Analysis

  • max time kernel
    121s
  • max time network
    100s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/08/2026, 13:32

General

  • Target
    2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona.exe
  • Size 342KB
  • Sample260814-qs3mjsaa99
  • SHA256 f2fac080cfe0cc7d7c336834cc0c056665ced98f6a808f68913aab0d8dffdb87
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 9 IoCs
  • Drops desktop.ini file(s) 3 IoCs
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    PID:464

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        desktop.ini

        • Path C:\$Recycle.Bin\S-1-5-21-2370214745-1838013427-2987045292-1000\desktop.ini
        • Size 896B
        • SHA256 27c6c8ff6c37b31ab2f26cf1559bf8d31f8000fb5898d3ef1f2ca8668bac63d1
        • MD5 SHA1 SHA512 TLSH

        Click on 'Change' to select default PDF handler.pdf

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Click on 'Change' to select default PDF handler.pdf
        • Size 183KB
        • SHA256 8a19cdc958de899b9bc1e9d36e44d57b07b97a1ffb2e2d5ab4ab39dd7cde6444
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aic_file_icons_retina_thumb.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\aic_file_icons_retina_thumb.png
        • Size 64KB
        • SHA256 115739cfffa23daddbcfd06dccc5be2b7f8a9e5f62217f7c4518f5592b35f28e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        s_download_pdf_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_download_pdf_18.svg
        • Size 8KB
        • SHA256 12348d49e57e55235f149d09912dccf4924cda3da625aa94445b200e8418971c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons_retina.png
        • Size 18KB
        • SHA256 833d68f8a75eb61ed5d32049c5ccbaf45ab5abc549a5062e766908f054189634
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ui-strings.js
        • Size 4KB
        • SHA256 573aeb5bebe01b007b05be9407fb361c051a705d3b45532fe2599573de56cb6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        x.cur

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\x.cur
        • Size 8KB
        • SHA256 d21bab85a1d860e380fa38e5ccfea701903405a27f9f8eea6b4f6d1cbe00db51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\images\themes\dark\file_icons.png
        • Size 24KB
        • SHA256 3c159ef33056f30da83bbd1dab996284a53cd87a8b5daf390fcc6dfb50f34924
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PlayStore_icon.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\sv-se\PlayStore_icon.svg
        • Size 6KB
        • SHA256 94c290f6c2089e2a03559b2c5817de0e89066a812e8a0147f9cbbba90b40927b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi_get.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\vi_get.svg
        • Size 7KB
        • SHA256 c133a46bb1be892c4467369122cd617ce23ca690be7dc229d95d0059626f1607
        • MD5 SHA1 SHA512 SSDEEP TLSH

        new_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\new_icons.png
        • Size 48KB
        • SHA256 4dff4e6019aba0cbb8950af6559d8dd0be7147ad37adb745d8d090df669a66df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js
        • Size 17KB
        • SHA256 3dcc39a8a23c58be4c2e75015ed91dba30efd76235dbd8cc01a4e4f0af335792
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DisplayLanguageNames.en_GB_EURO.txt

        • Path C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_GB_EURO.txt
        • Size 33KB
        • SHA256 0975475087d8e5fdf1212384553987865de618c879e2ff9fba2ff30eeb462531
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets
        • Size 5KB
        • SHA256 4eded65f5269ac3411e90ea7a2f350545a34d4b18ef9daec4baaebca434722db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Workflow.VisualBasic.Targets

        • Path C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.VisualBasic.Targets
        • Size 5KB
        • SHA256 7254954baa8a9934bd805e230f10a23132a0fab4766a95039c015612afb11518
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pri

        • Path C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\resources.pri
        • Size 4KB
        • SHA256 b046ec2a93a6bfaa5cf4ab05a205106bde393d2fbac0a75439036d41944474db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MicrosoftEdgeUpdate.exe

