Overview

overview

10

Static

static

3

2025-03-30...om.exe

windows7-x64

10

2025-03-30...om.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    103s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/03/2025, 12:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2025-03-30_644e136ccb39f10964f7b656f96dd144_black-basta_cobalt-strike_satacom.exe

  • Size

    11.8MB

  • MD5

    644e136ccb39f10964f7b656f96dd144

  • SHA1

    f3095cb5794501d3b206f343ca69a6713b61bd65

  • SHA256

    54e7dd4f468545498d148fcc575e9df14a152d3f9f1cfaf49fca1fb5c529e782

  • SHA512

    5e2c83a1e8b8c8c062f7aa77042bf3bd87c737817c8077e53d4cc80a4f793dba96b46af9e227d806a8eb144678338719f627bb215a6bb5eabbb48db07b28aa2a

  • SSDEEP

    196608:sZlAG6ZeZ2jeC3b9fHr7DpFC4g0AVIGvO8ZJ9BIBxIFO48RmU/3ZlsPvmu7STvNY:6lCM14VvLgtIGZYXIotN3ZWL7STZ6jb

Score
10/10
demonwareransomware

Malware Config

Extracted

Path

C:\Users\Admin\Pictures\README.txt

Family

demonware

Ransom Note
Tango Down! Seems like you got hit by DemonWare ransomware! Don't Panic, you get have your files back! DemonWare uses a basic encryption script to lock your files. This type of ransomware is known as CRYPTO. You'll need a decryption key in order to unlock your files. Your files will be deleted when the timer runs out, so you better hurry. You have 10 hours to find your key C'mon, be glad I don't ask for payment like other ransomware. Please visit: https://keys.zeznzo.nl and search for your IP/hostname to get your key. Kind regards, Zeznzo
URLs

https://keys.zeznzo.nl

Signatures

  • DemonWare

    Ransomware first seen in mid-2020.

    ransomwaredemonware
  • Demonware family
    demonware
  • Loads dropped DLL 36 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-03-30_644e136ccb39f10964f7b656f96dd144_black-basta_cobalt-strike_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-03-30_644e136ccb39f10964f7b656f96dd144_black-basta_cobalt-strike_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3488
    • C:\Users\Admin\AppData\Local\Temp\2025-03-30_644e136ccb39f10964f7b656f96dd144_black-basta_cobalt-strike_satacom.exe
      "C:\Users\Admin\AppData\Local\Temp\2025-03-30_644e136ccb39f10964f7b656f96dd144_black-basta_cobalt-strike_satacom.exe"
      2⤵
      • Loads dropped DLL
      PID:3084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Cipher\_Salsa20.pyd
    Filesize

    13KB

    MD5

    86109d2d1fccdb91968b7c1a63823731

    SHA1

    89dec67fbb4e467604f20c53c3ae3949471aef58

    SHA256

    28efd36be6bbbc56a7219bed7cc132ce67baf629100cc03a08a804360f483db9

    SHA512

    5d331f7f3ca413e77c33fa57e1f07ef43d064545ff1d143b9086211b42bbe165564c62b07d7a44615e75221613f3d3127ef5d7c7ec06315f0c397c0b059d2a37

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Cipher\_raw_cbc.pyd
    Filesize

    12KB

    MD5

    ff9b1e03922361e0a8be65e5e1421aac

    SHA1

    d4d674fb4e0214903e341e98613328d51aff9054

    SHA256

    2a5ab7f23554f497693ca81a5e5f21647b10fd8b9e00b8377d8385dc15a9c4df

    SHA512

    8cbbbbdc9a3d9e866dc88a655a75317f58cb4a49cb262975ff8c4ae5d47c344b86f69f6d2fc369dd7aa8ad7fcaa40d1937320e7e4f5923a03a39459b7bb247c0

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Cipher\_raw_cfb.pyd
    Filesize

