a0fa45c9ad31a15cd96368e0cb067ddbd0636b021958247f35b2d394319a94a3

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-10-2024 15:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

066a7d0977ada4de30a8ae7957932ff4_JaffaCakes118.html
Size

18KB
MD5

066a7d0977ada4de30a8ae7957932ff4
SHA1

7700da254feae548bbf10f8a4c8c6be908637a27
SHA256

a0fa45c9ad31a15cd96368e0cb067ddbd0636b021958247f35b2d394319a94a3
SHA512

5343f22e66ef39e091d4750b4720d0812ec20587a9686d16a470ae34dbb8b9a150d5f26ff50cbf794544f70c6ea940ac9a4a1838dfe2c5842784cdade005eeb6
SSDEEP

384:q9gcyPJoKQkKJiv7OhfJzt2e490ikbphTolH2V:vcyBozkuzYraRbpA8

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3232	msedge.exe
3232	msedge.exe
336	msedge.exe
336	msedge.exe
1176	identity_helper.exe
1176	identity_helper.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 336 wrote to memory of 3816	336	msedge.exe	82
PID 336 wrote to memory of 3816	336	msedge.exe	82
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 2808	336	msedge.exe	83
PID 336 wrote to memory of 3232	336	msedge.exe	84
PID 336 wrote to memory of 3232	336	msedge.exe	84
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85
PID 336 wrote to memory of 4088	336	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\066a7d0977ada4de30a8ae7957932ff4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa08db46f8,0x7ffa08db4708,0x7ffa08db4718
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,12570153890679070705,13175456970912506415,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5176 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5092

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f9664c896e19205022c094d725f820b6

SHA1
f8f1baf648df755ba64b412d512446baf88c0184

SHA256
7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e

SHA512
3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
847d47008dbea51cb1732d54861ba9c9

SHA1
f2099242027dccb88d6f05760b57f7c89d926c0d

SHA256
10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1

SHA512
bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
8342e8fb505b4a82fa4844ff3d61ec67

SHA1
fc4a8c11abef9e06cca3cfb49c7458eef5cfec13

SHA256
9483fa6b393a74a2c5f4c32f481ca6f5b8ed988b56009c59c5654cce4b315204

SHA512
b2d614c7eb46f8a290ab55ef8fed8f239395f24f9b98deadbfe7f8fa6a47501d7e1ee20b229939e6f3e54439f6d1151eb1c1c84ce8b90f494545ab75f28c92a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c5aa63533230e6831efcc708b6689431

SHA1
274a51c7eabdc1912ba1c2625744e2c3f89309ab

SHA256
a8d3b8f4e6a656b27e79a664a8d3b5eb638a0fc92217f7278dcc84b032ed38d1

SHA512
4f6ce1c6bda52ea76dc109c3c6bd3227a8da02389bbb86c3caf8a4d375ab678e348ad2b7491c8450b14688163cef5b834c68f780beb7b3dba406bb17f4c75eb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
73cef71106bf2e75fdcab5410273d03f

SHA1
44af5f7bb4425d92bd82ad42a3cf34a5923f3e9d

SHA256
a95dec8653155b38c2aa56832edf2ca5051dde195984ae91bb3a165dcbe05a7f

SHA512
e1f3c3d69696cdd3f13368c4034ffee1d44aafa7d036aa8b4073fc7d8f7f976a7c5f7e874e8b7ff53d6485306bc91879fd91e1755c703454be301c999698a9aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
49574f0a88208fd1a17a1d4ad136b118

SHA1
9bb6124b0a1f72296037ef5d6d039417aab373b8

SHA256
79e0df6bad53bcd6cb9d74da334bd1bbc047694b17a3b97392997d506bd6ff87

SHA512
7293dfc0ccbbd378da0dd8d4f0148bf7cbd32ec61715fe37bee843b2d023f4c4eff5b75de5728aa98f99672cefa41f199bc376b920b576b336721bb027066ded

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
ff16e7b498ccffce3cd327020fdac885

SHA1
94afd65f8290d0b3830c5c428bcfba7d631a4740

SHA256
5cbe53dd8a9b61d4da3ce60069b410722bae6ed79ff81951c6d90e7c232d6167

SHA512
a25c47d1ffe737efeb949447a6cae63cbf5c204faf61a784052a92bea6b4bc743444d72ce6f478eb246274adeb7a0b680c767230072bb4436273fe57a7b3f88e

Download Submit