ea8f8f3e66b4c75ba54b93bc730534d8131fd496a060df66f80cb29bd65b7fda

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

657d2910540a9155d0018e40dad53ea9_JaffaCakes118.html
Size

325KB
MD5

657d2910540a9155d0018e40dad53ea9
SHA1

53af27b0a1e52d3df49cdf299fae72b24d00f790
SHA256

ea8f8f3e66b4c75ba54b93bc730534d8131fd496a060df66f80cb29bd65b7fda
SHA512

9ea69bc1e4599c49c686301e951072558d0fb400e6cbdcfbed2f8fc9bc1b6694a4b4a8e322194c2f6fa952e6797d2836be0b007334912957020369f0c62a85f3
SSDEEP

3072:Y/8JPaXdkqxqd85j6Jwawz7KIP2VWKpYtAgOlMccGxCARBGdCm+8dCrh2T8uWMR7:A49u2qZZL8Nck8Eh2o0

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
1196	msedge.exe
1196	msedge.exe
3168	msedge.exe
3168	msedge.exe
2424	identity_helper.exe
2424	identity_helper.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

Processes:

msedge.exe

pid process

3168 msedge.exe
3168 msedge.exe
3168 msedge.exe
3168 msedge.exe
3168 msedge.exe
3168 msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe
3168	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 3168 wrote to memory of 4140	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 4140	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 3096	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 1196	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 1196	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe
PID 3168 wrote to memory of 5952	3168	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\657d2910540a9155d0018e40dad53ea9_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa127d46f8,0x7ffa127d4708,0x7ffa127d4718
2⤵
PID:4140

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
2⤵
PID:3096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:1196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2928 /prefetch:8
2⤵
PID:5952

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
2⤵
PID:5432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
2⤵
PID:3860

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5492 /prefetch:8
2⤵
PID:1916

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5492 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2424

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
2⤵
PID:5144

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
2⤵
PID:5216

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1
2⤵
PID:5112

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
2⤵
PID:5088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,5987302977919767364,15521399364282966877,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4856 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4712

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4472

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\036873f6-7821-4668-86a8-75f976e4cc4b.tmp

Filesize
11KB

MD5
feb0919dec19d2ee0fb63d8e244dd444

SHA1
4265b657db21a7875b48b399adeafbd859a34bb4

SHA256
32332affa1d68e01934c9fad06fb1ba6efe2c6f38980ab2c676e7ac27fb4590e

SHA512
bd00b3289d70c4c920b8c89dbdbad426f2c509d0af5692f7e939058436e2e3da466424e2fd9d786929a7fea66eac077a3fc45be66ebb40256ffa708eb5d8a77c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
955B

MD5
70d3bbf3560bd095ba1ed9d185f7ed60

SHA1
27e726440f066474ed9fcffdf6ce15be3082e16f

SHA256
b4846a1aab1cce340e9966569d5ba911b0f9a12b42536fdca9c711a9cb20c8e8

SHA512
ed9fd38688a823d145576bdfa7a2d280a89a919fd87ac1fb856c0bacac0b4240e9a1d7643233c707e73e1b9c5ea81185c628e5e7b9aab64fb9109bf5d0954880

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
455ebfdfb7449a4c2e9ad226b91f88ab

SHA1
9843609a3abdf11c828a8eb6e3fd0d2cc321c66a

SHA256
c1f64b70476f4ad05623adcb20924b836c61e7a76bdb7e737f9757b038b3045b

SHA512
e0168e360b763e3aca3c4ad4b6d92741c2bc940959252e0a31a95595b7e70e38562461796c2d78918b8f760486010552dbadb34f18e2db9824c2cc7051ad7587

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f0816005f4e7d7ca89c178cb60869ba1

SHA1
c6d81d8b02fbc6e2d6c9a7ca3864a0272f78743e

SHA256
8af683b5048d4da13ec4fc09fa65e280e265b2f42f75663e2eb84546cedfb9b3

SHA512
e072ee4e62c8de150f5594f35760c9720db42523518f6f73ddcee1f04b93d9e4b133f6b93cb450d3e4c5421b2aae192271f9bb3ed317f87886726d86ce688e51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
76f824a518245ea2d472144abb86a7c0

SHA1
de0dfb07b753b1d17fdd35729d0f4b71ff2aca3d

SHA256
f4a4e3b6253e2706b062d3425dccb5adf4e6076b0eb0984d57944d162a321f46

SHA512
1d1ee79c474b22f9fc48991df3d3553558bd6e7513c651d83573d3806a000e5f116ebd2a85710470239b28369e97823ad6d4bc7703f00ad80810c3ad1d911f23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c469.TMP

Filesize
538B

MD5
55fb19c8e97f4c8193fe6d53a2a16caa

SHA1
42cd8cdb8869831ea0fc57a4aaf44cc311572d2a

SHA256
da4bc0c0aec0ccede980da1f655a13ea8a8d641022e93a017d27543e922612b3

SHA512
cac5ed9a0c1acc68fd469029a0ff5a6e0811a53b30e4a8cc8e66aa0e479d17b64882f98b523c010aa6961351106f09f27de548e17f2d5fd720c10031f82a9d27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
\??\pipe\LOCAL\crashpad_3168_TWVFDRDHMTPPWUZD

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit