b79229c62e6928582523b81c3b9be1a76652c5c28f7c2cee776f4b4aaa709293

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2024, 21:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4431e441e051605a2145c3aa678a4e4e_JaffaCakes118.html
Size

56KB
MD5

4431e441e051605a2145c3aa678a4e4e
SHA1

634e3c652ce3ac247caa36962b8d035297e6b188
SHA256

b79229c62e6928582523b81c3b9be1a76652c5c28f7c2cee776f4b4aaa709293
SHA512

6ec363a02ffad47841ce8c60658a5d4d501cb88c2356cb7f5ace9ecdbfc16cd78b717007ff325738f303ab7201eac024e0c48ba4aa90bb295a4b9ae7c2149405
SSDEEP

1536:gQZBCCOdl0IxCVVPWfKfgfnfUfsfhfjfqfLfOfcfffFf4fIfefOfSf7fOfBfzfoI:gk2L0IxHSIPc05rijmUXNAgmm6zmprwI

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3600	msedge.exe
3600	msedge.exe
672	msedge.exe
672	msedge.exe
3616	identity_helper.exe
3616	identity_helper.exe
1728	msedge.exe
1728	msedge.exe
1728	msedge.exe
1728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe
672	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 672 wrote to memory of 3948	672	msedge.exe	84
PID 672 wrote to memory of 3948	672	msedge.exe	84
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 2284	672	msedge.exe	85
PID 672 wrote to memory of 3600	672	msedge.exe	86
PID 672 wrote to memory of 3600	672	msedge.exe	86
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87
PID 672 wrote to memory of 2020	672	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4431e441e051605a2145c3aa678a4e4e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe1fe846f8,0x7ffe1fe84708,0x7ffe1fe84718
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4024 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,9655496290731852092,5047764659628730299,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5000 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90005520-a257-4b5a-a074-e0d91ae20ff3.tmp

Filesize
6KB

MD5
667ed83ce12b34176cc653cea522cc76

SHA1
41369641c152e958bee7b3c9cbed5a0f657134d4

SHA256
96f698ce413094a4dd86bb23163c0dcdc7135a87c93aeb0d1281301cfcd6e3be

SHA512
2d1a2df09c0a02ec682d636389786eb438eba4f48923ac8b6c7702a83476cf8173f9feca162c8f92f4995121a0857937cba7906409e384cd76998fb755f8eb74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
215KB

MD5
1585c4c0ffdb55b2a4fdc0b0f5c317be

SHA1
aac0e0f12332063c75c690458b2cfe5acb800d0a

SHA256
18a1cfc3b339903a71e6a68791cde83fca626a4c1a22be5cb7755c9f2343e2a5

SHA512
7021ed87f0c97edc3a8ff838202fa444841eafcbfa4e00e722b723393a1ac679279aa744e8edde237a05be6060527a0c7e64a36148bd2d1316d5589d78d08e23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
ccd46acd87ceaf697a4310e4085ce246

SHA1
c7c395922f6e8a29475d94906ee23fdfc649a8bd

SHA256
c16639123db3a5353e9f27ab11467712b405eab605b9af37d1022df5b4d57b63

SHA512
572cde29ec46696e62912d9aab3b1cb20d96d06c4cb03d5a1da04dfaa2f6c03aebac38ee7ab6d5f7ccf1820911cf44ad240be93c802dcaafb8b0aca5329d1bff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
cbaa2e829237a45886b21745dd29ba8e

SHA1
b2f80e0eb7edaf4c0a235e9949c4a410f7669d41

SHA256
3fc34fc98c429745b98f57c86704659aca246e45e1cc3b4923e09cc6d9c13064

SHA512
db63f4b2aad5b97073c3118e86c504a1f796f6c6e02c6061addde5108589f482edbd060833ad2d5949abaa67bb56cc0a2ae6aab514da4ce6654d5075424e0680

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1404024b102f7d4161e15ab85c6d394a

SHA1
26c55cc7034e64711062039480cfd056d9c6e0db

SHA256
3825e2b563eb47606ebc9ff3d4aee4e5d24560c9779480fb4d845c0108ac76e8

SHA512
aa2acf6c62a601fbd56dd592ea43f5ff38a7db2f14f6796b9cb726d7ad86ddd08f3003baa4dc83ffce48de8d4170a4a1988546fbadb03190c5596e1424fd3bb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a384664454f0b51b9468c13560665cbe

SHA1
7dbccc13f3c651d5179da5cbb8becf65a2a8535d

SHA256
94647e0660c9e124316afd470c7d129aaf864978a733fb4d913b64ccfce63b69

SHA512
75b58bf69fd55cdbc989c627bdbb83a54d85e30b492e6bd4a7664823372bdb8aa97d34149f0f1c046383ce457626d90ca9a77124fd8c151715a867a6cee445cc

Download Submit