f38885aabd3bbbff2e4f2e58d08383954350698c89397958d2cc3a304e972f4f

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 13:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91e9165a761205a882bd930238c581ff_JaffaCakes118.html
Size 19KB
Sample240603-qgljwsff2t
SHA256 f38885aabd3bbbff2e4f2e58d08383954350698c89397958d2cc3a304e972f4f
MD5 91e9165a761205a882bd930238c581ff
SHA1 75ac37c7e2f689705cddc8c29e629ece85f60a62
SHA512 90ab48cf52bd28313839dee96f60b762faa6d38e670d4462ffa2dc17d7e7b011bdca956db4f06e69e964607d9204bc60dc3a6f58095e54f2b07a613c95a3f44b
SSDEEP 384:4/yoTR8iovLXfyPSEqw9mep3QeHUPC00d+PP0O9Op55iqZibZiC:0yodxoTvyPSEqw9mepgeHGC00d+P0O9z
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2248	msedge.exe
2248	msedge.exe
1148	msedge.exe
1148	msedge.exe
2652	identity_helper.exe
2652	identity_helper.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe
368	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1148 wrote to memory of 216	1148	msedge.exe	83
PID 1148 wrote to memory of 216	1148	msedge.exe	83
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 4740	1148	msedge.exe	84
PID 1148 wrote to memory of 2248	1148	msedge.exe	85
PID 1148 wrote to memory of 2248	1148	msedge.exe	85
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86
PID 1148 wrote to memory of 4168	1148	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91e9165a761205a882bd930238c581ff_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd4dd946f8,0x7ffd4dd94708,0x7ffd4dd94718
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2440 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2611224071308542518,5255522187471801057,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1292 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1488

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c
MD5 4b4f91fa1b362ba5341ecb2836438dea
SHA1 9561f5aabed742404d455da735259a2c6781fa07
SHA512 fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b
MD5 eaa3db555ab5bc0cb364826204aad3f0
SHA1 a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca
SHA512 e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 3803c20c49a65269596cf8a546070799f7ecabb0135f643a426ac331b8f6d6a5
MD5 a5c1b062daa6e4c5ebb280bb21134902
SHA1 704d08ed26ac14b022a8d7a97d4e83338f5665ce
SHA512 5bb2b46202f5c3dac8b2d39132cb5429707e6616c08e927c1aed052b9cd119a7f72fd2df37d1400df6590c956336266e8c80f92f88cf74c21519465c7f7c838d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 64b2aa40e73d6df6fc184ba90009ba10ce2eb2dcfd17bbe16649d45c96431dd5
MD5 19f41f30b42cd2d270b42c950f6e2b56
SHA1 137f64b6f34913633f103010b83cb6ad0d6850cc
SHA512 c94c279153d7a18ef2c5e757f7f1411da21e25604cf9f4dce6feb1573116f58a2d802ba939fb80177d0091ef921e443f846b611a94a356030a1960b432026c90
SSDEEP 96:n8bkcMD1zJarj0wpvWMoiVmdeaG2mQII+UWQyV+VD7AiEwb:nQk9hJarj0GWMqG2v+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 1f81db1ab2327703456196a9fe60baefdb2ccca9660c9924da490cf739ecab04
MD5 c345a7e8901931d67bf9f0b24ddef3e7
SHA1 c3d28f8a4190359ea80c996ca138a1419537b2fd
SHA512 51e2627fc18f0282ecd9127ad9e0074a60395bebf4d72d79263ee2f4d27392765f9a34081ba0c276361657d178cc3efa4d1f7969d4e7e41b615c67d5fdbe5c8b
SSDEEP 96:n8bkxMD1zJaxj0wpvWMoiVmdeHmQII+UWQyV+VDCziEwb:nQkKhJaxj0GWMXv+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ff6d5372e98389bbc765d40623ab4014fc69488c80be90e9eea29adb0b0f95ad
MD5 2a78897259c4da7b42faefdb82b26b69
SHA1 39199ad70e1933bf429c43fef160325ee5f14ca3
SHA512 93f185731b5179570f058d060893cc5660ae2a66591b675666376510fda7d3cd40b5f08291d19d786ea3adab45838b60d80d77d46cf47c63580633bdd65a2774
SSDEEP 96:n8bkcMD1zJaxj0wpvWMoiVmdeHmQII+UWQyV+VDCAiEwb:nQk9hJaxj0GWMXv+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9640eb9f6a91cdbc6370a0750db9dc8fe1f0ed691d491e6af5bd57b297b3847f
MD5 c6efd2b00228ee9bc714d003f672ec29
SHA1 787ea4eeb66fe79acde9df10dac425715d8c363c
SHA512 887a99570635a58bfa92e39c0bbb3a85013c63a9b7488a3e2469648d511f2777a3af2ec17d0f3e1c1736aa62ee9872483a80f1f355fac8be02d5250cdcc126e0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup3sZe2RUKzIKbFfYOxhZHn9:A9iIxuERzA83h09RZxY3chR5xTHqTMTB
MD5 SHA1 SHA512 SSDEEP

Submit Download