Analysis
- max time kernel
145s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 13:05
Static task
static1
Behavioral task
behavioral1
Sample
91e2f526d9332133ee6456cbee33708f_JaffaCakes118.html
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
91e2f526d9332133ee6456cbee33708f_JaffaCakes118.html
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 91e2f526d9332133ee6456cbee33708f_JaffaCakes118.html
- Size 19KB
- Sample240603-qbppcsfd3w
- SHA256 d614f9f596cbea0150d7b81b8b2a8e93c4ff9610b2f98d3232ec7ddd468eb40e
- MD5 91e2f526d9332133ee6456cbee33708f
- SHA1 1052175811e53173f7ce5fda0c5a56f8a025b8eb
- SHA512 b6cf9a7a04a3afd2255f88d56a8f49da0866c4788683ac6e3c11ea352a70ea3ec78204190cd7cf04e9c8aca9d5dc8f64bedbfe32932f66769e0e9c781acf17e8
- SSDEEP 384:zikKhgESFVBD8cqQ3RC3M2lwXemLEXucfIk9xhedutzVc9Os0:zitSFgcd3A5XmFOIk9ed8qOs0
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 936 msedge.exe 936 msedge.exe 2328 msedge.exe 2328 msedge.exe 1264 identity_helper.exe 1264 identity_helper.exe 2712 msedge.exe 2712 msedge.exe 2712 msedge.exe 2712 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
pid Process 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe 2328 msedge.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2328 wrote to memory of 620 2328 msedge.exe 83 PID 2328 wrote to memory of 620 2328 msedge.exe 83 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 1344 2328 msedge.exe 84 PID 2328 wrote to memory of 936 2328 msedge.exe 85 PID 2328 wrote to memory of 936 2328 msedge.exe 85 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86 PID 2328 wrote to memory of 2992 2328 msedge.exe 86
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91e2f526d9332133ee6456cbee33708f_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2328 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8a47946f8,0x7ff8a4794708,0x7ff8a47947182⤵PID:620
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:22⤵PID:1344
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:936
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:82⤵PID:2992
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:12⤵PID:1948
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:12⤵PID:3300
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:12⤵PID:4312
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:82⤵PID:2460
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1264
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:12⤵PID:4796
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:12⤵PID:740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:12⤵PID:3888
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4588 /prefetch:12⤵PID:3156
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,8529153720961400189,6675577840753348854,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5688 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2712
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2668
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3644
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
- MD5 a8e767fd33edd97d306efb6905f93252
- SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
- SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
- MD5 439b5e04ca18c7fb02cf406e6eb24167
- SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
- SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 72B
- SHA256 c6468533a938d1bae4f39422027b47046bcc1d1dcfd0fc412fa96327c0b6e0a9
- MD5 352425ca60746fffe3c332b29ce91020
- SHA1 3a57cb014046a15ca21f2201c6525bab160c5ce1
- SHA512 803a0a581bc3c4f35c0c7f8516e3ef5ee63287e2c7b4781dd52266f3499f9727276f89fa3e0c8eaaaec05e5cfdbfc881d4d5d9397094ec5941707210288c7e18
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
- Size 409B
- SHA256 631023bc1be9f10b7c10c44ab35eef0c9daf455bef4fd341ac457ddd10af1a09
- MD5 06ee415028d02b6c253e3432d88fa228
- SHA1 1e28c3402cd083bed457970614d340cd66108e9e
- SHA512 8bb20a695794bf571f523b0c255adb02ee74e277c8cd69bbdf15737e75d0ce442ac2cb6a5aca504b7f7502bf72645559578791a08bddb6757b8bf7e9f84c53bb
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 5KB
- SHA256 e55c38af10e1d41fa2ae657759b249159eb7bae72d33d505a1d61c267f917c95
- MD5 71b22e5943e0caf22bb670384324ad48
- SHA1 397dfdada4a1e12285f914caf84a7e5687146263
- SHA512 f7dc79c375b90b3f0f52d1b3e9981417d5f1707300201223dc12b1872464442c9e0e012ddbd3e21e81d363c8d5a629cbf9c3e6c6a4fad25c45540e66ccd6450c
- SSDEEP 96:ngkfO1k1wpvWMoiVmdeHBrzf1wcUWQyV+VDCziEwb:ngkWW1GWMX91wcro
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 6KB
- SHA256 46c71f5af10150ec2bde0202e5386c7620e2c8e4083e66d2580d2d14c6c72003
- MD5 ec51dc7c1c3508f8e69d6aa644c1a1c9
- SHA1 ae120933f10102e309d2f29994c28c9330f2420b
- SHA512 b6206b652b0b8fce3b98362f6b1033047ac15d357a9d6033f2742f484f4825ad7fd50199d97367e0b952beeda47bd197d6caa7ca4e29191b47fc3304c78669b9
- SSDEEP 96:ngkWO1kFwpvWMoiVmdeo2Brzf1wcUWQyV+VD7AiEwb:ngkxWFGWM4291wcrg
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- Size 16B
- SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
- MD5 206702161f94c5cd39fadd03f4014d98
- SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
- SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 11KB
- SHA256 01d4439c6a6933501ca8644461d8066d1e121241ca83d3bf96f564145465a57e
- MD5 c77b7a52e7db0ba07f671c0ac0641035
- SHA1 50967fc97aa56cebf77befd1d7ffdd35ae1924d2
- SHA512 b02d9921b7a2495a30b343d9276ab5b9c9ebfbd3fe334b860102c7f36e52fdc5f529bea5b5ffd573e979bd6cd913332bccd73cf2eeb7fcba7e699d92f822b8e7
- SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuplHNe2RUc3Mj2V3z2OMDCRJ:A9iIxuERzA83h09RZxYlHJ6yVaOMWRHp
- MD5 SHA1 SHA512 SSDEEP