hxxps://meetkindly[.]space/m2?uId=114387800&p=0&n=1

Analysis

user interaction
yes
max time kernel
316s
max time network
318s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 10:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://meetkindly.space/m2?uId=114387800&p=0&n=1
Sample260809-mty4zaab28

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1244	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307459778675423"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{A7BAFB6A-2A03-4865-A759-2EBC9DB7065F}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5312	msedge.exe
5312	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe
536	msedge.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 536 wrote to memory of 4996	536	msedge.exe	83
PID 536 wrote to memory of 744	536	msedge.exe	84
PID 536 wrote to memory of 1244	536	msedge.exe	85
PID 536 wrote to memory of 744	536	msedge.exe	84
PID 536 wrote to memory of 744	536	msedge.exe	84
PID 536 wrote to memory of 2288	536	msedge.exe	87
PID 536 wrote to memory of 2288	536	msedge.exe	87
PID 536 wrote to memory of 1588	536	msedge.exe	88
PID 536 wrote to memory of 1588	536	msedge.exe	88
PID 536 wrote to memory of 1588	536	msedge.exe	88
PID 536 wrote to memory of 3904	536	msedge.exe	89
PID 536 wrote to memory of 3904	536	msedge.exe	89
PID 536 wrote to memory of 3904	536	msedge.exe	89
PID 536 wrote to memory of 2128	536	msedge.exe	90
PID 536 wrote to memory of 4348	536	msedge.exe	91
PID 536 wrote to memory of 2128	536	msedge.exe	90
PID 536 wrote to memory of 2128	536	msedge.exe	90
PID 536 wrote to memory of 4348	536	msedge.exe	91
PID 536 wrote to memory of 4348	536	msedge.exe	91
PID 536 wrote to memory of 3940	536	msedge.exe	94
PID 536 wrote to memory of 3940	536	msedge.exe	94
PID 536 wrote to memory of 3940	536	msedge.exe	94
PID 536 wrote to memory of 1572	536	msedge.exe	97
PID 536 wrote to memory of 1572	536	msedge.exe	97
PID 536 wrote to memory of 1932	536	msedge.exe	98
PID 536 wrote to memory of 1932	536	msedge.exe	98
PID 536 wrote to memory of 3476	536	msedge.exe	100
PID 536 wrote to memory of 4980	536	msedge.exe	114
PID 536 wrote to memory of 4324	536	msedge.exe	115
PID 536 wrote to memory of 1740	536	msedge.exe	116
PID 536 wrote to memory of 1460	536	msedge.exe	120
PID 536 wrote to memory of 1460	536	msedge.exe	120
PID 536 wrote to memory of 1784	536	msedge.exe	122
PID 536 wrote to memory of 1784	536	msedge.exe	122
PID 536 wrote to memory of 4128	536	msedge.exe	124
PID 536 wrote to memory of 4128	536	msedge.exe	124
PID 536 wrote to memory of 4128	536	msedge.exe	124
PID 536 wrote to memory of 3724	536	msedge.exe	125
PID 536 wrote to memory of 3724	536	msedge.exe	125
PID 536 wrote to memory of 3724	536	msedge.exe	125
PID 536 wrote to memory of 2892	536	msedge.exe	126
PID 536 wrote to memory of 2892	536	msedge.exe	126
PID 536 wrote to memory of 2892	536	msedge.exe	126
PID 536 wrote to memory of 3068	536	msedge.exe	132
PID 536 wrote to memory of 5312	536	msedge.exe	133
PID 536 wrote to memory of 6060	536	msedge.exe	140
PID 536 wrote to memory of 6060	536	msedge.exe	140
PID 536 wrote to memory of 6068	536	msedge.exe	141
PID 536 wrote to memory of 6068	536	msedge.exe	141
