hxxps://account[.]sigmaerock[.]net[.]in/access/

Analysis

user interaction
yes
max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 14:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://account.sigmaerock.net.in/access/
Sample260907-r383rayerd

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL 1 IoCs

phishing

description	flow	ioc	pid	Process	stream
Email address	286	758681729565rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com	4236	msedge.exe	1

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
84	href.li
86	href.li
74	href.li
75	href.li

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4236	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332658647149063"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{863F51CD-5F91-4B52-9F4C-4B7D1CE0B901}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1540	msedge.exe
1540	msedge.exe

Suspicious behavior: LoadsDriver 4 IoCs

pid	Process
664	Process not Found
664	Process not Found
664	Process not Found
664	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 4372 wrote to memory of 764	4372	msedge.exe	87
PID 4372 wrote to memory of 4236	4372	msedge.exe	89
PID 4372 wrote to memory of 1284	4372	msedge.exe	90
PID 4372 wrote to memory of 1284	4372	msedge.exe	90
PID 4372 wrote to memory of 1284	4372	msedge.exe	90
PID 4372 wrote to memory of 3832	4372	msedge.exe	91
PID 4372 wrote to memory of 3832	4372	msedge.exe	91
PID 4372 wrote to memory of 3444	4372	msedge.exe	92
PID 4372 wrote to memory of 3444	4372	msedge.exe	92
PID 4372 wrote to memory of 3444	4372	msedge.exe	92
PID 4372 wrote to memory of 376	4372	msedge.exe	93
PID 4372 wrote to memory of 376	4372	msedge.exe	93
PID 4372 wrote to memory of 376	4372	msedge.exe	93
PID 4372 wrote to memory of 2008	4372	msedge.exe	94
PID 4372 wrote to memory of 3524	4372	msedge.exe	95
PID 4372 wrote to memory of 2008	4372	msedge.exe	94
PID 4372 wrote to memory of 2008	4372	msedge.exe	94
PID 4372 wrote to memory of 3524	4372	msedge.exe	95
PID 4372 wrote to memory of 3524	4372	msedge.exe	95
PID 4372 wrote to memory of 2272	4372	msedge.exe	99
PID 4372 wrote to memory of 4252	4372	msedge.exe	100
PID 4372 wrote to memory of 2272	4372	msedge.exe	99
PID 4372 wrote to memory of 4252	4372	msedge.exe	100
PID 4372 wrote to memory of 884	4372	msedge.exe	102
PID 4372 wrote to memory of 4160	4372	msedge.exe	103
PID 4372 wrote to memory of 4160	4372	msedge.exe	103
PID 4372 wrote to memory of 4160	4372	msedge.exe	103
PID 4372 wrote to memory of 1316	4372	msedge.exe	104
PID 4372 wrote to memory of 1316	4372	msedge.exe	104
PID 4372 wrote to memory of 1316	4372	msedge.exe	104
PID 4372 wrote to memory of 3768	4372	msedge.exe	105
PID 4372 wrote to memory of 3768	4372	msedge.exe	105
PID 4372 wrote to memory of 3768	4372	msedge.exe	105
PID 4372 wrote to memory of 2220	4372	msedge.exe	106
PID 4372 wrote to memory of 2220	4372	msedge.exe	106
PID 4372 wrote to memory of 2220	4372	msedge.exe	106
PID 4372 wrote to memory of 2292	4372	msedge.exe	107
