hxxps://burpcollaborator[.]net/

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 13:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://burpcollaborator.net/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2364	msedge.exe
2364	msedge.exe
4736	msedge.exe
4736	msedge.exe
2988	identity_helper.exe
2988	identity_helper.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe
4736	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4736 wrote to memory of 1380	4736	msedge.exe	83
PID 4736 wrote to memory of 1380	4736	msedge.exe	83
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2320	4736	msedge.exe	88
PID 4736 wrote to memory of 2364	4736	msedge.exe	89
PID 4736 wrote to memory of 2364	4736	msedge.exe	89
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90
PID 4736 wrote to memory of 1700	4736	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://burpcollaborator.net/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9682246f8,0x7ff968224708,0x7ff968224718
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,17435581069069113609,7878799966841460848,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6020 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:832

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4152

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fd7944a4ff1be37517983ffaf5700b11

SHA1
c4287796d78e00969af85b7e16a2d04230961240

SHA256
b54b41e7ce5600bc653aa7c88abb666976872b2d5e2d657bfc1147a0b49e9d74

SHA512
28c58a2ccf39963a8d9f67ea5b93dbccf70b0109b2c8a396a58389cdec9db1205523a95730485bcbc9d533867cbf0e7167ad370fd45740e23656d01d96ee543b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a774512b00820b61a51258335097b2c9

SHA1
38c28d1ea3907a1af6c0443255ab610dd9285095

SHA256
01946a2d65e59b66ebc256470ff4861f32edee90a44e31bf67529add95cafef4

SHA512
ce109be65060a5e7a872707c6c2ccce3aacd577e59c59d6e23e78d03e3d502f2707713fda40a546ed332e41a56ef90297af99590a5ab02f686a58bcbf3a82da1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
de3c6b5211d2fb802e2ef8494fe22aee

SHA1
d029e55e5e74095259710fe1a7654c502a1477b7

SHA256
469b50b5c6ca0f2ea22a40a0f09c7513d2d875ef9a807b34597b42e31ddc6dee

SHA512
c3b7c1acf117c602540456523006b5bdf0d0cbc3fc6b03bbe7fb75366873eb7d08ffc1f3d175d9a7670aeceab65f019f857808694065cd9ea1e078db7bcfc8d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
334B

MD5
2c4117a399f098a5a1b2bbd482d1eaa0

SHA1
3fc33dc771b90a1edad02ce37531559d665b9e88

SHA256
e02b671184d25704ebe27e5e34d81d243b801548d33da9bb5219078e2ca9b2d5

SHA512
6ab3df19c2e20dd11f38d00139c37ac1c79d13affded54c45f1d5f8075d5f5bb5a68123892249681cf9da191de98e1af84f3f875e49ac7543885fa4e8836314d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c4063706f06cce0dd76f1d316a192cc2

SHA1
346e7850032e1dd95522d7f053be460625886b87

SHA256
b5c01b024d6f86f341d4b343728774c812d0733a0c2bc96e3a6861f364dd2393

SHA512
8e843a63819b371c75d51a52a239d441607fcaa080d3e8fe4553aa2dcccbd9b8d208d1d8bd7bdd8175464d53640fcb057aa1a70d2b7aa6d2adaf6b2811869c93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0f55c047f1a353570636109986b8814b

SHA1
5a06a2abb25cfde1e514978d4c55dc87cbcb213b

SHA256
f80a5708f886919a60689f6165e1db7a97529263978d14cd4479e5f6183e0e76

SHA512
b1225e60fa0808add4c183f18676b8dc859c82d4a64570950f9537ac3b6a1de0ce425362543abab5f24f92fb63fb3a56252d9fd1c5acb24ea8a9b2dea6c47134

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
68cfd3bcb0c971b622a35a082295a840

SHA1
b65632fdac6e7e157735cf8e8ffae2cc4e760c40

SHA256
fe89cd4621b078ffa0a310d95067c2765bc045fae26d3fa9b9d36674b0752374

SHA512
f98eabe35fc89a46ec1a7e0e8a32ca860959daae4b2f181ca88e62de38d873bf35adda159bc83ddd70bf7339a7419ccc65a0813a4c2ac1e2de66f3604c875275

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
540B

MD5
01bdf85f148d083fef45a5a8c746ecad

SHA1
0f94e21eb718518941706baf410ed37938b3e6ce

SHA256
e3ed809e4884068b54a874dc566e116b9dfc7d6f2252f00e0b3f76d9a2ff277e

SHA512
f785bde64c185a3f41f6e3bbbc7d500aa0b7c177272535ee263f056f728c911e80247fbccaece81e7ee37bfd9c3a2f66bb6b931c1b83fd3e68c7c9a2eb548fad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5817d8.TMP

Filesize
372B

MD5
1bebf41ca48a642844034f9255a79cb3

SHA1
66154dc60549aef40c3c14dfc3188c0f55610f25

SHA256
f426e8165a0561a7e6c36a7fc5cf0945ffa1ea8f81d6819c8fdbe2a7bd0faa55

SHA512
20b3dbc578d505a6108de44bd5d10f5be2a6e0634721d2cda326801ccfd0c600950460692478b626e1f170f7166daab036fc699b77ff819af8af8deb3cbd067e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
f97792f8b3d49e3f3878268af1c11755

SHA1
5054594eac7d5af613552db2c10417ef53738121

SHA256
402d8c15ca04670104cf2e48beb660260a8eb0565b590015fb27a03ed453ee06

SHA512
bdf83c9fb0f947ea1a7f9921a0678feb1d2c25689dde492c26f843ea866cb8e99639e619cec6c04416bfc00aa9d403f0c54c661226774af7afd584b716a984be

Download Submit