016de9424b2013526799247f6d836e639010a33ed398e8588eafa9103325fcb7

Analysis

max time kernel
146s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
10/08/2024, 16:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

86b92caa5b49baf1a7f726ee414f0cbe_JaffaCakes118.html
Size

22KB
MD5

86b92caa5b49baf1a7f726ee414f0cbe
SHA1

f3ff7d3b908a56de5f27b3142522f3ce4d5bd1f2
SHA256

016de9424b2013526799247f6d836e639010a33ed398e8588eafa9103325fcb7
SHA512

d38f5b34e945608cf84df56f606263f0a8ce99891097aed3cb474b80100a2c0884536a6d184a8c7b85f7bbc9ef3c3d74307aa74e8e47313d263f4e9d40b77820
SSDEEP

384:RfRIjUDGO2G9kLL9jhgvH65GWpVEBdJ11vFlFt9kitZbRJgR5MKxv8HgTBdCjrkv:RfRIjUDGO2G9kLL9jhgvH6h0h4e4RWKl

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
3964	msedge.exe
3964	msedge.exe
1820	identity_helper.exe
1820	identity_helper.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe
3000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe
3964	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3964 wrote to memory of 1776	3964	msedge.exe	84
PID 3964 wrote to memory of 1776	3964	msedge.exe	84
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 1236	3964	msedge.exe	85
PID 3964 wrote to memory of 5116	3964	msedge.exe	86
PID 3964 wrote to memory of 5116	3964	msedge.exe	86
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87
PID 3964 wrote to memory of 4764	3964	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\86b92caa5b49baf1a7f726ee414f0cbe_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0xd8,0x7ffaf28c46f8,0x7ffaf28c4708,0x7ffaf28c4718
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1304 /prefetch:1
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2232,16333519039070731885,16970793613672622828,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3620

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
f78dcc6b0a051e62dd139506771c43f7

SHA1
51d4746db1fedf9aa073ff3b2a8ac6d7aeeade27

SHA256
ab0e59848ad6f41bd662537218f98f4643f7db83b3e6a3ddb5f12f9adb83794b

SHA512
ce57ae48c0424ac3d27536fd69247526783af28226f6a10172cd741857051da6b95266dda8a07caf93b10ab7b578a3e62b0221b407a96ccabca703ba63cf79ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
576B

MD5
1945da419cd57ef09717e4ce2d33edd4

SHA1
283762cefd2133efc76268cce9c3415b9370c734

SHA256
2af759196df5540a2006d75e93b6d784d521924332fa8a25c115b2acf6ecf7e6

SHA512
6ba86713ca7bc5cb4dd69b7e153544ce4b5addc0a31ac94914c4923576de37cda28ba4a87903d8cbfe8afc4f25f7ebcefc73f98d5bcc483781a0f03f9b15e2c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
842B

MD5
f5cde27f8998415141b09c20de320180

SHA1
2280d37c1d592ae993cb7637549eea6f1d76ea4f

SHA256
fbde19ba5171be9735006f874b91b95ff459f384e8e998fa1ff56de6ada3ccfd

SHA512
1df68bf4d03cada7cce8664cf687b69358d36782a39e13572b8cd01c8115afc1aa74d3b5c892e3de1a08e3129d9b78fc8012850bc4bdb8494d3f5d7d2f9d59f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fac9e355121f6dbd8f70f9df5d31d82a

SHA1
fad4b551b740e6ba112666ebbba7c4f70fa7f7d9

SHA256
2764a4754e8bdab468096edfcac070976c67b0dd4bfb39c8778df757d8599c4f

SHA512
8295f1ed084b57aece08395f6fe7090b9556d74f62b577132d2d6667d8ce94c4600efdcf58fe8d062255c0638beb4f7d6f3cef635d7a996b4b67a6579b86a583

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7ff0d8de7f1f768c29f17dfc2dc5c38b

SHA1
727d2e4a05aa8467ce05606f759f32f2173f1c8d

SHA256
c7d8a4dc93edfbce471beef56d94c1f4bc12b80a6d1a61ba5a0ba64b0795ce98

SHA512
e2adb914fb66b3a7802998ebf44a99baa5c7f5c1931e9ac7f3d13b837ba33a88dc1152737179093f9dee4d7b603fa334d5937dbd43e779c6c4c2980383c110f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a8c41b49-88bf-4a94-9947-6819d1d7772b.tmp

Filesize
6KB

MD5
3c245ee4a98a37b6494c45a476cef360

SHA1
a434b57613e18dd00bfb12d62cc38aeac7ee4c83

SHA256
93df2d97ea5500e9277b77964c22fe6979f565623c40edd60ebc4ecfbaff5a44

SHA512
6d20c7557b86dd3190adddbccb273bb610c054696ccee915b0ac00379e6e5d7913290851f8008018f3d2b07bb5336eb020c44a5fbd3875a882dea6ac2825993f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
c051809f4e84d0d04f6c6024dd402904

SHA1
9efbddcc5840513da90d7285a50890583a983282

SHA256
dc64e8b8fdd587b66e819375fa2696d1c7a9b5040b051a35dc585a565c79e464

SHA512
b86329eeaa8da1d87922808e7964dd5b5a39d647ed28e57d07d19aaaac695e89db63363626c1d3178cee7c3245c8447da5e9c48c19ee7b45b1e61950e72c8060

Download Submit