        • Path C:\Program Files (x86)\Microsoft\EdgeUpdate_disable\1.3.195.65\MicrosoftEdgeUpdate.exe
        • Size 202KB
        • SHA256 8dd1d27d58d837d384e6e2566a17f563ec6d46f24d31b13f5010463334bd9941
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn-IN.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bn-IN.pak.DATA
        • Size 2.2MB
        • SHA256 0038a4f34549c20e06edb5bf799bb978f502fb72e50f0a79300bcc1a1f90128d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bs.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\bs.pak.DATA
        • Size 1.0MB
        • SHA256 b724a92c02a1122500cb5d01dbe6f831f06be8cb37519c979ec3943a17de27ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca-Es-VALENCIA.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca-Es-VALENCIA.pak.DATA
        • Size 1.1MB
        • SHA256 fb957faf273c6d7d89220798f3af1e77d65eedcc420e2099c38e230ee8ac70cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ca.pak.DATA
        • Size 1.1MB
        • SHA256 0e037f4b254e73b6555601d598905c7c14095a6b97c3e3851f483ef7cd80a544
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cs.pak.DATA
        • Size 1.1MB
        • SHA256 93ee69e67f9e30e17a5f6d302b8b84763af53c675a5309d6057f515435fc66fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cy.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\cy.pak.DATA
        • Size 1.1MB
        • SHA256 fd12ca00ee62b2221d632eef264670019e341e0ca53a9a548b218a18d8457e35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\da.pak.DATA
        • Size 1002KB
        • SHA256 7645c968e9e74c6ebe515c33f2aa1dfd358b6dfe0c3efe309f777d5c76867f99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\de.pak.DATA
        • Size 1.1MB
        • SHA256 879cfb11b2b3661c558c87382d5f7d32ff1a3bb98ef92670285fd20899b5344a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\el.pak.DATA
        • Size 1.9MB
        • SHA256 bd979fb97b5bc7f62d311d2b6c69549706c5819ce36680ff3fca42009af5020e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-GB.pak.DATA
        • Size 914KB
        • SHA256 3c39370900fa1f00a52561512fd151f985df0cfb64cf82acfa07741559b83217
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\en-US.pak.DATA
        • Size 901KB
        • SHA256 228f6843e3b700fb999a4ef5b8e2509deb6a79fd5b7a78a47e0aa5ac0eafe28a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es-419.pak.DATA
        • Size 1.1MB
        • SHA256 b7033461e8f5aaba568ee4a621f5e4452ef2d47ffd234a26ce735f930a9ae486
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\es.pak.DATA
        • Size 1.1MB
        • SHA256 878ced1db8e37a80ac6496744090b0d32b0e9c2126254658bb91c895362d63b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\et.pak.DATA
        • Size 991KB
        • SHA256 beda17e90905a57e9960add210c9c1060d3d4fa89113aac5edb8831bc9d7b43f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eu.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\eu.pak.DATA
        • Size 1.0MB
        • SHA256 a9a385831a936d4cc817cc05b203a3856968f23e675a120af661d22b6bda4bd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fa.pak.DATA
        • Size 1.5MB
        • SHA256 966faa1539af6313232257eb504e4d95472cc6d40e97460140db3652708e9628
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fi.pak.DATA
        • Size 1.0MB
        • SHA256 def33e45143e8eaf2590189dbd9295661f9decad9e8acf9442177d5d4e868e83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fil.pak.DATA
        • Size 1.1MB
        • SHA256 abadba83985f54cd3455e27601150d18fe85542984b316643c0b913aac0d350a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr-CA.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr-CA.pak.DATA
        • Size 1.2MB
        • SHA256 cb200076feb9696634990e30a74fc7784e88c6e5d193484e39e541c4688a8579
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\fr.pak.DATA
        • Size 1.2MB
        • SHA256 615206883b9852ca89bc7fc32a9159904228e19ae4e1a17d54fe0213b0c91cc3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ga.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ga.pak.DATA
        • Size 1.2MB
        • SHA256 86977d99170e67977b7a7875a90a95070bd675e1774b2129fe364c0ae20a0fc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gd.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gd.pak.DATA
        • Size 1.2MB
        • SHA256 05ace7df41b9144bf73c478655ca121266cb82970aa7db4e05595ec84b983fae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gl.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gl.pak.DATA
        • Size 1.0MB
        • SHA256 9ea4b55ccf91ec34d81e1c811a5f7622ac9db07b42d71f2255e5c44dd5e4c68b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\gu.pak.DATA
        • Size 2.1MB
        • SHA256 601ac919cb4e9df03e8dcb350d097c2ad804572837b77cfdf85ffb25f6ccaf5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\he.pak.DATA
        • Size 1.3MB
        • SHA256 89ae925c4c6fe604f9f1b8100aa795407737434dbf1032f755f621311356e875