PID 536 wrote to memory of 964	536	msedge.exe	142
PID 536 wrote to memory of 964	536	msedge.exe	142
PID 536 wrote to memory of 5248	536	msedge.exe	143
PID 536 wrote to memory of 5248	536	msedge.exe	143
PID 536 wrote to memory of 5248	536	msedge.exe	143
PID 536 wrote to memory of 4768	536	msedge.exe	145
PID 536 wrote to memory of 5500	536	msedge.exe	147
PID 536 wrote to memory of 5880	536	msedge.exe	148
PID 536 wrote to memory of 5880	536	msedge.exe	148
PID 536 wrote to memory of 5896	536	msedge.exe	149
PID 536 wrote to memory of 5896	536	msedge.exe	149

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://meetkindly.space/m2?uId=114387800&p=0&n=1
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffee8dac188,0x7ffee8dac194,0x7ffee8dac1a0
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1672,i,1415660766594281095,17316513485395459072,262144 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,6444700827694829025,11314888968302366117,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2240,i,12396714694699335295,10118160038965054787,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:8
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,16160377916916079976,7848998988144301064,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,526653651749753028,5672578981401194250,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,1731304015599613552,6577217711724146958,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,6014276363303522667,10751570640969912780,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3624,i,2638798548929941122,5982037067679141413,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,7132793725852327746,17574451722924301938,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,15244151846463177189,11649538905211664842,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,10159345305086678958,16471234247622832215,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,10159345305086678958,16471234247622832215,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,2051289212842583329,15476479493562652499,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,12224597036053841023,555098845772471330,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,7275154967702853612,4800193347256905841,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5412,i,10512232498605802204,9740577600652646020,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,15671110667110388077,12050163985657091439,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6508,i,8541945559050435714,5586632358350461950,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6684,i,13592887164037436741,13927131698468858250,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6496,i,4008498436667119532,12788369109161449689,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,5166260458137862795,16627103106087032034,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,5166260458137862795,16627103106087032034,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6616,i,8670808941589622691,16915821373123912793,262144 