4fb6a756fe7ad4eb88f05ce3a465cc0a9a5b00e0edf3da67747ded43827e0752

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 01:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a35827a1e3824b900531967f2d131435_JaffaCakes118.html
Size 88KB
Sample240613-brl6vayfpf
SHA256 4fb6a756fe7ad4eb88f05ce3a465cc0a9a5b00e0edf3da67747ded43827e0752
MD5 a35827a1e3824b900531967f2d131435
SHA1 a5db3aba2404c8246af7e954f9c392d2bc2456b9
SHA512 c9a5269f6652a0efce8144f6c0f1f42903e009f6d56f584324db520cf1c3db2fbd6f2d52b17622749ea5449989d9340a8ee1acd83fc538051d357aa225c73d54
SSDEEP 1536:GN4m8/FXGGGrCkB4PKQUrb2PuzlWqpYlr733QIs6UnrcT+eTidzIjuEr8zxaoO6e:8wFXGGGKhZN6UC48fiKznm58KvQTnrVO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1908	msedge.exe
1908	msedge.exe
2196	msedge.exe
2196	msedge.exe
2640	identity_helper.exe
2640	identity_helper.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe
4852	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe
2196	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 3312	2196	msedge.exe	81
PID 2196 wrote to memory of 3312	2196	msedge.exe	81
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 400	2196	msedge.exe	82
PID 2196 wrote to memory of 1908	2196	msedge.exe	83
PID 2196 wrote to memory of 1908	2196	msedge.exe	83
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84
PID 2196 wrote to memory of 4592	2196	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a35827a1e3824b900531967f2d131435_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff93d6e46f8,0x7ff93d6e4708,0x7ff93d6e4718
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1932,12600740623776765957,2165041789791875757,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4880 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4852

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3744

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3520

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 884B
SHA256 cf13e7823c82e8565cbc82e3a599d43bac25bfbb0994165ff0c1509e180ab727
MD5 392aeb5fee9a6477208ba4d54d687bf9
SHA1 095686f942680f07924f53130f91122c12acc98b
SHA512 dafd3e48d6bf7a735d66a23db388917ae9d0e92815f0f880ef38afbab60c6d1b5f031c49c7ea5e3e62d92113c30c6e59c9159049f865350b2c21c7a6be5c9a8a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 853B
SHA256 d767dd202dde5a9c13b1f36a03a8b8f16a0a61da8177038ef2fc774fb334da3b
MD5 d8f15bcc19f10741e646e0104b4cea42
SHA1 e0f0a6fab86d962fb2c6dbceab525bd907983185
SHA512 3e652396e1877390918ce88a9bb2e26cc0d529d28c76d776ddcb18bdd7e089f36d7c6d81aac22d13bcd4eefb0291cbab345bf8ee0a164db67b10f2679ee1a725
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8c1cb241b287e09f107f5a68960894428f94d5212fc37180281957cbbf611f1a
MD5 015e8edc89f37f68c4e3b88ef3e7bf59
SHA1 c787f83a7a1550f9aa98e29a88afbda77fc7c1a4
SHA512 2361c1a72caac1d6ad58157ac23dea95d809c56a1e51bc03742297febd811b1cfb6bf02cb8d0c05aa284d0c25309c148124d89c6ad3184c59cf1184caf19ba28
SSDEEP 96:n1kVoxm/DQYmqO1uGmwpvWMoiVmdeH1DFDUWQyV+VDCziEwb:n1kfI5MGmGWMX7Dro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 89693f4bf1678c42f2e987e7ea8b77ff5c48a72e0765d55660323549b75c1f8a
MD5 749c4fac80fac9154662809ca02a6901
SHA1 44934209009384f2835ef8883d77afc131e1df5c
SHA512 e96439d6b950753884a313c403fe89d8b2fc7958e542d63867177fcc23139c7c4f83322fd578dde84580266943b4d7933ad17555a7b10b11a1cdde62269a658b
SSDEEP 96:n1kVoxm/DnmqO1uGmwpvWMoiVmdeA421DFDUWQyV+VDCAiEwb:n1kf65MGmGWMw427DrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 56817d2f2ac2b632a2ba908e22cb3e8b2928de7b367e6e6ea6dffe18c18bb605
MD5 e1a7de36080ffdd53c665fda008160d1
SHA1 3d6587f1edb0f788cb80b3a34c9889b2e7703fff
SHA512 0437be69115931c2db004c47079dd5c1b7f73edb73bc1c48c0972fde5cdeee76f543a6048fa5c8378234a027f7d95acee849f6dad9ff97fac15da1cb0437bfd1
SSDEEP 96:n1kVoxm/DnmqO1ucmwpvWMoiVmdeA48q1DFDUWQyV+VD7AiEwb:n1kf65McmGWMw48q7Drg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3f399ef8d1887bc1c4bb6809b73d412c6a8b136f467ad1cd79eb10b91a726dab
MD5 486bbfac871254bb209d52827eb5a19f
SHA1 20fbd39f811fa3dd0f2e409b9fb8db85780d42bc
SHA512 90fba52d00b02bf4a3247cd64a7c458113a96494939ee5279dca6bb0497a245511a17fe022e3688c85e71fae0eb467eb1b6db67e1d2424fab844dd9aec7e7aac
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuphvWqe2RUXSRsET3z2OMDCk:A9iIxuERzA83h09RZxYhvtFGGaOMWRH6
MD5 SHA1 SHA512 SSDEEP

Submit Download