1b54070208818d933552d0fcf710b067f6edcc59375e905570bc35a31a6cc6f8

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10/06/2024, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9aa12b92709ee7294593fe5eed909c76_JaffaCakes118.html
Size 78KB
Sample240610-petxtaba84
SHA256 1b54070208818d933552d0fcf710b067f6edcc59375e905570bc35a31a6cc6f8
MD5 9aa12b92709ee7294593fe5eed909c76
SHA1 9cb32ede0aafa8d673a5c3204ebbabc5939160bb
SHA512 70d8a218defb59f9b50230a8eeb9581595d8276df844e056b36b66a78f594434d8ffa63c45c129baab05bdd137147ecfb91a757a64cccb548700773101ee5eae
SSDEEP 768:MShQpoOLJ3FpDfgG4nuy8T0MXrfv8h6nkID0lhHveNm0riIy229Gv:MShmocFpDfmnMWsJbyO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2840	msedge.exe
2840	msedge.exe
3608	msedge.exe
3608	msedge.exe
4864	identity_helper.exe
4864	identity_helper.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3608 wrote to memory of 4780	3608	msedge.exe	80
PID 3608 wrote to memory of 4780	3608	msedge.exe	80
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 436	3608	msedge.exe	81
PID 3608 wrote to memory of 2840	3608	msedge.exe	82
PID 3608 wrote to memory of 2840	3608	msedge.exe	82
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83
PID 3608 wrote to memory of 396	3608	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9aa12b92709ee7294593fe5eed909c76_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff95ffe46f8,0x7ff95ffe4708,0x7ff95ffe4718
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3144 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11409684658977261255,5506387648249896801,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5020 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2796

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 3948f6b8269953efa42273e83f390593567aa09135f9d8b7c23ee6d448818eef
MD5 d477831354eb3d737bcea742e707c5e7
SHA1 7b1c6daf793b25c19176c4ae5ca847866c8391ac
SHA512 31181f3748f797c606fb56223f4f1762907661a96075dc754589a2c54b94d74d4e73e7dff46d72a7f0b47935827e02baf8aeb60d128dca615f41716eb2b2e655
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 816B
SHA256 203faf74305fec526974c5a89fc1ad5d7c47ce63c5ee862faf8ed7c40cd46ec6
MD5 5c7ec001d7f2cccde3a7b0d612dfb56a
SHA1 f8766d4ca01bc2010544c823d0bb588f70d77df6
SHA512 5e9a4c9a2b4047d319eb255b3e95cd060666cbd83c73df486491cb70d60bf6db25e47ba68fe56d94f5ef89433d550e01ddd792e83b19158c399342abe6b4aa49
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 816B
SHA256 f7d2756e203e9bc0a865679f62e018bd470cbfcfb2f2f788db6efdb762efa1df
MD5 f04ed1cab93d47bda167bc1ab40cb68d
SHA1 0acc8c5b6d5eb0e56ad2ab00aedcbeb11dfbf840
SHA512 affec12fc5d397af18ecaa58d1b9d7d1e0d4238b661ddf298414f3096acc5f81f566d077f5a63f2ff521a0ed4ab57f61e507f9dc9d6a3069b55b4506840fe65d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 86f380257d0d15b041fda2dbaef82bd7f110a241916f92b78724d48baddf7d2c
MD5 91e998dd1511b948bcd16eb42057d2cf
SHA1 1be6b4b30a1de84ba7e591acb0c14db64d357a66
SHA512 eed2ddc4a3af34531ca4bbc75f4913cbc76fa543dad810cd5f05f7472b7b1a015ef44e759650f53f074d5f3ffac76502dda92ee4a8077f4e318198dbbd7542a7
SSDEEP 96:nOkHIBY10oz9wpvWMoiVmdeHCX52pRQUDqUWQyV+VDCAiEwb:nOkPKoz9GWMXCX52pJDqrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

ed7fc30d-925b-495c-add7-61fb187da428.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ed7fc30d-925b-495c-add7-61fb187da428.tmp
Size 5KB
SHA256 898dfdcd7e94670f89f59ea6ac7fa476b63f7329009bfd56ec1bae7a58aee433
MD5 9617c7f2d8a87456298b6428edd09c46
SHA1 fbe671bad101949ae1e4a34b16804cbf67f21c79
SHA512 1a22bb7bfaf9d6ce2b6ebe5aef5c6ac4accb971a7467b358e7220abd8bc473bf2c6aa38aa10d4c5968d7ba7b1c866908d24c958aac5b4477003e7a9e6bcc1098
SSDEEP 96:nOk8IBY10oD9wpvWMoiVmdeHpRQUDqUWQyV+VDCziEwb:nOkiKoD9GWMXpJDqro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 3b1b48c8c8f3935b58bb415353100545bcbaf5a43f721c1c46151f0703a1bf5d
MD5 b5451786a9291a2533ec4bb8f0241acb
SHA1 0445591dbc75b128f964de3734a2169f5cc3a511
SHA512 f9d75e5dd4ae6e1eb85b4449c1e36326c4590cd19b3feec6268643b7ee7c205613a2c777f05a0e46cde5cfe342aec1b0e44e40e7a4be334fd7caa3bd1e6d8d83
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup9NZe2RUjqTZl3z2OMDCRHO:A9iIxuERzA83h09RZxY9r3ZlaOMWRHqr
MD5 SHA1 SHA512 SSDEEP

Submit Download