hxxps://github[.]com/Vedza/NitroSniperGo/releases/download/v4[.]1/NitroSniperGo_build_win64[.]zip

Analysis

max time kernel
61s
max time network
62s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 19:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Vedza/NitroSniperGo/releases/download/v4.1/NitroSniperGo_build_win64.zip

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings	OpenWith.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\NitroSniperGo_build_win64.zip:Zone.Identifier	msedge.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3616	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3452	msedge.exe
3452	msedge.exe
3540	msedge.exe
3540	msedge.exe
2760	identity_helper.exe
2760	identity_helper.exe
3364	msedge.exe
3364	msedge.exe
1404	msedge.exe
1404	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
488	OpenWith.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe
3540	msedge.exe

Suspicious use of SetWindowsHookEx 39 IoCs

pid	Process
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe
488	OpenWith.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3540 wrote to memory of 4956	3540	msedge.exe	80
PID 3540 wrote to memory of 4956	3540	msedge.exe	80
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3660	3540	msedge.exe	81
PID 3540 wrote to memory of 3452	3540	msedge.exe	82
PID 3540 wrote to memory of 3452	3540	msedge.exe	82
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83
PID 3540 wrote to memory of 3796	3540	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Vedza/NitroSniperGo/releases/download/v4.1/NitroSniperGo_build_win64.zip
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff858863cb8,0x7ff858863cc8,0x7ff858863cd8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1844 /prefetch:2
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2712 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4608 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2100 /prefetch:1
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1784 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1704,6222918113894949126,7734489654691951415,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1
  2⤵
  PID:2636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2620

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3308

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5036

C:\Users\Admin\Downloads\NitroSniperGo_build_win64\NitroSniperGo_build_win64\NitroSniperGo.exe
"C:\Users\Admin\Downloads\NitroSniperGo_build_win64\NitroSniperGo_build_win64\NitroSniperGo.exe"
1⤵
PID:4676

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:488

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Downloads\NitroSniperGo_build_win64\NitroSniperGo_build_win64\settings.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3616

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
aad1d98ca9748cc4c31aa3b5abfe0fed

SHA1
32e8d4d9447b13bc00ec3eb15a88c55c29489495

SHA256
2a07cac05ffcf140a9ad32e58ef51b32ecccf1e3ab5ef4e656770df813a8944e

SHA512
150ebf7e37d20f88b21ab7ea0793afe1d40b00611ed36f0cf1ac1371b656d26f11b08a84dbb958891c79776fae04c9c616e45e2e211d292988a5709857a3bf72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
cb557349d7af9d6754aed39b4ace5bee

SHA1
04de2ac30defbb36508a41872ddb475effe2d793

SHA256
cfc24ed7d1c2e2c6585f53db7b39aa2447bf9212487b0a3c8c2a7d8e7e5572ee

SHA512
f0cf51f42d975d720d613d09f201435bf98c6283ae5bc033207f4ada93b15e49743a235a1cfb1b761bde268e2f7f8561aa57619b99bff67a36820bc1a4d0ec4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
98c30c138d97cd219bc74162148c3904

SHA1
48e74edf9e698646ef2981c629874eb38982a66b

SHA256
de68dca58b7e9351af50dd23547c4cb1dae7702587610f5bdfcd7982362f0e06

SHA512
584622935a16191cf971e3a348237c3ede6cb9675f04125ea77342199dc59f977420cb705defb311c9d4bdbfaf11390942f25f82677adb3c3a5ce78d3a3e7d0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
da08f8d5e9e1aefe7c74f58d0005a4ad

SHA1
84fd8a13af823484c5ac4e8e0b0a9eefae286ddc

SHA256
026ae47b44f625cd66af0499d2c3d9bf726995b87b81973a76424828912361be

SHA512
41414258ec22277923f08ad999dc948f26746da66f22084b04c572c91e8c8d5ae26fc598fd0ba7351458a1a2b153873df513c8eb53890a0dc4ee701f534b666b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
902fb3d8acf61c2b774697190cbbfc86

SHA1
dae6311c0bc95494b382ba9942608a03815dad99

SHA256
cc805b04a5e9fb11898f220163d081f66741b7dc73002b5a925e8996ed765584

SHA512
c929b8e1362721347c2733c93e9df13d2dc2a05ccf1a05019161db1242f995b5d1125df82d4966247fbf6fff3a8213232b70b2bc62339a2b5eb10fdceb782bd2

Download Submit
C:\Users\Admin\Downloads\NitroSniperGo_build_win64.zip

Filesize
5.2MB

MD5
319b73a030a8eba294b60ae61cd1a261

SHA1
16f44bc985e659b1ba6adc3fb723bcbdf6f8ec9d

SHA256
5abfef35e7a0dd58ed805a13af88ce3efc86ce662d6d2484b2aae5a4ff8d4c22

SHA512
07f81fb25bab2933eefc992f0276195e4184e0340f7e40cae130873e3c67b54db1579f6d0929bae53a5fe58b0bd2b7b2c346c9c1cd9848b0d08ba8f3554fdb2f

Download Submit
C:\Users\Admin\Downloads\NitroSniperGo_build_win64.zip:Zone.Identifier

Filesize
26B

MD5
fbccf14d504b7b2dbcb5a5bda75bd93b

SHA1
d59fc84cdd5217c6cf74785703655f78da6b582b

SHA256
eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

SHA512
aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

Download Submit