10bd57c19f1bc3fd39568321e7b243b09372e1640318366802193edbbda4f023

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
24-08-2024 15:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

beea7915ef72be52e12f2631811b70df_JaffaCakes118.html
Size

68KB
MD5

beea7915ef72be52e12f2631811b70df
SHA1

7db027ccf397d2619b2f64f01bf948322c32b67c
SHA256

10bd57c19f1bc3fd39568321e7b243b09372e1640318366802193edbbda4f023
SHA512

531f5cb2d6533f482d0da5fd05182dad1caed0aa7f330f3f33c933bd450fee3fc2c449616effb38cac5b8b1ad04486331da7f97cde9d2ec0a5e1f63bef26bbfa
SSDEEP

1536:CCC+yfE+fPfZTuIWdBOQ3iZhm56/MHi/95egxjx42Ar6nCuRuxP1AWiM+qonuqzJ:gfNFkA3J

Score

6^/10

discovery motw phishing

Malware Config

Signatures

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc
52	http://hawahome.com/

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
2280	msedge.exe
2280	msedge.exe
3520	identity_helper.exe
3520	identity_helper.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe
1116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe
2280	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2280 wrote to memory of 5072	2280	msedge.exe	84
PID 2280 wrote to memory of 5072	2280	msedge.exe	84
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3912	2280	msedge.exe	85
PID 2280 wrote to memory of 3244	2280	msedge.exe	86
PID 2280 wrote to memory of 3244	2280	msedge.exe	86
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87
PID 2280 wrote to memory of 1144	2280	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\beea7915ef72be52e12f2631811b70df_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe955646f8,0x7ffe95564708,0x7ffe95564718
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5624 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2208,9698584048185783773,16274405372648166258,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1772 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1260

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4196

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f1ccf20c408e40290909788fcff84932

SHA1
00b0626b6fa09f12b51c4758449f72e9c91846d7

SHA256
b14397ad448acb806230590fffce9aefc2f19ff9c28ece2f5897d97f2a5a82f3

SHA512
f0715037c4f540982b30ad3a334bb42a1dcb6cf66e90a72e4adf3c4b6f13ee2a3ea62e52ccffee2049157f434fe9ca495ac25080869bc5034456fa16b05e4c82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1cd63a2dcddbac89af770ef99fe4108d

SHA1
90d3a1670b085d432e031452f6750450049a3bc1

SHA256
b6a7e9a399c41e578ef9877c601d2a88c21c343f997a1d068499d249f98ea598

SHA512
20b4ef304b6eefb70b57848746430bd537df5ee7f60dead68a4183e234bb8225b314981d70d7407fca9b15a5d81c350bd8f18fd69f5e86a8ef2418062558eb57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
86f10466069e531fb929cc018b231c32

SHA1
dd4db738362e62730570c7416c5cbbad25f29d89

SHA256
215d8225681a824541828fffa44d7fb6365b23322090b1ca3967a315bf9d5fbc

SHA512
c5945ad12284c99549cf2b63d4619c903f667dc3cccd985cf0047c3e73f5387f7782108ece0267cb5655ba46b567cbed3f40cbb3b442b5af4d3dcfd160b376f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
29e0dee37619aa48f6491220009f419c

SHA1
be7b394b8cd6fdef1e7b42357e60086031f9d5a3

SHA256
67e0c344b508af043e84c6bd4dac3e6dffb80256b77ec625aa92f232efd62b9b

SHA512
ffe719d89bc9e7185f810d66c49cdc3b33d1a149133bb252679a8390dc51be4ccf898a4bd237b2d2b23e870eb38e3839e4d0b0039e5e86e5067088142da3610d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
d57aa00a94bd2624991bcac46cd8a8d4

SHA1
8c64586fd501d61a484355d59d9d2082c301f0ea

SHA256
19fad4b699299f7358682c43a9952e94c83e75979beb57a07457054069a357e2

SHA512
5947ce67b5aba086d63c2bd725b1742ce528cd33987c251ed4952d7acb0a7b251e12547d03fb936215a413dfb0b6592a29dc666d66cce46ac56d6a57c697cc8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580d78.TMP

Filesize
370B

MD5
1f160ebc2b95b9bc0ac43a8bd2dc26a8

SHA1
c3f0e087af8d390f7713e5c2e95f68ea46cc72c7

SHA256
44ffbed666a0658b8d3fe0a4d614a0f6264b308f0116799a5b1b0aa3f15818ed

SHA512
8f9a1406e1b746afe0f208e71f343976a3068664982942d9a8322ebb6a207a41f45f1009d42c6f2b0f809cc3224f2fab6386dd3a52771721170fcd8563fc51d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d971d23009ce38ffa228e6c91bebddc8

SHA1
5e6ae5fb43fc8929fdeb84192c76164c41555b8d

SHA256
09d778192c311b62e059b1ccdabe077484bd6a267e0a17d6fe4421767261cd8a

SHA512
fe80f43c59cd78e80b9e026639cdd4a388ec868abeebe83c1e53c3b49113b8282b7fe6b2fb78445d57321b886677b449c8c80e6db01233508b38b014c97571d9

Download Submit