    13KB

    MD5

    06358818f111a1c8e1b76d60a650c997

    SHA1

    5bbaf40aeb932766346631df25d887264aad7ac2

    SHA256

    b5438682a4c6bf57dcaad2835a9a293f712284fbe1af4ba6059011396cdbd180

    SHA512

    f954b4e56e3ace2c8e0961149cb5bd433f35530bc1c5e38ec5d2223ec3591df0998903b3928668c5d8c05f16eaa1c2adf41fc999690c42dafa794800fc4b193e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Cipher\_raw_ctr.pyd
    Filesize

    14KB

    MD5

    6adf70fd22d5ca90269466e5fc2aca2b

    SHA1

    1d4cdf2b08154b33738c5244a8886284c71693b9

    SHA256

    2f9dfa9de351bfe553dde60ae891e9b54a2e08546d723c7165234fd41c3ceed4

    SHA512

    efbd7133e5b5ef035f5a09d92b3b12d3ad367d6c35856a842536102d36a1ef53afe62ea3c3a5a4ae641bb28b6caaed18afa3519a637aa36f71f71979d4f61239

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Cipher\_raw_ecb.pyd
    Filesize

    10KB

    MD5

    64f6350fc1145db6337a9e3dfb83222f

    SHA1

    fea799c3f2a655d5104a46b788d98ea272557ae5

    SHA256

    821a86630238beaf4e303196ce26a250ef873f7a98b92644566b3c7d683d400e

    SHA512

    58f90099630b98a632db38d7cc4a2f44c70bb012f55b3b5a69dffc3a76f6a2b30ab81d678b95e807c135b96633a0d8ed83428924a1c9d1dfdb7f2a3962a44d31

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Cipher\_raw_ofb.pyd
    Filesize

    12KB

    MD5

    670c2baf75e559b89435283298f75bef

    SHA1

    be1e5a0711c6c0bb1e2aef4ed18a15ed5759b027

    SHA256

    236650fc42b347b9caa5e3a84a13da9e40586d97762f87730c9016dcb81abf06

    SHA512

    52554fe5308f7b758b66b48262aae1c180191358e15fdd85b7d5ef47a35677e079c3ef6a54e63d1520038bbfc79bad5b2534b1c2808217ffb53c55b7e8862fdb

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Hash\_BLAKE2s.pyd
    Filesize

    13KB

    MD5

    9098b9c8340047c6434825e18826cc18

    SHA1

    85dde191f6549aca0813d8a723d39b83c61002db

    SHA256

    825039711c334e169432a482f8b71ae735d7a1bd56552e501f6f3eca87cf272e

    SHA512

    defc6852291b568793a48124184342272f4bc424f88de82a35335d5596dfacc93a52afc33c43337e4ceb800c5bd998493a7ba7f52c02a6027a4434d7e608fcae

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Hash\_MD5.pyd
    Filesize

    15KB

    MD5

    2f4c07b5fc3c6245b0e1269c0d1a5a97

    SHA1

    26ea9baabadf63e5a44f3b606139f249bd120b99

    SHA256

    efb961372f6ce102a9836b63038ae1385b408ef8dcf2de7238b2403a6e987b27

    SHA512

    21e1ccbf238fd59c1ce80543a8f21858ae6e15ad1e8536a0144ec06791cd2488822ae87d84e331e9135142c76506e68fad7dbb4b26428ff3ac0d43f49e8fcc92

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Hash\_SHA1.pyd
    Filesize

    17KB

    MD5

    d2ef20fe88c483dc2588c03876058afd

    SHA1

    86a7a9e71df94fec73dd90a9a4cf5b7901ce622d

    SHA256

    6cc9cfa3c9739b545808e814a661b5b54e9127b057ce503024e515648b7a4a33

    SHA512

    d1ea9f01ea1a16b23b6219492b3d2a27b017ea8d5511549c82fe3a58da988b890e52d144630c55fd845b8d079c4b6d3fd2172020cecc5f6dd6a05b1495d18c71

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Hash\_SHA256.pyd
    Filesize

