6874dfacf026837a7d0cdf55a7960827a61a90e688d0c79b5be9cd2fe019d959

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 09:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_e2e425cefa1412cc71040a48e304d41d.html
Size

19KB
MD5

e2e425cefa1412cc71040a48e304d41d
SHA1

c8483853ac2557e5884d813827a4a5042e1aba0a
SHA256

6874dfacf026837a7d0cdf55a7960827a61a90e688d0c79b5be9cd2fe019d959
SHA512

67eaa377994b63980919e00fd2b3b0a5488fe05778c3ded5c89e677fb40951e254f3764fcea55339c8c60e0801f08bcccd9e6de109574488d012a541a0448087
SSDEEP

384:4+QfPFd9QZBC7mOdMwwtKfpC5IgSnbmFe7AcXy623LAPd:Zcd9QZBC7mOdMwJpC5I9nC4vPd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
780	msedge.exe
780	msedge.exe
4924	identity_helper.exe
4924	identity_helper.exe
228	msedge.exe
228	msedge.exe
228	msedge.exe
228	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 780 wrote to memory of 3924	780	msedge.exe	82
PID 780 wrote to memory of 3924	780	msedge.exe	82
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1244	780	msedge.exe	83
PID 780 wrote to memory of 1844	780	msedge.exe	84
PID 780 wrote to memory of 1844	780	msedge.exe	84
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85
PID 780 wrote to memory of 2756	780	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_e2e425cefa1412cc71040a48e304d41d.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff97a0846f8,0x7ff97a084708,0x7ff97a084718
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2960 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4452 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,15302991961558593756,15181007892022277394,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5392 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2660

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
215KB

MD5
d474ec7f8d58a66420b6daa0893a4874

SHA1
4314642571493ba983748556d0e76ec6704da211

SHA256
553a19b6f44f125d9594c02231e4217e9d74d92b7065dc996d92f1e53f6bcb69

SHA512
344062d1be40db095abb7392b047b16f33ea3043158690cf66a2fa554aa2db79c4aa68de1308f1eddf6b9140b9ac5de70aad960b4e8e8b91f105213c4aace348

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
8a0bb45441a1d19c6ead132a9d9847c0

SHA1
86892639a3dad8997ca84abd1326b9d7d7ee756f

SHA256
3040405bae035061cb9053fbde71c8a573847a1e1ca8738ad5ec0a356ac17d58

SHA512
7c02567ce6abbf67682c79ca2551b02b680aa764b2bda541311e766f511af90b32d1b2f6927f5a08e46ccb90fe0f79cf0071157ad60e7b4b4d1ecdc12b72f57e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
73ce680d82ce4d3402beec4df8f26f7c

SHA1
dfe87302281e4568337a00cbaaac755a48d60ba7

SHA256
f3cdd4a246e753b9543778609caab0327dce88ff4c906e98b2abaa8425ee8924

SHA512
a69970ab828a0b903aaa5bc24ff4cfb200b9bac96c17e9ee2b5ffa6cbd02b160b41514da146c87cf651d77dc1422b202ef1a10916880e93dd43fc9da8db7d62e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0be16ca19a21fb2b04e85c4e20e8c80a

SHA1
7955582739f42632c8315fc9a460251bf538adef

SHA256
16f3380dfb7860ab9c4c02be62bf2b2ec55e8658ef179f6085583ab128b73200

SHA512
d7f2ddad8c70f4441609265bdf3308aae7f65a25e4a327a276d8e4e90d8b606c132302a1464a04520fa765ca838cf47f81a814a82451ffffe64ec551e79f1c25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c5e6133bd08cc3e8e0469d9a72c4959e

SHA1
e39b818fe48be0d174fde601c44e2b926782f758

SHA256
880737434391a8a31947fa331547289ed2873072e24828a4466568af27fdd530

SHA512
1004ea545a7fc30a90897687f20d053629ca34e0110cbab7f3ba8dd167216a968b6c65a6a312fc8cb1da1827e2eb1cf1b98c3f1e5e9b15f0201f12c5128ebc4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0d7cc4850bc3f6f88e8fd44735d0e73d

SHA1
0be5fbf6d2ad81870db43cbf7483756b95639624

SHA256
b5fb5101d543d1545f5aa68faa86b75eb1f2b5ff67d19eb736fcae457a4c1406

SHA512
9338dca1b8666f00a0cc0c60f148df618c4dc2ef13b21d1441f590040626a39a4cda9026c8efabd55043ba3a63413d7ed6ff66eff549022e407826f093dcd427

Download Submit