b6d5768a29c07643a24710e39ca205d12918a25084c0097354658a5ee7ddcb6d

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 22:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a2cd040dd358e5280103c1f6003e7203_JaffaCakes118.html
Size 46KB
Sample240612-2vbgmatfnc
SHA256 b6d5768a29c07643a24710e39ca205d12918a25084c0097354658a5ee7ddcb6d
MD5 a2cd040dd358e5280103c1f6003e7203
SHA1 1099c609fc5f857721fee30acdd851d9d722192c
SHA512 97c9a0cd37e35639c065c0594803eef11b2bf9951cf6c563391e6a3486a6e318734e4f9965143c28c521ef1ccfc37207a9839ef5e7e69d0e275c427d50391158
SSDEEP 768:RsdFh2GlQ6gEgO3MC9hy533x6j4zX/XjWNp7xpyM9FcnSpG8fvHkQEzIR:RsdFhqB5x6j4zX/XjWNpd8M9FES88fv1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1160	msedge.exe
1160	msedge.exe
4368	msedge.exe
4368	msedge.exe
1604	identity_helper.exe
1604	identity_helper.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe
5032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4368 wrote to memory of 4876	4368	msedge.exe	80
PID 4368 wrote to memory of 4876	4368	msedge.exe	80
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 2924	4368	msedge.exe	81
PID 4368 wrote to memory of 1160	4368	msedge.exe	82
PID 4368 wrote to memory of 1160	4368	msedge.exe	82
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83
PID 4368 wrote to memory of 3512	4368	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a2cd040dd358e5280103c1f6003e7203_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8670746f8,0x7ff867074708,0x7ff867074718
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2960 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5532 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,7393462519565241469,7251798207364296013,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5092

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d
MD5 477462b6ad8eaaf8d38f5e3a4daf17b0
SHA1 86174e670c44767c08a39cc2a53c09c318326201
SHA512 a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 466B
SHA256 2989cd03787e0a1f678e5fb7322a69aa22cfdf2346692fdd4143c260d8af113e
MD5 66c7e3dd99b3b12306384d7b4273df1a
SHA1 ad931a78c58568462d6872d0ccb77cac1dd12812
SHA512 b8e7322c3f53c87e86f6d095181bf7927d032bfcfced55cc030d1f3b1c3f0c27b560bbc102082a16ee35ded5a6cb9d916b7458052463f1943f7ab4baadfc8938
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 7f7f5f828521a5c70ab18d30f80277103a5a349d0e276d658b1d7a4abe59e77e
MD5 fc1b9c7fb4c7ab46314fefde627226e7
SHA1 9c1ed906636b46091607c35c65dfa78bc1d17283
SHA512 d1cbbecfd3fa287ac8758297889fdf0e1c4fa04d7c94c222b4356deb33b437d2458696f187e739348e883e915acb4c15b8b48388312bdaeb40df87e4c2eaa7a1
SSDEEP 96:nJk/RK1qvwpvWMoiVmdeH2WfjeRUWQyV+VDCziEwb:nJkkovGWMXTeRro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 66f26e7adb0fd84fe3e792597b1c4ada583ae8a214d6b08129ff54fba92d1d0b
MD5 f3ace9cf42cff3f17481d16280350f08
SHA1 234955c7ef9580e2a2cf4669305d12a09b62c3e0
SHA512 e3b7cf72a7bc1c4b926d7531d91af6e1144ceef379319f5f2e288c20c47f6a8df315deedcfe5339025b48bc313a5ecab57bc0ae890e38188a8ce51ebb96c8a8d
SSDEEP 96:nJk/tK1qlwpvWMoiVmdeQ6mcuVwD5scIC22WfjeRUWQyV+VD7AiEwb:nJkQolGWMHm7CNscIC2TeRrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 705B
SHA256 6a15883de111a5b2d26cbbbab8410fd0f4a3e2c6ef0abb7833a5490e2f0304fc
MD5 9befe0297970bf03f57603c78843bc67
SHA1 8404d40abaf878228db214dba2ab69eb4f01b1f1
SHA512 312e6173b592c92dd52b47558f5b1f043b89a610238c36fea4e40180aae7fe2d5bf464cce8985891046274a561f74eb0276e70fd317e823b004ac831315d2566
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57a613.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a613.TMP
Size 703B
SHA256 dce6e19af618bb141e1bd00244088038a89daedd5404bfe6c5e260fec7a4992d
MD5 e58fc447e517b0523a83ea5c4b7b68df
SHA1 36c47d9fd1fe10d244cb3e6846ee0fc775756f33
SHA512 7d4b830427e1615975627f63e91782e39e9b97e366c4f05ed847d93c5018c23ad44891c781970f0097a4f98ff3b0092f19a24edddf8558fc999663526341ca87
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a577ca97da6cfc216f850d6ea5e76344c5a441f10a8d24860bf659afde1e08cc
MD5 02be9d57d4b668a1dc0bb579b4ea144c
SHA1 2373c8301a6351e03054a4e22a525bfdab26ec7a
SHA512 51eb1a8c204309ec726764f720acda2b0862c336d3fab69621cd7d77fb28d3430f7dbc896d5e71bc954e7642c1b5d6e5b2bbf36496db915fa345ce196f3279e3
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupWyHfxe2RUJh/t03z2OMDCd:A9iIxuERzA83h09RZxYTNWt0aOMWRHqU
MD5 SHA1 SHA512 SSDEEP

Submit Download