e4bec3412bee5680889ca69d6ab9a07b6b2709f6adca3b812e0f56a11f5cae9b

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-09-2024 09:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cf47b464d10cc511e3681336a1f96f9a_JaffaCakes118.html
Size

132KB
MD5

cf47b464d10cc511e3681336a1f96f9a
SHA1

ddb1ecac4b18cdbc6c2c547009c202598fa6b7cc
SHA256

e4bec3412bee5680889ca69d6ab9a07b6b2709f6adca3b812e0f56a11f5cae9b
SHA512

2685c73638353d2ae73344d44e00b17e2fafbfa0a26cce1c88a843530197b3d4e3678f7bbfb8807262f8ca6b7b0e6933f860fec77ca7c2f7a36ca0f36c7f9308
SSDEEP

3072:cW2ALzeMRM7/vO4eba9ZPq286/0++EZb7hUCloczBnVjJTVQM:cf6s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
808	msedge.exe
808	msedge.exe
1352	msedge.exe
1352	msedge.exe
5092	identity_helper.exe
5092	identity_helper.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe
3112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1352 wrote to memory of 1672	1352	msedge.exe	83
PID 1352 wrote to memory of 1672	1352	msedge.exe	83
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 2260	1352	msedge.exe	84
PID 1352 wrote to memory of 808	1352	msedge.exe	85
PID 1352 wrote to memory of 808	1352	msedge.exe	85
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86
PID 1352 wrote to memory of 4316	1352	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cf47b464d10cc511e3681336a1f96f9a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbb4c946f8,0x7ffbb4c94708,0x7ffbb4c94718
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2540 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2664 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,13825491425627926792,9559856794215629460,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1092

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8ce1aa81-f0d6-4395-b53d-3188e23edce3.tmp

Filesize
6KB

MD5
7d2377a6fe57ca9538e76a7ad5d01f76

SHA1
0f40aaea3f3d4d437f90143a1b4d8fe7b0ee822e

SHA256
35766ec59a17302232e38122cf8aa91a5b0171dee8be6dfd71b6f3674f01a428

SHA512
d37c2ad65104e1e358d0a25f127eb6b2ee197d1cb1cfc45f8816eaacf65628bc795b1bb55efec5a2cced516ac5a36d872b24b5cd93001f553870f49faffbd51f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
5f3c76f861593032bfc3427c9d9d94c6

SHA1
d2a3e640afbddec6bc0fbc72c53301b455e2405f

SHA256
94c5d0e18853690047278fa2942fa447c1a67f6b329bbfb8b163eff77c4ca4f5

SHA512
5094fe34cfc47d77d011bfea6fcdfb26834a152475fb0e653cf66aa1e2499fb0f80a1c3e58d1d84fcbf1cd05c37e5efff6eeb882e456730a06f85d2d419057c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2f041afbde6643c7ad579d5197f4dc0f

SHA1
d9ec8f2525439a9bf8c680ce9831835bdc683f33

SHA256
04c4c8e640adecf64d88e23fcc3b951a504132a603ac827976a61deda31ac779

SHA512
259e71e21bfa75eab8b4154a8caa95dc27c1df4ebbf0a511d2709b7616109a65d120f0090443a6e8f06a2276d0309f07fea6b6a6fd6e4f40d00533bf1274cad4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
35086a8f758d19fbd2ff9f4b5eef7cb6

SHA1
878ec3337be4d9b99aead89a838cdf0fdc47cfc7

SHA256
d1e771c8c518db987e49ad35d1a55c39e6324b52150ac4a8eb02490915357458

SHA512
f19a250d79f53b67d57150bcba8930b35f05e94abb33e0b716f53c6d911fd322b986a1795cb2af16ecbd72987ac11faca3435be2993257f54b6fe499c8d20203

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9ed3a635512882e254886a4c3ff9b298

SHA1
de14d6beb2396bb608322c7bd2445b1184dbed06

SHA256
8f7439f7eb5c61857b099453440d12e0540df4d367c4213cac05da3c09f0ff18

SHA512
117f6685e80e7815c8424469484298af0b9b04c14115c5930a52bdd2746327c6da2b591cc374615b0ada978359cda5195d2c24e2752019bd7016bcc00329ae04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2f20d724edc426c7e50f1c7b9ad71d00

SHA1
cdbc0140472f40d5dc10e27a236eccd55aea8a1f

SHA256
8ce119fcf8282ad0927444f0ec0b847cc427ff94a0629dc0e6f0f5837f5007f6

SHA512
f5efd3b9b74ae059b3ca13e7e10a3d25ce79016376fce104a9ac0a02a0e4b5ae09cd3ad1f39d2197528fddda8c10ee4a86f488f6758f2427e07b3d48c878ea57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5a40fbd167b3ebc44aa15d39757ac15d

SHA1
6154db59c7b182c6a3cfab1fee227957798de766

SHA256
6044a02d8d1fe6cab86e5a5e33a3fabba180fde7d0a88f36bf6a39b02e48be9f

SHA512
57f0b906854931827f05b2e4ed298f0c42b75137c1dee43b984bdca0f27109e098ecc269975a25dfb759f04f62ed36662b0bb5bf510e8fa59b7bf7b6d00b3e80

Download Submit