a727a27bd33f91a5d8e045a1e5749124e5a8f57f6dceda300d0f8a5b99a5434a

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2024, 13:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eb79206630ec8b352046614337402718_JaffaCakes118.html
Size

948KB
MD5

eb79206630ec8b352046614337402718
SHA1

eb1c909da1bbb880e1d48dd1fddcbe32d439c260
SHA256

a727a27bd33f91a5d8e045a1e5749124e5a8f57f6dceda300d0f8a5b99a5434a
SHA512

0cd05b36b220803c43797ee18854fa6928d2f4147f8a63d71d401e4aeca1e2c0358b344350a2ea7daa7803345cbe620c24fad9ea790fe892631c2cf73d408660
SSDEEP

3072:dpLpj/0JJshc32szA0N/Gd7ZX1jgrJtdY1Veef0xOMQfw/Oc32szA0N/Gd7ZX1jH:HppsMOtdY1YQM4sMOtdY1YQMp4

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
3160	msedge.exe
3160	msedge.exe
3624	identity_helper.exe
3624	identity_helper.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe
4444	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe
3160	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3160 wrote to memory of 3420	3160	msedge.exe	82
PID 3160 wrote to memory of 3420	3160	msedge.exe	82
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2244	3160	msedge.exe	83
PID 3160 wrote to memory of 2388	3160	msedge.exe	84
PID 3160 wrote to memory of 2388	3160	msedge.exe	84
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85
PID 3160 wrote to memory of 1668	3160	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eb79206630ec8b352046614337402718_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb12246f8,0x7ffdb1224708,0x7ffdb1224718
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3848 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,4360688008083464295,4549715249438090288,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1832 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4444

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4432

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2360

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
512B

MD5
a771b5468a1f21fe0bd3e35806a1bc7a

SHA1
94e994227e8a513001ae09c20d448f05113d02d6

SHA256
6a55c41cd6187a31d3761df17b217acb824ca52f85c47a29802f0fe24c233a66

SHA512
bd99a42e519d8f90661a9801bb98e928be53b7d347c8293cfe825a9c5a89f3ec2fa67fd3eb639a031e59515ad86c1a276a86ef02c5a0224fadbfce1e030d2d2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8b4f3618146e11edb59282db91b06774

SHA1
220e55dd32d2f54dba1a4d7e07c2fd225059466a

SHA256
f85ea825e4045d9693c388fc2abc0291d04a712f29833b9ac64bd9a755528eee

SHA512
8f155bdebda59d461640172e4e4149f35dea0e9459f4cf88585a04f1966be89a988fe8e504888bde95cf33af7ec0abb3f562183c552bc86fec695ce2be0ee531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8ce459599cc79f216fbf84ea4eb110c5

SHA1
f52dde2198f45422c13c8fe2dbb13db96d069307

SHA256
421520cfb30ffaf65fd4b28a20b0dcff632baf3ba08895dcca0e999f55182171

SHA512
ecc665b56772069d2eea4b3b00fd00cab1f58cd6012c26d602fef0b47429e0a16d150bdd494baed9c088b41a089fe477dfa04523f06348d79d343f342e29c7f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
abce1705d1c41c9e2414e44fc84abe70

SHA1
77a990c8b8cb2ddab24f58edd81984db30261219

SHA256
13414094840b8dfad3b0bc3e5f255e18d394d6d873c4dae54e48976c4b3ad898

SHA512
88e9e8137e610eb1aa74a828aca322871c441ec62756c25b9556a491610f496f35f5def9542b10c34103508d72adf3f0c46d1b21ec1df6b5a5f5ccf1c2572354

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
738a11e586790f4a30923b6d7a32092b

SHA1
73952004719c9116a9bd9c32af9bcc68522df7d0

SHA256
07d307fdd64005d8caf97f8ce737614666dce7afa733e6d772a1550a04cbc3e2

SHA512
e55c66f435703f1f34c3a9558153261dc6f1f375ca1495e58e163e052d006c24fc0ccf501ef18ef1cacb819bd7578e93f1e5e8e4dd544b8a77da92b502b831f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583ae1.TMP

Filesize
204B

MD5
46f584bbd3d81e04f9e8835eb5a45f5a

SHA1
6cd8ca91f384681b38a4cd2825d8c1672ca15e2e

SHA256
0a82c1f589cda5015bae514a8babe4d0c4186c44504440bd4156be9f94a5bf7a

SHA512
1a6b0fc5a43344f2efcdea52b1e8b947e23d4e08e20b476b51b88a452908172834c7834b3c76e217258f516e7b3f668742f5228332a8bb613414cf8e2ead8682

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
dccd3fa2e387ae3c8e4c5f4ea6099c4c

SHA1
f74264f9b31f1602f1e15da2d08f3e4e1a0d0e21

SHA256
6398a7fab643aa3e05e3528264a1195353537c395cd2cca66d810674acdbe6fe

SHA512
fd380287bdcef2f826159c949a7e133d12f0801e393b94e55509e90d0039b1763852b79781cb91cb96e79c9af3041dca58b82f4f37c313b7396be7a0b21f6571

Download Submit