c0c9a39995567c726bdb5cc92b906fab0409e65f796c097d855b2b62b9cd6055

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/08/2024, 01:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8878bb1e53b8a3b4a328fd9f1f101a63_JaffaCakes118.html
Size

18KB
MD5

8878bb1e53b8a3b4a328fd9f1f101a63
SHA1

bfc5006f3fdba6b69ef32ae06452cd3550628b95
SHA256

c0c9a39995567c726bdb5cc92b906fab0409e65f796c097d855b2b62b9cd6055
SHA512

d8607939d60073d2ce571ca420e6e7a96521e6e284728a8bc357b8ebfaa2a06926d82b20784c00772097a2c911c7268ffa625f307a8048f97cf2369129e17935
SSDEEP

384:Y8Ncosrd5LeSwe0smGtQ9vXsbYeVHaZN4159CwgJ2:YIcosrd5LPd0ZAQ9v/bw5

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
916	msedge.exe
916	msedge.exe
2720	identity_helper.exe
2720	identity_helper.exe
5820	msedge.exe
5820	msedge.exe
5820	msedge.exe
5820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe
916	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 916 wrote to memory of 3044	916	msedge.exe	84
PID 916 wrote to memory of 3044	916	msedge.exe	84
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 1408	916	msedge.exe	85
PID 916 wrote to memory of 3992	916	msedge.exe	86
PID 916 wrote to memory of 3992	916	msedge.exe	86
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87
PID 916 wrote to memory of 3372	916	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8878bb1e53b8a3b4a328fd9f1f101a63_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaba0546f8,0x7ffaba054708,0x7ffaba054718
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1996 /prefetch:2
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,10158366759900534972,12181488178743770937,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5080 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
210KB

MD5
48d2860dd3168b6f06a4f27c6791bcaa

SHA1
f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

SHA256
04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

SHA512
172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
eaf496fbfb8c33074d8adf8664b71cc9

SHA1
f25dd80b3bb0ee3d20d84b652e18e28da10e82d2

SHA256
9db66ca3c90b1d8f81f204876b7ed5082567844a05b6e3736f7b09957f915d43

SHA512
8cd446f5832aba19710a1e1778cc4e31c109862c0c80891f3c307d79fbabb2203e7a6019368deba4873bd055a8a8629c33146bc43a4bd161c6d54d9dcbb4e598

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
6830e0403f4d683fb8141f0e6c3986e2

SHA1
5b3d6a393da74fe9d762f79b71bcc955a9cd1de6

SHA256
a0ba1dbf0b1b715db3477714c8b5afdaa953a6ca40c4a937c2580a099df9ad49

SHA512
4db0f2ed10da3fbed241b2ac357e799dc46e6d8f74322f8dc71c8b5efd9d9061dae4bbb7529f82a8a12cf6f18e89cbdcd6e00e6df02de77f4b573185fc9f7b2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8c89ee1e210612ac08d0ce034746bddb

SHA1
81b2281e6c4930056512b9252b389b62b242a935

SHA256
8a5609b152ba00c1629afb4cc91b88819de1b1e92f5822dcd0b0f0638b577827

SHA512
781a6bea408b2579d0b08eb15dfd00cff690dc84f5b7d2e9e041882ea70c73a72570be2f6cc27c9f9804da55caa85253855890f2122734af713790225100134d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8503281a919a75b3495ea58db0ee9aa1

SHA1
1ef65ed4cd4b21d949ffd577318421e8c551b290

SHA256
48056e56d95c48dce2227b3b57b8eff4197f9ca7d6eae93bd5280865ce0850b8

SHA512
c80da67a51a09ae5d7f84c39d584b4bae17b888506d3e8c4aa0cdca1f002bfef2fab76fc59de39f60f2b002cec55d5b2c17367b05001a36f2a6fbc94f7f6898b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d88074620a4f3fbf0fbe8554d3844904

SHA1
9aca9b40b1eb5d80c83e28c34bff2fb0cdc55764

SHA256
b7d5c1adf66ab17c527a5398db272d01581bf27b8423667219043e0c94ec1ffe

SHA512
7ad5587e31c1eac8953d475d36dc32401f13d153035e68dd20500f8dd6d4a28e9e8fa959f6510a19e751f9e4e33bf6556a5bf1aa563d56dba5289e2b64bdc0c1

Download Submit