PID 4372 wrote to memory of 2292	4372	msedge.exe	107
PID 4372 wrote to memory of 2888	4372	msedge.exe	108
PID 4372 wrote to memory of 2888	4372	msedge.exe	108
PID 4372 wrote to memory of 2888	4372	msedge.exe	108
PID 4372 wrote to memory of 4996	4372	msedge.exe	109
PID 4372 wrote to memory of 4996	4372	msedge.exe	109
PID 4372 wrote to memory of 4996	4372	msedge.exe	109
PID 4372 wrote to memory of 4632	4372	msedge.exe	110
PID 4372 wrote to memory of 4632	4372	msedge.exe	110
PID 4372 wrote to memory of 4632	4372	msedge.exe	110
PID 4372 wrote to memory of 3240	4372	msedge.exe	111
PID 4372 wrote to memory of 3240	4372	msedge.exe	111
PID 4372 wrote to memory of 3240	4372	msedge.exe	111
PID 4372 wrote to memory of 3288	4372	msedge.exe	112
PID 4372 wrote to memory of 3288	4372	msedge.exe	112
PID 4372 wrote to memory of 3288	4372	msedge.exe	112
PID 4372 wrote to memory of 5284	4372	msedge.exe	121
PID 4372 wrote to memory of 5292	4372	msedge.exe	122
PID 4372 wrote to memory of 5300	4372	msedge.exe	123
PID 4372 wrote to memory of 6024	4372	msedge.exe	125
PID 4372 wrote to memory of 6024	4372	msedge.exe	125
PID 4372 wrote to memory of 1540	4372	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://account.sigmaerock.net.in/access/
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffaf729c188,0x7ffaf729c194,0x7ffaf729c1a0
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,5479092060573262697,12120314072155276569,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:3
  2⤵
  - A potential corporate email address has been identified in the URL
  - System Time Discovery
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,12393444108475091520,7444782477790552409,262144 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2300,i,6553949547058377996,480393010727615039,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,2514677685866077105,10283276241550493425,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,2508260513327609244,1496135964569421395,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,15822138733950773694,2865730262403850371,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,743232799710004690,5612831562601910346,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,12240908959734743642,12382206270753711808,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,6403043646283317976,11150225960204537041,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,9464627270059138418,12714565778613320537,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,9464627270059138418,12714565778613320537,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6288,i,14396633470781612496,17891661825653099647,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3568,i,13159273637034504918,1138418595043331625,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6356,i,6115897776413956894,9493608362826537492,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6700,i,5252823714327894266,4867840164525936435,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7036,i,2752827068484978554,9088232365983635935,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=7020 