hxxp://mvv-fahrplanauskunft[.]de

Analysis

max time kernel
24s
max time network
25s
platform
windows10-2004_x64
resource
win10v2004-20240419-de
resource tags

arch:x64arch:x86image:win10v2004-20240419-delocale:de-deos:windows10-2004-x64systemwindows
submitted
02/05/2024, 14:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://mvv-fahrplanauskunft.de

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2072	msedge.exe
2072	msedge.exe
3732	msedge.exe
3732	msedge.exe
1352	identity_helper.exe
1352	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe
3732	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3732 wrote to memory of 3600	3732	msedge.exe	83
PID 3732 wrote to memory of 3600	3732	msedge.exe	83
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2112	3732	msedge.exe	84
PID 3732 wrote to memory of 2072	3732	msedge.exe	85
PID 3732 wrote to memory of 2072	3732	msedge.exe	85
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86
PID 3732 wrote to memory of 2144	3732	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://mvv-fahrplanauskunft.de
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffdd36b46f8,0x7ffdd36b4708,0x7ffdd36b4718
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --service-sandbox-type=none --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --service-sandbox-type=none --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,13280905407529008852,13952561905270507601,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:5592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2852

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1428

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dbac49e66219979194c79f1cf1cb3dd1

SHA1
4ef87804a04d51ae1fac358f92382548b27f62f2

SHA256
f24ed6c5bf4b734a9af4d64e14a80a160bea569f50849f70bf7b7277c4f48562

SHA512
bb314d61f53cf7774f6dfb6b772c72f5daf386bc3d27d2bb7a14c65848ee86e6c48e9c5696693ded31846b69b9372a530175df48494e3d61a228e49d43401ad1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a9e55f5864d6e2afd2fd84e25a3bc228

SHA1
a5efcff9e3df6252c7fe8535d505235f82aab276

SHA256
0f4df3120e4620555916be8e51c29be8d600d68ae5244efad6a0268aabc8c452

SHA512
12f45fa73a6de6dfe17acc8b52b60f2d79008da130730b74cc138c1dcd73ccc99487165e3c8c90dc247359fde272f1ec6b3cf2c5fcb04e5093936144d0558b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
72KB

MD5
1ac0f6bd78df9a5b35fe6d0de823b847

SHA1
88db0c6bc38dcad60dd1e7111ab5cb00cccd6920

SHA256
4eb65fc7a50b15d96290d1e2e53f0ca9e7a77de92b2379acc55272f79a59d9d3

SHA512
b573939719b8f6e7972d70ec6bc67a5fc76993b9c139f406f1a8ae053e7b7cda55b4d97507dcd490d5955d4674aa5677d10a8ba3fc2d685fd7dbdaea2402b3d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
71f6010c56136b37d46708363775dc5c

SHA1
38b3a8fbffe94cb5ddb74c29d30a97871a14c658

SHA256
e3f470aeb6b1f1d437d02de1f0ba05c74869e66be53e0071f6e5258d58531507

SHA512
e211b4666572a522b7b75822049a1b5fe08f04c9e77248f70c85f7245acfd89dd3dba51643d50ac5887bca70cb35b810f78e8b858da6137e9469076751c66206

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
159d0ae0bdfee4a3226329dc64a83f54

SHA1
9b4ba6fff770a37dd81c6e289685fa4cabbadf06

SHA256
c73ce795629bc1b723535fc9f7345260c545ed1fe049beeec5385cfd89d2ff7a

SHA512
6df3aa90e6cdbd72bd9b173b47b5677e6dc06f923229b45b952bfd938fc3951cc6e8694bd965acb12d94ce79ddd2a0842a5df58a6290bd1cc859c525db866594

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
61fbd09574fb04b2a1481f745eb1172b

SHA1
3fd0ca0e2d7679c11ab5094b6a2296f35b47cce9

SHA256
32a6d15bf515232cb214c95b865b485e6b979ce462a1737f8e22a4cf9fa617f0

SHA512
59fdd9c398b7ec1f6920da9842c907962747be584ec1c73d1ebe33e0a4d68503e32a5ec6e4e11153fd5e046908fafa8b23f37dec01e175d6c8ea7d8ba9f25acb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
375de87a82f97c710a7f33a41b924c2b

SHA1
fedf51dfb9e2176cebafd3a1fb354a6d655b783e

SHA256
146148d3a7fcbbd5e9c82d5cc77db34bcd18d4acc478698b78075d5e85732375

SHA512
64ded13a5c86c99cb7620552304b682eb11d3c27a5a66a7a8a1ae448bf64b2c8ca418e7e3bbd947ffe6e3a62aeaa9f2efb27c5bbb91d7beec80a260fc6757fac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e97922107fd0bd191ca7a1fd4a2c3b71

SHA1
a36809eb7a53e4d95086a4db1abd4b100f5dbfef

SHA256
c95a0195491bdc1a944e3cb17d364ff8ea0b4b9adc8add37eb8a64da19346d2d

SHA512
016e668274340bc4dde6431aacf06c7d957b191dea4f8d8463ef0000dd831ecb1cb91d1f9ae4ba247389fdadadb6aa044c05319fa5b9444c58009c60dcd66cbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
58acfb47fa4e3562fdefe321ec224fd6

SHA1
13de082e7e8692930a897e8374f09d82e4630149

SHA256
36decaff3c579a414adc478b1f635836942c6ecfb41675f3d9e8e66165266480

SHA512
a4a28ef07ba9f98df57188df70c2aaf5b5c7d6b49c4bd5cb60a28e2db200f860d2bb1f4f0b6d91ae92235435205fde7af5ad99fc60f1bae856d102e1d3c33ace

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ab39c71224e0d78daf614cb68e310f8a

SHA1
dccaea201ef59aa6e38faa233dcc9bde66823355

SHA256
158044c8460d72f8e0c74b72882008b1749fcbcfebf637e47ff6853a31e45613

SHA512
6142c90f0befaff61187fd12533d93e49aa043b9c285c51a286fe7390d99a617cc74d2bfbdf1d8e3d53309f5829835c14aa8e41b3e0d74d81a1d5a98fe7dbc04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
906e48340830ea34b735ba2d995f7819

SHA1
1cc1c0aca3e33f28aa2090b3fb5cde2103142443

SHA256
b44740e43e76f811fb3f8e53659c53d9d5b4d7a2cac9d622c7918b05ce089cda

SHA512
e6294b54386c52d78c59739c177970ea615465b3f35414cf9f3ec4181f76afe32549ec8844818b7adfd28ec8569fabd5e94f168e4a2e2a741a2274dac3c1a4f8

Download Submit