49df2152c60132298081251e15b4f745bedf82fc90f0b24360a1d43661fcda58

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07-09-2024 20:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d2d3cac1cafba55bc9606cde3c90cd28_JaffaCakes118.html
Size

144KB
MD5

d2d3cac1cafba55bc9606cde3c90cd28
SHA1

bf5d04b41ed4a8eb8206b5291179ddc7ab4d1ce3
SHA256

49df2152c60132298081251e15b4f745bedf82fc90f0b24360a1d43661fcda58
SHA512

c9e8cb0e728a35bb034b835cf71b65cc4de873c361197dee780883c42bcea83fae32c452dd0c383e2732b3d9850fc23ebeb4381cec5713166fa9e69e453cbeb4
SSDEEP

1536:qCC+yfE+2xzFPP3ck6EL7DNjfcLx+YYO8CZW3IhfGB9qqt6w5KB1MwrBjOn9vNbG:pzprNS8CZW3IRBuUkn9vNug63J

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe
1044	msedge.exe
1044	msedge.exe
456	identity_helper.exe
456	identity_helper.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe
4744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe
1044	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1044 wrote to memory of 3344	1044	msedge.exe	83
PID 1044 wrote to memory of 3344	1044	msedge.exe	83
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 3572	1044	msedge.exe	84
PID 1044 wrote to memory of 4132	1044	msedge.exe	85
PID 1044 wrote to memory of 4132	1044	msedge.exe	85
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86
PID 1044 wrote to memory of 3904	1044	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d2d3cac1cafba55bc9606cde3c90cd28_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff84d6646f8,0x7ff84d664708,0x7ff84d664718
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2220 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1944 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,17438327372510821381,11729690461995064053,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54122f37-7b28-4333-b9dd-5401038276b3.tmp

Filesize
914B

MD5
49fc4b0890939fea1046b119685cdf77

SHA1
5200b10013126aff3ffa2f820f1763959ccacd0a

SHA256
c4c86cabadf8c465af44b8878c5f259e4bc9d8eccb816827d574d9921a867fef

SHA512
c836a77cba3bda1ae946f0be00343a72fc48290a62cb635e058b02a1e3d9e2bdfcc0b8c352dd6b61eb4eaa0c1445ea18317af82db522e627101550cd9d47f8c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
05820341dbc69cc6d6d64836b1587b72

SHA1
37769bc8bfe2503cc94e60fb455911ab10595b37

SHA256
b3867718d34abcce004eb531421df828fa8cb606a262b165dc0eb98cbcc373ef

SHA512
e40260c422869dfcf37d861b75777a29ca4d701288dc64573e1a157f51a7ff8698d3ef7febb04d965213385ec5bbc8f336ea08679ec95e87659d805cebbfb43a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9eda734ada1ea25b38ceae76aba834be

SHA1
694d6ae72b31bbccd0f13cc7cd929df24a41f8cf

SHA256
269fe7d5a56460574a93e3c09e506b9f70c198ab220fc3115bbf54bb3209b1da

SHA512
4033a8f12585aaa2f32c487c985acbbf2fcaea8d09a73ba81ec9ce62866ce4f28a9be94b5eacd3d4832a547148b0fd3312a3d7b4890c7b5f29117f7220b00aba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
63ef39f86bdb80cb30602581acfba53c

SHA1
38bc8d995b7a72dcff59f5edad6e5337c030689d

SHA256
86e9e91adf4b7a165126bd5d4245e45534be71df20ec28bde15542a06346185a

SHA512
dd4f4582a6873258615d43c4d7500d133845c39e009dd1e3c6da2eca52882ac673acfd7a5ceb4ed15d549fc233ef372e2b793cf3d2d769903017acabbdd00fd8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d2a68a44cac13b1575998515f023c63e

SHA1
8f538f7a7a2778b4db830e71db4bcb6c60fe2000

SHA256
7193f61a9c6d12e1f3b12a8d20bd009bd27df73427ff56d5f7d9246594b926bd

SHA512
29589de6fbff19f08b3a2084e48c946954ce6519160a4c09b4d85f470fa6387110a80e297395959f894be572daa6344563173c1756fc070dbd9acf9cf0825a2d

Download Submit