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hi.pak.DATA
        • Size 2.1MB
        • SHA256 4c3801f067d82670a1d51e43a43a9ad21211260cda0fcd52ac9659b39f26ae47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hr.pak.DATA
        • Size 1.1MB
        • SHA256 cb6a6dfa432160a0eef1f202484c5c926015b6ec31fb88e7cba9cffe83a72f35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\hu.pak.DATA
        • Size 1.1MB
        • SHA256 0c9e6da0ffc9a6c1720afb0600fe5c37f030f8b5f1000215aff1fdef7da10f94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\id.pak.DATA
        • Size 984KB
        • SHA256 2c783943d3ccff74d2e872377ad5f1133d5ee704a379ee7accdb6526db55517e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\is.pak.DATA
        • Size 1.0MB
        • SHA256 be18fa5e3060abce3001fdef5bf228ad0e4c9ebc15b227a8c1a73cc183e1d3c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\it.pak.DATA
        • Size 1.1MB
        • SHA256 ef36d78e256ae311c96e15d0e3c1baa55a28f458c71a45e2d7f17d4416d98770
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ja.pak.DATA
        • Size 1.2MB
        • SHA256 0498b63a5de54a912df4f447ba13e99e155f9b498f52ff91ad0f641bc10dd022
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ka.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ka.pak.DATA
        • Size 2.3MB
        • SHA256 29905011cb0c47603b274475e023c8ebeadb3d4a0b2f23cae4cccd03451abf9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kk.pak.DATA
        • Size 1.7MB
        • SHA256 c085f86f9ff119b922b9a4821543e763a622d52ef0349057e1cbab4bc012d4ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        km.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\km.pak.DATA
        • Size 2.3MB
        • SHA256 2de82e5ba1aaaff0e5ec444105bfb5cbb11b8e198f7acf34f8b0b372fdf136e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kn.pak.DATA
        • Size 2.3MB
        • SHA256 384ed5c8d27328abe7db06af1ceb463e10ca8a911214c64c868b8bd7550cc2ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ko.pak.DATA
        • Size 1.1MB
        • SHA256 42d3d92595c2bc9c2fb4c9b64a88e48e4dc12c2a1171324808a2996967eeaf72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kok.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\kok.pak.DATA
        • Size 2.0MB
        • SHA256 95e196a850cb8c781a23745a6819a88e3b7c111bb2e4ae712abb14af32d1379b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lb.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lb.pak.DATA
        • Size 1.1MB
        • SHA256 259b43d82446bd53b6f0942cd38e1a0b39e10d43fbf30100d46f2affcb0d971c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lo.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lo.pak.DATA
        • Size 2.0MB
        • SHA256 dc2000d332c96843e48b53a0894ffb98025e2124e4f0e2bf07b6dd0989e593aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lt.pak.DATA
        • Size 1.1MB
        • SHA256 6e80aa4eef644a9f91910fc6fa8d18b9849a7ec14e209772bde594b07e96a8ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\lv.pak.DATA
        • Size 1.1MB
        • SHA256 8c1cb9ed34e7da5e942eaf114cfba90a85395441e9b38200437156ba75eaaa45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mi.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mi.pak.DATA
        • Size 1.1MB
        • SHA256 296ca2f37aa07c4a66ae593a12f211dbd07dd7f712722869f6f9b84ee3c514df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mk.pak.DATA
        • Size 1.7MB
        • SHA256 80d08e891b8095178afe002d60bff021fd5b058b78b1cfb7d4739bdd3e287a14
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ml.pak.DATA
        • Size 2.5MB
        • SHA256 ea71568f0c3f2a75e4ffd488b46f7bcb83498e7e2cc9a70b53472e6f01c367e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mr.pak.DATA
        • Size 2.1MB
        • SHA256 909c67d74090d2f394f4550e86d2c82fe07c0f945b638319b73fd132e2cc7337
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ms.pak.DATA
        • Size 1012KB
        • SHA256 8d1cb58cd0992bad7bdeeb8f63c9c0b3f59aea8c25f7dac165cf928e813d7d30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mt.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\mt.pak.DATA
        • Size 1.1MB
        • SHA256 bf491a7cf3687f9e39471db40b8a92593c38a36419c94bd1a70dd5eaa78fd265
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nb.pak.DATA
        • Size 976KB
        • SHA256 8c3a4bee18db20d86e568995b07998e12d49ab759239f85e07d98da9dd0ae931
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ne.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ne.pak.DATA
        • Size 2.2MB
        • SHA256 0c9e8b54cfbea1452c51a756e4a8ae1d7b7ed0e3b67226ac8bc1ace50d4ce2cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nl.pak.DATA
        • Size 1.0MB
        • SHA256 c237b7592a80c46c339dbf52630ce6d5b8458e3ebb375c96b201eb202bef05ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nn.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\nn.pak.DATA
        • Size 979KB
