hxxps://stearmcommunity[.]com/get/activation/feoeeq82794hFvrbgea28

Analysis

max time kernel
132s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20240221-es
resource tags

arch:x64arch:x86image:win10v2004-20240221-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
22-02-2024 01:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://stearmcommunity.com/get/activation/feoeeq82794hFvrbgea28

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
1384	msedge.exe
1384	msedge.exe
2716	msedge.exe
2716	msedge.exe
3348	identity_helper.exe
3348	identity_helper.exe
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe
4044	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

Processes:

msedge.exe

pid process

2716 msedge.exe
2716 msedge.exe
2716 msedge.exe
2716 msedge.exe
2716 msedge.exe
2716 msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 2716 wrote to memory of 1348	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 1348	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2104	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 1384	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 1384	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe
PID 2716 wrote to memory of 2236	2716	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://stearmcommunity.com/get/activation/feoeeq82794hFvrbgea28
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff46ff46f8,0x7fff46ff4708,0x7fff46ff4718
2⤵
PID:1348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
2⤵
PID:2104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
2⤵
PID:2236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2116 /prefetch:1
2⤵
PID:1912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
2⤵
PID:3352

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5504 /prefetch:8
2⤵
PID:2616

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5504 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
2⤵
PID:1400

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
2⤵
PID:2380

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
2⤵
PID:2392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
2⤵
PID:4644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,12152680261292687323,4437402528011717905,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3656 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:968

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1224

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
1af9fbc1d4655baf2df9e8948103d616

SHA1
c58d5c208d0d5aab5b6979b64102b0086799b0bf

SHA256
e83daa7b2af963dbb884d82919710164e2337f0f9f5e5c56ee4b7129d160c135

SHA512
714d0ff527a8a24ec5d32a0a2b74e402ee933ea86e42d3e2fb5615c8345e6c09aa1c2ddf2dea53d71c5a666483a3b494b894326fea0cc1d8a06d3b32ec9397d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
aa6f46176fbc19ccf3e361dc1135ece0

SHA1
cb1f8c693b88331e9513b77efe47be9e43c43b12

SHA256
2f5ba493c7c4192e9310cea3a96cfec4fd14c6285af6e3659627ab177e560819

SHA512
5d26fdffebeb1eb5adde9f7da19fe7069e364d3f68670013cb0cc3e2b40bf1fbcb9bdebbfe999747caf141c88ccd53bd4acf2074283e4bde46b8c28fbae296f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
480B

MD5
c657c5a58904fd5ad58f8b5f149d0dd9

SHA1
5a79447a8125abfd8361cc6eef0d0f5bce04dce8

SHA256
b3005bd7e6a5e5b686084f34d2ad2e35739ac8d17eaa0892c9b18d886e49e16e

SHA512
a5a60397b90383e6925de445556a84aac07b8b1c7bbe64174e770a24d38dca32c5823d9b3b892ba2e776107fa67c213d843264a4ee52b9da63320d71d749406c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize
576B

MD5
e150c6c6bbd6fc014deab6a402acea07

SHA1
5039ff707a7c335b9844e3ab80c3dc7d08544399

SHA256
8e51b703492ba5baf6057fc5c50d0ad7fc4dcc4ad02d193762a4c384792fd991

SHA512
b2cc2ae0b4df169607b1c1835525f4e3f148e113cea6fe31ddbc18a821f2d488ad8e20a998e041a5059f2c487e6a302c3eaaa710a3dda792be00682af2d5010a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
983B

MD5
58a46ab06aaf7cc2c7ca07aa899201e7

SHA1
02d45f4478241fc8458d11f20e2b5f749986237d

SHA256
c6264fbc1e90d269520583c48784c7e2a1e47db363dcef6b4fa3b17fe8c4d666

SHA512
b2113c06ff7689c297ca955e7708702ea27cfb536af01ba7139e30f476f9f71ca9dbbb73887d599ca82c87b39ce60bacf93a8383f66f8a72a55a741cba5c4f68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
49880f7d3f837ac149acf5f36679eed4

SHA1
c8e3ebe9c4e214c8dc31e2acc38e031b9b5263a5

SHA256
a04201955b40ac096a691549b828aa5060da0c791166432ab33a4c61cfa59bed

SHA512
613145194c81344b09fbe8290deb13b4207423fb4771137681e0da95b058ddc65da1fdde333b2b22c271fdd2c0f93a812c3105f63099a951c5bd0060a78db636

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
ebff55fd867711be99c6ab9b39589021

SHA1
820e2be1318e2ebcbe2eeada345c019cf9a0c9f4

SHA256
e033d9c95e2a260ee27f86f02bc34ff1c3c61282d32ba0b48007e92191822c1d

SHA512
9ad5030cfc3e455f467e6c9633e01eb568fc4ce7c9456b9207b7dccc94c4e5ca9e57038e1a3a8547227d5a0d9512960f83b231545a6f07b6817de4136e246b5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
cf79e83213dbfa2af785a0b2e3127286

SHA1
11a0583072e25215785b3834a99e287c6e644f4f

SHA256
df5ebdfac36fedf2a466d68e76fce4c45247a2d23b900ceee439dfb44533d2ac

SHA512
fe909fdc1cf03ef36674d08afa39f712db4eb35a1aaae371e99d679a102a03db4cc31b779a8ab78fbe835df7520480fbe8c1e108a1259c5c6d227fecd3ea1b98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
bffba0aad325cfd0966d3edfdf21f0f5

SHA1
5a597ac76f8014268d7e8da7704a0546ca20ab00

SHA256
e29b931dd188e0cd7d83e30375e46cf9597e07d2a51dc5a030a5dc1b296bb4e6

SHA512
b84418308a73bbf32cacfebb43f6f6ad568e3d54d94ba8e0dd7e833ec8e096c1c2f25e04c09c8ce7c1819d67388cf9ddef70c31bc1235fef7568e97df8b4f74e

Download Submit
\??\pipe\LOCAL\crashpad_2716_NQIFBEJDQSQGPZCU
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit