hxxps://download2339[.]mediafire[.]com/s7wz84q67jagLz1e-SoTTsvxb-whPzStMkiFdvMm-vbPetC59GD6ICf1x9TDdReEM-cvpMMdVdK8NJPm8Jrv0A1SIeKtdr2SQp_hRQTw2axEFvAncHVLw8-8bbor6oi0Uhuu1PuxluVPcNgK-ITWjDHyOVzOFWGvI-1etXiu9gO7cFc/jmxcdbcpk7ml8ts/RB_scri%27%2B%27pt_install_x64_x32bit[.]7z

max time kernel
480s
max time network
599s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/08/2024, 18:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://download2339.mediafire.com/s7wz84q67jagLz1e-SoTTsvxb-whPzStMkiFdvMm-vbPetC59GD6ICf1x9TDdReEM-cvpMMdVdK8NJPm8Jrv0A1SIeKtdr2SQp_hRQTw2axEFvAncHVLw8-8bbor6oi0Uhuu1PuxluVPcNgK-ITWjDHyOVzOFWGvI-1etXiu9gO7cFc/jmxcdbcpk7ml8ts/RB_scri%27%2B%27pt_install_x64_x32bit.7z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1428	msedge.exe
1428	msedge.exe
3520	msedge.exe
3520	msedge.exe
956	identity_helper.exe
956	identity_helper.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3520 wrote to memory of 4608	3520	msedge.exe	82
PID 3520 wrote to memory of 4608	3520	msedge.exe	82
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 428	3520	msedge.exe	84
PID 3520 wrote to memory of 1428	3520	msedge.exe	85
PID 3520 wrote to memory of 1428	3520	msedge.exe	85
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86
PID 3520 wrote to memory of 1668	3520	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://download2339.mediafire.com/s7wz84q67jagLz1e-SoTTsvxb-whPzStMkiFdvMm-vbPetC59GD6ICf1x9TDdReEM-cvpMMdVdK8NJPm8Jrv0A1SIeKtdr2SQp_hRQTw2axEFvAncHVLw8-8bbor6oi0Uhuu1PuxluVPcNgK-ITWjDHyOVzOFWGvI-1etXiu9gO7cFc/jmxcdbcpk7ml8ts/RB_scri%27%2B%27pt_install_x64_x32bit.7z
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9de7646f8,0x7ff9de764708,0x7ff9de764718
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2012 /prefetch:2
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:316
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4020 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,4057882191047973651,17596316842000494567,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3116 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3920

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1592

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
eda8b5c1ed1645a9fffb6d65a805648e

SHA1
3da2c6b494f1faa462703a6aa24e3fc03928cd4f

SHA256
fe51f603a4e1231e0f3e0f210591b9522e4085ff1c1c80678293634fb755a69c

SHA512
7823c160995f6edde7bddc21cad24d6339f3f0df9c684e4813378e64bd7e398ddaaf59f9e5b7a1e3df5646ca19ad37c327c0d2d43f064dbd13f563081fbe3692

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
f1d662a156cc847fa0307e2e4dca2a2a

SHA1
40ba7038062ba9a554c0dba9d066ef23625ce15a

SHA256
85ff7d2de86a82bb0fdfd98cd6640d491a89a0b558d3b6cb1eee9608900d038b

SHA512
3115770b8a6dd30769e0efe43501bc014d1e003911a157be9e363e4e13aa352269abbc4ba99e89e1bfe163ddb9193b11fc83c1b16db297e21850a16d37973edd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
0d5e0a1cd71c68e8dc0584ab295ffa4a

SHA1
61587c9e3577ed2128abf39e8a26da9f7e2fe611

SHA256
d4af8c8f041976faca7d7d0fb3513e55e6bf58aeeee40bbae1d448577934842c

SHA512
b478648250249842c33bf4af85da4fdd4e39a6607fa8fc34594ea78b1e7c0c0d053c4a7f6ce1a4ff546cec603552f6c6884c4e0179e24a5a2d27bc1ff78bcd48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d9c2a75495fdc06e56d0e23efe7f1926

SHA1
93131b294de30e4b2ff5214381034c86451c90af

SHA256
994b1d160ad0595472f2bbd343bc017fffe59683848d871c02d17617b282be3c

SHA512
7d4bd61edb70171b6e80c053ae2cecf760accde897ae6fb91cdab79f0e5d50d68efed0b499528fddd0893d1e65814869cacea6a9c8bc72f14f3113511d5666d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
342dd3d93110d1ee66b3702c510123ac

SHA1
7894f2d491208b3cd04dc9f976f03dffb0eb597a

SHA256
22bad10ff9159a04ecf5862d21dba11380b0807f5746a499611d1171d9ff9db9

SHA512
00dcdc6739676293d4836df48753c687b6581ac048584b7425f6d12344d0abd467a2bcfe7a492d5f2746c9fee7b8b85cde99613e384eb8ca025a1970dab765e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aaff8572-d2e6-47eb-8225-9a5449341314.tmp

Filesize
8KB

MD5
f220da0f10bf683b068eb71df2319b1b

SHA1
c0045966993c065fb5efd134d519c198d7b13c5d

SHA256
07a95415c6ab8bcb04cb2cbd0248fb7e256a64261c6199034dd1a6563866d430

SHA512
d0eac60e6d265c13a3e317900df2255933d3fcebda1285b2e157999c4212064cdebdc8f0e23d249457d4c93410a3654651012ddc004de4874855f8b3624389bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b3e565026f495f97fc20c80d00fd6b9d

SHA1
abb0d9baeb365cbe66b4376adafce4235b66dee5

SHA256
c28cd6027f243bd735cec5c4d8a2fe9544eda105aa24acea051178778c4da125

SHA512
3259df01a61740e0fd9afd5bbdcc5bbd7c2bca036583ef5cb150a0519c5581bbbdf096c742bf44b739f472db807472cf9d442a7a7877e752f2b1a94cd962e61f

Download Submit