        • SHA256 2821aad431152b7b9693355a6858f3699f47c4622b2c995239e52c53a54dcc86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        or.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\or.pak.DATA
        • Size 2.3MB
        • SHA256 1635ee184d977369a529cf7b955bd3dc658f34d73924bf68e6a22d9a2df4b6d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pa.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pa.pak.DATA
        • Size 2.1MB
        • SHA256 eb83d76435999a7dc3cc2dda2c59165913427e298c7e4605aa3b7d75f5c82f23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pl.pak.DATA
        • Size 1.1MB
        • SHA256 1d0910343ba2de8b580fb8caaed6c65bbd9d796fbd92aecebac99f1782641fce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-BR.pak.DATA
        • Size 1.0MB
        • SHA256 75ff2382bb121c1e8d037d1928e9c31fd9ec3e5b98a700321e4381037b224130
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\pt-PT.pak.DATA
        • Size 1.1MB
        • SHA256 955a19bfac908d95b3e091c6577a93036bd9a854b34326602b8d6829647f60ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qu.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\qu.pak.DATA
        • Size 1.1MB
        • SHA256 0c701a095d2aa27752161980c22e990fc76f3f57aae37f983a32f88ec8f5da5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ro.pak.DATA
        • Size 1.1MB
        • SHA256 92aadc4ff5debd3fdeac4e75fad0d5f2f3020ba99ece7533a8ee5914d9b2b175
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ru.pak.DATA
        • Size 1.7MB
        • SHA256 4cf18f5d451a957521bcadd16b035f8aafab12e49159c958760c872912cb5b06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sk.pak.DATA
        • Size 1.1MB
        • SHA256 459c9559d8a509d7491d7f593510451041da72f1846306f8f07a2eb11aec3cf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sl.pak.DATA
        • Size 1.1MB
        • SHA256 fa065793a3de6472642325a0da282ede13c093e885f33ca71a6783ad2ee815a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sq.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sq.pak.DATA
        • Size 1.1MB
        • SHA256 e9816c6ca5001f368e0e0a851d7f19f6f3492b91d0e1523c9cce434268e9c3a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr-Cyrl-BA.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Cyrl-BA.pak.DATA
        • Size 1.6MB
        • SHA256 548f1e03b6ef65df81ee767673abba18053b30379bafe08b867410a5f526ad7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr-Latn-RS.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr-Latn-RS.pak.DATA
        • Size 1.0MB
        • SHA256 7e4cd000597c38664eebd894ac962166a12717f2c6c4136973fb5a17d9fc507b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sr.pak.DATA
        • Size 1.6MB
        • SHA256 8424400de85fb290eefeee812ea125ee3cb032eb27fd92bcc0d2a97eb39e739c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\sv.pak.DATA
        • Size 1001KB
        • SHA256 327fd758b1a6c19226ea95fe54c387e26129accc4f09bfa1b979e7742236d55f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ta.pak.DATA
        • Size 2.5MB
        • SHA256 0643a2d78bae2e3c4446f4288ae6e889f8423dcf2868e832758803e2097447bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\te.pak.DATA
        • Size 2.3MB
        • SHA256 8d76561bc15c9714acd99dba56942a5cdef39dc1105ebcce5c5232c17cef88c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\th.pak.DATA
        • Size 2.0MB
        • SHA256 e4093712dbf754a7d624f722bb541893062fb260ffe15d79c5570fd259a53799
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tr.pak.DATA
        • Size 1.0MB
        • SHA256 89c931d52a0159981ddea03c2b337fcfb3215f83fc3d245189e173270453fefc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tt.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\tt.pak.DATA
        • Size 1.6MB
        • SHA256 328886317dbea6713cbf0d2fb0a8774b978329add80362595518fbfe4ea73564
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ug.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ug.pak.DATA
        • Size 1.6MB
        • SHA256 433711a33cbb1437fd46da90df832b639f779bb9e40bd421f0d19c1a87ecd8b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\uk.pak.DATA
        • Size 1.7MB
        • SHA256 9a8af113c8e440bc22c698f1efb0b79660d75b5653ec224fd560cf4c517f281f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\ur.pak.DATA
        • Size 1.5MB
        • SHA256 a4481b7efd23b2b6009bbea36dd64c3ebab684590f6cc304b9bec0f472670fdc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\vi.pak.DATA
        • Size 1.2MB
        • SHA256 f998f21cf67cdc6f1d90b0ffbfd9756551aae1b38e331d8e7a9e3d2fd6d88dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-CN.pak.DATA
        • Size 860KB
        • SHA256 419e184f99486f2c931d06c54ae935ca4e6be79844c807b4ce9d7135d23eea39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\Locales\zh-TW.pak.DATA
        • Size 887KB
        • SHA256 693a2712f3404e6678e1b6be4d64b484b8341838fb2050ad5d21fe8ce912c59b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        manifest.json.DATA

