adbb68a1cc61169b4f7c64b46eac63c91259216d65eba27f44e5046f345adcb8

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29-05-2024 14:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

811d72242a36ff4a7108c941810ea165_JaffaCakes118.html
Size

133KB
MD5

811d72242a36ff4a7108c941810ea165
SHA1

3663ac6aab49f454745171fcafa19383a004ed07
SHA256

adbb68a1cc61169b4f7c64b46eac63c91259216d65eba27f44e5046f345adcb8
SHA512

c4a5bad3bfb11fbaebf843f700455a2f26fee4b5c0ab6bb6288e8a60f7baa4a189e163551c0c8c6f1a005341e9db7369e77c4f8c81fc325a3a143033a428b43d
SSDEEP

3072:aMlPipoSL+QKiazizu874qh3PgfsTc5V8hx9+M0hBFJ/e9:arHzvh3d

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
2796	msedge.exe
2796	msedge.exe
4488	identity_helper.exe
4488	identity_helper.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe
2796	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2796 wrote to memory of 4272	2796	msedge.exe	82
PID 2796 wrote to memory of 4272	2796	msedge.exe	82
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 208	2796	msedge.exe	83
PID 2796 wrote to memory of 3920	2796	msedge.exe	84
PID 2796 wrote to memory of 3920	2796	msedge.exe	84
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85
PID 2796 wrote to memory of 3160	2796	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\811d72242a36ff4a7108c941810ea165_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9903a46f8,0x7ff9903a4708,0x7ff9903a4718
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,1126268932793225919,13339531435031973091,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4772 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56641592f6e69f5f5fb06f2319384490

SHA1
6a86be42e2c6d26b7830ad9f4e2627995fd91069

SHA256
02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455

SHA512
c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
612a6c4247ef652299b376221c984213

SHA1
d306f3b16bde39708aa862aee372345feb559750

SHA256
9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a

SHA512
34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
f80664ee5246179f0092636cc45e8870

SHA1
3d22899196df5deebc422b25737c4f837d9816af

SHA256
d4cc90a63420408eb25261170b1c7f61c9cc6090641748b5508e03ff317fc9b7

SHA512
a35f1f1f9dc097d8989deedbe7bb16818b3b4901b76b3b78651cad32dc7633c791e8b2a2deeb03c6e569a4b3d0dfeaf821ceaca09daa69a8ff5f8de5c24d0abd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0cfbbe24a12aeb8297b051fc5686e525

SHA1
9862a4fe9682af55aed184a50d4b93c03306b45d

SHA256
d8da22eb8a357af8d4e4766b5e0b8d6aa463950c20fdc3c8dd523407af034e97

SHA512
7fe80d6b6b449356df04ae1ae0460f899fdd1530d6b4adf61fb96fb11d82efcf5d0ffd2e1f283f01538a75514297876b685b87e015f98f729e953a0696fae4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4a0d80cb8d5e9a52847d58e4d6db5ee0

SHA1
7ee405e952105000a7e7888b1552702c193b678c

SHA256
caa6eaaf19cf08e2a67664a9dc5f4de3494f099d423c230260c9e447ece1c337

SHA512
2d832859a17f4ddc3378eda4d254365f273509db889f1b1b9422dd94311573fef0c5ea2c55b41157a6139cee03c952e73008ece655a110dee3230fffcee9d4b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
dd3f3c820c368d99ca0e9b01db1a3b2f

SHA1
5b682d0fc8fc0eeaec15180a049576ddab47ebc8

SHA256
d08e5fe431cd9c1a235c38f053998c706c1d730048e4a59a7dfca46ad6e74121

SHA512
7e44c06eb4a83058efc96b61d284c3e7d29956fd904d6687267140af3ee538752668abb5a418915afc6fbe1bb813f46be553c1348a0cf5c48de7a8818f2a6175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d470b9e6a76dddd48265f105388b46e9

SHA1
25f00d4ccae5e6d2e990dfec89d80929bbd37b52

SHA256
d71182adcece732544e0b7e85a7e7ec962f877449666519bd2ccaeca2d7a9fb5

SHA512
f0270f1ffc611cd6be305052d089e5c9e6c7e8a7944b1ee8331aa7532fd336dd443abd3df5a40da8cde67af3038302d461715c3192cb2fc454748b469b0549e3

Download Submit