c2e20c63acd3c906de7ce73f10f3a5f79234832a7b7164d76ff148d4c3074c1f

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 19:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7a2ea360c962deecc619d2fbd86fd98c_JaffaCakes118.html
Size

512KB
MD5

7a2ea360c962deecc619d2fbd86fd98c
SHA1

ad330717dae21ca829db584c29bb95d068da268d
SHA256

c2e20c63acd3c906de7ce73f10f3a5f79234832a7b7164d76ff148d4c3074c1f
SHA512

2ae9868836a0bbfc71dd11bab200ac18cbf2dff5f750b39cf2eb7c3814ab62b037a7a2cb03d984114028ea8edc390ef69b89a2295524a0dda16cf5f5a79c9177
SSDEEP

3072:wW+IpBxYUVEk9zks49PwVeL5AmPTmBcM2mqC1R:wW+IpBxF4tLTK

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4724	msedge.exe
4724	msedge.exe
1752	identity_helper.exe
1752	identity_helper.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe
4724	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4724 wrote to memory of 3396	4724	msedge.exe	84
PID 4724 wrote to memory of 3396	4724	msedge.exe	84
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 552	4724	msedge.exe	85
PID 4724 wrote to memory of 4864	4724	msedge.exe	86
PID 4724 wrote to memory of 4864	4724	msedge.exe	86
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87
PID 4724 wrote to memory of 2268	4724	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7a2ea360c962deecc619d2fbd86fd98c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f40f46f8,0x7ff8f40f4708,0x7ff8f40f4718
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2804 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3060 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3060 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2328,3531103402988948883,7637627110356721452,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4016 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:624

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3972

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4556

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
a028676046202f794016684228ae5496

SHA1
2d674cc7b5c20f7e4cc86f7fe72d69cb6c7c3101

SHA256
ca2b77cc0ad840015cff2110a05fec6e30c9e0d14f08417003f34654228b5e24

SHA512
6e241b4063dbf4557af1887d91d7bbbd4b21e560550ba1cc15b365fd4b11a771c03c87d2a33c9675dd7260484ba0ba627dae85357c01acde78b485973e71a094

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
969B

MD5
e62bf9f8e506163ef7a5c89845e323d6

SHA1
bd04e01e9d41915112e707b3ba00b0ba621468c3

SHA256
cb8245f03888201f8e5e48daa85589153b6f642195cc2119422c4b50062811a4

SHA512
0305f7fb1c8cf08ea90437436a50dee6cf58d5f218404e03ee9c5611331947fc56ddbb803c5be6385f456ca5d2d07e114326b12996e52db40f98a16164b2f438

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
03412394d233f4c9edad465e6f00a3af

SHA1
4c3ced25b3de64d5874c6f4c3c83e1e602a94c9a

SHA256
4f7303a8f356cc4ba3f1547395d46753cf19cd9abcfd7605ddc0d13ce7b8a792

SHA512
e16e4816e4fb55da1bd5272a4034914d4d7c1d460600833e01830acef8f0527111b4bf77967e79631259116d576940e23509d45d05d791cd627ccc4cd74c3a4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
dd5792b8acc1f204f420f11bc04a9e65

SHA1
648bd2edc80bb243cf48af9a7ba2952235425f44

SHA256
294ac55e64f420a58f3ef9114c592e7bf6633b78438b0d5efb2dd501116857c8

SHA512
bc11d7a8c77d90abe38e2c5cb14510ec7d7ba1b1d79c63e1b487531f16e8a31f5455121f79dcc256763ed8c854a513d242affd5f301fefd0df7181a61b1a3569

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
134fb946678b268d7e1e4fbe89dd991f

SHA1
d9335ae3b4586032d3398601b95250a7dd92b6fa

SHA256
0b76bd75cd103f86d6a8cc919aa2188f99118edf949bd24ba4649fdd35c5ce88

SHA512
1257c40cf3f25b65f4f652dc720113b7e3e05905d25099d06436ce079097c6bdb34b97183ce4d1b5fc340fbe65fc5169976ca360f4990e94ec67d0bb0859d6b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
59152749569dd56e51818a18dc251e36

SHA1
d5f50bb344eabe995f59d7f0058bbb7e23ee3021

SHA256
f789522bb93ac7fdf3ff5138fd4f42bdd6b6a2e9c7c5d21061bf8016afdc62fc

SHA512
311891676ffdc565318865df04ca4791f59624d6a6bc5885adc1f4a93bf0422a5cd67dd68e9c2644e7c3ba10e96915d6cbb39bbd85544014f0264a8db7432f66

Download Submit