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\ResiliencyLinks\MEIPreload\manifest.json.DATA
        • Size 1007B
        • SHA256 c88ba93103e62d6cb7000fbed6d27561dc255b07c44337be6e34f281bc8c1cef
        • MD5 SHA1 SHA512 TLSH

        CompatExceptions

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\CompatExceptions
        • Size 1KB
        • SHA256 bca0e83cbb40a672dc13d666f01e739a50f32c01f2629ecaaa38e179ea4cf497
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Cryptomining
        • Size 1KB
        • SHA256 d3d4d829e4adf597633bc5d11d3308c7b3dca6b02d6cbd66fe2232f9e168c106
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Fingerprinting
        • Size 2KB
        • SHA256 6e396a1a2d2e4b99429165b4dc82ef0a8b1e9f5b94b0c8c458ae152cb33644c9
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Other
        • Size 795B
        • SHA256 bca859f2db24afc4fcb917def256a72673aefe21509324b4f7e559c88ba15093
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\Social
        • Size 1KB
        • SHA256 d0d36a720c8b4898301a11ccd3555f3238411868e4221037d0ca68f62c0fc0a7
        • MD5 SHA1 SHA512 TLSH

        TransparentAdvertisers

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Mu\TransparentAdvertisers
        • Size 883B
        • SHA256 38b5f2ba01ce3567c73444d459db9df159f2a7070bc918448e5a9cfbb3e91396
        • MD5 SHA1 SHA512 TLSH

        Advertising

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising
        • Size 3KB
        • SHA256 dc893a15a208295da6af8b31d803e3bd8ae51a5d4669137f945b0cf21783cbe6
        • MD5 SHA1 SHA512 TLSH

        Analytics

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Analytics
        • Size 1KB
        • SHA256 821d9fe9f5773b776198036b9b45d36cae19f15c718ff244a379091f4400d720
        • MD5 SHA1 SHA512 TLSH

        Content

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Content
        • Size 811B
        • SHA256 e00d95e16fbad1def021b98620dfc691c375a09a03ccd07265681d3ae28011ea
        • MD5 SHA1 SHA512 TLSH

        Cryptomining

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Cryptomining
        • Size 800B
        • SHA256 b1d35ac12b431b56ae88ed751db30824691eae923ced7b149541fe74c91eb1b4
        • MD5 SHA1 SHA512 TLSH

        Fingerprinting

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Fingerprinting
        • Size 942B
        • SHA256 4ac2fea9aa4bee850820f1a6744d9a836ab83bd2a63de8593a40a04b559e1cd5
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\LICENSE
        • Size 829B
        • SHA256 27c514a0dedd15f116324301b6f041ed76cdac5bba618558521bdea3f18596d1
        • MD5 SHA1 SHA512 TLSH

        Other

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Other
        • Size 852B
        • SHA256 15fe81959b358739d2e1c96a4dfa1e7255d7551ab5843f97cbede41cb4af96c6
        • MD5 SHA1 SHA512 TLSH

