fa11fff7fb4b8bb83e75b3f5ac9e5d86fe65866f8889f8a14d694f559dc80430

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a3507112efafedfaf36511e4518633e7_JaffaCakes118.html
Size 27KB
Sample240613-blhapsydpf
SHA256 fa11fff7fb4b8bb83e75b3f5ac9e5d86fe65866f8889f8a14d694f559dc80430
MD5 a3507112efafedfaf36511e4518633e7
SHA1 cf8c4dad8a73d1392cbc3020f01a227421533da3
SHA512 16d4eacf49f94da94b8373b64b17badc4dbd9bb1d0bc75faf25835c15d94bad58393204a80855da5b6ea13bacd24b4b42417aa6d368d95148745e6b9f8be502d
SSDEEP 768:+YILQcHknclDw5FFHxVprnS1TX/1JPpt9zDR1/t4mz8X:s3UcUTjmz8X
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
2484	msedge.exe
2484	msedge.exe
2856	identity_helper.exe
2856	identity_helper.exe
5072	msedge.exe
5072	msedge.exe
5072	msedge.exe
5072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe
2484	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2484 wrote to memory of 436	2484	msedge.exe	82
PID 2484 wrote to memory of 436	2484	msedge.exe	82
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 2584	2484	msedge.exe	83
PID 2484 wrote to memory of 3508	2484	msedge.exe	84
PID 2484 wrote to memory of 3508	2484	msedge.exe	84
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85
PID 2484 wrote to memory of 3148	2484	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a3507112efafedfaf36511e4518633e7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdf84646f8,0x7ffdf8464708,0x7ffdf8464718
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,6097900994884897251,3822631007769971362,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5796 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 3e0873e2fb6f6a6b2e12179c3b87429f01861e7ef32a090eb454dc236ec6c133
MD5 1af2acb917105364265d16f617228a38
SHA1 f3b46354951a4b3ce320677b30ea7e2aeb522ac4
SHA512 7556fe2d8515e65e53f661b122f42d3b643e62e0d84962a34869276ed3dcc1c254d00f814593cb09dff12506b1996a36cfd03addbb92669e0da7cff75fcba49c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 571B
SHA256 8a6623304ee86df4feaf434f5be27101d6ee7da77ccb26e98a2c758c4de653cf
MD5 b9057785d5a49f1d88794175bd8818f0
SHA1 59382f38984e32faabae8c7f2f35cb94b9429b5c
SHA512 0e5eddb7f535eea5ad6427c0a470643238f58a1392cf0a259beffccf161349a45f677e48977f77e47eb86bcd59ebf092b633fcda9d53434854740ab6976fb2d0
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 25b6531a253eca6a412e87ee8aab7cf4308ca0a182028c9110eedec4c83cd8a6
MD5 c58512961d24978c9d1da0c511c10c1f
SHA1 275b292300c1eb0743883f164b2e6858a1548109
SHA512 63ff5aa632f057be721b03e4f56ece4e017ec23ebd2e43dfd071ce1e3b200742f7eb944d14ca2a21840e46b06577317e3c6cc84a21540068f232f3ad9ecd9d55
SSDEEP 96:n5kfoxm/DQYmqJ1bamwpvWMoiVmdeH1DVDUWQyV+VDCziEwb:n5khIe1amGWMXDDro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3b9d167ece28a52f24fc725f7092ff61977eaadd3bc90095559cbfa93beed554
MD5 78d5a689143cf618c5ed3b33839310cc
SHA1 3a8b481887b773c38c1a44a984bd9d33199ecc8a
SHA512 d6718e7b1a401975cff97505f71cbcfd308cfb2172bf1fe750654ad0a39532b5a96b859acf7210b5c78dab77f15fb64631b57f8b88de0efcc6ec6dddd876e3d2
SSDEEP 96:n5kfoxm/DnmqJ1bymwpvWMoiVmdeEOXU21DVDUWQyV+VD7AiEwb:n5kh6e1ymGWM9XU2DDrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b95c175848e6780110fb154046822d1a276ac6aed505109efcfc38108934fc30
MD5 5ae4bb71473d8e310faa77168af4448a
SHA1 78bc6d0aef5d244cb21c0288a315c82609813ced
SHA512 b1285d90639c7e71e55f49ae3771c1906fa55b2e1c0d54d756385f0056a04df6ad5b9dbef077d1e7a64f5d3db43250dff6c7372830733275da750245610f1dd4
SSDEEP 96:n5kfoxm/DnmqJ1bamwpvWMoiVmdeUU21DVDUWQyV+VDCAiEwb:n5kh6e1amGWMkU2DDrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 04ed26325e416b3b2e46cb7e2b0776b3a44b316f07dd003f812e8e5f3507205c
MD5 d0ed847f5e1199c776d0aa4e0c874e90
SHA1 7ff568cfcafe647d260016267089fa975e32c9f2
SHA512 0a9f98985b9a5450f31fd90d3b2200d11f4176322ac1c2f98556c65cca41da9c5be527418f6f714a30fbac9fd12baa3a5c0453fecb9d5a0c654581d7dd821c3b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuphLZTe2RUESRsK3z2OMDCRh:A9iIxuERzA83h09RZxYhLloGKaOMWRHB
MD5 SHA1 SHA512 SSDEEP

Submit Download