    21KB

    MD5

    363b8e9f9a119ee0a52d8e75083f3f5d

    SHA1

    e0f4316f5afd2abc31047b50fdd7910d148a7611

    SHA256

    1b36afc5b2f6f46d1a2457d56f276f5b5ffed066955acec911b9b7973d1e92b3

    SHA512

    3862436b88dae084993772d6ebdd3c7a892a562045ce448bc6419c7c21c797c806ef6030157c8daf2e85a36b13ed0ce4475eb00e61ee0cbec4db2677e780f177

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Hash\_ghash_clmul.pyd
    Filesize

    12KB

    MD5

    6ffdcbb8b3860fab46a4666c97f17eaf

    SHA1

    87defb8a639e0af86b6943490eb5456d6d63183e

    SHA256

    2ea2b17aaac9e572eef1239b01e8ad378829b765958fd1bf306f39983a76f944

    SHA512

    769941e8aac1075415f27c272510eda7c6156a0f29f0a19523251367946340ef53315771e6985c91ff4314ba1fcb939b1d5cd197dcbdaaed272733c9875e9b5b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Hash\_ghash_portable.pyd
    Filesize

    13KB

    MD5

    35025bbdbea7932bbe4e79627250dc46

    SHA1

    4082c2aba70d98fcf6ec2b82ff4cc6692d7b56ac

    SHA256

    800cc846930302519335afdd276f9cbbe5f940fe1e5035cb6baf4fb736d37434

    SHA512

    a65e3c17e2ef456258eec06e81fcfa9af97a0d13b05eaca96935e371aa5e768eba9fa2e00f6cb5930d25d57380654cd2b8c8cb680a686c912e5f36a3046e0db9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Protocol\_scrypt.pyd
    Filesize

    12KB

    MD5

    dcd7e1c1f1e68405d66cef954cbaee38

    SHA1

    bbe8c8bde0e1956f4d88d737d50b2215073cdcb1

    SHA256

    0ec713f4f3e963f618873ff538c7dcc532e0faba5025c5a8e20ac089fdfcf1d4

    SHA512

    10d2048ff68515862b95e658bb33e42ed0fd2ab70db66f2738487d21739172d4f24ffb8f239fdfc6f479ce582a85c3b8f8adfb5024dad5769713a4b3d22d3115

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Util\_cpuid_c.pyd
    Filesize

    10KB

    MD5

    f35a4c3bb2fb8782c1c3f0d6b493ce77

    SHA1

    688c8baa950cfd77fdded246976829cc7510fce9

    SHA256

    a6feba74067fb03ee4ba53d1608ab8012eb6bd1f995ebc42c21d653d57b8320b

    SHA512

    5cb5219dd33ac40bd901298f17945fad21b25b0358056d10c84440048cf845bbb7acd0f6501d4284508b7559eae04074b03d13f6a1e4069df011895dfd3ceac9

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\Crypto\Util\_strxor.pyd
    Filesize

    10KB

    MD5

    db1f79a96a1390028df325dd183ff9f1

    SHA1

    8373b6c44fdbece2c1ee5327a2bb5e5b0a719ed4

    SHA256

    6429928799a5eea9e090224a2d7083b469892d725a28ea9dcc2a95f94286b0da

    SHA512

    dad71f250340e529883e3347e90e66a445641f019351e745940c6700145c6c923a9d5575efaf42436823bd8f1db44e9b00c99eb1cc41dc49425ea9db9847590e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\PIL\_imaging.cp38-win_amd64.pyd
    Filesize

    2.5MB

    MD5

    963208a18ad6e6506ae9ff02885c6294

    SHA1

    50e967a108b292af35e2c46a6ea3759767537771

    SHA256

    a18e46f2b545b12ef06ad91bfa079b3abbebf0cd1628063bfb5b0c8e896af47f

    SHA512

    0c706526abe3ca10222817de27ed0210d969245e19f6639c60c1e3220cdbf50b49a4ce3e5edaf8d45fa2accb41c08d3710b11c7621a6792b0760cc78f03e22fc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\VCRUNTIME140.dll
    Filesize