        Social

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\Sigma\Social
        • Size 4KB
        • SHA256 b59c960def9930513e7dd77ff68e506b094d1017a473464fc5e0fef14a9dc950
        • MD5 SHA1 SHA512 SSDEEP TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\Trust Protection Lists\manifest.json
        • Size 901B
        • SHA256 520ca17f70e9ebf77455fccb3a2237805ab3e64affefaf04359fd5ba84609a29
        • MD5 SHA1 SHA512 TLSH

        widevinecdm.dll.sig

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig
        • Size 2KB
        • SHA256 0610b08323493fb5cb63a87df0ad8e0640590050987a204741d9465df3f8ad4c
        • MD5 SHA1 SHA512 TLSH

        manifest.json

        • Path C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\WidevineCdm\manifest.json
        • Size 1KB
        • SHA256 2e10ebbcf3ba92bc065024e090edea13b53374e3ef8dd9802cd0c9a59b14a6cb
        • MD5 SHA1 SHA512 TLSH

        identity_helper.Sparse.Canary.msix

        • Path C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_proxy\win10\identity_helper.Sparse.Canary.msix
        • Size 54KB
        • SHA256 74ea73faed1cfd22ab555b15e9179254cf4bdb3d426d000ba562cd24cf3b4985
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Uninstall.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
        • Size 101KB
        • SHA256 cc5c2017d37d2718800fdc437c4a38544fed79882c3c587db99022524a0e21a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        maintenanceservice.exe

        • Path C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
        • Size 272KB
        • SHA256 3dba029c5d39270f4879c19b6a4234057097b5d5fd281029cf73c088052d430c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSFT_PackageManagementSource.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\MSFT_PackageManagementSource.psm1
        • Size 24KB
        • SHA256 231fdd91b9e6d3fec5cc8b53aa2f57e8dbe0f370d24fbe7ae92c3ac543bb522e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSFT_PackageManagement.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\MSFT_PackageManagement.psm1
        • Size 13KB
        • SHA256 51138fd56a18dda1d6979494e54189ca649f0f72990ad62af76643b0af23b153
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagementDscUtilities.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1
        • Size 9KB
        • SHA256 3237ca2a7b5cec1e0d9e6dc240a34209f20ada31d5209085cf58eab2d7f24f06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageManagement.format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.format.ps1xml
        • Size 16KB
        • SHA256 605611638fc7005c58c12d807e3b1aeb37eea750a164f221d901f5989f191d8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PackageProviderFunctions.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageProviderFunctions.psm1
        • Size 11KB
        • SHA256 855ac7f378561055c2eb86049b31ac9558903ac51002f45bc55e10a08c0b486c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Format.ps1xml

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml
        • Size 8KB
        • SHA256 37c1bce0a1dbd43ed0ef1ef62a7bc1f704a9fba00f26bf6147a36fa2f788bcb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSGet.Resource.psd1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Resource.psd1
        • Size 78KB
        • SHA256 7380d6261741810d7c58a37d7937cf929c77209c1963e270505f12684c2089b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PSModule.psm1

        • Path C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1
        • Size 571KB
        • SHA256 27e83ec9d15602819e6aee2f4de94d5974638ff0d2d66e33f39b571c71bfdf07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setup.exe

        • Path C:\Program Files\Google\Chrome\Application\140.0.7339.81\Installer\setup.exe
        • Size 6.1MB
        • SHA256 be14fe5ba53c768ed7351f2449bb959c9925e04fae4919f7dbe88ac042674434
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-core-localization-l1-2-0.dll
        • Size 15KB
        • SHA256 a6c078fc15b35de91321000abbcab87b23608416811f4313fdc27f02d3800d8b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-process-l1-1-0.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll
        • Size 13KB
        • SHA256 75cf9086a0ec20ca0eb79142a3b139872039574d3e498b58f175b7cfe7843e3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.87wg0wr165kq1juge8k7805z1di1psk4i0ky3.ur._UHA0cX

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\available_for_trial.87wg0wr165kq1juge8k7805z1di1psk4i0ky3.ur._UHA0cX
        • Size 18KB
        • SHA256 2627ac1888dbe2f872e787a17a73a7ac7bbeb2ea64284f15f6544866bdb70a5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ucrtbase.dll

        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ucrtbase.dll
        • Size 1012KB
        • SHA256 1a9f5db59ea4ac4958d035f14ff5a52c1a5bc8f845357545eebb144d358d17c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xalan.md