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,16782904390394983541,10324591813271562838,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,577435802985723258,13219490222684493574,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6560,i,7576151627028229156,10395894916433342893,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=3012,i,4715359713666178919,4453522729402262373,2097152 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,2140713400686727176,4902201591071421459,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,2140713400686727176,4902201591071421459,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,6494292067213006259,14317992420861171641,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,6494292067213006259,14317992420861171641,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:5500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,16285584530922615825,11078752563439211138,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,11650017332596922311,13817153008561081907,524288 --field-trial-handle=2312,i,2979966939965854508,10802642827186465732,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:8
  2⤵
  PID:5896

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

8c01b944-a587-47be-b8ea-112d8b2ba113.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c01b944-a587-47be-b8ea-112d8b2ba113.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 d6adb07aa6cf4547808f3eba3e80b7ff66f9aaea374994bdc7f47eb52b049dd9
MD5 9e2c27b0330245e99d1e49cf3eeb2ed9
SHA1 333dbdea03d93ce515390cf3f1451097ea00b695
SHA512 a0a4377b62da4e36cead44e9c7e340fde4ab282f6b00598405e8ac53899fc85c9d088c99e69bdc85390233a5b6b4dd2cc7d62b7e4fbe2b771a38d3f647b52f89
TLSH
T159E0DF5E22D1C6EA0A00A497A078EF36C0D9F00E9E8CC96A2B1CB88C264080342CCDB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a28a6d316b177c6989c415c9ca222b22f3ab0c110d398216665d3fe91ef560c7
MD5 b64c7812e99efae2db8a05d6534b2d62
SHA1 15014bba9a410a93422a5b30f93a844fe7636533
SHA512 7ee492121f283349d933dc52980a6bf720fb1ea2be84960175cff7b89896abbb1bd724ad5650930df8e0b86726e735e09b289cc9872d92ee4d769b612aa6c4e8
TLSH
T137E026C806C8CA2EE704B847917A570CC2C4364EDBC8EA1A1B18E4883241840A2DB9F0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 1024KB
SHA256 f6c0f210d572d68fb2fe7f3c3090066ed0dcd60c9f5552187f905402f62d9fd8
MD5 794e865f0af24497becaeade27bc58f8
SHA1 e49c4c20d76de36aab02964384dec206ea0227d4
SHA512 5827cb61f4fe92f6b612843067466d9c87ca8b0ca272c6f9352e6f1aca402c403b4caebf40b79b1b248da271c6da6a9b4103ec887700851a11a502c037ca1d86
SSDEEP 24576:XQl0EwZvS8twwSlqzj3e7I0G1gQN1mliFxiTwR9I:k0J5S8tmA3JPgQ/+i9I
TLSH
T1942533D91E5BAE8B0706F0108C5DBFD6AD73763340635227BEAA8A44920976F2417B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
Size 331KB
SHA256 db4ffbf0ec662620013dc14bc1268bdad6256d19d7d511ec7eff8446887e6900
MD5 05ef8155cf66131654d3bb9c9cba5853
SHA1 e79d53fcb604921222dd1dbc2f1c10c631ff6075
SHA512 ee38793245d91683ddb1f847e5b56a09864fd32ec059055459b3ebe101abed79683ee59c80f30b8f6249d2bbd83fbf7bca83dafb4ef2b634ceff6969c80fed23
SSDEEP 6144:FljUD58FLTW53eaLkNv+Ps0dj1fpqaGjYf0NIcB3bM1rJZ24:FDm5uaLcv+PFj7ajJNImbM1rD
TLSH
T1247423A9B50E3C8AC94F9473827EAFD2A4356FF38D47BAA3634241F401874342E4676D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 eea5687fe301ae5f6025a56820e1bf54b34998fdfbe5044540ae74d167d5eff8
MD5 acefb609c21e862c4cbcfd0f76d2c08c
