b9cce5717d4685fe398f466d0a7e28ca5a3e8cd9e5ecdbdc042ac38181c260cc

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 15:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92342b0acf48aa202025466ddd92f5fe_JaffaCakes118.html
Size 22KB
Sample240603-sfa3wabe66
SHA256 b9cce5717d4685fe398f466d0a7e28ca5a3e8cd9e5ecdbdc042ac38181c260cc
MD5 92342b0acf48aa202025466ddd92f5fe
SHA1 e7707953d35625a06c660266e154494824b44ce9
SHA512 11a37ed6db4d2fcd11df7320877a2d839c449703f1ea1849898dc6a26d3efc513c4d22cbf7041811f6ca99241853953cc793362e9b92485c3b469541c8c00485
SSDEEP 384:xhqJYDkHuaRGtjBEN5jkmJ6EediHAq2gHUmsuyVv2za2/wOHwKLmEwaZRipZ:oYYqg5f8FdiH8g0buyN2zjZK3
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2696	msedge.exe
2696	msedge.exe
2208	msedge.exe
2208	msedge.exe
5056	identity_helper.exe
5056	identity_helper.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe
2948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 2240	2208	msedge.exe	85
PID 2208 wrote to memory of 2240	2208	msedge.exe	85
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 4160	2208	msedge.exe	86
PID 2208 wrote to memory of 2696	2208	msedge.exe	87
PID 2208 wrote to memory of 2696	2208	msedge.exe	87
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88
PID 2208 wrote to memory of 2824	2208	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\92342b0acf48aa202025466ddd92f5fe_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb324046f8,0x7ffb32404708,0x7ffb32404718
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2828 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,13895125491921796503,915504986587726698,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2952 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2948

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc
MD5 4f7152bc5a1a715ef481e37d1c791959
SHA1 c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7
SHA512 2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6
MD5 ea98e583ad99df195d29aa066204ab56
SHA1 f89398664af0179641aa0138b337097b617cb2db
SHA512 e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 177B
SHA256 104a87dfa50f12242c6c3b9c0e54feea924ea0d7c6c4bc47c875b3602cf2aaf5
MD5 cdabd55660f9515bbe41db709ce4ad12
SHA1 8fe68ccf2767fc84db22f4f08ac4a0e5921df102
SHA512 2fcad365f0ce84319b9d8853dd01a529e32203376394444f18e2ebe5e7f6a403f91551e1053c92d543998fa625794ba0f894d6082a3463926f62c8ac2b2be22f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 ae99b28d86125219ba7ce9b7c7fe40ad85333ca3fcd106965e8500778a114441
MD5 16e701b789701a167243d09f8cf6b3c6
SHA1 c9567b83061046af1c0cf1d95e318667ac9fd89d
SHA512 984724b0ceab3dd8378478e1b9f48da08c109c6228dd0c51d46f7c3a2eeb340c92f3044de4d2233287bd7963a6e8768c9e9b1c5d7e1ff2199a02fac633e41fd0
SSDEEP 96:nZkMu1vw33XwpvWMoiVmdeHp1kmCUWQyV+VDCziEwb:nZkrGnXGWMXpbCro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 75680a69591457df1996d1dcec2de3dac69a79e9f14c20916b77b8b368efbf0a
MD5 0afe79430cb0042da84900914ceac37c
SHA1 f60a508b439d5575cbfe8f5271bc965f1bdcdfd8
SHA512 9165e75428590f18040bf9be0ed29864ce307198e735c8a7d74b3ae89887c54161bb47763619b9f73155c2f73955784bcef524840651b78422b020acb2097f90
SSDEEP 96:nZk3u1vw33XwpvWMoiVmdeHp1kmCUWQyV+VDCAiEwb:nZkeGnXGWMXpbCrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 24520ea5e915c2d29c8780f3125ef9c89986c59fe51680d5d9e89c87680feeb0
MD5 d115cd50cc7c6c0ca946165032cdab22
SHA1 d39e50da6645f279b88fc9325248205b26d2af93
SHA512 0b6af9a40afc270b1316e8e1732cf6e23181268d67ad24266ac3e9417532cacc00cf34206cc9a56b3d5c6f9b8ddcbc3dcb44020840bb2a819015a23eb382bebf
SSDEEP 96:nZkiu1vwi3XwpvWMoiVmdeHp1kmCUWQyV+VD7AiEwb:nZkNGCXGWMXpbCrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 363acf71b35297cc2efa18bbedc267f2921ed5ff474f4d70c54d24dc25617045
MD5 a8eafd73d43ad5f4b1de809cd0dc7b36
SHA1 f948ebcf3a5f7ff14fdab5af7c0bbea660d6ca1d
SHA512 2af34eeeb3ae46a9c4a990274ebc4f2eae2ef171060b56a7cfb3c5ce6473bd66e78058f1daa731c76ea4842f8e5fc0dd79ad5bdf3851ff7d11ad8b4fa6ef92c0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupuj7Se2RUV/o523z2OMDCRs:A9iIxuERzA83h09RZxYuj48w2aOMWRHM
MD5 SHA1 SHA512 SSDEEP

Submit Download