        • Path C:\Program Files\Java\jdk-1.8\legal\jdk\xalan.md
        • Size 12KB
        • SHA256 9779bf9b1cb73ba3f185deba83a07519197e543d43d08929cc71e148474b5b41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcp140_2.dll

        • Path C:\Program Files\Java\jre-1.8\bin\msvcp140_2.dll
        • Size 183KB
        • SHA256 9e5376a2752ff9f4ac2901a69c97f275a32b1daa436b450cb0545c76821ca942
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OfficeClickToRun.exe

        • Path C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
        • Size 4.1MB
        • SHA256 6fa0bc09dabea9c709c78ac298e957073ac2dff5e9b02cb2c7f71a86bd50bbff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 2bcb6437889573e707e0a6d5f41a3f817d96fd445a8952e8c6f82ee6be89d637
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-crt-convert-l1-1-0.dll

        • Path C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 d3555f32a1a6990d43f02ad5b3d1b5db3f870b654f4b39b33eb57489dab5d5cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        available_for_trial.8v72an3wfgtrs7i59l7r9s4ojv55uk52e.6fb76u07r._UHA0cX

        • Path C:\Program Files\Microsoft Office\root\Client\available_for_trial.8v72an3wfgtrs7i59l7r9s4ojv55uk52e.6fb76u07r._UHA0cX
        • Size 20KB
        • SHA256 047c539705ed3fbea3455b4f20c745f8330e29ccfa45cb4850f310b1ad394bcb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        concrt140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\concrt140.dll
        • Size 325KB
        • SHA256 b62952e63026bd6218dfafcef580b421f687e492f7a05757c9261449e9ad6e1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vccorlib140.dll

        • Path C:\Program Files\Microsoft Office\root\Client\vccorlib140.dll
        • Size 359KB
        • SHA256 e14687feb0a6d4c44711b2bc3a90238f72a8f24f3bb9944eca5c32eb985d217c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Licenses16\pkeyconfig-office.xrm-ms
        • Size 905KB
        • SHA256 db2e492819ec63f81347c6bab943357d7ca314ae849a3d0ba48c813966c535ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pkeyconfig-office.xrm-ms

        • Path C:\Program Files\Microsoft Office\root\Office15\pkeyconfig-office.xrm-ms
        • Size 621KB
        • SHA256 582a122088a14ed7d1a6ab6cc1668bb03e8e94912105cb4660620933ba4d4134
        • MD5 SHA1 SHA512 SSDEEP TLSH

        word2013bw.dotx

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\word2013bw.dotx
        • Size 12KB
        • SHA256 9e50795c944e7b58cc9e8ae5f66b1f40df4129ba60359549dcf73564acc0e61e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kb2i97h75nj08i.2ze898r._UHA0cX

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\kb2i97h75nj08i.2ze898r._UHA0cX
        • Size 292KB
        • SHA256 88e2211c44049a333d788328bb941e845621b4904be5229bafad7a54cb7c269a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SIST02.XSL

        • Path C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\SIST02.XSL
        • Size 246KB
        • SHA256 ab4aff9de16c73bbb2fe564a6930cf01d0af6cd010d74afe21e884ff276a4863
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libssl-1_1-x64.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\libssl-1_1-x64.dll
        • Size 633KB
        • SHA256 eb7c54990dc2fc695765348cad9a5b36f6a96edb0d6be7d484f4eefdd7345f55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msvcr120.dll

        • Path C:\Program Files\Microsoft Office\root\Office16\msvcr120.dll
        • Size 941KB
        • SHA256 335f70603d29fb06bf9ee70d44638fe98ede971a244a677288488c86059fee24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SLINTL.DLL

        • Path C:\Program Files\Microsoft Office\root\Templates\1033\GettingStarted16\SLINTL.DLL
        • Size 19KB
        • SHA256 1d782179c30d3f29ae5b3009744df1d0b62537af4074313309dc10bc442d12db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Csi.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\Csi.dll
        • Size 7.3MB
        • SHA256 2c0568582afa6ba5d4ebfe83d1d599867a3d7bf0cbadb6248e93cb87aa24c617
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sybase.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sybase.xsl
        • Size 30KB
        • SHA256 9fa65d39b1a2bd6eecb918195c13bb2618a1eed2456a54ebd10489431be60dff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140.dll

