5030ad45babaa38a67e61b262202c56b7614d1e1d74f2d503ef6267b4fbbfbf0

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 01:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
705eaac33ad625d584715e5fac6e4bd6_JaffaCakes118.html
Size 201KB
Sample240525-bdcegshc23
SHA256 5030ad45babaa38a67e61b262202c56b7614d1e1d74f2d503ef6267b4fbbfbf0
MD5 705eaac33ad625d584715e5fac6e4bd6
SHA1 ac45ba24abafd14fef0642feadcb61b14f1743e9
SHA512 33e373b25e0bbf30923ed583a241a2a4bbbceb9468314b236cd70a396c1874b599eb528e9b01fbb88dd4911f9eb3ea977c5d4ca728d0861728d5810dd9bb6fb1
SSDEEP 1536:kayfQ8og8m05A+sv2d0Gn5KO3nsr+aL1PmYBXZEdGvM:dyRlg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3692	msedge.exe
3692	msedge.exe
2964	msedge.exe
2964	msedge.exe
3264	identity_helper.exe
3264	identity_helper.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe
2964	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2964 wrote to memory of 3228	2964	msedge.exe	85
PID 2964 wrote to memory of 3228	2964	msedge.exe	85
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 2640	2964	msedge.exe	86
PID 2964 wrote to memory of 3692	2964	msedge.exe	87
PID 2964 wrote to memory of 3692	2964	msedge.exe	87
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88
PID 2964 wrote to memory of 2848	2964	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\705eaac33ad625d584715e5fac6e4bd6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaef7f46f8,0x7ffaef7f4708,0x7ffaef7f4718
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,4952861783254206763,12375674506170243888,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5044 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4988

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 255B
SHA256 cf81f066b1ba1e869f5551bbc61c497d91035e2afcb750c3e63d5c7644b0b29c
MD5 84b28e8ffed9fa0b8f6a91b5b31b308d
SHA1 efaf4dff37c34966c481eef0caf7dacee9e2a78c
SHA512 a838f81d13c5ecf02aedcdc60159f4b3f6e22e1f14c566ee3b2765e5645fe0eebabe24124ac018ea64986261c904e5bb50512708babe39bde76d7a5ab9280ea9
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3561011899d758cce234825541ffd501b37f08fb35d7d581baad9515fbe1d529
MD5 630f4a1bc42497e3030905711c5ef725
SHA1 d5e6d236fa10b6de516147b05375e4b193acb9dc
SHA512 bf14a67aba16cd223c6a328db646e5b051bfe1f258fbc12f6f4c545749247304987644de3b1edfcc129a218a6d768d7bb18483a36fe988d76f75ce31ade2eee2
SSDEEP 96:njkjj1h3e8wpvWMoiVmdeHpw8EZAZDUWQyV+VD7ziEwb:njkPf3e8GWMXpwkZDrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 afb9e97b8943270461f25fce0b18ae3b9086d1a876d2308b2e753864a774081b
MD5 4daf9f42483366e1bbdd2ed52d9ed39a
SHA1 8f3cd3e1ee6523242e44afe86697c75b7e63b1ef
SHA512 02c56241bd7b3361c8d690c08a83eb77be8d7b065633733595d2332199d5afcf34ef3c21394ba7b65495e7a4ce81561feb001482fbca7654a6fec69baf77489c
SSDEEP 96:njkaj1hxe8wpvWMoiVmdemkYPVZh2pw8EZAZDUWQyV+VD7AiEwb:njkEfxe8GWMZYPnh2pwkZDrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 00edab2873715cb1e52c8dbb8c3ef4b15e2146fac620a9b66c8035c194d2a36d
MD5 084b5188f20238f58090078da9f76db2
SHA1 c6d66b96859e0201750726173b30748e027d386e
SHA512 2d35c106d11adc6dc0a6c0e53ea03aae50e2d5a1aa5908c6c54441e6e59a388d6aedd97912d59e2d5f34f9bbfeda8c3025b74315c1bbe071a250e85361b2e654
SSDEEP 96:njkaj1h3e8wpvWMoiVmdemkYPVZh2pw8EZAZDUWQyV+VD7AiEwb:njkEf3e8GWMZYPnh2pwkZDrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9f494a604c7ea8df9b54107bb5a5bc371d1d81b6bdeeffe3fa964c2aa178cca3
MD5 fe973deafb23bbd95d80674cd1f874d0
SHA1 a95e2486ec9cf8d5131390bdfaf70a08a0263897
SHA512 061d59868286f67ac73c2c1a770d2701510e0bceab5c12e7b5940d3c033c558a42a351f8857c77049c95fcdcc07c108d0e51776e1198dbfafc30267f686a7b5f
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupsMze2RUPJ+kUl3z2OMDCRN:A9iIxuERzA83h09RZxYvYUlaOMWRHqlI
MD5 SHA1 SHA512 SSDEEP

Submit Download