4b78252a4e5a33f71898e60c4d88b67ded9b28795fb4f0fdf76d9d473899514e

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91a66af216fbb3b684279fb349ca4cd1_JaffaCakes118.html
Size 69KB
Sample240603-ntdcyadc2s
SHA256 4b78252a4e5a33f71898e60c4d88b67ded9b28795fb4f0fdf76d9d473899514e
MD5 91a66af216fbb3b684279fb349ca4cd1
SHA1 2895f3829f0b1a6b124cdf64691c40b74c4355d6
SHA512 af8f1a8fb3e9de4dd7a55d247be119d1bc47698d263262a9bf5075159ebe21eb6d643c44ee0bf0ae4b373201fa5c2ce17488f9344fe58c290ecb01f4a2b4b8c6
SSDEEP 768:JiQgcMWR3sI2PDDnd0g6yuG3fKxKfK0UoTye1wCZkoTyMdtbBnfBgN8/lboiGhc8:J2OifIMNpTvNen0tbrga90hcJNnspv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2420	msedge.exe
2420	msedge.exe
3696	msedge.exe
3696	msedge.exe
3000	identity_helper.exe
3000	identity_helper.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe
1792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3696 wrote to memory of 3212	3696	msedge.exe	82
PID 3696 wrote to memory of 3212	3696	msedge.exe	82
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2936	3696	msedge.exe	83
PID 3696 wrote to memory of 2420	3696	msedge.exe	84
PID 3696 wrote to memory of 2420	3696	msedge.exe	84
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85
PID 3696 wrote to memory of 3616	3696	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91a66af216fbb3b684279fb349ca4cd1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffec2bb46f8,0x7ffec2bb4708,0x7ffec2bb4718
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,7293946788719144189,7279449714055019448,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3200 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1792

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1652

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 25c077be073816919db952d01d0c4e849b33630d1ad7e04ed5e1878ba8f52299
MD5 d5e6046224d7b6bc0caf7197b0d92ddb
SHA1 e94cd3b627e412eb9bcc64c78edca70c76a6586c
SHA512 d83ecb65560bcf82dc7a721d7afa4a09c037667b6e53c6b1243be78273fbdcd24b1d1f0596abe7ed5dc1536e172fd1c08dfbd07e5076fb4bbd0e0b6c6f6004e3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 410B
SHA256 8650067aafae9430b5bdf59ffbbfb1ecb4d4764fece2897688ef0194f4a52a60
MD5 41dde4b56f84f2546098c9fc9155f2e9
SHA1 c800d4372e439b277ddf3f93dffc3529f5e1c923
SHA512 292d4b6aaf6f87c32d827ffb1968f0b225bd3c5172ce307bbd79b3f330664608bcdbb97cf45dc36d256a6ce429b00fa425e83dc21fc1372267047f40bfd47dfb
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 80ec2c2584c34167da3f72a6b5b35ba07cccf4879a0f10f13c26a69a885b4233
MD5 10869e6e853b75d2f342cfa08c55e334
SHA1 5d9d8af28d164730ad5e70b211e2c84e7823de41
SHA512 cda91bc6b8b41ceb60ca45ba8434e66bfd0dec969598b56186065e72e18c5b3f5ac1cd2227e16175d472d19070b088419bcacc88fa82c8f91ea2b8bea6dbf7fe
SSDEEP 96:n6k5p1PL9wpvWMoiVmdep2pRQsPUWQyV+VD7AiEwb:n6kTVL9GWM52p9Prg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 cbd25b123cc571ae67a7e6f6a8c8b4daabe843268618ebb363cb2082c4706c9f
MD5 9a2df7ca30398dde9ba82767f74154b5
SHA1 f36c00dbd85f57889dd2407b7124bd39ba1d83eb
SHA512 7f8e0809c66ff3501bf0474b4184d016debbc9c564e0e73ee696bd5176b851013dff3227842010418fb0201212e47d8afebe2f76945fbfdb6e4b185e9e0895e6
SSDEEP 96:n6kCp1P79wpvWMoiVmdeHpRQsPUWQyV+VDCziEwb:n6kaV79GWMXp9Pro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 fc70fa815e04eb635982f1088ecf2d8e7038a181970b8e05636f32ce5172c10e
MD5 3474c7f0102063114c7fe3d8d13db915
SHA1 332765d827795d1b6091a6eb685da23718c8fcc9
SHA512 d16bfb787396c060085f03d791b8e4a57b77e2a2e3ab1335f238c08ac586ef14105911161783e7e03d0f39a788d1b8f5885f27603baf3bce6c0f4885e074c9e2
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup310e2RUoqTN3z2OMDCRHqV:A9iIxuERzA83h09RZxY316aNaOMWRHqV
MD5 SHA1 SHA512 SSDEEP

Submit Download