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7148,i,10326526914529261520,12567263721618026647,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7580,i,5825062977632074222,1981985382353421441,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7600,i,3537025707123146632,17689907746971837321,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4412,i,14717721896431635407,17183935856174364755,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7740,i,17094747249631270077,738577862081795023,2097152 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8104,i,15849446897842228754,6091595810750628780,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:8
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8004,i,7155189818126469333,993967751191391006,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=8092 /prefetch:8
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7284,i,6565387516400802237,14733318072134095520,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:8
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,15255456316764012730,17615969523294166675,524288 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=7960 /prefetch:8
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6284,i,6889767248375081843,1435728817403336142,262144 --field-trial-handle=2316,i,2793649723188690709,3199377114417667300,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1540

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae53e618032c667892ed21a0d220c217b0a8d7911b3dee86b08e6a49f9b5961f
MD5 f9f19468189111f8249d81621e4a102d
SHA1 fa68cce6f26f82bf96fb875ff427a4ef9e9673b2
SHA512 d53cb2328cd19d1ba8512d1ff3633af39c02eed400e5983853154f5b66c3341ed3d1103439b7c80316b2363de07a7530588d76f9e262920e057331d68d3f3bb7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T18DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

66dc0ff8-6207-4cea-aea5-697c7f1949b7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\66dc0ff8-6207-4cea-aea5-697c7f1949b7.tmp
Size 17KB
SHA256 ef36a52ce73358198b3b42af9c6dcaf94e367ac991d2bc6c1dff299b492f4ba3
MD5 7ece9c4d2eee175ce47d867f73b2ce0a
SHA1 75de1f3497224bdecb3d9a0cec127d8b52e115ba
SHA512 382e080ac759b9002bda7376b128a5dc13e0bf8fd62f43adc1d06f4f4f0f72a551f8822615315ae99d764f19e8b8d4b97c89a881b0e73b85d50ad39a0a16018b
SSDEEP 192:sxZ/RsJyM/jK1Ml8M0cBzD/ffs6Zr2Rigb9nddpm/7k+ysHW6+WNPuggGq1bHWcG:sxZ/EsmzD/ffs6ZraZRoHb/s1/MWjlNk
TLSH
T18782F84266209D7B8DDBD214BD21BF52DAF95463C9914E4CAAFCC90C04E6BFD2217C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000097

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
Size 77KB
SHA256 4a5474b8eb5183875feb79c3f2ca10f145311acb585d1df9d28cc692fbeb8c22
MD5 952d54373c7fdba41d9e99c9619adafa
SHA1 996fe4d75f2da8b9c64e6b5000abbfc4ba66e900
