262fe49b7ef5ec35d4daf68b62e26be512086cd6f31460509841da357b3ab1d9

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 13:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6b1231085b943afc206c1c37783b2b4f_JaffaCakes118.html
Size

905KB
MD5

6b1231085b943afc206c1c37783b2b4f
SHA1

6f58fd9c8dcc332593b724a8b0bc7ec9054542c7
SHA256

262fe49b7ef5ec35d4daf68b62e26be512086cd6f31460509841da357b3ab1d9
SHA512

81353ce911e2a8654c27c3c7ceb3f80ec59d0a553776c8c0f35e7e68474e40374decd10a890cbb89f22f1727e1101bdfa3e3ebbb7e36a9586ff710c4319b16e2
SSDEEP

3072:nplmB32szA0N/Gd7tXtjgrJtdY1Veef0xOMQfw/mB32szA0N/Gd7tXtjgrJtdY18:7hsMOtdY1YQMNsMOtdY1YQMpl

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2016	msedge.exe
2016	msedge.exe
2448	msedge.exe
2448	msedge.exe
3736	identity_helper.exe
3736	identity_helper.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe
2220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe
2448	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 1400	2448	msedge.exe	83
PID 2448 wrote to memory of 1400	2448	msedge.exe	83
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 3508	2448	msedge.exe	84
PID 2448 wrote to memory of 2016	2448	msedge.exe	85
PID 2448 wrote to memory of 2016	2448	msedge.exe	85
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86
PID 2448 wrote to memory of 4964	2448	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6b1231085b943afc206c1c37783b2b4f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffadc0a46f8,0x7ffadc0a4708,0x7ffadc0a4718
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,3094508977933245441,13858444198980633191,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3832

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4196

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85ef49d5-3a17-4b0a-bd76-e168fc323da9.tmp

Filesize
5KB

MD5
c1e8de56841ac5a0437cfabcfcf60ac8

SHA1
65444414b5c91f0ea585476954a129a7b0ab3fdb

SHA256
ad8fe9880fbbe22feddc314193c30951ba9b9b083e5bf4784064ac6cb1ad16e3

SHA512
aa8a8c1fda4acccdae75bd8a17cb61dff8425b9ac32d56b57799e3f66d8407dda23404684a266b0cef892cf95d2cf486f9b72410e91a22fa7b9bb8bff7bc6b15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
512B

MD5
8e22fb491ef1cc8a5af07de8d2923fc4

SHA1
0751728e175931b1bfd8ec53e1d5b820874f220c

SHA256
4666a94893e9c2718f6db7526d8e968a2685ec63f96b4a6d883ee6b4630e26bf

SHA512
dd6e41243ba66767a2b7f5ba26958369c76f9740b8eef212a12079c4b93d6b25099e81c0e91e7e4ab39fddccc5327bcb8fd2c64d09ec3b9a93ae47cd5960b296

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0020f64cbda0c66fa3aee278174f4113

SHA1
86b9eaea0e0d91d924a082e01d6dad2501905822

SHA256
99abcd1cd6c3226de1f4b4dd8a6c8464efca9be9a831ff3df2a7aabd4daca6b5

SHA512
f636e6f5c207593780c9a86ee6835f49abca93c620444e8365f1c5333703501c25de9864912a7f641bce9ea1ce0a6f6339f60e848f1cc49cd50a52d762466f04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3677b87a76f1af07bd7f7e05eb60b73d

SHA1
0697f6685c3f83defd34b024c8c252bb9398a17b

SHA256
2a18023b2d794ea0ea92820888d09d7c38a33c0e1562a6b117539df12ef660b7

SHA512
b808dd12b67b048a609b7f536b7c12d606ce661690b73e2e699bcc1fe470cef1d33e7dab0b228ae970968aa53ee2b5a338d0eb91270dcbe5294e74d6920a6b62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
369B

MD5
0326066ec734ae21b0d3c3ef1812294b

SHA1
88de023cb0ce237f4644256e2659f3e62a449b83

SHA256
a5ce766a9860a6f5f8a384b34ea1104867f6b26e6b99941415b8cc3a5bd7d065

SHA512
25b2d2d409fba124f16e17812aa6bed56ffc9d4d5dd65ee78d3846993a7511c2561f111b373d8f8b707bf1dfa2eb1c14ed6d76b6197f6770196db9a8274b68bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ddfc.TMP

Filesize
202B

MD5
03925d3ab0eef7249fe987de60db41db

SHA1
3ad6204ca3265d7b0395a39db43637d0206fa932

SHA256
2aa70f69aefe017204b31ab1edf6bbd022eb261b4e7120fb75b36d9455f97a9d

SHA512
c476b4fbc29ff769836635f4ebc99c4c54e6eb8cc92ca1ad2f6b2fed6e71a62af61d84b1d37d09520e7e88386a5ff2b3430a1e2637fb88286644aae8df9355f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7aaba22b3464b7011ced39d6bb1f63d3

SHA1
5e3e4853444000173a4ad39e04fd6726cbb788a1

SHA256
d7fc0d93934414384d4899007259cf19e764c218f9ad54aba733914b1ca5cbea

SHA512
29d4b4331478968533a2f934bf861a5e4a1e5a35171d1fd90fe4b78d41a70eaea9f7cca9c76b46cfd9a90e4a86d887d1a432684e52fb1a4d5d6a3fc2c0b4f413

Download Submit