Analysis
- max time kernel
70s - max time network
106s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
14/03/2026, 02:28
Behavioral task
behavioral1
Sample
2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe
Resource
win11-20260130-en
windows11-21h2-x64
7 signatures
150 seconds
General
- Target 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe
- Size 178KB
- Sample260314-cx45aaez8s
- SHA256 c1815966b53e81111f51d47ed8bc7e8cbaa8853990a996c0f8283d7cc9f2403f
- MD5 b4beee7c315c66147dcfc38547ebf116
- SHA1 8a83bfc86a891744ac8935f48b81b2845f6b5910
- SHA512 54a02968e7582d83ec83dd985ebbcf52588c85de02459cccedb628c17772b362b04342a51ea1c863d25a5843f2800392573872d6a2130e36b4727451da8dbce4
- SSDEEP 3072:njtpykdQOem4hqikutDYYuoIqjAmGkXNmLxGF/tJr9t/fhKJ2thu9uKkFei3niBa:xpHTrE26Sk9m6tVnEyV
- TLSH T1C0046B11A7A5D076E472043425E5AFF5CB696D300B0188EB6BC41B7BE9325E2E235F3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- PLAY Ransomware, PlayCrypt
Ransomware family first seen in mid 2022.
- Play family
- Renames multiple (4244) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
- Drops desktop.ini file(s) 3 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\$Recycle.Bin\S-1-5-21-747994418-3253881032-1527946131-1000\desktop.ini 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\desktop.ini 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe - Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\Q: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\H: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\L: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\N: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\R: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\S: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\T: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\V: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\P: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\X: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\Y: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\B: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\E: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\J: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\K: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\M: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\W: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\Z: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\A: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\G: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\I: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\O: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened (read-only) \??\U: 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_COL.HXC 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-black\WideTile.scale-100_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxCalendarBadge.scale-150.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\wwwroot\images\dashboard-logo.svg 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7EN.LEX 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EDGE\EDGE.INF 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.41182.0_x64__8wekyb3d8bbwe\Assets\contrast-black\SplashScreen.scale-150_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.6.10571.0_x64__8wekyb3d8bbwe\resources.pri 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Google\Chrome\Application\140.0.7339.81\Locales\uk_MASCULINE.pak 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\invalid32x32.gif 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\DataModel\Cartridges\sql2000.xsl 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\or_IN\LC_MESSAGES\vlc.mo 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.GetHelp_10.2008.32311.0_x64__8wekyb3d8bbwe\Assets\contrast-black\GetHelpAppList.targetsize-30_altform-unplated_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.32731.0_x64__8wekyb3d8bbwe\AppxManifest.xml 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_1.0.22.0_x64__8wekyb3d8bbwe\Assets\AppTiles\MapsAppList.targetsize-30.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_1.0.38.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.targetsize-64_altform-unplated.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\OFFSYMSB.TTF 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\VideoLAN\VLC\New_Skins.url 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingNews_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\NewsAppList.scale-200_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxMailSplashLogo.scale-200.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_x64__8wekyb3d8bbwe\Assets\contrast-black\FeedbackHubAppList.targetsize-80.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointVL_MAK-ul-oob.xrm-ms 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp-ppd.xrm-ms 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.3102.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-256_altform-unplated.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.40831.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\LargeTile.scale-100_contrast-white.