Overview
overview
7Static
static
3blockyfish...64.exe
windows10-2004-x64
7blockyfish...64.exe
windows11-21h2-x64
7$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-21h2-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-21h2-x64
1Blockyfish.exe
windows10-2004-x64
7d3dcompiler_47.dll
windows10-2004-x64
1dxcompiler.dll
windows10-2004-x64
1dxil.dll
windows10-2004-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows10-2004-x64
1vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows10-2004-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-21h2-x64
3$R0/Uninst...sh.exe
windows10-2004-x64
7$R0/Uninst...sh.exe
windows11-21h2-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3Analysis
- user interaction
yes - max time kernel
69s - max time network
76s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/05/2026, 19:25
Static task
static1
Behavioral task
behavioral1
Sample
blockyfish-4.4.1-windows-x64.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
blockyfish-4.4.1-windows-x64.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSIS_SkinCrafter_Plugin.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/app-64.7z
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
Blockyfish.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
dxcompiler.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
dxil.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
ffmpeg.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
libEGL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
libGLESv2.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
vk_swiftshader.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
vulkan-1.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
$R0/Uninstall Blockyfish.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
$R0/Uninstall Blockyfish.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
General
- Target Blockyfish.exe
- Size 212.7MB
- Sample260503-x451daf141
- SHA256 00976380e5756fea929c0900ab0582a55269dfcac189786d5d53691909d5b623
- MD5 79531a9ca025da0c6042064d92e9def4
- SHA1 ddfcfb7fbb25ed89d59270e10666e3c6a6a9c0dd
- SHA512 e9d8b5d0b49617df18f0790381d1702621b97ae9c630ec9839c22a60d316e1e1a9b9231a20028a589aff0440a9b4726a279e992e8fb31b996ac6fea421a4978e
- SSDEEP 1572864:gazYwOkNKGyEDRYgr/NAvnGNtmR+D4B0A3/8mjjt9Zxc/ey2d1MSU4pSN0MrjgB4:MwZwGZ9DNBIqqc
- TLSH T1C8B88B03E29A01D9C05DD1B5575A9233FEB1B8054B24B6DF2BA447522F76EF82B3DB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 2 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000\Control Panel\International\Geo\Nation Blockyfish.exe Key value queried \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000\Control Panel\International\Geo\Nation Blockyfish.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Blockyfish.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Blockyfish.exe - Modifies registry class 14 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish\ = "URL:blockyfish" Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish\shell\open Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068 Blockyfish.exe Set value (str) \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068\ = "URL:discord-1269794481385771068" Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068\shell\open Blockyfish.exe Set value (str) \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\Blockyfish.exe\" \"%1\"" Blockyfish.exe Set value (str) \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish\URL Protocol Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish\shell\open\command Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish\shell Blockyfish.exe Set value (str) \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\Blockyfish.exe\" \"%1\"" Blockyfish.exe Set value (str) \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068\URL Protocol Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068\shell\open\command Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\discord-1269794481385771068\shell Blockyfish.exe Key created \REGISTRY\USER\S-1-5-21-721190819-434563495-2007910846-1000_Classes\blockyfish Blockyfish.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe Token: SeShutdownPrivilege 2288 Blockyfish.exe Token: SeCreatePagefilePrivilege 2288 Blockyfish.exe - Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 2288 wrote to memory of 4464 2288 Blockyfish.exe 83 PID 2288 wrote to memory of 4464 2288 Blockyfish.exe 83 PID 2288 wrote to memory of 4576 2288 Blockyfish.exe 84 PID 2288 wrote to memory of 4908 2288 Blockyfish.exe 85 PID 2288 wrote to memory of 4908 2288 Blockyfish.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe"C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe"1⤵
- Checks computer location settings
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2288 -
C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe"C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Blockyfish" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1808,i,9275111492476615331,17476356268165591894,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1812,i,10659446861140978581,1061735425752529937,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1804 /prefetch:22⤵PID:4464
-
-
C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe"C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Blockyfish" --field-trial-handle=1808,i,9275111492476615331,17476356268165591894,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1812,i,10659446861140978581,1061735425752529937,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1984 /prefetch:32⤵PID:4576
-
-
C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe"C:\Users\Admin\AppData\Local\Temp\Blockyfish.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blockyfish" --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-background-timer-throttling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1777836161862755 --launch-time-ticks=498792178 --field-trial-handle=1808,i,9275111492476615331,17476356268165591894,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1812,i,10659446861140978581,1061735425752529937,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3168 /prefetch:12⤵
- Checks computer location settings
PID:4908
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\Code Cache\js\index-dir\the-real-index
- Size 144B
- SHA256 4ef71048f68dd9a2fbcb491739d3f68204af57a1aacbf9a522dbb2f8ade81126
- MD5 ee262b753417d0fc1dd77cccad6d0e0d
- SHA1 888d1cac1390199ec1a20b8db8740b6aec6aa394
- SHA512 c5aa251eaeea39b69b33fab6f194d9ca10b5203a6dd856590af811824c51be10afab5830fc5d16c080627496828ba42a3906ecede939c079c104e84424610e85
- TLSH T1F9C0925372188085E712E5B8BDAA4A203E9188302127C25694F6A454950A66442E5554
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 901470318034bb40bf3601f397839031f70d61364128ffb2e435c6cc525148b8
- MD5 d62264d1f229cac32d90521cbb5215c3
- SHA1 3567cd27ed7d76a049b3b58b42354a767113cb11
- SHA512 15ed23948ed9b95b658d66ada010569b3aeef4ff5f51d4d960244fea116b02c9a80b60f335be6acbce52c25fba38e7ebefc970705618afa025f66d299c9f48fe
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\GPUCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\Blockyfish\Session Storage\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512