461e2bd58e278348ed97d4594db2f19aea493bf0f89c6a218b9e10a7ddeddee6

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/09/2024, 10:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f5c41b39bbda946e804f9f9fb0f61b0b_JaffaCakes118.html
Size

59KB
MD5

f5c41b39bbda946e804f9f9fb0f61b0b
SHA1

3300716f826493856d9bab301e4abbd1bae6c908
SHA256

461e2bd58e278348ed97d4594db2f19aea493bf0f89c6a218b9e10a7ddeddee6
SHA512

2a1e303a18dbd0810abfe7590b2818c9ce0c7c718c3f64807cfbcefce4a550a8aa0abf84b33ce9b9de614fbbcf9366a3b565fe1ea984f4e3294fda07feaa9b50
SSDEEP

1536:pUl0YfRYr5cT7E79JZt3HDUKUnfy4QESEGVTkooLwE3/X1o7TRmPjcO8RpRuUztS:pU+YfRYr5cT7E79nt3HDUKUnfyVVkoEf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
892	msedge.exe
892	msedge.exe
4992	msedge.exe
4992	msedge.exe
4664	identity_helper.exe
4664	identity_helper.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe
4992	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4992 wrote to memory of 996	4992	msedge.exe	82
PID 4992 wrote to memory of 996	4992	msedge.exe	82
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 2140	4992	msedge.exe	83
PID 4992 wrote to memory of 892	4992	msedge.exe	84
PID 4992 wrote to memory of 892	4992	msedge.exe	84
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85
PID 4992 wrote to memory of 2184	4992	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f5c41b39bbda946e804f9f9fb0f61b0b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff914d546f8,0x7ff914d54708,0x7ff914d54718
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,10681508758828435356,18215978664405926068,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2704

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4748

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
53bc70ecb115bdbabe67620c416fe9b3

SHA1
af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

SHA256
b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

SHA512
cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e765f3d75e6b0e4a7119c8b14d47d8da

SHA1
cc9f7c7826c2e1a129e7d98884926076c3714fc0

SHA256
986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

SHA512
a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
ff0b1be4ddd26797c69e5462ec130ebe

SHA1
bc2c55a64d521ab3d22fb3f19e81c0b5996ae581

SHA256
5390c21bc3c7ef20e4d7aa35e6a93de6cfd736daaae65d2e94ef3f3a1229d4ec

SHA512
13a1d109912d2fe961f74b58f6a68f5bb924cbcd5df9cc06f5efda43628ef1195ec6f6e58511fc740722ed90357446bb6622252a23a7b715d694c22bee10f9b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
191B

MD5
ab5de4c2d2ef2c14bd6d417cdef347c1

SHA1
cdf27ea99990c0b78f14531eafbe1c261ee145b6

SHA256
b9824faf211d25d843bd3e4f628246effaaef8a94597d0c028ea780db52749ff

SHA512
8ec5d5a147c271860d363935cda6743cf0f63ac6a2ca1ea9fd10a99f9f4e689426fa9107997609061755e8b5af48a58d0b6bee661784687df0cc2729463ee48f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7d6184b20d1bf5d28a26f1525d5c20b8

SHA1
7ac9e41cadb9045820ca63abdeb1e0ace67f19d9

SHA256
664bc5c0d2ff6c997ae87729cf69d967a30d9e0e04e4e935202f47b8e4873fa0

SHA512
11cf813a1241f2820d22b880f278612e5abb02ac3fb43eab4454f336641e6a8f6647a609049b4644321adde364fcba821ee136a5dddd64ffb5014415872c593d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cd8e4eb79eff4dcfc7b6ff850c159bef

SHA1
1cc7ae5945db12027af6b951d03cda534c620ad8

SHA256
8f9d92c88a357e9ddac034d9fb5b0d741665abb5cd868ecdc1471a80e5f7e7df

SHA512
d9b853fa37f9a3cc2a29da45a04358d8df5121e64ae6cb64d623bd64cd15297d307fac5a10ed10b977d38b1408c5cf46dc02296354ca845c0cb40f64a5d1135e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
960bd10ba81716a7e9fd215792b4e4e0

SHA1
e3fea75d65eddd3bd7fa495061a7ca9a49c083f3

SHA256
ca4d9278f219adbc82931932a8469a33f5dc9cf4f324667c26ca3b6563df252a

SHA512
0732fd13cce429fc281694d20c4182dd132199f5f6ad3c80797931ecd27f945dd36e908ca5380f0d1b7199f62b403f613a87223fca0a7a83e9643ae89fd98f03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
97b3fadec12f04965ef193e24d6aa1c2

SHA1
c81ca42058775ca8a4afaef5ea0d82a829f3931a

SHA256
b7a6c6183ec144c9f44a79e2cb8259b44e59d83613cb5b1a786c721b69b29499

SHA512
6d179b5ef4b2ab96ec47b59aed210e60d38ae6055a6b3d5c909775c6bd7a2282c7f738f9708f2a53d7e1969c79755ad2a305dc192718caab7be250d90c344842

Download Submit