84d6bf52154e2384b7d646e1150afa096b16635e884e1d74c5051c3966d31eb1

Analysis

max time kernel
147s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 06:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eabb9abd6cf8b2b7a66abbaa08b0db24_JaffaCakes118.html
Size

251KB
MD5

eabb9abd6cf8b2b7a66abbaa08b0db24
SHA1

aa2f7a88c183ac864bf06cb2589fd66b3e93f826
SHA256

84d6bf52154e2384b7d646e1150afa096b16635e884e1d74c5051c3966d31eb1
SHA512

936652d81b25719781b441e9e98b94f5a3bd02388221c534d3724ecfd22a782013893d0179cf2082c6e2ae469a0294020eadbf1eb4cc4ba32058e2b647f12f90
SSDEEP

6144:Sfr5W5sMYod+X3oI+YsjWsMYod+X3oI+YQ:Mr5WF5d+X3Y05d+X3+

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3260	msedge.exe
3260	msedge.exe
1760	identity_helper.exe
1760	identity_helper.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe
3260	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3260 wrote to memory of 2864	3260	msedge.exe	82
PID 3260 wrote to memory of 2864	3260	msedge.exe	82
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 4320	3260	msedge.exe	83
PID 3260 wrote to memory of 3508	3260	msedge.exe	84
PID 3260 wrote to memory of 3508	3260	msedge.exe	84
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85
PID 3260 wrote to memory of 4004	3260	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eabb9abd6cf8b2b7a66abbaa08b0db24_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc1a4646f8,0x7ffc1a464708,0x7ffc1a464718
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,1364376143686972851,11699922822016888016,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:8

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
3b22e999c6c23a235c165dcf45aadcc4

SHA1
356ed8b3f7c9774a2c9d80e07d2758df1475473f

SHA256
dc0bd2f2191050b73acd4fcde54b9c5a629d9addf31c6ecb00acb61193abf7f9

SHA512
71070ed5f47e3cd5f6eabafbdfacbaf01c0521c1c9bf05111ba5eb7b0683cdcae91dbad5255dac44b89d226aea96bfb007d8def7e05cd433add3bdb6ecae1a42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
407B

MD5
dbe4eed908d2208ac800db0374ebbccf

SHA1
c4da5a80da9c98ae22d4e775cdb1a843af989571

SHA256
cc11b32b3906ff592ec568867fe2d39114106ff2c3500df2fb7b593d8f9aeb86

SHA512
80a735be7fae17b9e23952213bfd29ddf8131b195e28c84a146a391c01d7583bf03c5ac489b25d8d00ad73f951d3910487768db66c7ee90ffc6dc86c80601692

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
a13469663bd30f5b33c1b530c95ad5d6

SHA1
d9cd21d247a0ecac6d474f30e8fea280463e9ce6

SHA256
7aa1d0bbb9f0f1a00d248120e20f97d49a122d04ac9c195bf764193cedb07442

SHA512
37e00e994aeccb1f75615d395c38bd7a40fc061d0a2eb30ed8223867373a2a521aed1648790e6c825a0ea1fcc3be00f18af15b09263ea9a5c1bbfe8cbf40af0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4a25dbf44bb7bc3ab119a94fb067e642

SHA1
f7668d1b6f2ab38b56b11a46c8b275e10017e0f0

SHA256
3a10fd7aa92c47f6c74e5dd35985358b21aab8d71050ab288fcbc9156c9eba47

SHA512
fbca1654c34643a66186c72ae1333721f85483dc87fcda94152b83e7ce7b73209b3c55192676a120c200f1db0b37fb4b349dd4f2e3a8741d9f3f6825c642de98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
218c119e19d5d46b6afc38f6b33af2f2

SHA1
45f0f9b97b3943726703781a7a282609fe146883

SHA256
495d3b1e2b7befce367ac1d5772fe8c39b0da77d99e85b9d44b50bd082ba82be

SHA512
5625cd15142bad20159c7a1461b0b4d412c71a779c2701efe660bd13546a8a5a3890d20a8465c89f5a58613764b80ecd84d14e0ee01c38d2250c26233b455a10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
32953cb9eb9d509e697de7c5d122361d

SHA1
5ccf960a795b1ca990a9e1fe272f3a49a53dfbf0

SHA256
dee0d6df3e109bb1aff7bb68f702005d4fa720333926edeeac39cb664f87de40

SHA512
01d39132b76210af7e2de50d060c186ea32cf44c510d5138f531248e7d281f8de64214fc4e9696b65875324eeab584cee6790d14e06d80a29480e18e151ded53

Download Submit