928391ac099d1ca285282332eaca06ca8b4bed0637b17244d13bc9e1ad5a4b5c

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29/09/2024, 12:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fe8f455e7d1a2d25b03e4453c67920df_JaffaCakes118.html
Size

53KB
MD5

fe8f455e7d1a2d25b03e4453c67920df
SHA1

cae67e5d6dbb454faab93f2e6b189dc4a6c72600
SHA256

928391ac099d1ca285282332eaca06ca8b4bed0637b17244d13bc9e1ad5a4b5c
SHA512

1bba65646812d54fb9c782094355c60aa9f7721edddd8442989a909a3b8e6668f4bff68903f60278ab36338b41267f43c391b97afbb668e26e14c82a3df56b60
SSDEEP

768:d+TpHvvCIootFT1ylJD+cnbHY4q6HLWcqv/Dxu85gVy:d+dHv7oiFT2D+cbHq6HLwDxui

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3176	msedge.exe
3176	msedge.exe
1748	msedge.exe
1748	msedge.exe
2604	identity_helper.exe
2604	identity_helper.exe
2376	msedge.exe
2376	msedge.exe
2376	msedge.exe
2376	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1748 wrote to memory of 4964	1748	msedge.exe	84
PID 1748 wrote to memory of 4964	1748	msedge.exe	84
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 5036	1748	msedge.exe	85
PID 1748 wrote to memory of 3176	1748	msedge.exe	86
PID 1748 wrote to memory of 3176	1748	msedge.exe	86
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87
PID 1748 wrote to memory of 4724	1748	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fe8f455e7d1a2d25b03e4453c67920df_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9cc5346f8,0x7ff9cc534708,0x7ff9cc534718
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2708 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1776 /prefetch:8
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1776 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1700 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2260,2237369845370680134,11252713831825205932,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4428 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2376

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2816

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
2614fe38f370fdc5665cea75098e3793

SHA1
0ee77a2c02a523aa96e3d481a329cbe186458b64

SHA256
091e6d1155889e7dd1763eb33561ab1d8cab850375bbdd0be8b4d9db907f6ca5

SHA512
8017cbc4db165d2664d8bb08ea61aecb57294364eb00a1add273bc66c611ebe2272e44b2ce0f2bb53baab427af8018daad4a5c5ef4c60f8de69351c7bc8d0913

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4ec819cb96564e084a0c979295865ef7

SHA1
c10c29e7ea15eba8decd8be73829228c45d734e0

SHA256
0ae74f0facf5390cdd79971a31af8ff3180f1205f23167080797e2c9f4584c9d

SHA512
8933d9b30d4f4df85c514f879bff48ef4ba7d5686b6f8a120973fb69c837f5c70b67b7552f2d370ef9817c49c134975a00022fd4b2c0ab8fd6eeafd40a0d4633

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
51033060dd18f58a07999f19c587baf8

SHA1
c0d7faad2ad533aca48265d4f49db698bf8a6372

SHA256
f6a81ebdfa04342dfa0326bfcb86b217d51c2df47189a5e04042175dd69f4f5e

SHA512
6f680dee33cbb4329fbc6d087a430ec4d042529bbd9f9aab00276576c0495fa5565ae95c906e3d5e2a901448f7554cb8766952e84f7e54e7d5f954efab0a2ca9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
44318507d7c7e3dc57f2357e2708fc6f

SHA1
5237ffc96e1cecf33af78cba9a0bc42a70d74f97

SHA256
0d9c15f67ea0d72f95356c15317ef95bbc22bd010ac7f15b15f9f7d226c0a455

SHA512
7e0ec278aae4dc04aca657d9efc79fef66df1b906f893561a6f5cb867bac5dbfee6423e4da1395faa455a7282f43faad3982a6737fc547919e6cbbc7ab74d8dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
09d1ad50ca14e6e872fa672f9e844779

SHA1
abf6dd572729dc7a1f32445eefe653cff4d42695

SHA256
a09725c1c3e853f9317d4d871a4d5501e33116882394094e416489cdddcf0c39

SHA512
8cf5af9e5812dd59f96312db8c71e39e629f72cbe844b8dd6428bcff838a4ecb3d2a468f7fa241ee91835e1fa378a22c8a9238059206d5c1dea9e791dc795a9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5d89973f75d74ddaff5e3cc6f619212b

SHA1
3f8f59926fd067fe386907c45647c5772abc34d6

SHA256
ca1f8fc67c33df8867f75ac918cc868662b2cde9227042c7a33b8120c0abbae3

SHA512
5d04912fbf7bd01c31be193184b6567541dd7a48224d99ed4c04e56a2edf5b4c657341a489da0d4540d64971daa09a14ffda0f62b0c653e9af347227ec3aeee9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8411eaf0b63fe6a11403d110e16994e5

SHA1
a17c9c094cba273d2cf4e323b1c266d53c3873fc

SHA256
7fcd3b397d262e5ff6b1ef47a5c0accf2c41773263dacc229bfe552416882db0

SHA512
f841abfba43a995391766ce44d7621b3c3baa792f370062d07bf796c3f700b4e2cbe8bd73c8dcb16ea6661a4907c942e973362679115cec5db6de5b9a4fe815a

Download Submit