acbeec9f8c92d03b077d2c5d76789db58f3a25b5f787aadb8c25916d011a1319

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
03/05/2024, 00:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0f4740598acf85677add47cfe1e431b6_JaffaCakes118.html
Size 66KB
Sample240503-a2v13acg36
SHA256 acbeec9f8c92d03b077d2c5d76789db58f3a25b5f787aadb8c25916d011a1319
MD5 0f4740598acf85677add47cfe1e431b6
SHA1 03d528579fd63692bfc7302b2cbbd107b37c7c5e
SHA512 99227cc944b64edcb1f08d240293a7760a57e0c959a88f1bd001afb601e0a66af55cf65da05e1278fbcf50b8ad9e3e29f5bcc20b820f9388b167c163139f000f
SSDEEP 1536:Oe/Y1RVVCcZ298pIMmaPkvy/jFO533ndtV:OeAnVVCcZ2GBrFO5335
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
3924	msedge.exe
3924	msedge.exe
2164	identity_helper.exe
2164	identity_helper.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe
2900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe
3924	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3924 wrote to memory of 1092	3924	msedge.exe	85
PID 3924 wrote to memory of 1092	3924	msedge.exe	85
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 3928	3924	msedge.exe	86
PID 3924 wrote to memory of 1344	3924	msedge.exe	87
PID 3924 wrote to memory of 1344	3924	msedge.exe	87
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88
PID 3924 wrote to memory of 1088	3924	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0f4740598acf85677add47cfe1e431b6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7fffda3f46f8,0x7fffda3f4708,0x7fffda3f4718
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2476 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,6085346813891773063,11611252745085584549,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5220 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:896

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1740

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c550af5ba51f68ac4d18747edc5dea1a655dd212d84bad1e6168ba7a97745561
MD5 2a70f1bd4da893a67660d6432970788d
SHA1 ddf4047e0d468f56ea0c0d8ff078a86a0bb62873
SHA512 26b9a365e77df032fc5c461d85d1ba313eafead38827190608c6537ec12b2dfdbed4e1705bfd1e61899034791ad6fa88ea7490c3a48cdaec4d04cd0577b11343
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 0021f72dbca789f179762b0e17c28fe0b93a12539b08294800e47469905aeb51
MD5 fbe1ce4d182aaffb80de94263be1dd35
SHA1 bc6c9827aa35a136a7d79be9e606ff359e2ac3ea
SHA512 3fb0a3b38e7d4a30f5560594b1d14e6e58419e274255fb68dfe0ca897aa181f9ce8cb2048403f851fd36a17b0e34d272d03927769d41a500b2fe64806354902f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 a95a39e2eba6701a7eb0269823815ffa14e1941847ae702b6bd4dcc99bb33ec5
MD5 ecc1dc47e8874e0baa1f18e25cb8128b
SHA1 2d2947a235370c944556e12fadadbdac8abe596f
SHA512 fafa798b5486d7e50f81919735bb8e1bad0c458804da2216d891aeb6c1d24d6d70d1180d6a0f1412cd78bbb752897d60a8aac68909c2e859f46169cafee2c3c3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 923B
SHA256 8e6e748101257ac93addc86040a54cd31dbe7833bf03b23ab1689b959867ea9c
MD5 e383ad2a8f96c5078f13e505f50c3477
SHA1 399b361ac1abf7582bd2a876343573e2ac7dcc11
SHA512 52bd307b5ccddffac0d50c8f8e506f934472e25020ec331035da32af575c979ecb4c5b4e2dff6f88d969a3cd1a96535c57315f085eac2f0a90166b39a36e9a51
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 c3d0ec7f8b9b651d508969695230c7fdd6c081fa87c8c7676a26475cbd014ebe
MD5 86678a1c25eb4b1f96dc561f0440eab2
SHA1 8b59dd0d181c69c5dc942362608de9638a742370
SHA512 42847ca790d53347a7d2d221d370e88ad53db1a240dedd58276c28b21d45599ed670a4d7434ca525859184242c29b4151fdd522393583aba7c298e79bc05a252
SSDEEP 96:ntkNcM1JuniK1wpvWMoiVmdeHdt7I+UWQyV+VDCziEwb:ntkjjBkGWMXb8+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1af613be95a1570e43c4719812dc7694661efbc7beffdef96c11692635794738
MD5 03f882dfd0fa601459d5a181498b0d4b
SHA1 fc06f6785ed515b40b29e4ba7096799eaab87639
SHA512 a26fcac3a539268044a6007b1c0c4fe08e4d6a0584020b510b60017b049cf233dff25cf4214070d51e2498567a94bdfdaaef73b5294478fe07bc685e28d04f90
SSDEEP 96:ntkIcM1JuniK1wpvWMoiVmdeMrRnAY2dtvI+UWQyV+VDCAiEwb:ntkwjBkGWM8rRnAY2bA+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6096face656edbc27f6031a9a2963ce12b5a27870a2b313d5828fbbca5ad1d15
MD5 f802ccbd4e97487248674dc725739017
SHA1 2471b51f0a93143d00019d77a72685a50fd5b9c2
SHA512 090fa12eb42b62839fc1366962654feab483c7d95701bc463f31909c846de6abe7ded3bdc2acf7862654aec83e821c2d63fc836c079ce006ee1d9c2acf75ec29
SSDEEP 96:ntkIcM1JuniK1wpvWMoiVmdeMrRnAY2dt7I+UWQyV+VDCAiEwb:ntkwjBkGWM8rRnAY2b8+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 fdd761c3870a263955d7782d4ebbf8acd93650a99422b526615324b944140a4d
MD5 1dd45881e4d2b3325743c1bddd01668d
SHA1 9537daee2ebe08bc69ca9a1baa9feb1bf27b4d81
SHA512 06cfda1b29695148020b4d9d88ebde2bfe980102376b2e7a086b095a43d4e3ffcfcf37bb1943bba427a55da23bfdd7b1138b65d7195fd078c9477ebf57a9a0c2
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup+Bc+de2RUwOiz+OblfBhDJ:A9iIxuERzA83h09RZxY65fz/XDafEBCS
MD5 SHA1 SHA512 SSDEEP

Submit Download