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\vcruntime140.dll
        • Size 79KB
        • SHA256 44c3fded14feb3686c30b37570e8ff561a53b1e99b0d9c78b05da958533bd7fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hive.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\Cartridges\hive.xsl
        • Size 80KB
        • SHA256 6f5a4cd96f183c36e77c65ff9bf25f1ebdc498cc3e47389248dd87d2d29c0281
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as80.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as80.xsl
        • Size 17KB
        • SHA256 cf826a54859b5602ea3ca94b1e4228d1cb54b76e5033923123b1dffb20a6ec78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        as90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\as90.xsl
        • Size 20KB
        • SHA256 7b03f1c7f5f4406b702a2ddc9d1f3b1b278143180fa521053fa749fdf9c5a866
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db2v0801.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\db2v0801.xsl
        • Size 30KB
        • SHA256 f644eefb677b8bd4ab0761a536bfb3957adc322f8be57a4d6c7fba8014e961e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        msql.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\msql.xsl
        • Size 126KB
        • SHA256 9b6a42cd62a18e49e5bcf738b50ed1c377c95571cf612ccaebde4420f353aaf3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        orcl7.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\orcl7.xsl
        • Size 94KB
        • SHA256 f29027ed8bb12f5a07308b8a11fd70d57a31cd8fe09c95e0a30cbdf35c2eb7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql120.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql120.xsl
        • Size 132KB
        • SHA256 b86cc0bc871843f80b1125f6e6c6c91a5259c9a900d49813aae788e7ecae4d54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sql90.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sql90.xsl
        • Size 133KB
        • SHA256 923aa4010bb8f27aad437b9c8d596786a8ad369737aba1cbc06aa447f35c2b9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlpdw.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\sqlpdw.xsl
        • Size 103KB
        • SHA256 6e857394fbf63a5b017fc72321b3c8b4123d0569bca2e1ed239fd38d4b83c1db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trdtv2r41.xsl

        • Path C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Analysis Services\AS OLEDB\140\Cartridges\trdtv2r41.xsl
        • Size 104KB
        • SHA256 794ba31e8b02228a6fa0d920063edfc13a20442492f48fc3f373f952980bf9dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo
        • Size 627KB
        • SHA256 f1017c97e69c7d75cc74d9de6988c1050ea37db884e4ade335530579d5e63973
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vlc.mo

        • Path C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo
        • Size 784KB
        • SHA256 e05f8b5ca403a6721a191533c27127269d72b06b69caadf33fd5bcf398cbca00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_6.0.2724.6912.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\mscordaccore_amd64_amd64_6.0.2724.6912.dll
        • Size 1.3MB
        • SHA256 8531fcdd5c2acbe5d9e63916879dfa4efc69c7ac3f65d3a4e7fb6698330298ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft.DiaSymReader.Native.amd64.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.DiaSymReader.Native.amd64.dll
        • Size 1.8MB
        • SHA256 7a9a80b9810c5ecaab5ee08f071a55e799ed18e1addb7b38242f081850023c0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\mscordaccore.dll
        • Size 1.3MB
        • SHA256 220a66f77a41f29fb0d31ffe7a1d533636af3f131718b139d34c452b92b2cf18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mscordaccore_amd64_amd64_8.0.1525.16413.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\mscordaccore_amd64_amd64_8.0.1525.16413.dll
        • Size 1.3MB
        • SHA256 4809c18e49e4e6c28ea81deed19c0bf4adb969933f7d0d17bda9f5ff2ffb5145
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 006e7efe75745a6be166c99b2b2259dbe5464272688ad5e3e287934803c3be2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_cor3.dll

        • Path C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\vcruntime140_cor3.dll
        • Size 117KB
        • SHA256 9e6439ac70595fb7396124d1973209415d39b56f921a7e1d414c098de7cf7b62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        how_to_decrypt.hta

        • Path C:\how_to_decrypt.hta
        • Size 11KB
        • SHA256 860a28bd869a79b9b1c1248205d42607511d6290196a3dbe58a1e82bc787ab18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/464-0-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-19-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-15-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-8-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-7-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-6-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-4-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-2-0x0000000000400000-0x0000000000463000-memory.dmp

        memory/464-1-0x0000000000400000-0x0000000000463000-memory.dmp