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\PhotosMedTile.contrast-white_scale-100.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\3difr.x3d 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\PROOF\MSWDS_FR.LEX 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\SUMIPNTG\SUMIPNTG.ELM 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\PowerAutomateSquare150x150Logo.scale-180.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCamera_2020.503.58.0_x64__8wekyb3d8bbwe\Assets\contrast-white\CameraAppList.targetsize-64.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdCO365R_SubTest-pl.xrm-ms 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.40978.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-64_altform-unplated_contrast-white.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_10.2102.13.0_x64__8wekyb3d8bbwe\Assets\contrast-white\NotepadMedTile.scale-200.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-commonjs\classNamesFunction.js 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_21.21030.25003.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-64_altform-lightunplated_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12827.20400.0_x64__8wekyb3d8bbwe\images\HxMailBadge.scale-100.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\components\DetailsList\index.js 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTrial4-ppd.xrm-ms 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365SmallBusPremR_Subscription3-pl.xrm-ms 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\sk\msipc.dll.mui 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Todos_0.33.33351.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SplashScreen.scale-125_altform-colorful_theme-light.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\theme\node_modules\@uifabric\utilities\lib-amd\IRenderFunction.js 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\c2rpridslicensefiles_auto.xml 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019XC2RVL_MAKC2R-ul-phn.xrm-ms 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_1.0.65.0_x64__8wekyb3d8bbwe\Images\contrast-white\PowerAutomateAppIcon.targetsize-256.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Todos_0.33.33351.0_x64__8wekyb3d8bbwe\Assets\Square44x44Logo.scale-200_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_1.0.36.0_x64__8wekyb3d8bbwe\Assets\AlarmsStoreLogo.scale-200_contrast-white.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\dcfmui.msi.16.en-us.boot.tree.dat 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\ChronologicalResume.dotx 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Templates\1033\TimelessReport.dotx 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_1.0.6.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\WeatherAppList.targetsize-36_contrast-white.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1909.12456.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.winmd 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2104.2.0_x64__8wekyb3d8bbwe\Assets\Timer10Sec.targetsize-64.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN081.XML 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.2103.1172.0_x64__8wekyb3d8bbwe\Assets\contrast-black\FeedbackHubAppList.targetsize-30_altform-lightunplated.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_321.14700.0.9_x64__cw5n1h2txyewy\Dashboard\WebContent\node_modules\@fluentui\react\lib-amd\Button.js 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\comment.svg 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MEDIA\BOMB.WAV 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Paint_10.2104.17.0_x64__8wekyb3d8bbwe\Assets\contrast-black\PaintSmallTile.scale-125.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1909.12456.0_x64__8wekyb3d8bbwe\Assets\PeopleAppList.targetsize-20.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.40831.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-100_contrast-black.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.42251.0_x64__8wekyb3d8bbwe\Assets\AppPackageAppList.targetsize-96.png 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe"C:\Users\Admin\AppData\Local\Temp\2026-03-14_b4beee7c315c66147dcfc38547ebf116_amadey_elex_play.exe"1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:5116
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\$Recycle.Bin\S-1-5-21-747994418-3253881032-1527946131-1000\desktop.ini
- Size 1KB
- SHA256 b5b44fda55cb8789c1ceb132a63eac43cc63632d09f8a3ec529e1fd104d81137
- MD5 df0d883683ab1bceabb05803680f47bc
- SHA1 36d017228811080e4ad3731407e61316ab638c71
- SHA512 63af0b88519bfbd26383c86674a04125247aba628ba0343b6ca1139427c967c97aa50f8c062249b963a40f1573012dd303ff108f7d47f1b07fc706947a145208
- TLSH T1C6210A1953E49230F1C9C35803E453E5DFBD44621A4767422492A7EF101C02C0F6234E
- MD5 SHA1 SHA512 TLSH
- Path C:\ReadMe.txt
- Size 28B
- SHA256 70319193c131fb50cfd9a278e67e5a3b582b2535791a30d8439b30d8d8beb8cc
- MD5 f251b1e33f8cb3f52467ce7aa4d88875
- SHA1 00217ad24068d00b0d94a1c2a1f7a1ad2e9e6463
- SHA512 24612ba1e956e4f6fccbe16d61c1c05114bc80e4011705849bd4a5b6e3daeaecab6094587a9bd1be765e5d992da20d1a2e4aa04416325ba44f2e199500bd3f5d
- MD5 SHA1 SHA512