8d12b820c8ccd4f0701e2724b4496a9e1287598d3c7e05340a605051cfb421b2

Analysis

max time kernel
140s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28/09/2024, 10:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fc243b9564b192ccfa5440cabcb51825_JaffaCakes118.html
Size

77KB
MD5

fc243b9564b192ccfa5440cabcb51825
SHA1

0b405cfd1324a5b8c18a8332a014dca4120c6716
SHA256

8d12b820c8ccd4f0701e2724b4496a9e1287598d3c7e05340a605051cfb421b2
SHA512

87e832e4131418fb817b6f6726fbcec2816285aa63c0330a36dde532546dba34cd0aeef3a3e3f6601d6af7867299535668e2263cd6fcdf957b6e47b9837b3e7c
SSDEEP

1536:4gh8yKE2YhuSGZmsbzywPhZJ076QuqZquqtqIqlq2qRq8q9q4oJSsS6/kBGes8sd:omuW2+oJGLyP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
2012	msedge.exe
2012	msedge.exe
3288	identity_helper.exe
3288	identity_helper.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe
3860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2012 wrote to memory of 1892	2012	msedge.exe	82
PID 2012 wrote to memory of 1892	2012	msedge.exe	82
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 4864	2012	msedge.exe	83
PID 2012 wrote to memory of 3636	2012	msedge.exe	84
PID 2012 wrote to memory of 3636	2012	msedge.exe	84
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85
PID 2012 wrote to memory of 4868	2012	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fc243b9564b192ccfa5440cabcb51825_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa0b4346f8,0x7ffa0b434708,0x7ffa0b434718
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,11417185654627475849,14962284066584081867,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4184 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d5e37652a03ac41fb2427e112176a59e

SHA1
2c4429c4af6bbc50a02e23d560550af966238d1a

SHA256
207c3d9838bf0c910661b19d4829d20b81ae28febc409cee93ddcd6eed7ca4ec

SHA512
8b6c38337a78844109ea040814613b15af9be0f11eec72c8297c0804b4b1e2dcca571b9b85b6e54fbdf5892320ab3b0072b3db13f65ebf4fe45c7d7c5e56e11c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6839b13cb7a9896391a9f1c541558fea

SHA1
1bc3fceed28cd8451af8569dd547e460ed55f4ca

SHA256
d607ca239b1ea3535876073c126457cdcfc6c3f762e47bf6d3c9e9416426dcfb

SHA512
442472211e3f9e59cc059f2ca60f2f0f834bd64a9a6b2f6c7a886893a193e73ca86b5ad1bd4abd2d46af3542d30162e369931b1f05a906f720b93ceaa4d92eda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a613ff992d03fa93a0b5eed2a0dbb84b

SHA1
8c5a4567d37dc218b752635991ee23abfd029a71

SHA256
a14ea8813c17cdf83431319b8a78dba288fe5e81eb25cd17dad820171177f70f

SHA512
5636e1c1f14da4b20cdd918496732622bb11df6b0795d44a2402d13c0d4c4b6e5d9ee33b1422824d5d1da9880eeb37601c066118cd7bc5fd8680a29b5fbbae61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2575a91de06c1907b6a7328f378b3ee4

SHA1
03b42e8f1ff33b9db464f608d6851bee6ff8ce9d

SHA256
d7015ad7d9d07bcf4ce368809c907e75bca2bdcf08333a781ae3d656040609d9

SHA512
a636c16253559436f9cc56489ddfd8d8bc7852b31917567d6fc4d3de9d98a983a9de29f8695ffddc8e1ea3c6b49f85138349092e5d757841b0b0d86f9fd196e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
61257264b965cc4346acfa5ad9976b1d

SHA1
34662fd6fc6bc27cd019487777332a31b7e8c6fe

SHA256
d9b5d3dbdd2373c92e24b6bb286c92b5f80fc5a45aec73ddd2fbb4e6a6bb8efe

SHA512
bcc9da32436accd47885ae4b3a714509a9dca9748ac7d897f8a20065e4388e38652b11e363f3b650a0385b36d42a2d42ca8162651aaf0a20a655717582a6fcb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
404912b15d648040ed3411c0d70f6c21

SHA1
7cdf3139988d06fa690abf553769cbf3c7b2c37a

SHA256
2023d57c40c531e189ff8558b3994790e9ea85f5dfc3537b335c1a4431e58f4b

SHA512
72f839786c53c131f78494a735e5583865e4d0822aa41242b42caae8777ddbd790266e9d365f5483d7da9923aed30c123a1e5828a08f00ab3d77153bc2302c4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5834a7.TMP

Filesize
539B

MD5
aaebb205edb16ee7d1e878e3d1f6c366

SHA1
ee02041cf9db9d9da8d3610951fbdd49aedb2fe1

SHA256
af7e166dd036d19dceb419a0effa31ca63d18caa5ac80562d72379e0c958cbbb

SHA512
83c269485d121955789543ec763dd460d71d3262bc338a1773c8dd77b5a390c03964748428ad03e11f96292f260e516eb3fca2743e7c6acf66e990c1b52370a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6b3ffb9ed03ab1d12a7fb235269e3cae

SHA1
7ba8ba5f934e7ab04fad57d6d894c5def1f502d5

SHA256
61031ba34c4323041293e9413aef1bc7fee829874ea2403533dec347275ea2d7

SHA512
2b00f0f40d2445ae72009a513d83ca8bbe74dd75b3c282c6e7e342dba237d6fddfa02d3013b042986a2c94db16b1baaa9fc1dc8615d4c80c081492eb7ca07b9e

Download Submit