SHA1 7ca03c23e1a465c73d1c1f0a7facbcae9758fbcd
SHA512 22d352a232a61e0908470f5565d3ca5a8f9fc7fa67f8b2216c3befe01fbf585c67daf3be5f416cd2b89b210a6e215d338aa54e889fe636d9876cef9050a6a859
TLSH
T1ED71E5263351A8B1EFE5093CEDD24AD47AB0B0850E279EAA01705B3D2BDEB4F0C211CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b5fea9f081f2342e7974d8d2b22142b4be8b4484e9ffb01b80a5b6e45c699639
MD5 3b5d77be07de12010e19c5a87e07df7e
SHA1 70e2eb7960a7e6d5ad112d9c02810c2dcf09ccc2
SHA512 0e59f1b2dd8a2b877bce77169cf517bff5b153f6d6c27f639b60b9d7db65bf36734d56a8d017481b81e96f0af20d56f19751cefbc29f271b25fd3b5474aa07b8
TLSH
T18F71D5263351A8B1EFE5093CEDC28AD875B0B0850E179EAA00705B3D2BDDB5F0C211CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ec5f6a512223db006c0bb7cf4ff99a92574c47ac2499780649758c5b2f2fa738
MD5 58549bca733ef8330d63d8c3bc1c8607
SHA1 54eb2f25bfca2dafeb07ef3efee498b4d0d15695
SHA512 08d8cc25e545cbd8a89b852b4c1252876d098a71d8b63d3fc5134990127c6d00e1c2a463e2bcaab4c008ecebb6db3ca462422b9e64882a87cb9b5e199ecd7ce0
TLSH
T11181A1167B2094A5DFE4053DEDD24AC4B5B070491A279E6A02709F3D2BCEB9F0CA01CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3bccc4dbbdc9e08a6c2cde8c30ab8ba6f83c477adb1960738b148013080718c6
MD5 e06e0b166cd160f4c275d8a61d886035
SHA1 39a3fcaa488e0298b3ef604915a777b21e0ee550
SHA512 7eefb98f9210a0dc88008c5d7f95da77383230ed44487286e9d83b8c16482dc9096dbb345ee55d5627c1ab22d40296fccf5131f2225678f1dfd9d873ae381a0a
TLSH
T1E781A3163751A4A1EFE5093CEDD24AC475B0709D0A1B9EA601709F3D2BDEB9F0C605CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c30d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c30d.TMP
Size 3KB
SHA256 99244716f4c58c974e8aed18ccff7b295ea60664757f1f11e057fcbf9db0a92b
MD5 1925c956ddd4d8a97cb034f3717cbdc0
SHA1 56cfba6732dae6c251b11be9464a562dfb73b88a
SHA512 a3b9f07f32a327af5e444a68a209f06a612386c8e60d3ab6edc09598523d2ab39f362b1d76b9a66a5a964ea88a917d08f39975b728d26daa112667a01f666379
TLSH
T19671C3663352A4B1EFE5493CEDD24AD979B0B0890E139EAA00705B3D2BDEB5F0C201CD
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 cad58705907fed8431e8728426efcdbc1545b0d2ebdfa09647789aec6141ce57
MD5 aa8d2e600fcb87150576f98ac03a8c66
SHA1 b9a74bbbb4faa3ae9c7bc17f6d35fcb511f25384
SHA512 2819750865c6f9f8224eed44da5c407b7fe53f7130d55bc29e1eca41553aadeec657c225c1714a7957b665744148cb93286b7084a74fe0b913c2c304172aed74
SSDEEP 192:D0JkeVdNTPT1VTMmtTbm7TqTp/VxkYpTEQ7sJwpOwqXIQl82iLym+v3rokPfGO:D0JDLb3wgXW2N/VxkYtEQ7GwpOwqXIQ5
TLSH
T140025CB782F6CA6EA81355F0AB24AE1FCE1C0928437C3D5DCAD5AF5797E2060D20165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 23237f26cf674d21dfaab5ef32075a81158b48d072258b0a85816259f0a21635
MD5 e49f83c7584807d89cc8c9121beeb758
SHA1 b0f1ac113989203e3e836adb1bd26d456952e903
SHA512 c78890c67795901d9c931a3fa717a13c3b788d674b738df990a6c8411867db114b3083600d756f85ad86b02d942c696e5ffb7b552efb84e5e9a8d2d09a741329
TLSH
T1E7318CF782F4C66E891156F4AA286E1BCE2D0615832C3D5EC6D8EE9FD3F2060E14194F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 c9639bc21da4bc537ad18745dc1a487901d9e57dc87de86a46723169b8ddb4ec
MD5 6557457d48115420498c96c4b613e502
SHA1 26b4d7904f97df884460e8ce82c9754dcf8e73fe
SHA512 014725ca566c5bfdbc95aba5c820030ffbb6a916129707c4c7efd42df4a14515c3008fb6892c1742ba84c9399ca59dee99bf300b585f87c461b4a075f2aea830