SHA512 cb40c731d0e19118527d19d33f0611c7d5d59027a57d6a45b82ec65b42f459e8b084010608873eb84e1acc1cc6ed371475c4c5ac50a30fb0e779926ebbc50c6e
SSDEEP 1536:gKON7OxmpmanKc106awC8RwzopLPNJZcxoG4fgR5nx2+fZX5I7AbRaRf07:TU7/mGKc15x1wzGLPNJZg4fw/rZIxB07
TLSH
T18F730202AE24F136F89B835B9B8F351313B53BA2064C22D2E130B07F6E6445C79679AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 62KB
SHA256 e7cee158f4d8c62f6b069c8e110537bccad609d0f2e9839777a745bd92391e5e
MD5 f2ef094996a1d68512fdfd64a48e13aa
SHA1 c221273871cb46b2e22e1ad54545e3da59a6be76
SHA512 f199d2ddfd505882ace4588beebbb90d594e148c5104bfd9eb01e38eba4c0239ecc59d2cc7d835fe05c74e5a0dbe50675db057c998a7adfcb4dafe7341ae7098
SSDEEP 1536:RRuSFQTMx1VdJzCIZMy09vjKUtF49cyVQi2ic:RwvTsJzCCM/vZwVQi2P
TLSH
T1B253F176A0D1A3025A3BD0026899BEF1E7501AD160F5CBA7D0BA6691F60FC60ECF517F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 72KB
SHA256 ee5144f1d44952edbc9a0eec9f3d0bdd5fd9ce7b6d13421cad8aa8361f7145d5
MD5 1fd6570fdf1ef993333a3ae9f417d9f4
SHA1 8728c27a27bf76c17572445949026fa3493e233f
SHA512 da2a971d5018efe5d0fe8a89f4a94840fc13f877031eda234c0d059c64bf9f2915d191ab201de9ff45cadc64a71ed7745545b7dc4105522e8af85ae63587f602
SSDEEP 1536:Yu4NzBsS+SFCsSftljaAH67DRqwKdNqJHHmPPfTAOoF86cNVdD:YuI16SNSfT1H677KdUOPfkO+86cbdD
TLSH
T14973021A93BAB973B26063014ED1514A0A03F147FDE8DA89C948755A30F9B30DEB57F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000d4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
Size 344KB
SHA256 c1ba7027e790c346842569dc60319a75bb54ad9875b3a114cd3d60febdc1ecb0
MD5 a76556d1143eac7869c5cdd2ba75aee7
SHA1 62ace25f7a400460ef1550bd536b8006aff57655
SHA512 b6763ac3d83198054c3e24685aab797d60c39df22f0eeed2ff4217bbfb891efa1f2ffda857b079443e0ee66fa3e0b2f1cca34867fcdd8a709b88abbd93c33e4f
SSDEEP 6144:+1/dG8Lx2NjYH/1z2cvc5NFLhVke64uBSCGJ0qHQzr+LZ:+voj2hrvcdnlJWF8HQzrQZ
TLSH
T13F74231F614B6C6CECDE01C7216E44D5D32B8F52CB231ACBE649D16B04E749C8ED9A2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 7e48cb492c5a88ffc80d5e2b92f5d944464d3e48dc76f9351cccd54551204765
MD5 0a3e8cd7237939b7ce29394e792b9911
SHA1 adad96e6b8deeebbef14e3e9d342251536475a6d
SHA512 d8100f7a3fe763fbafdcf802404a01a3c83205b76faececd80906d69f3a78375cf2c17dd31796923d3c2daabc167b67f1f6beab4cd22d2ac0962b4e59ba60bce
SSDEEP 96:w9ZYz0CJsxt2uUwJ8gqqQWZMr3wJ9MoerOcK3HDKKdUbgowQC9YBvZ5gXQSThuXz:SCJ62uwtMJFeSug7CvcCoZPTeFALU
TLSH
T1C412D9D8F2C59295FF72C930E3DD2C97B6B510410E4F2FA3A009D5FC66477AA9192634
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596b24.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596b24.TMP
Size 3KB
SHA256 801183ae18361e1e63f1eac7084c9092d64774e2c9475cfc418408cf8ff08123
MD5 a98eb48c8c4f9daa664a36c6dd965449
SHA1 fb2a959fdee85a2b8698184c17e823f69da1f71d
SHA512 7fea8667ee010a2e92d57eddfc5a7fe07a65f56f5d5696e5a1c98ef24a68f8dcef98c1968526178e92b526a17defb7c24c03708a5f173eabaad40faa2e1ce645
TLSH
T16D711BDD3322D452D3200E30F7EF0693B9F151980A8F6D56F118597D690976F467B538
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 13KB
