e568a42a710ae8b270bc0d0b18727bafe69f9c30f8a1167c306d3f930be9366a

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 03:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a7ed3af8f0a1badb9c774c4b047fc5fe_JaffaCakes118.html
Size 436KB
Sample240614-eha9rsyarj
SHA256 e568a42a710ae8b270bc0d0b18727bafe69f9c30f8a1167c306d3f930be9366a
MD5 a7ed3af8f0a1badb9c774c4b047fc5fe
SHA1 5157d3590bc6f0f564b7eeac6056ec5d729f0f38
SHA512 2a941bc4a73f618acc5217ac353d9cfbc9cb860366efb98df6915145d6a9e33a03e8af311eeaaf18db482e405f806db99353917a7951cc48f917e9ca54b45eb9
SSDEEP 6144:ionX3Y3cA3uF/LC5h3V3w43remxj1yUSOty9+:xR7FY1hdy9+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4112	msedge.exe
4112	msedge.exe
3700	msedge.exe
3700	msedge.exe
2176	identity_helper.exe
2176	identity_helper.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe
3656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe
3700	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3700 wrote to memory of 4420	3700	msedge.exe	82
PID 3700 wrote to memory of 4420	3700	msedge.exe	82
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 1612	3700	msedge.exe	83
PID 3700 wrote to memory of 4112	3700	msedge.exe	84
PID 3700 wrote to memory of 4112	3700	msedge.exe	84
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85
PID 3700 wrote to memory of 3984	3700	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a7ed3af8f0a1badb9c774c4b047fc5fe_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea6ed46f8,0x7ffea6ed4708,0x7ffea6ed4718
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2633723600129098593,4944857058234409861,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3656

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 752ce765723c223a77c3ae78ec490d4c19abb530e7bf6f7e2a96972ba5cce683
MD5 c67bb43d3dee2b24a243d225410c0d77
SHA1 59a83ed322b9f8483ccef912fd15005eb086df6c
SHA512 2831096de87dabe2eb4567b5ce39a4dffbb34b25ba1f13f4580f37560b1880a366d4442c25b9ab2e34bc324936b04fc026e5b0e43308ba09ae08b96fc300210d
SSDEEP 96:nSk0la1fBwpvWMoiVmdeHBrzancUWQyV+VDCziEwb:nSkaalBGWMXsncro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ae7688711422fa80b1f24ca2c8537c78d9c16666cd06e461b25b0ca85c834be2
MD5 01bdc3c830a3d33256d6f464c5f1abf9
SHA1 373ba7963f56c56c0879e9029dbea990949e3521
SHA512 b01db8bfff366041a76d341280241feba7e406ce03afa7e09cc04c0afcebdb7eba049e4258d4a5d8c9cf062292daa764c72a630080342c9d87a88026bdd9c6c7
SSDEEP 96:nSk0la1ffwpvWMoiVmdeN+wsZT1RXS2BrzancUWQyV+VD7AiEwb:nSkaalfGWMd+wsZT3XS2sncrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 857d8f223a3b9caca7c1ce5b07562e89c64f890e4bc66df3176cfb08225feeda
MD5 49d52d2bd483795910d12fe19fa7d9f5
SHA1 da5080e537e42f1ebe9c26f6de38c276a56a204c
SHA512 eaec6e6c27119d6c2bf7a3aaf702a339307ced3aeea3e71121d37266e338f2aceb76d290fce8f9e60f74d5f8a2a9c87ee6c4a93c3e135cbdf8146d713040b764
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupfHte2RUem6Mj2u5HKY:A9iIxuERzA83h09RZxYfHpEyut9
MD5 SHA1 SHA512 SSDEEP

Submit Download