59e03a9dc37dc7d304102b0a973f0c44b0957f5de32f9d0855df16f891534231

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92627af0c0f0b0fea1d0840d188f9d43_JaffaCakes118.html
Size 37KB
Sample240603-tk7hbabh2t
SHA256 59e03a9dc37dc7d304102b0a973f0c44b0957f5de32f9d0855df16f891534231
MD5 92627af0c0f0b0fea1d0840d188f9d43
SHA1 8d388606f1d00462beeefc66061977ac1ab543fb
SHA512 e9a4c7119e556c189c17708831be1b46e9960e2c8cfd9629d671ddf508677aeb35788b93404b03a4fc27a56e2699e9098ee66660b9baf9681ca2c4ef0cf67054
SSDEEP 768:W/bVFRFQW81D4RA+vEOjz6rdG2Gil54RZfPGnf3Gu34aqi6781DdRA4vEOjq6h8q:sRFQW81D4RA+vEOjz6raA7IaBC81DdRv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4244	msedge.exe
4244	msedge.exe
2448	msedge.exe
2448	msedge.exe
4116	identity_helper.exe
4116	identity_helper.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 3696	2448	msedge.exe	81
PID 2448 wrote to memory of 3696	2448	msedge.exe	81
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4512	2448	msedge.exe	82
PID 2448 wrote to memory of 4244	2448	msedge.exe	83
PID 2448 wrote to memory of 4244	2448	msedge.exe	83
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84
PID 2448 wrote to memory of 2540	2448	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\92627af0c0f0b0fea1d0840d188f9d43_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff83e1046f8,0x7ff83e104708,0x7ff83e104718
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2168 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,17939984182822768809,3659866366983424035,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4828 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 724B
SHA256 e63d1b420fede7dc784df2f0b8e890cebdce58d6989d5fa1eb160d2c2b884a36
MD5 8b56b5ef6b1dcec3d2b8e4d1982fee94
SHA1 33c7c79dff43e47185db2741e0a73e4814ea27e2
SHA512 538c5b245859ca16e9ce794aee8c6f1933b6ea73d5f10a8737b188f7a024c6a89eff234f40ba6437aadd21d4f0faf61a9e9e1e8d780091fb0af887777c51c8a2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3e4bd041fe8ac0d1cafebb646e1a2d11f60857a00f5d3afeaf51b99f160ab3e6
MD5 fb3a6578f7a8221f77ae4b100d2ef7da
SHA1 21eeba5461eb7fb318e18aa61a36b9a31c35fe46
SHA512 490d2c491fa788ab11f5c7ba29b48a96d15de713877c01170d19cabacca3bfaee2e5b27be3b4548147e08add094d7598b0addc44acd6e18559b97e3efecef4d5
SSDEEP 96:n2k6f1fu9wpvWMoiVmdewdYqpR0rmUWQyV+VD7AiEwb:n2kEpu9GWMgdYqpqmrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 abdb5e22b1465fc54620732fcf7ad72b0d617e1b49688dcb6396777782509a0d
MD5 a8fb29d6cfb49df4289a27865fdc799f
SHA1 53e4805bedfda68ada700719d0e20ace84ce27c8
SHA512 bfa20c2bf6a2eef3f3f83bfa278d6481608b38152ba8d8f11a67758a1a77009ee7c35752acc1a041cf1f21ff11838032640de43c347d732f96afeac975b9d9c2
SSDEEP 96:n2kmf1fr9wpvWMoiVmdeHpRQrmUWQyV+VDCziEwb:n2kIpr9GWMXpqmro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3e502b28f26ea25d86faf608589adaaf86b5d7c5ec7e6a16747aee36b1c52698
MD5 93a6d02118464def69d53ee247852b44
SHA1 6b0c0231b9759a5e777be43f6f888a9abec2848f
SHA512 d6c674e102aa50fd40f83c4e102c0807deb07522f078a08cf2491aa36a58238624f44c67c2835c052fadbfb47002370a9bfb3fc731c9c40321322b6cabb640f8
SSDEEP 96:n2k9f1fu9wpvWMoiVmdewdYqpRQrmUWQyV+VDCAiEwb:n2kJpu9GWMgdYqpqmrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d14070628761573cfcff0c6b85d9e4b1f4a3c300a4128a61937f90ae6f06d4d7
MD5 f705284e0e825dccceaadb82156d05b2
SHA1 28f578ff565416191eea7fb8d5985c9ab2fe9f17
SHA512 37767aefeb2fcf43938c796e07435a530d4ddf77dc9c9434cc16ee726d70963d3de9d87ded1f603bc85a1a6cb0d1eefec8976898b6557359ad3e3863332e22fe
SSDEEP 96:n2k9f1fr9wpvWMoiVmdedqpRQrmUWQyV+VDCAiEwb:n2kJpr9GWMtqpqmrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 4c4f38951e59463e6cebbec13f3a913185bc70789bf39087a0e949e0a5a3f768
MD5 8a753513eb9c9c9e913113ee242eb8c3
SHA1 3a046d83ad4befeb09e9ac4705d332836a7f18ae
SHA512 1e1447dcd169b40f0723f00e93a8fc4a31b33b16e6b86dc654bafa6d20fd405ad3f7cc686327445419cd064c243b4ff61d7cce4d7cefb3b12b289786c0bc87a7
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupdGe2RU7qTVM3z2OMDCRHqZ:A9iIxuERzA83h09RZxYdIrVMaOMWRHqZ
MD5 SHA1 SHA512 SSDEEP

Submit Download