SHA256 9e2e37b4d3fb2adeaf75cf4f08f4e55ba8bdd512fff32c2976b71d6b7dc2af62
MD5 26a9de4274f1969f777e28366cdd2d0f
SHA1 d04fb918a784f0db15c4a3dd99c21b213e8b10dc
SHA512 09c2d2403c4725ace49afa84d1b81ec7e3407957a25e733eddd723506054fd2a808f701684fbcd9b9ef577ce3746eb11c6d47d2ee7fc4873c8823ab3421801a9
SSDEEP 384:DOA4rnQ/iAyEBtcPJzHWznn7AIbmpQ456ctz75HObij/p5/hV0WWY/MBfGvYCfpt:2DgPLXCJ3V
TLSH
T18C52AFF7C3D4866DC81172F05F187E2BCE1D091553683D2A89E5EE4BA3E64B2E241A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 08eb144340f7e818da0dbe3fd384952cf06caa26476c31d6292f74d1e2c299ef
MD5 1357e0189a7c40727c86135ea12b5de0
SHA1 229f095d7253a3e6146d464e9026036ab6c5dede
SHA512 5f6fdda57427792b8fd115c4b8af5fb8b0dc16d0974fa212a43501e30c456d29be9fa99151b223c3b593f9826286c55713c06e12a5f02b5020aa1730ac169c71
SSDEEP 384:DOA4rnQ/iAyEBtcPJzHWznn7AIbmpQp6ctz75HObij/p5/hV0WWY/MBfGvYrOfpY:2DgPLXCJc4
TLSH
T13152AFF7C3D4866DC81162F05F187E2BCE1D091553683D2A89E5EE4BA3E64B2E241A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 fbbaa775af1399bb3688238d93b771c9cfbba4370d3e5ab3753480b749bccc6c
MD5 3a5a9833312da73c0481f01ee4c30ee4
SHA1 f2382bd7c7230cc2bdede23225dec7be2fc31487
SHA512 ec475fc6d5f79b5fcfd32febff390cdc31ac0797b9888fa9f6978245ec268c77eba1be1ac14e1138356dd7e6170a22a179574b6aa9872963dd473e61ee22c8b7
TLSH
T176D0235323403075667D3DD54869EC8FC76620100402EDD510D1685905355DD0B0B144
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe58f5a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe58f5a6.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 ca21d74f8a6787bc2022d21edd387dcb71fdc5dcaacf2a02e5c3212c131381e9
MD5 0d4913acb0da8bc587e340926f51a521
SHA1 09b365ccfb71a173842d2884bf79e62ef6f246ba
SHA512 6518a838ca56ce01a88e012cfa0e0fb207679d37348e41f4a2e034427c8418437b22c278dd996591238c441376e205b5dac801c8c3070467493b3ad4fc7cf5f7
SSDEEP 192:sxZ/RsJyM/jK1Ml8MkD/ffsmZr1Idp3+KHW6+WNPMgG/YwsTfMxIgrJ:sxZ/EMD/ffsmZrG5HbO/WW9
TLSH
T10752E701AA34AD7BCCDBD209FA51BB53D6F5447292950E44AAFCDA0C05E6FED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 06892a60906f22c9e081fa6600d1373086c600eeb8ad1d4287e10322512c1d85
MD5 4775ee0d90af4c6cccdb080c6860c20f
SHA1 5d22fa2408532e3fa2c37dff388cadcc375355ee
SHA512 ae58d2c1ea3a700f91fed0e360747e96b96bd5bd79da692632f5ac4ee52b1be2d53252e6aaed7070500cc532cef7b20cc0dcd0d83dbd89167559dd7cbcbce30c
SSDEEP 384:sxZaDq7mzD/ffs6ZkaZRBHb/s1/LGWlNk:si+7mzD/fFZkaZHboLXS
TLSH
T1269208426A209D7BCDD7D229BD61BF52D6F90423C9814F48AAFCC91C04E6BFD220381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 9ec98dd383a06b9f58df777634ca74b9a2b19ddc52001c00913f64beefdbc13e
MD5 e0004c1641ae7a4195ca7128b15baf4c
SHA1 5c75a0925b425c110e36a2de3f13cf61784cef6c
SHA512 aa43b18e234a83f053d040f7984107514ef55cfced549afb265edc7e44c1a6ad0ec35368b2ac7ed53e864434a096b1a72190b7e6081906bc86817d47958d8983
SSDEEP 192:sxZaRsJyMojK1Ml8M0cBzD/ffs6Zk2Rigb9nddpUK/7ks/ysHW6+WNPuggGq1bHz:sxZaDsmzD/ffs6ZkaZRbHb/s1/SGWlNk
TLSH
