2f12212a301ad492f303a71827e7d4cf161a6e7e5c41a7ec37bd24e93c7bf962

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/09/2024, 12:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dc49bb20e0a998909a2927386ec7bb9f_JaffaCakes118.html
Size

54KB
MD5

dc49bb20e0a998909a2927386ec7bb9f
SHA1

993da17c8e7d0c1003a013927e6e7912180615b6
SHA256

2f12212a301ad492f303a71827e7d4cf161a6e7e5c41a7ec37bd24e93c7bf962
SHA512

3630d8681797a32b857f54681936c3cfdca8fd29e5d003cda5729f922ec7a93c09dbaaf04e1deff272c36b28cd3efe7b7417eb43680fa6a2259854416e26491b
SSDEEP

1536:VEijZeqL6EijZeqLK3EjNVG8OTcg12ug3FS:VEijZeqL6EijZeqL2INVG7Tc6g3FS

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
984	msedge.exe
984	msedge.exe
672	msedge.exe
672	msedge.exe
4616	identity_helper.exe
4616	identity_helper.exe
3176	msedge.exe
3176	msedge.exe
3176	msedge.exe
3176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 672 wrote to memory of 1112	672	msedge.exe	83
PID 672 wrote to memory of 1112	672	msedge.exe	83
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 4596	672	msedge.exe	84
PID 672 wrote to memory of 984	672	msedge.exe	85
PID 672 wrote to memory of 984	672	msedge.exe	85
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86
PID 672 wrote to memory of 3644	672	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\dc49bb20e0a998909a2927386ec7bb9f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff88fe46f8,0x7fff88fe4708,0x7fff88fe4718
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5588 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,10895754603521447046,15707368754758649011,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1336 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3960

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
23KB

MD5
a0423f1305547bb6b8f5a4fb1a9fc2d8

SHA1
092dcf1fe57e6bb53821eb754e04188ee70602d5

SHA256
6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8

SHA512
b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
9447e492285c2222ccf0432db52f2c84

SHA1
1ac934d8058184d219824489f3a2f2f87c4e959d

SHA256
2f1b7aa7db45d1a808b764385216298b46b99d4ce2b9254b714e582edc895644

SHA512
b3b0545e4607bd8ceacf732902c72d9842884bcd35b33c9297685bb3197a0365e8bfc606179c647915f38090caff985cd890c00db81feef8c7f083eda1096d00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
1719ab3b8db53bdb1bc08896b75caf6a

SHA1
df4432decbb08d03f7eccdb18ef7dccf4026f243

SHA256
379d790be725a479d3e0c3772dd82138d89fc8e4ae38fa80a7847cd925fda0d8

SHA512
6e931d85e53155a47f29e8d372f8d2b572acbf083dd19f4be81f8004caecdb52f8aec2a02dd5df76a17ffdc264674f609913cfe42729383c7740f7d88826f9d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
fc573dfb488f596a912a6fd590070558

SHA1
87938381c422d7b7c9139954da4b43af094949bd

SHA256
eaafb2895c407fd3de887fc8216224322bd013becf950ee0b091a12e0dd5039b

SHA512
8cc1ffcb4e2e1aba6cb1b372a42fc061a09e1a8cc638564dc8430a3985f5b3013bd46ae5744d2f559abdae9ee063ddd730619ae2ab1423a4d517826377762ea2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e5c89c14668ee4a0d65344e0d0120fff

SHA1
67f158cbfd318c634c8ead27a0be94735a73bff0

SHA256
1f64657873d92d1da4ab9c758fd0bf3b3eaffdb81308c9f813ecad16e2b0847d

SHA512
f1cdc3fb56c5ed671269f3cdad6305b268bb0b3e1175f8bb986e770a469b2d5009b406db582019d7a6c383e7253daad440b06c7a9f2c807332be28610191d4a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d0fc64fbb414dfd76c61bbd2c0fdd3f3

SHA1
253345c2242ac424485ff0d7c52c09c5aa13fe19

SHA256
e26f826e024adb1cb2ed59516c7ffb1c4ed3c988e048f4f95f641562db68f411

SHA512
e881989ea01da0f3c7b83984213e6e8741c709d68449e074e7eda85f741719823b251094806f9d90846bc9ac9d4ab7141e25fb07f7db510e7534053906c66a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6c5609d9e59ebfcaf4a7989906d80d4b

SHA1
add0ae27160bcbe146f93874911c5dd6a9a789ae

SHA256
4c778c77e1af47a89e20eff96e739e90f64210bbea18670b2ed20961a7b905c1

SHA512
ec2be7d6d5eaac2e57990f9a3fc390375f149b5ae439dd75614b99568c731c04a5fd43f247ce8acd6edadd37741ba055f72834bba4f9cdf68e785cc67e9a28dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
af918b2ca5e60a41c6f3c4a4a38e99a3

SHA1
66554022498d8371f93e719e785b36b29799c600

SHA256
b57ec0d1908a699d845b57a15af430ae6b5dc267cf4033fa01a9f24405f24355

SHA512
cbeace005f5b23fda6bae28cc6bfd95cf22ec0fb4f08294f56589369f4e10163e3f7734b140686310ace6dd665433c7287a6b9bfea28f31648e9cc0737e84386

Download Submit