SSDEEP 192:D0JkeVdNTPT1VTMmtTbm7TqTgqO0M/VxkYpTawpOqXIQl82iLym+v3roPQdsyq5x:D0JDLb3wgXW28qO0M/VxkYtawpOqXIQk
TLSH
T1F82259B782F5CA6EA81355F0AA24EE1FCD1D0928437C3C5DCAD9AF4B97E2460D20165F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 13742b995077884593c2f69ddccd73e928cdc3fe9d29e17a84281ae59b4c7491
MD5 6eaa559f90398278ad2b4adabde07c8d
SHA1 f805f5f7bbdcf0309027402d80a2fbeb7ee88331
SHA512 c4c0ac7c9fa3f7b2abd5210766515f584c0152f9e7b0aae59560ac146455574dc1aa6d82daa394ac7cdbad5d62fe7440bbde0eb2fefa5f90c014c0947115f1ef
SSDEEP 192:sxZERNyM/jK1Ml8M9n/fvs/c/dIdpRZHW6+WNYDXjY4NEjhZIg5WSJ:sxZE31n/fvs/ke/HbKjYAu
TLSH
T11752C612AA3469B7CCDBD20DFA55BF53DAF5047292900E54A9FCDA1C01E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 caed8cb0ef9a4875e7d72730c6f7f95ffc5dff01d3a2f414bb5f4d00cec799d5
MD5 59ae4f53e183d8713460c050dca750d5
SHA1 3d3da1ed4a225e6c2a310f5b38f09bca7b580995
SHA512 b7cef99a67c2736db8406ab7a5c0b2504cbb039e80aff9af19f4a5748fd08c7198ed65b3fbb98aa5597e0d01c9dd6f1ea1855394b542baea674da6edec93c3a9
SSDEEP 192:sxZERNyM/jK1Ml8Mmn/fvs/c/8Idp3a4VZHW6+WN9/zGrpVY49EjhZIg5WSJ:sxZE3un/fvs/klqCHbWVAAu
TLSH
T14252C552AA345AB7CCDBD20DF940BF53D6F4547292910E54AAFCDA1C01E7BED221381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 f2ded49ec497098eec0bf833bdb051f1da6be091f7a8e7082541dbe3d5981d4e
MD5 60fd1e1e9acf824086b2ca0dfd279b67
SHA1 4bc275e1a67f2a71f02c33c75530e8f1d2798d2c
SHA512 833b8a83cf7022538e1a2c9f0d938cec0782dced7c3e2c79339aed45622ffc865f3212ce5163e0ef7c377761129755080ac59bf0d9f12adae5e551060fb014d3
SSDEEP 192:sxZERNyM/jK1Ml8Mkn/fvsmcJdIdpvZHW6+WNYxm/Y4BTjhZIgrJ:sxZE3Mn/fvsmaexHbz/H9
TLSH
T13F42C712AA3469B7CCDBD209FA55BF53D6F40472A2900E54A9FCDA1C05E6AED2213C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 20840b0a4fefc50fdb39597dc92083bdea035ed7ec32fb7080fd4fddbf3bba50
MD5 c37df4ef6c3a28e6153ff408dcc865fc
SHA1 736c666ab8b464ca1fa293b2c8569075f25635c4
SHA512 d5a1b723d238b1f6e8b07faa7cdab20a5f3f7563d55688d8755a4fbe3fa72fa1745038e7097dc7d96cc9967b3be83b21d354eaa15f78bacb96f13d493325c527
SSDEEP 192:sxZERNyMojK1Ml8UQJmn/fvs/c/8Idp3a4VZHW6+WN9/zI3dnrpVY4dEjhZIg5Wu:sxZESqwn/fvs/klqCHbsNV8Au
TLSH
T1B862D652A6345AB7CDEBD21DF940BB53D6F4047292910E54AAFCDA1C01E7BED2203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 f0c6827d8ec38b9a122d7aedd175d75c6c44344db33d9a2dd555360e10219a14
MD5 3b8428251fbce13c72485fef8f6a9f1c
SHA1 2d543ccd66ae74781b237e8f5e82b3bdf9c192d5
SHA512 7476b875bac594e443934940f8512463dea4a5b2bb9e896ce0cc2ed6d756ea7c492294f6ad6c75cfaada1abca726ccd7cea4e569f9123e9a678e09ea496c7c30
SSDEEP 768:mE8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opdAro/kzUnh:mE8iJPNWvx76ru1jahALocdLsUh
TLSH
T174D20B3B680CCB7E4F844E9CEC266F966DD801CB5B984D5447FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index
Size 1KB
SHA256 d0adc77c5306963d5eacccd5c33ba04958d64765dbde890b001266fd4aa5296a
MD5 abf9e01ab1c503371cf7bd25ba0b414f
SHA1 8e10a331cd321414cdca15c03cbfa3085b83b7ed
SHA512 59848dcc9882fcec42a286d944889aced22356d0ce2fa05c5c7fb63c9a239c528bf27194b58ff85b20dd0e9469e17e03520bb6f37571e502e4b5db3884a2ae8c
TLSH
