2b104336c692d62dc95861626dd016c63e077b0392ea391b5c4a39
          • MD5 SHA1 SHA512 TLSH

          msedge_100_percent.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\msedge_100_percent.pak.DATA
          • Size 1.6MB
          • SHA256 23854fafe993dc9b4b2ba8c32eb35444faecabe267678168311f56fac54310f2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msedge_200_percent.pak.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\msedge_200_percent.pak.DATA
          • Size 2.3MB
          • SHA256 49c566ab00b4c22da8f6d90343934f1ecd71206a0d5e2caad3ee9efbbad9fb97
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msedgewebview2.exe.sig.DATA

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\ResiliencyLinks\msedgewebview2.exe.sig.DATA
          • Size 1KB
          • SHA256 897e0821015ec895f3d66ab9bcdb3198573594bccaa3521f8c37cfcbe5abea1f
          • MD5 SHA1 SHA512 TLSH

          Advertising

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Advertising
          • Size 24KB
          • SHA256 5a83341fc2d8c97a0ec2c3bdb65ced60b9d529d7d8541f555c5c995f9ed5f45c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Analytics

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Analytics
          • Size 4KB
          • SHA256 5daf137cb129b84c5514a9e440ac14ae823a4bfca13545dc0f195272c655306a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          CompatExceptions

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\CompatExceptions
          • Size 948B
          • SHA256 2d53f4906e8cd441c7d93a83d040046d01a729bd509ba34e69f5ec3992ccf345
          • MD5 SHA1 SHA512 TLSH

          Content

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Content
          • Size 6KB
          • SHA256 849213f4f668968727f31cecbb845af5ce69fcb46578eeee06d827776bb41515
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Cryptomining

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Cryptomining
          • Size 1KB
          • SHA256 db0f6d506004d92efc34423543aa8b8fb48bee722aa87f8af6c27337bf53a182
          • MD5 SHA1 SHA512 TLSH

          Entities

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Entities
          • Size 68KB
          • SHA256 4cf73f6f76cc3c352a5557dfc48bdb7845306e752d3a92843090c751c601638d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Fingerprinting

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Fingerprinting
          • Size 1KB
          • SHA256 6c745a313bfe9436bf488d99cd54e6c15bf673d42d0dcbcbe5d5422b921abbd2
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\LICENSE
          • Size 34KB
          • SHA256 f5a8cec878b3d48ee3ed702440b34562bff53d9f0b9addf3dff1388bd3e0736e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Other

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Other
          • Size 260B
          • SHA256 e3ef2ad06b3b579d387f284063c8d8df772332150c4ddeed11fde82f56f66168
          • MD5 SHA1 SHA512 TLSH

          Social

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\Social
          • Size 596B
          • SHA256 3737231fc1944fd3f3ecaf17d78e98ff46089751a950cc4284af92ba870d4183
          • MD5 SHA1 SHA512 TLSH

          TransparentAdvertisers

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Mu\TransparentAdvertisers
          • Size 372B
          • SHA256 3a13690a507d190ff161079863281c5246c53f39f4ce4a8feff558b1cf7ca5e1
          • MD5 SHA1 SHA512 TLSH

          Advertising

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Advertising
          • Size 2KB
          • SHA256 bcaa8cf22e34005d34e575929b699b501a3fb3dd7946f9234e7e4940601d23ff
          • MD5 SHA1 SHA512 TLSH

          Analytics

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Analytics
          • Size 660B
          • SHA256 479eaff87da112d9569a1410ff8c4157ca2928383944eaa65ccd64d084291ccc
          • MD5 SHA1 SHA512 TLSH

          Content

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Content
          • Size 276B
          • SHA256 b79224164095d6d1f48f506aacf1c891f52bb98129515fadd688071ed5bd64c0
          • MD5 SHA1 SHA512 TLSH

          Cryptomining

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Cryptomining
          • Size 260B
          • SHA256 336f930f5db8e816d13d5ada912614f4c4f4a84699d5b5c8ee8d3666e88dda88
          • MD5 SHA1 SHA512 TLSH

          Entities

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Entities
          • Size 42KB
          • SHA256 e2e44ef812f9706debdd831ad7f91f03572c60faff3596b38e72107aec197a80
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Fingerprinting

