df31b13a6a3dcaa937e1019fb7127ec6c79224d73403a3fffbac96d131690e57

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08/10/2024, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1f3fe06c5af592848720fd2b9a14bd18_JaffaCakes118.html
Size 80KB
Sample241008-dle7fswbrj
SHA256 df31b13a6a3dcaa937e1019fb7127ec6c79224d73403a3fffbac96d131690e57
MD5 1f3fe06c5af592848720fd2b9a14bd18
SHA1 0d3146b7c2b67c5a5a703bb58ee19f5202f1da58
SHA512 6e3494045352dd96ac300bdf55f64db1b27b568a44349b79ad1f43689c3083e7882e158fd556cf0b817dfd180c0f1e801244b111bc9e0d50841972f12cfddf78
SSDEEP 1536:Gd5c9qJTl6nFh8HBV8ZyDRucAb7+/q9WB82YC2BGEercelSIxNybuqdiOmni5Qyd:Gd5c9qJTl6nyV80DRucAb7cq9WB82YC6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2832	msedge.exe
2832	msedge.exe
3124	msedge.exe
3124	msedge.exe
784	identity_helper.exe
784	identity_helper.exe
3128	msedge.exe
3128	msedge.exe
3128	msedge.exe
3128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3124 wrote to memory of 5116	3124	msedge.exe	84
PID 3124 wrote to memory of 5116	3124	msedge.exe	84
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2644	3124	msedge.exe	86
PID 3124 wrote to memory of 2832	3124	msedge.exe	87
PID 3124 wrote to memory of 2832	3124	msedge.exe	87
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88
PID 3124 wrote to memory of 3704	3124	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1f3fe06c5af592848720fd2b9a14bd18_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff81e1e46f8,0x7ff81e1e4708,0x7ff81e1e4718
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2272 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1972,2908447773537627831,6105416347311053580,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5144 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3128

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3128

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb
MD5 56a4f78e21616a6e19da57228569489b
SHA1 21bfabbfc294d5f2aa1da825c5590d760483bc76
SHA512 c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b
MD5 e443ee4336fcf13c698b8ab5f3c173d0
SHA1 9bf70b16f03820cbe3158e1f1396b07b8ac9d75a
SHA512 cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 4f02afccc3d8f9566d959f9e37ea3792af5bef85399df8b2356c129b2cceaa01
MD5 d1d10c56abe9b1f3995255194eb81a85
SHA1 ecebc4ae4ac756dab1257639da1e8876381f531b
SHA512 9d5afb9da1754069655ad0ae0ded002f027f2547f96992d5705564f5fc8d4d342cf5e216b40e85fbb075163ba211e8faf5fe7f5438f3008acc7bd830c959ce1e
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 2e3f4914e4ef29fcf1ec9435ec5c362612cf90963ccebf3da9f276a57a09fcf9
MD5 4336957c664b936b15fb2eb7509698f3
SHA1 72f3c895da4d7a598d2908d6d2cf069873ee8a30
SHA512 d39c7908e613d4ded06882b1f7db8af4cf5dcbfbf2b9d6cfe9178e44a022ce2ab1e5da0dc4ccee17445487cc5577319418602c460b66a0c0402d1c6da16ea0e1
SSDEEP 192:n4kBOTGWMdveqeBe4eSChdhoTR1N1tEB2SArV:n4cOCW6zY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 33b8d051b147c261f0fa7131567b34ac5a21d4cdabdbab52d3f5e884561a76bc
MD5 6b6ca4437970d72f83ee7a265fb1f97f
SHA1 30b329ac6d655dec8b5fdb029b19c442c98a409f
SHA512 414936e0914910fbd713c0d2145620be08043bd64ca72383a04930afbcbaa5bc5bd21f2c8a54d8ac29ba19623999ae4d23bf713731c89aee3e0bae295f433df9
SSDEEP 96:n4kVc1IDwpvWMoiVmdeHPAjAUWQyV+VDCziEwb:n4kKODGWMXSAro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 45343c1efa60d6ddb4ba5fb1c80f20d1952d9b1fda4916d78861631a2b48ec13
MD5 b4133a25d91f69891a8bcde0aa088614
SHA1 532d8f2cad3ed5d741b9db4c8e4c0f4c9a2addc2
SHA512 b31b53eea4f4e02a04b5d70e01abee580e98b7830381640422464ad36d08108378477b8cfc736e161ecd52a3b5e07ded4a5928af3dc08027c06a5b4c520b3e88
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupeiCJe2RUEe8me6+B1Etscu:A9iIxuERzA83h09RZxYerjY+bEucu
MD5 SHA1 SHA512 SSDEEP

Submit Download