5e3199068ca5b1f0efc6e2b2eaa5fefa9e27c5ea6c9b3830a6fb5956821ef51d

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 17:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d4eb78b6766354f9e07eafe32b5261c5_JaffaCakes118.html
Size

68KB
MD5

d4eb78b6766354f9e07eafe32b5261c5
SHA1

54fe6811f86bcd02e8afff9bc491f0b2b28b0d83
SHA256

5e3199068ca5b1f0efc6e2b2eaa5fefa9e27c5ea6c9b3830a6fb5956821ef51d
SHA512

4f8f8d68864affa8640509c441b5001f33f48340daf64dd848ae8fc78ccc125e6c4ea9af13715ba5ee152382c9a327e67a70e0838e8ab4e55cdbb53a084a19d5
SSDEEP

768:JijgcMiR3sI2PDDnX0g6rLYevoTyv1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVG8sM:JpnTTcNen0tbrga94hcuNnQC

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
2288	msedge.exe
2288	msedge.exe
2688	identity_helper.exe
2688	identity_helper.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe
2392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe
2288	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 4792	2288	msedge.exe	83
PID 2288 wrote to memory of 4792	2288	msedge.exe	83
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4384	2288	msedge.exe	84
PID 2288 wrote to memory of 4220	2288	msedge.exe	85
PID 2288 wrote to memory of 4220	2288	msedge.exe	85
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86
PID 2288 wrote to memory of 5104	2288	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d4eb78b6766354f9e07eafe32b5261c5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc6c5646f8,0x7ffc6c564708,0x7ffc6c564718
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14378344243594776635,14710675723184666657,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2660 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:184

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
53bc70ecb115bdbabe67620c416fe9b3

SHA1
af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

SHA256
b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

SHA512
cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e765f3d75e6b0e4a7119c8b14d47d8da

SHA1
cc9f7c7826c2e1a129e7d98884926076c3714fc0

SHA256
986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

SHA512
a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
212KB

MD5
08ec57068db9971e917b9046f90d0e49

SHA1
28b80d73a861f88735d89e301fa98f2ae502e94b

SHA256
7a68efe41e5d8408eed6e9d91a7b7b965a3062e4e28eeffeefb8cdba6391f4d1

SHA512
b154142173145122bc49ddd7f9530149100f6f3c5fd2f2e7503b13f7b160147b8b876344f6faae5e8616208c51311633df4c578802ac5d34c005bb154e9057cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
493e33226e5e575a9e30cc7636e74220

SHA1
1d6a4a5fbd1b9ff35c78ca4b5b3206c7e1b08264

SHA256
92c2ff6df6c8e947e290ea9ad7846d9c1c1a2fdfd3e1d62d6dcc65c819d94184

SHA512
eb61e5b070d83a4bf769e8c4c8da55d6db0218186b2ea040dec8851a129b2ce62adff1945376cf38136677262b73fc0313230f5a6dfe7768c4553f709ad7dbfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5f0494373ab4c0c9fc5960568b9682f9

SHA1
d8d6a1b2dcf474cec01af36c306beed68328ba2d

SHA256
189300cdadb03fe0bbbdada7106590df1c3427a6d920ad76e9249ed8b30c996b

SHA512
354a6404444750159e2df4334ef497abeb8633fbb47c8dfc18943bc910bfad3014046623ef5c5d22508920f864463eac03318b1acfb86e6c8b764f57c69358b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c7738446debe4386ef7664774d61b2f0

SHA1
736b14b0647a45b3e95cfbfb382f10c104cc0455

SHA256
28058ff034630fcf3c35e15f2b2fb34908f4afec9cfd5bc5cd0ca8f0460a93c1

SHA512
84682884bf86c19ae04db9735835a31cdfb71ae39c07c4b5d3d109ee3d871fd2328d67a4fc8b8b320467f16d1298c5c4dc6d0eedda937c8afec9a98a1c448853

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
354bad1853ba8d1979adbc6276d08cd7

SHA1
7a6ee2a481cfe23745d89b9a02ddc0ae772eadaa

SHA256
bbff6feb1012478949d44850ed1f275c3e9f7bc7dc314394f0cd839e70299ddb

SHA512
708cd4094902d9e4f4f402d7b5cbd1efa6ff384623dd2c9eaa25ec64c1cfedfc40d0854f7dd018a1295c58ae28ac0ded0fad40b604ba8fc5977be56b2506d2d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e617ae812970a8b842313e5241e32baf

SHA1
e4b26d667042abafec55ca909e511fc1a29300b6

SHA256
95fb8a4a69da94e0547832782d82b37ef389ff2dbe13592b57488afe01236f48

SHA512
519e6e790eba7c9f9546031f838853a3429cb9c1a9f716ea08c68e4b8fc64d49573b0f652799dd1cd3f09f117a8f33609ec23ae0282024d7274cc55cbc96dc2f

Download Submit