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Fingerprinting
          • Size 420B
          • SHA256 47005d13de4fde7c5ad2cc6be34c47c49a566c7fc9e0ce817d352f5d0af7f3d4
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\LICENSE
          • Size 308B
          • SHA256 cfc1fd56dd060274906ca439ebdcefd7688fd943428af6ba03855159df4c2e0e
          • MD5 SHA1 SHA512 TLSH

          Other

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Other
          • Size 308B
          • SHA256 9e57f28eaaf191ea964a48f82f90c0516b49b870db8dd62868ee54fdfbcaf140
          • MD5 SHA1 SHA512 TLSH

          Social

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Social
          • Size 3KB
          • SHA256 324e1f2e1722a4476ba4a5edb816c58782b30f3f79d32407a1590338aedff055
          • MD5 SHA1 SHA512 TLSH

          Staging

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\Sigma\Staging
          • Size 16KB
          • SHA256 569d115a1aabaa4f33b877d2d468517bf4a36dbb6281c3905588685d39eea3ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          manifest.json

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\Trust Protection Lists\manifest.json
          • Size 372B
          • SHA256 db529c2b85bc628a1c83f46d124d85cb1e59c1b8dfb94173ce3281669ce93b43
          • MD5 SHA1 SHA512 TLSH

          Logo.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\Logo.png
          • Size 32KB
          • SHA256 5a1728f319844f098f990c1b98c0d58b412d11d1328d10ebbec939bff28a9bea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogoBeta.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoBeta.png
          • Size 29KB
          • SHA256 1b6902f6abd1fe0581e950658a1eb7aca332e86f2baba9f211277a6ad216942b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogoCanary.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoCanary.png
          • Size 29KB
          • SHA256 db8c958002f8e99194def551e8be06ad04a6464c5be5cfa88b8c75285d33370c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LogoDev.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\LogoDev.png
          • Size 29KB
          • SHA256 cd20fdaa293f8926257a5a217e84d9406adf360829d238535585d04724a578bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogo.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogo.png
          • Size 15KB
          • SHA256 417ac9e1734ad62ae4d5675c38c53537ea1aad5f130081aa9d76af933f5b6763
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogoBeta.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogoBeta.png
          • Size 15KB
          • SHA256 7dce6d0a18c57ecc442a8031af8037ed22ea31066ac89ffa11753f54653d8a5a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogoCanary.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogoCanary.png
          • Size 14KB
          • SHA256 ad91a9ef2b4316233f6b50a85a86c11602a0c12a9039b69b9a0b83b208cd05ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SmallLogoDev.png

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\VisualElements\SmallLogoDev.png
          • Size 14KB
          • SHA256 9d6adfc2ce5f99938b24b33ef0f4d03b6ff6fd0981abd7b8c464addfdf022129
          • MD5 SHA1 SHA512 SSDEEP TLSH

          widevinecdm.dll.sig

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
          • Size 1KB
          • SHA256 dc0e17c89a265630935eb3f281a56bbd8a017073cc4f88a132871fb2bb428ee3
          • MD5 SHA1 SHA512 TLSH

          manifest.json

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\WidevineCdm\manifest.json
          • Size 1KB
          • SHA256 4768c00667b34140dc887cf94b565281991d0319b563d83c61f7a7235cfc2e41
          • MD5 SHA1 SHA512 TLSH

          resources.pak

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\resources.pak
          • Size 8.0MB
          • SHA256 62bb85f3360833e8604c61a63ce49bc5c6254c5fbf28cf9d7aa7c2800455432a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          v8_context_snapshot.bin

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\v8_context_snapshot.bin
          • Size 707KB
          • SHA256 99589da09bc3ba306874ff2908d947036b8e7e9ac2773ba0e92ad61404a2e8f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader_icd.json

          • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\vk_swiftshader_icd.json
          • Size 372B
          • SHA256 4a3ade002e7bd2ba52fa715388be1484056c0f3dd48cff2568419398e6f6ecd3
          • MD5 SHA1 SHA512 TLSH

          +README-WARNING+.txt

          • Path C:\Program Files\Common Files\DESIGNER\+README-WARNING+.txt
          • Size 1KB
          • SHA256 7db0e03b872fdfee80fdd6e269f6cab8b2f86cd2fe52fc72022b28810c3b8214
          • MD5 SHA1 SHA512 TLSH

          memory/4448-1172-0x000001DC3B280000-0x000001DC3B32A000-memory.dmp