T13692F8426A209D7B8DDBD215BD21BF52D6F91423C9814E4CAAFCC91C04E6BED260381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 46b9122c91d5d6bfbb8a74979db2e05343a88ff498688b0532f006388f6255c7
MD5 a8bb053400e766e3292c90d995640561
SHA1 0d1878460e2070add8bcf2e79c786d0d2daf382a
SHA512 c39c2a43f16f641ba2366473cb015c0ab0ce355c0f33c372e22c8af10055b73320c55304a71ca71706b580065b28cbb86602f744f85b29cbad21f80b3339cc3c
SSDEEP 768:Xc4jeXmWvmKxE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d8rohNFaD:Xc4jeXmWvmKxEu1jacPLZQdne
TLSH
T1D8E2093B284CCB7E4F844E5CED26AE966ED801CB6A584D4447FA894C03C77EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 3KB
SHA256 52e771dd9511c81026974446f62e55fc649d41bf625839d5ab76f6e64dbedfe9
MD5 2b627fe8bb4a0db5ebcef7a027881ca8
SHA1 2dbdea9d2b0eaadd1cecccb8ae78938398129137
SHA512 e61b3b7c52bcfcb50fd13149b1dbb39632f733d2f54d35e44c385da7cc43408234633d64a50835d9b3ece2a9408704db7126a33c0425b6a09282c60b0b23a85f
TLSH
T14A51D74E0D530F6ADDAC167208BA1446377879CD139C291BE5FD9234FC83328AD9DA6D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index
Size 1KB
SHA256 7128480274fa08dbec56cb2f655ea0bca39c79cdf2c3d209c07dd2fdde042995
MD5 2068783529e3d14203e1b5f9e7ef323b
SHA1 b469cfebe4c1810cb99b8f1c35c68f7014b70643
SHA512 a5abf09b623deb4d5bbd9c2b627399d402898622602e1adcc0315892905442bd4633666b3ebae47aab9cdf64c9a4c020d39405daf1f4bc8c453293095a8a73f8
TLSH
T1B531844E8D84CA5FEC5445B219B3B8BC32B489CC4B21E253982C2275BD1236A169F1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a524.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\06cdf1d3-b695-4c71-9713-e0c03943cb59\index-dir\the-real-index~RFe58a524.TMP
Size 1KB
SHA256 07f528f551f3f9ba60f68a3b456cc305b7cc7ec8c1b013e0d9c425ed96ef6409
MD5 95a59728284ae9dd8dc1f844f87187dd
SHA1 610438ed0d95ede92cc8ef5a937b7c266f2cc331
SHA512 ff058ceec1e4c2d9bea706f51cd8882fce913208794b283138ad94eee46e2f4d46884a35095da62f13b8930b10a4b482fd0a7d26eb83d23c500ebba00494a52e
TLSH
T1BA31674A4E808A1AF8C450770EE3B8B8733598404322B793947C5639BD257BE1F4E0D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 f6f5208c07e5f0c695b316101fd68ee51d7990acf762a75a7560aa7fdeea103f
MD5 c8957edc232e2296fc0443c62a08a730
SHA1 a59f25c90466714625f43bcf7a5ed4d7958240d8
SHA512 f28e3f2a8dd5609ce0809ee97bfeac39aa290639c01d4805b030becb71c4e2a6eec6426e913f5329f39e0f63d2dc803a8640eea8f147c40a97a0f22ba712a0c2
TLSH
T145E0D8FA2DE72E20ACBF47E628B245A44156B469C595AC8E2416A2E751A02682016C61
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 8eec3e39c77076a27b922ddbbb89fc48eead148e3704b3d58b0f3848d7d2baf2
MD5 0401f9fc7e7ff1dca48b3b92150c6e2b
SHA1 bb1682722df1ee9a88b7e877224f9b7f032d6b10
SHA512 457aa633c131f2a8be02394eb6ac3aef53a1b646d3cda2f2e7d86d15dbe9b653f21618675772409588572140103853ba06141dd1488631aaa15a2c3cc1c5fb19
TLSH
T18AB022AC8808B082C03C03B8C0C200E83238CC003F0E2338A0BC8030823AB82C0AF08B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe591449.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe591449.TMP
Size 48B
SHA256 0e57374b19535864e44610170383fb70d3bb0353f12e797a5d373c2b2dbe4fc5
