d784c2f97c2940287673634e1ca7140fef81210429a6d28ee2e83650730dd40d

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 12:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3928824a40a483f40b1cf5304d173b5f_JaffaCakes118.html
Size

1KB
MD5

3928824a40a483f40b1cf5304d173b5f
SHA1

c934790043a30132a7b3caedb4c63c3cd8e8e64d
SHA256

d784c2f97c2940287673634e1ca7140fef81210429a6d28ee2e83650730dd40d
SHA512

c54ae60810242908e70046b8ed1bf4b5275cfde80ce077652666d1bcc51e0c1033e28a430421d0c9596bcff66232f0e3e36eea586ce5d2672e035d26f8539c2a

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
2872	msedge.exe
2872	msedge.exe
4588	identity_helper.exe
4588	identity_helper.exe
2912	msedge.exe
2912	msedge.exe
2912	msedge.exe
2912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe
2872	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2872 wrote to memory of 4312	2872	msedge.exe	83
PID 2872 wrote to memory of 4312	2872	msedge.exe	83
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 2224	2872	msedge.exe	84
PID 2872 wrote to memory of 3992	2872	msedge.exe	85
PID 2872 wrote to memory of 3992	2872	msedge.exe	85
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86
PID 2872 wrote to memory of 3824	2872	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3928824a40a483f40b1cf5304d173b5f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc0c9246f8,0x7ffc0c924708,0x7ffc0c924718
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,6590580156188278343,13018840709549522356,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2912

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5056

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4376

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
99c60fded405f478cff2e075e253448a

SHA1
7040d75f02e015e6965ff223453abb108856dfa1

SHA256
4831a07540f8e1a2796571fd054a4cb33123dbed36d6820ed0002926b2f031cb

SHA512
d23f7ddfdf91bf4137e1488c00e3281845099f7b5110c4c5c7c2c219fde2d0b9a425103892e2e0153ca536baec1a8eaa2aae158b235bdb4468ccd01888481fc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1023B

MD5
7453db653d848431a66c6e26379ec63d

SHA1
08c571c0336d42842224338f12cdf2237815fb4c

SHA256
1357390a71a511a75ffd761b4574ad6ea738ee65a19d14dad39e1c9c417c3d00

SHA512
b22f1583cc215d19f872fa1183e8879748a04d5da8e55547a8e3d2561b0ae5256abf1a701294ac7447722b06f3a858287d461036045feaea2b3dfa11d3650edc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3f53904bd2a477511cea708b155b8cff

SHA1
1a67b6b9d64b19c7c0abc58d12bfd21668fb37e5

SHA256
a37ff9378b83cdce26b65d9dcd65d0eed3a0e331d638923ef084f06c602c8ba8

SHA512
66e55683f07f5b5533de5e7a10bfd93eeaa320eed5337ff151626e5f22532a4be62bcfbaee1d384552c5b7cd29eb6509a18ddfef814738da5739944c29641fc1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
11dbc92b47dc9acc04d16879fa68fcb9

SHA1
23c968997aeb92346f8ac1bcddd83b6b096a84ff

SHA256
14ff6466931cc1960a4b43cd60e6252da1fcf5b4276548e8a879a91df1d014e7

SHA512
4435f665b12a6b02237969c8e56f3f7d85965f21f5ee712ecf4305d61044e202c9ef5b4e95f37586de9b8d6fa76a60cf87022c00fa002d3ed084ae5301ee7361

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d8578a483eb5c17e5d250d162eda089d

SHA1
cfb7eadca3d3feeb60ace2a0cc6961340c697cea

SHA256
946e0b8dff46f4c1e822fda804732a9f5d74631128bd423632605e8ff19b0871

SHA512
dfbfb5c5bb0c8a4291849ea4d9a6d3d4cee80af44d93bc29c2847fda2e1b17c17f3b52b8f1c1f5971af56b04c12d6334d1603cd318fb68eaccd829e0b5685f73

Download Submit