95c4bdde3e36d9444114341fc75e91bf9ed29360b1170a4be6e77b1c714d6993

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 00:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a3253b541f52ca774c1f20160a622c0c_JaffaCakes118.html
Size 23KB
Sample240613-asnkmaxblc
SHA256 95c4bdde3e36d9444114341fc75e91bf9ed29360b1170a4be6e77b1c714d6993
MD5 a3253b541f52ca774c1f20160a622c0c
SHA1 1225195c86c0dcff4adbd309693219a314d4a8e3
SHA512 ec94049dc96447d2deffef104b07fb0796189ee8cbda037f239758fab4ef59304fd1ffbb25b883f27285afb00a92662c96f408de9143a369f21fac5552bb29d4
SSDEEP 384:EQcH3gv+ipoIfvnQrIKXWRWmJ75k4kak1jIfp5uYLn8X/Z6txwwm:CCyIfv91Z5kBoNLn8X/ZYxwwm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
5100	msedge.exe
5100	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe
5028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 4852	5100	msedge.exe	81
PID 5100 wrote to memory of 4852	5100	msedge.exe	81
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 1336	5100	msedge.exe	82
PID 5100 wrote to memory of 3456	5100	msedge.exe	83
PID 5100 wrote to memory of 3456	5100	msedge.exe	83
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84
PID 5100 wrote to memory of 3120	5100	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a3253b541f52ca774c1f20160a622c0c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd08de46f8,0x7ffd08de4708,0x7ffd08de4718
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6080 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1828 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,1682302615128877414,6050115960505021312,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3060

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17
MD5 81e892ca5c5683efdf9135fe0f2adb15
SHA1 39159b30226d98a465ece1da28dc87088b20ecad
SHA512 c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4
MD5 56067634f68231081c4bd5bdbfcc202f
SHA1 5582776da6ffc75bb0973840fc3d15598bc09eb1
SHA512 c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 879bcff2fa5bbb10a20fc7689835f0cc0ee8633dd15ac76c7c8032282b215a09
MD5 51961445c2d0a0f39dde38b1c4d82240
SHA1 97c402aeb99e64b57adcbb20d35d06ab5ee2c8a7
SHA512 cbd82cd377e98b262f2d1935e52a062295478e79f0b3362ada407033011dc7a86fd2ca31bc08fe6f89e11760b9b27f51d86fe9b2e8200cbcffb363c2d0d52a77
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 fe4e345ecc4caa0f00d6a79dd7c84cd70ee8e39187a0b6291b739796ee54c30b
MD5 287c6593640d957b09c1f9a121cd79e3
SHA1 c56d009c97de1661af0464af77c19137eb1b30e3
SHA512 59a848efb5a2a23c4cab710e5f55aaccb82717113e05e994a5597f79cdd24968c8e051427f26c05b287fba07e9c201a9be2ec7befa48e0b0f4314e23c89f4e85
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 40eb0284e58984246fdaa0cb066cbbf8c79714896fcde57bfec0c456bf952c60
MD5 74e8f06350425685946360691c7fb81b
SHA1 2faf9453e21799f95a4327ca911fee4e20cc30e9
SHA512 b21ca82dbf3d8d3a6df8225102e9700d357448fe89d700bae298546fc65f64ff691b45e11a4b82aef4033959cb753374fb4973df3dfe91391071bdabcb2ea544
SSDEEP 96:nqkVoxm/DQYmqG1Ek2wwpvWMoiVmdeHIqQpglUWQyV+VDCziEwb:nqkfIF8wGWMXdYglro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 dcfa725495b610d3b41592bb19fba72c975775bfe1954e49b5935f530b1b18e7
MD5 cb9f60be98fecb2a9a2c0f7b4e7f24e9
SHA1 8e7fe783963dbb9c959cebdd7bb23152da2a4beb
SHA512 e5d5770dcb5ed55446288bf257eee5f3f24c8627ce37703688e585d0e5073052df4c24bc2aa0723ff884930977e05671e5b6ce310a029b0988a1d33a71c57bd2
SSDEEP 96:nqkVoxm/DnmqG1Ek2gwpvWMoiVmde7wsuT48GI4qIqQpglUWQyV+VDCAiEwb:nqkf6F8gGWMETT4O4qdYglrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 48abf51d6fe667a3336584387b7ca9cbfda0fc4ec35a92c2e20a2c3c039c218b
MD5 9d1209d5bbb3cc98a35c018cc4a4a56e
SHA1 ee6c3af0e138fa8e50a1d2e0277835e65eb69ca1
SHA512 81c5db096ad365b7a92f12b1be78ef4218b08971ea6fed1be991df7515aac23f91c48eef8ad55d9f89a5e8e4106f6974ade6240bb5e61aa93f600aaed86bc18d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupI45p0M4e2RUVEdvT3z2OMh:A9iIxuERzA83h09RZxYI4sM2g0TaOMWU
MD5 SHA1 SHA512 SSDEEP

Submit Download