T1383112884DA59DABFDA045B21676B4B0737184DC1255B7135C3C31317E2775A2A079EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d0a15.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe5d0a15.TMP
Size 1KB
SHA256 7d83cb5f4b03ffab8363c45e55b22d59b5bdbb86c023240563afc5bcfa09df1a
MD5 86eef287e9e427cc1a57c41d9a642b0d
SHA1 0f60581cfed698b156aef0eaf47a2e675f03ed3a
SHA512 5002a5560a3c113acda1e6b4fcb7e639808aa7921111297c0575f94ff37f7e342af604f3c4c166a24f9628e24ec3cc949a3b2aa25a89f9345f6379b02db123c0
TLSH
T11431254E46918E0BE88450BB1967B4B8737588004721B393987C22395D25B9D1B4F0CD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5b3021ba4b50a7dcfe6ec996ccede10d1cbd54e59a0fc02bedccd901aaf6c247
MD5 170b406ea8044b6ab43857979ae31116
SHA1 c506d45ea6ebb553dcaf23dc6e90443bbede1705
SHA512 074c18e12d4ca5b5fde03e0e75222c5d489522788ec4c60937077bf38d977ad1c22b7289ca5e9e83feeb6438c23e97d3aab704a6c11e12944bffc64ed70a141b
SSDEEP 24:KdQf3kVaadCC+4SO+lIjY+Kitham+1EwuSmEMt8ofyXYtfo7Sa3df7z4Lv+CIjny:KoZIhKy00DyxCI/KnqI3BIBKSU8jyJh
TLSH
T1EA913D1531BF02853C7F691C91A48B7BDA4232A33015A42A77AC25B24FA7E250CFDDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ff79abd0ea9edcb4d5d6e54be6cb81d498b909e2b37399503637d9390f0da33d
MD5 14e03eefe2371d88e69291757ccffb03
SHA1 e9ea40ae59cc76a5c7300f37b6d59d9349892f69
SHA512 c9a31c40a4c2e378ea5b3ded6b674ff85022504bbe9c717d870328ebee33bced204e5f73fdbf4bbb4f1ad4a1c487f386c28d303e0abb9fbe53ee8502c2c0ff01
SSDEEP 384:gZcIhsNnQYvztuB9SXkVHtOCCnTKwBODNZOCPKDw:eh4vzwnSVCCnewBKZOkr
TLSH
T188928E715C786C769EA3A505F447361B5EF88173F7C92FA4D5EDA72C00EA298130B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 3f48d1894f2c07650aa0af1bc592f3a02a46050a4de90f86265fbdf9169c7b71
MD5 ee23f6374dff6485bb84d346436b6dab
SHA1 68141ba86da2231f8845e94d6a5cdbb56a20f518
SHA512 16c5f8da6d23a55e9a8bcbf0964366b369bdc1ae68cf336778a6731c75d5b2862ef66c1a88f68b180ad92fb193ea0550f354c41a48bab231875264b84e6a3be7
SSDEEP 384:6jZcIkzsNnlYvztuB9SXkVHtVCCnTKwBODNZOCPKDw:67YVvzwnS0CCnewBKZOkr
TLSH
T1E1928E715C786C779EE3A505F447360B9EF88173E7C92FA4D5EDA71C00EA2981307922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 6c3a157a057b1a0482d776eb6ff806c318f19529772ddd1f8a8d3f59720baa43
MD5 37730dbdab59479459b9f0d5033aa927
SHA1 494d500275591d4e81057546977faf72409fedb3
SHA512 130fcf507a89a9ef03cac9a6fdd14e2b2242c345aac7fed2e13dd9c2efb9b647f33836b7771621d66187f6aaf52d0531461544fd5b83c02ac31f2b8d7c04c418
SSDEEP 384:y8ZcIhsNnlYvztuB9SXkVHtOCCnTKwBODNZOCPKDw:yqhVvzwnSVCCnewBKZOkr
TLSH
T158928E715C786C769EA3A505F447361B9EF88173F7C92FA495EDA72C00EA298130B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 66b4e7b1463be8e35989bd9607c7d025b8c164e8a5c0e4bf3c369f3f2febe9b8
MD5 9f090a9f725a432cf34ff25c38149245
SHA1 f41f5fb03ba599b86898c84032a75f59c8d1cecc
SHA512 bb445c05c4bd8a242510455b60dd5be8ce83116af3f1bbf7a1b5112cbaf9613394d000f719217743e95058d37aec6e0754608c2d1526f459e00df73a7f3b1f91
SSDEEP 96:ZqONkmGQsjpfmUTmDK5ih/cIPURHl8h4otop5a5DcBhPwivh50xy0SFYKRAxcbsy:gONp6kDfQmiUykwZ903YRQiCRQU6
TLSH
T1D802F93568BC2CBB8EA3AE49B48737275FE5113BEAD52FC5D5E81A1C40D725C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 30177182694c658750ad554a79c8570d3bbb8505cc3cf8ec93da6066f0c07777
MD5 c95bac17bf231c6324737ed2600d09f9
SHA1 44e39a971410816658ff3efe35ba1cc6c6963d89