MD5 626303c14691dda478a19110f7a315ea
SHA1 3a8b299753edf6d4cf2f88cc2c76aff0d0429636
SHA512 151a0831f942ead26ee7dedb5c60a0116cbc7928e91dd09917aaeddaa84d7be2a55626fe70aa474e0a5a3a77a8dbe9698dbd1469b270feefc88470bac2532ed9
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f3155b4b791c39171304a40939ad00c5681dc928053872edee8aec1b739b2f00
MD5 7ce0b26f6edd14848323296000fe99ef
SHA1 1f2eacd80fdb64bcf144de0029e3f20105c57a16
SHA512 1919b7294b12a418d08d8470be8cbfdb4669a183caf15fbbd1275ffd695e1bdf38a98659ae6c00b0c10d2af9c19fe9c5dfc9610c4ed421f15b2b4ef02475187b
SSDEEP 24:Kd9f4LiandPrD4bf+4fP8tayd6qm4a2+NIjQmKilhaum1EY2SmsM18w3yXYlfQDz:K0CFI9K+IgXyp6IfKP6ATqIfKb6kH
TLSH
T18E911002747B92413C7E2848A664971A1B4272673519F96B7FA800B71E37F6C4CFE8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5964cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5964cb.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 935e4a37557fcb00ad83b0df440159dad3429d2004a6a8952dfda96370a63787
MD5 3952b28f05451489c4fd675318551bc0
SHA1 e582722eaf763af94aea862fb9d0c29e907d76f5
SHA512 f2c3cdde4bf6fef1143396faac3a83dae35ec7b41c9b7068bd24e1f3beb9e3577f31584c926740940f32eb22e1b33b963d4e8756425a8b8f06567d6fea7d1af9
SSDEEP 384:4sNM+K8PFDJx7vBf+G8WYWXbFF7O6R2FeoSh7UZ:4GzPVzpxJF7TRVQ
TLSH
T1B3624C326878AC6B5EE3B595F44B32135EF850579AC62F84E6ED5F1D00CEA9C130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 83fc7d99449a4cd18a17b0a8190a76f1c85aa0542a840b050746201ab4e485c6
MD5 f2d544f03f5cca2fab7d485f3cd7c896
SHA1 caa3d233e8465a7144af04b11713b638c18e03dc
SHA512 f3e0d6124cfd99dba7b13ee0aba4c7109cd786b3d40bc4398fa59376d61d492e0b570d276a00bdc4282746a4e8814b8cc6602277619dc738a65eb95de69c8cf7
SSDEEP 384:RiFiZcIgsNE8TUNTUlIlH8TVPFDJxPfFf+G8WYWX9FF7O6R2FeoSh7UWoV:4FQgRwgRaPV/lxXF7TRVvq
TLSH
T1BBC219F248E79C3AD9AE9743A77D2D124EFCC053B9855A40B7985B1DCC865BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7a91243a88cb9e87302461223dab065abba7687ae54e1a784ec2b7ca1dcdb18d
MD5 a74975d18d57ed7a77dcee7c4532e7d2
SHA1 ad10236be26d2af623ec948dfd384ef3abc76cb2
SHA512 b7c907fd4dd862482a3ddb23762068d68d6bc4112c695d66490b1254601fdda5a954596891a7bc361ba5b94316feb736be1ff21d9ffb4540a3b95c5c648e8993
SSDEEP 192:EONC6hZ0QmiUymopc/+jV0jzorWYt5wOZ7iU6:EONC6oepu+G8WYc2uU6
TLSH
T1E902EA35A8686C7B8EF2AE45F48B37235FE5112BAD956F84DAEC1B1D00C775C2306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 14KB
SHA256 23ce47beb3a8bd1bd1ad431491b04edcd922e922832c2130cdb5e1202e97e978
MD5 f5bc8a18ea8a9daa8a7b9b1000e59fa8
SHA1 40a59107577e1cb5866b8e280981669ca8672f34
SHA512 6f4032f932b9e014355c3ae36f5275ff9a809ca0bfc429a33836195052840360a669aef74d690c637cf5c3a41b961157f8a6e7935af879937a490ba9fedbbb7e
SSDEEP 384:4sNM+KTVPFDJxPdFf+G8WYWXbFF7O6R2FeoSh7UZ:4GUPV9lxJF7TRVQ
TLSH
T1C4624C326878AC6B5EE3B545F44B32135EF850579AC62F84E6ED5F1D00CEA9C130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 699ea6023bad82e6a449e42399c21dc72e856b05e74d8ae5ea22a3c1390638a3
MD5 b34c47765aad4a89ac3c459f7768cc96
