3ef43d3e14bf5aec5decba2cf54d437f09d18bd6f4d8dc56534cc6d1b7b6c55d

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18/09/2024, 20:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

e9f1a35c29464c3a76f90535a5081639_JaffaCakes118.html
Size

240KB
MD5

e9f1a35c29464c3a76f90535a5081639
SHA1

779cd6a63329e686916171b78de4bc5ea0e24275
SHA256

3ef43d3e14bf5aec5decba2cf54d437f09d18bd6f4d8dc56534cc6d1b7b6c55d
SHA512

be613695904ad1c84b4bcabd1ca31e1f065b911c50e4dd2fd55fe39d98d8ca0b79b80dab731285c4bf418af15e44ddfa57ebaba8cc5ccb03d69f74db18e64238
SSDEEP

3072:gZ95Uz6LU/jMxeM+c1piDYZSexkJqTxLheFJhemYKGzUNvnBNVQ1ZG7p/Hkt4F2q:WLYAeIJJUqSZ

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
4728	msedge.exe
4728	msedge.exe
940	identity_helper.exe
940	identity_helper.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe
4728	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4728 wrote to memory of 2892	4728	msedge.exe	84
PID 4728 wrote to memory of 2892	4728	msedge.exe	84
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3048	4728	msedge.exe	85
PID 4728 wrote to memory of 3076	4728	msedge.exe	86
PID 4728 wrote to memory of 3076	4728	msedge.exe	86
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87
PID 4728 wrote to memory of 1524	4728	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e9f1a35c29464c3a76f90535a5081639_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffdcac46f8,0x7fffdcac4708,0x7fffdcac4718
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5968 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,547455713660122177,2690127105010544181,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4776 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3740

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eeaa8087eba2f63f31e599f6a7b46ef4

SHA1
f639519deee0766a39cfe258d2ac48e3a9d5ac03

SHA256
50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9

SHA512
eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b9569e123772ae290f9bac07e0d31748

SHA1
5806ed9b301d4178a959b26d7b7ccf2c0abc6741

SHA256
20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b

SHA512
cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
461B

MD5
e3e54ca4d1f9d5936627742fead5798f

SHA1
df616b5a7a24e27efedf037f0e2ce8c88acdec50

SHA256
7502918d2f0f091ceec523924ec23302e850bb0a6937fba90f86670aa1df40e9

SHA512
79c4c5635823e6064b27092a294059ebb308d1b06e481b9879a06b12093a8e0dd54bbb0794230f2790e6347c3354e07714d3c94aa557c7da048d36c2df5e3cfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
dc2fa3fb5ed8c2140ee5214a2f42d572

SHA1
ce4ac5bf35640c64bf6266bf135181260901e5bc

SHA256
94d1f63346043a0fd6d792458b3ce61f3bcea6a586e91002a04c76ed052119f2

SHA512
f3b9cfe0d016e6f9a11ee0538e9d1508d9ef898e33ab161baaef09985df32ec58a985312d57a8367524eefc7ad9a025682d5f2add0eab5a725b57c8c95abb010

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1335222037e08c0332d8cf5f17dad83a

SHA1
65519bdac6284ff57d771dbf7d2a54bcbaef8b5a

SHA256
ff4e9181d662bcbab1da1bebc2cec88a1fa2e9d8f3aac38f7c9b9702bfce6dff

SHA512
3d34da3e8be5403841b9f8f721e25a146a57892b50922d4736e4089744e6a6163f4ead70646a32c2ed9740d8e24ffe6bc257d233f2dfc7a4346ccdc97d43bf1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9fcd5ad3c4a0790016cfbe93028c456b

SHA1
897628c6107c96df4a886dd6323ccba19ef6d1f0

SHA256
b50f64df2bc83b6cdd4940e577ef2b5e981f29999b5263e6f0ec0c2a6f50740d

SHA512
c71b1f11426c4400ad9f4d7d65902d3d619f62cef230ae17d5e8d508237758bad5f57d17d978da02decacd7ffb9a621d1117705945f4cc7750357bdefe510654

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
6e3d8fe406ac6388709f7fda62199169

SHA1
78157c44e1eaeb579017e358dc8fd5b753bdbd87

SHA256
ce969b5f4a4dc813d8e27a3f09ba178d1fa64f7c2e19c809a65dac1d8760630e

SHA512
435f9196728393f7eb732cff9ba5bb5f30b94b4122ff9b747051a842cf541b9d05c41dd1a4855866cc564e408cc69eaa7499d0d198eb1b5713fa18ac29fdafe6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585be6.TMP

Filesize
204B

MD5
00d9156d0304b52355e46ed58cb2306c

SHA1
60a4b8b47dd364c288a3a0907f642cea7df19b57

SHA256
b370c4a038c7e6ba940c562caba24afe2f979c3e8e20d173538776b7bbd06e81

SHA512
94e864076f496021922b68ecbde55394eebf4715c37e918376015757a16e1deb98f83a99bf24f4d747e6f1cd900afa79533a13f4f1aef56212a7ef21d816d76f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
7230f2fefa2fa0be5432dcf992b7bd71

SHA1
0bb6591a4038278937ff7d390f0c5a8cfccae8ab

SHA256
37028819723056d0b2f875b1feea8f2a754223d1a6247e9dd6737ef724493d4e

SHA512
3a9e24cd9136fa8ec73f959c8d13dc75f050e9b3f5265cce622ef9de28ab18c45136df50e194b24ed759e3f474f1237367eb9ad34eda2a9faf318081c6afba2d

Download Submit