SHA512 30f4d7cc91a7b910e8a4c2ad2fe6734d38da10f9ffc673bedf5027b76f99bc1c425fd02ae11a0588569ebfa5613148dba40ff7bfdeef58b257384c2db9b4ee68
SSDEEP 96:SqONkGQsjpfmUTMK5ih/cIPURHl8h4otop5aUGskDcBFPwivh50xy0SFYKRAxcbK:pONK6khQmiUyLywl903YHHN7cRClqLU6
TLSH
T109123B36A8BC6C7B5EA39445B08737176EA58227EBC97FD0D5DC262C01EF2AC2307516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 82469b2144afd72392c23d6e0cf1e53135e9bc8bab641ce74b9163d6736fdec7
MD5 de3037d17c9bbe1eab686eda8b7f8a8b
SHA1 b6265faa354070a7379fa36831365d4bdbfbcd7a
SHA512 bd532cc2ab454afefddc002b1218310ea1a3ff59658b6d3e87e09130919fa55a13de8753635bcd335038cce52157c30a8d7f50e29ad6c81d33f783e5521af297
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 4d9635afcadb149b7b9efb5e66362a7a1ea130dff45d1a332fbd7f660c485584
MD5 0f78c9e3baf662a816b0dd1552e1b0da
SHA1 85937c30a4c0f28d37203a82d9d066f2613aac1e
SHA512 957e801fa76318082f6ab85765873111e0a5d4bb358d9c8482a2c14dec1436a0648c7f2eee6829fd3effdd783f0903d455671facb399f4be279e3b7f3378da07
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9f95357befd510aa92194571d25385ae023bf25dee546f22c308abe4cae2c7ad
MD5 550f71c849001dbbfcb10f8fd6bb3b38
SHA1 08619015c2e10c4c3b33706483fc5b9c163ae38a
SHA512 8c65993085cd4fb9bcf6fdeddff8bf34cb66bbb05fa15beb2946bc1a2dc46be8d92496ef07d41c12514809048f5f435beaa24829ca4bc24bb1c6f760465a8531
TLSH
T16FE00947970484FAC02C073110875B202EE380B203F602464F30016C2C33391BEA0B81
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 56a79b0ca1cfa074e3c25e67339d84184d491eeb11bcc885ba2633ff28819823
MD5 a88cb04421c4bfbbb82f63351594659f
SHA1 e088aedfbe3a2394c118f38eda2677d55842949a
SHA512 009ad602890a174e0dc00ceaaa4febe29f9da2be12a902bf62d17a3210a61237035d8f7d28d35fd11150be6bee7706747eb6f2f2de49b06ee1c3f4e1e38f91be
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 ab7d5b3e2ce8c6d9122b91a0bc38bc9a303422fec0c29ad3e973f542e9c212ef
MD5 6c2f398384144d34030d70873a1a42ec
SHA1 3ce923d43fbdf1b8eeac52f2eba27eb584a122e0
SHA512 0457c36a664da411b5202c69638bef1e7e61084989b1f9d9eaa66cae86e70d401ffa68f8aabffb4e69e0235f9c1468698e77467234b3a55682aceb57b6da6236
TLSH
T1C4E00157970484F8C02C073110075F201EC380B202F402468F30014C2C333917E70F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59a2ed.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59a2ed.TMP
Size 392B
SHA256 25d8ad82d170cb51f68ecabae06b891de9d9928a5d448c2e75ff6cd98dd05d85
MD5 8d5ec2920d072256191fbce388686d1c
SHA1 ae7ca36156a82402d8c469ec0275b3bfb5ef0ee7
SHA512 79bc0bafd275d88559780480f20561380cbc9361b55ee225d84940160b799741cbe41fb1403762bef2b2c61e02509606c3cf58fd599bdccb0c17c5bfd27180e2
MD5 SHA1 SHA512

Submit Download

3a0339f3-3403-4dbf-aa50-03a68016ecb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3a0339f3-3403-4dbf-aa50-03a68016ecb8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6cb72e194358d89509ca460e252d7c7ded74bd7b38b358b46280354b5f5c6a69
MD5 ef0be57703046db14659a8a30201dc5b
SHA1 763a00d75d2970d40f5ed3d4084c4562605f0511
SHA512 8ff0999628ce2107feb4b99ce4271c0186022e1e74e54793ad7a581eb60e531816a9e462af3336234a0cb764ac4da2f175199d104c38eacc95ef15e92c2b870b
TLSH
T17541F55CB6EA1148B3776F5AABF6A86D487E7D672F06D45E10010D4F0A33B40C862B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download