SHA1 d460c85b726a92159ebb70dcd3929c3e58e6321e
SHA512 54432b9e909ffbefdf67dbbdef713e80734819640c9a015a9213db5cde4d8afaf264e37aaeb233cc587b548690c40927aa40fbc9841408ab603a93b18066a5f6
SSDEEP 192:2ONV6hZzQmiUyvozc/+jV0jzorWYWXz5cOqUqzU6:2ONV65Zzu+G8WYWXO9FU6
TLSH
T11212FB36A868AC6B5DD2B541F48B32134EE55117EEC57F84D6EC1B1D00DFA5C134AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 20ce2d9ce12aadc922b75945a011dd5de54f5120f421aec5b821c2d7e3054a6a
MD5 0e02c90b9f5e43eab2ab2af877744b9f
SHA1 c267cad489d704f97acd5895a667b13a8d4808b4
SHA512 77d8cfcb3499e807be108bffc3180237910d2d9e20705e1ff175a67cbb59e7ef0a731cf4a753d5fc3be2961677d79cc04970351793dd0c77cdcbe1d2f2594116
SSDEEP 384:JZcIhsNMH8TVPFDJxPZFf+G8WYWXbFF7O6R2FeoSh7UWoV:Bh/aPV5lxJF7TRVvq
TLSH
T18F828E326C78AC7B59E6F185F84B36134EF890579BC66F80D5EC6B1E00DAE98130B816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 cb48a995c7befbf9868722a37a0b6b8bc8500cfd0ea6cbf444965e13f4a6770b
MD5 0673f2c6cb1e6b51d45a27457968457b
SHA1 7142a7df48b470d9f1c553a5fead4b062087a7c0
SHA512 34be29531e5f936106e7dc9581e37a6284c02cbf7d062e991621391377c9a5c9fb418868c4f0f23ac2a97e38f1829abb7caceaefeeea18ef274f34299d457479
TLSH
T1DCE00960A258007FC02D077140D39B24BBF5D4A403B30795536145BC2C66B943A64A80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9bbe3b40887c171bbbefce6f321d597fe82614910c563869fb9ca6340f99a96e
MD5 4ebaca9df45b014fd5b7bc7ae719de09
SHA1 967ec979378ca45f3daad93c9169d93bf79429bc
SHA512 e9b8225b8f34bc87f92278c868c2debbf1fb883a65cf0bf0d1e01a6d1d674ada538a8dd0f5cbc56ece6df56cdb1b9bd35dae66cf3cd7f2cdda3bbca386ae8dbd
TLSH
T18FE00160A218007FC028077140D39B24BBF1D46503B307955361457C3C277803A34F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0da9e5115985262adb4a16596c25f3735047053469e77e1671fa1df173f32e34
MD5 3d1b4706857702d3f4c3f3d7e5b6866a
SHA1 05a4aa5fdd948633804fe8ef00c0ae44010ef719
SHA512 10c02e9864cb0ee706d40924156cd71110f80c4d6daf2e08c5c9c3359e21f542cf508884df7b9605e99684ed1e95b15d07f0be2c83382c3c9ed242325b588289
TLSH
T102E00964A258007FD02C077144D79B34BBF5D4A403E70796537155BC3CB6B943A64F80
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe58c222.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58c222.TMP
Size 392B
SHA256 74cfdba88b8b30c1836d1bc67da0239f01a31c9096dac76c7a86b80ed4082c0c
MD5 cc76e8a609bf110e8c84336ba35d4450
SHA1 979a0469aafaacaca6216f4bc2d82a313a2deacd
SHA512 a1eda84505b81ece628789061a11aa4dc3e608dc2189181144513861fc8bc4724d2fb7a5751d1f1ff5b204b91fd4db5c2f6d818d8b5195c5583e824caafce1e0
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ed871eb53d2ecea681c9e74e1394c7c49dc9f8541196ddc735371b399ee670a9
MD5 e0219577db20a7225d5826870ba87e26
SHA1 28e80724d4496a570efb8d4c5528fc131bb88a98
SHA512 0b571201a381b39e9cc33720fc47fd38945c8e83801f124942d24c16f0af034289388cf20950a896ae71e2ed0d257b1981aa3b9351caceacd5ad1a9697cf3f08
TLSH
T11641F858A6ED1108B3B76E169BF7A86E887A79772F47D49E10010E4E0A63F00C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download