eec9f3cdd6c78c437e88b24c096bd10347dd332b3da2864e21085651f0d145cb

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 01:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

695f577eec1a477c6cc7a2c54aa61ff7_JaffaCakes118.html
Size

184KB
MD5

695f577eec1a477c6cc7a2c54aa61ff7
SHA1

898ee874a3da46295ea6dcb7513c2d1ddbd9930f
SHA256

eec9f3cdd6c78c437e88b24c096bd10347dd332b3da2864e21085651f0d145cb
SHA512

8cf285dd7f589c45d88356310ca3cc2123848531ea354a2418a0284e8cbf66102132e5349ce9185930533fe3219dfde3625f6d57af0f774891c6e58434a2faf1
SSDEEP

3072:R+hRmX2Dm30MG50oG002SeN7/az/EMuJhdhJ6bhWYpsmHBu+mncKzKTe9enmh/Th:R+70olaz8MuJhdhJ6bhWFmHBu+mncK7p

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
2008	msedge.exe
2008	msedge.exe
1732	msedge.exe
1732	msedge.exe
4704	identity_helper.exe
4704	identity_helper.exe
2752	msedge.exe
2752	msedge.exe
2752	msedge.exe
2752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

Processes:

msedge.exe

pid process

1732 msedge.exe
1732 msedge.exe
1732 msedge.exe
1732 msedge.exe
1732 msedge.exe
1732 msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe
1732	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 1732 wrote to memory of 4288	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 4288	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3300	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 2008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 2008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe
PID 1732 wrote to memory of 3008	1732	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\695f577eec1a477c6cc7a2c54aa61ff7_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb649446f8,0x7ffb64944708,0x7ffb64944718
2⤵
PID:4288

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
2⤵
PID:3300

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:8
2⤵
PID:3008

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
2⤵
PID:3812

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
2⤵
PID:2412

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
2⤵
PID:1972

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4704

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3968 /prefetch:1
2⤵
PID:3528

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
2⤵
PID:1872

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
2⤵
PID:4244

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
2⤵
PID:2100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,6239354146230491081,15793836792075836465,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5568 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4432

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Filesize
330B

MD5
433da6b1ba306f69d3aef4b042d86325

SHA1
50813671a43081b6fb4e05d0431abfd23f45969e

SHA256
58a398cf70f0226ab56502b2454df906743cbc31755cdb5ce6ce1782f8082b3b

SHA512
6808d147d5e105a4b7d6b7215afe64f12db604e9289250575a8ac66fcff8b2e3420f093559e912e3b6f552a369f80a74db86d74cbfa5b2e5d68b8d5daf038886

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Filesize
326B

MD5
d718fab4f4bbbb0b6ed0a039243a8f12

SHA1
59dba0c7495b0bfb26447a9cb2bd23d616be4909

SHA256
b9d6bdc36ba2c008ccf3df5ef51847742383be171eae3b7e4a644bd69d393f17

SHA512
05f4449608c7eb14cc8ce031bf80b9b962283ec344a685eefaa444b25adba80301831015b4b90515758b10e614b16a05ba114856960634d6e13364d54e55baad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
5KB

MD5
f413b1eff1da3b1c1c06f05c12496ded

SHA1
2ae1a3e1328602439cf2706b2d6e9f1da4534b82

SHA256
61bdb5b91224b2b8a9a03229e6c8b4ddf6c1d2dbcd6d5fad010969f629b669f0

SHA512
3d45ce29b455baf4989d8a99a1a10042940cf4a5b7eec050f644160195825235e1f52df9216f9b1b266cb864ef2efdfc00e16f80964adbf4c2c24f914b44d022

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
440948cba827e9238b845392e28b863d

SHA1
defa9cb9fcad1c753fea2760217b1983978c43a7

SHA256
582a5df482dfc97ab03a71ba5f4f377e1b15408bdee1a7c241d86a26a56808ea

SHA512
e9423a0df85070b2543b1aa8f265e332889478561d8af6005941abfedbc3fb46ae31ea109c317b9d3144413cfd80410dd213d6ba041c713b99286d3dbe33a65c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Filesize
6KB

MD5
6dd5bf865b8dee2b6106a764cf74bca9

SHA1
b9b34d3c4dec8bae4b9eca59b990c1029f7280a5

SHA256
01d9db383b85d797da89633d12352efb86fea171ab770b13c9678618ac983cae

SHA512
e2af0d44a82b38deaf3d8a61bcc0b1c3eb250ba2637ae94c5bc1e5b0e687d29a8c10ea21ca564109c0f58b604ef0c5d631ff12bd408602fb8e59968cda4150f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Filesize
11KB

MD5
1b0025daab425054c66e70162349309e

SHA1
f498edb8a71d3765e21177351866335a51a72326

SHA256
53d26753ef5c3d988e42d72c2d08b29bbce5b575b7b325d9c21793159d4e34ac

SHA512
881b52142e835dcf4b78c2dbac5ea0abe06e479f0933b8e5b2fca9b3285a024d7426b3904279eb7db01fa3958afecb713bead86d08318cb7718729f39e036717

Download Submit
\??\pipe\LOCAL\crashpad_1732_VSQTPOXOXJPLGHDC
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit