79dcedd786ebdaac030cfc0583a4fc984339ca0b2f621aba37911125d5eefb4f

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 09:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
914f1af02627f1dcdfca1cda739f4fc0_JaffaCakes118.html
Size 125KB
Sample240603-lmw6csbf34
SHA256 79dcedd786ebdaac030cfc0583a4fc984339ca0b2f621aba37911125d5eefb4f
MD5 914f1af02627f1dcdfca1cda739f4fc0
SHA1 993963caaa64349533c7ee524415e688800f49e2
SHA512 65080d570772e52b494c9729503316ac4fa66648e90539b2a0d2e1bad1d71e5d4f5d68de979e8d08e383895f09f97f3799f6d8fae2b55b6870ff61abf3a13122
SSDEEP 1536:STmWqlfzEBw3gria6Wxx1fIsmOYr1oJnWQIfj:STmWAzEBeW1Ixy4L
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe
1548	msedge.exe
1548	msedge.exe
4304	identity_helper.exe
4304	identity_helper.exe
2072	msedge.exe
2072	msedge.exe
2072	msedge.exe
2072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 468	1548	msedge.exe	84
PID 1548 wrote to memory of 468	1548	msedge.exe	84
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3408	1548	msedge.exe	85
PID 1548 wrote to memory of 3620	1548	msedge.exe	86
PID 1548 wrote to memory of 3620	1548	msedge.exe	86
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87
PID 1548 wrote to memory of 3252	1548	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\914f1af02627f1dcdfca1cda739f4fc0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa592846f8,0x7ffa59284708,0x7ffa59284718
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,7394954090308703919,9145141153250688314,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5472 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3380

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30
MD5 2daa93382bba07cbc40af372d30ec576
SHA1 c5e709dc3e2e4df2ff841fbde3e30170e7428a94
SHA512 65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7
MD5 ecdc2754d7d2ae862272153aa9b9ca6e
SHA1 c19bed1c6e1c998b9fa93298639ad7961339147d
SHA512 cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2
MD5 SHA1 SHA512

Submit Download

75ecc09e-386c-422f-b1df-3a3a947ed412.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\75ecc09e-386c-422f-b1df-3a3a947ed412.tmp
Size 5KB
SHA256 74f4a5927f78a0ff6add4200333da85185001fea5c9055ff9abaeb6ba3828ffa
MD5 586392bc0eb4351f30b7cc038f3bfae7
SHA1 a710c51c81d7c9787c8192e549c5f7ea088c1f0e
SHA512 79d9b5b51a97929d600bb4a93fd78381c335f4e4246900d28a10bb9f65e4835022cc17d38db787a5a1bdd914db4e6865eb10857d27b07b1d2cea3ab19f0d9319
SSDEEP 96:nrkoCr1Gn3wpvWMoiVmdeHplwteacltUWQyV+VDCziEwb:nrkDrc3GWMXp3Xltro
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 bb77d5d888572262e874328400cdc9a3269d47e6cafc8a980e283c5d2c3a02f4
MD5 bd06364374005a008c7047fc29603d6b
SHA1 d58cae38383f6c53bddc0d5c5ce3e5f2f78c7635
SHA512 d7c278741dcfa9ca8b3ae66f6fdd68ecd0c6eb9f88591a6ca44526972f7b9c79c560d3c4113c51e86b166a1d1f54f531196e5f2f3f2d979c030327ffe933312f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 324B
SHA256 d0718af13cae3e6a7b66a86da4da75938d0d6b84bf5f9039f812d588ab9a02d4
MD5 ff17505b02d988cd94ac6b26bf718018
SHA1 69f3ba890950867b858fb4c1bface08058ddc38d
SHA512 c6570711fc94751163c9a7b8f9932d51b7e472e86707ad8a651f76814408b01e00a0f4710d680f9b168c510bfb527dc3106a254e0747f3254afadbfc73737984
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 39847a146a5b12af3bdb7646d39505a82126ff78835975cb1d9ee92e307ea687
MD5 37c705bb3665cf427271fd9ab0d641a8
SHA1 726d2caf9af68388369419220fb7341456b63334
SHA512 448238395c4675d10103493c1e2edae3165efb68dac1ab80d64b6c1c0b192a7c04735e25eaa0b31c7876576859016acc83167f886bceeab0a07fcefbc291f692
SSDEEP 96:nrkDCr1Gi3wpvWMoiVmdeHplwteacltUWQyV+VDCAiEwb:nrkGrcKGWMXp3XltrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 971cd4837da32f5d9eee01e69447ca1c52febf51714f0a2561c53f348ccc3edc
MD5 aade553ab36b030267dde04074dc6654
SHA1 9ac2ca373a3ac6a2a639a883dadccd0790215dd4
SHA512 d748418e047826424d0819550e8733a337c82fd1c928f3d667cdd647efdfa0dacad326b7e4bb28df6f02f484018b1d835821b4ffd44b448ba8d7740faec7075c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupVQY3e2RU+/2ZDl3z2OMDC4:A9iIxuERzA83h09RZxYL/lGDlaOMWRHi
MD5 SHA1 SHA512 SSDEEP

Submit Download