    98KB

    MD5

    6ba0dbcd2db8f44243799c891dbd2a59

    SHA1

    30a2719d4b8667fd237bcfb781660901c993d9fc

    SHA256

    263988a0868053b6b01835cd2959c8f71e3f943610421b269da646f2d9e3b333

    SHA512

    94dea85ef50d55cec0d1bbae4671386ce8ca02e870ce417abfef0a8499fdf0bd0eb5ba38debd07c213f7da39cbea63a18143484b05e9c7ca36b2f68e4520bb4d

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_bz2.pyd
    Filesize

    84KB

    MD5

    6909da62abc73216883a89a60b66e73b

    SHA1

    015eb36344e5f3fe2df467bd47a04bded616b052

    SHA256

    4c22e0d2786dd7e93f55e1f4a1c27d2e141a55682ed2c09b90320817fcf011f9

    SHA512

    eddabb51b6092b3c3e3b6968ea831a262f8f5f8a26b1c95badc616ca236d0928aa789334835130ec40137ffc623b5d2031a585e890162b489a26fd990845b63a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_ctypes.pyd
    Filesize

    123KB

    MD5

    ffde1baacbe6729ad5246068870915a4

    SHA1

    2d42751140fc244f19dece6b1948b2b67d36bab4

    SHA256

    cc839990fb1020520731c35a183c83c9dc927aa78fa6b149a92a39e9d156c8b8

    SHA512

    1ac3ec986c55af37eb93d35a15e8a64726e5154240c0c5aac8286f7e347c678482ec65c62b454cf237023253642335ce6b3f6c0cc084e1527e61d48aaf7752f1

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_elementtree.pyd
    Filesize

    173KB

    MD5

    c64e8667059fa4ab1af38c1a44e80885

    SHA1

    b9cb168df1666c85aa57748d01f11e5d2cbe6910

    SHA256

    e3e2da51ef672ba57212b4395a85427f3a9ba6e42b62c90a2e402e4cb2ed2e71

    SHA512

    b735378d98e76a8baec67a557053464579c9965f95b00569b5e0328c5eec6adda82214711403916282b31d9c89fcfba610b3931c14233e406438ac41535075a7

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_hashlib.pyd
    Filesize

    45KB

    MD5

    178b3a8bddd3bc0e832efe59c8045e4c

    SHA1

    cc3a48a2945f251c5f9ddc7011011b8563352978

    SHA256

    1e12f3528c9a33111fd6589b323b5e022d020b461ee65b0a97bd628d53217f2a

    SHA512

    e7ce152f3c0afdf00651cdb1173a32da837a00f988a285a71c16289a7acaeb80048e7650a30fe5d5604dfcb4c8199edce8d5eb9f9ff974779a542498a1bdd7ee

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_lzma.pyd
    Filesize

    247KB

    MD5

    af8385e0cb374ae6caee59190175dd12

    SHA1

    a16d7d021ec3fa31fb1b2ce5929c2d3d4c96d6b8

    SHA256

    e414ee3efa6a4e1edf610dd780335ab9372cbe7919a73596bbb267b55ad23999

    SHA512

    3e4e26bbcf14ebcb4faedb8982c46b3f5318c88dd395c668c50e4f5ddbfe6c1836eb49e49e855cc95934e8247e63df0f7543f66e4fe13335558fc21c0c566b5b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_socket.pyd
    Filesize

    77KB

    MD5

    fc47a3b4dc7353591970a20678b90a81

    SHA1

    5ca5436e0c66f468bb48b5ea16c69125fcc34bea

    SHA256

    4e7ee0ecf839c42d96c53309384737e8f84bb5e90ecd20d511cc3fc6ec135f44

    SHA512

    8f52f33ce49bc38a9356d46c63aef4f8f05d491377f4969f52fd84f83712faed3d9637044d27583bf06fc52687667b630ba8d2eb8ee27f4a810520df5499b725

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\_tkinter.pyd
    Filesize

    62KB

    MD5

    f0f0c841e42ff2448b008c4c460b6d0c

    SHA1

    8ac6c2c6dfa257ad78a3a731d276f1332c6588b1

    SHA256

    21932701ea35dae0091373d44be683027728c5489bbb39294e225438f29a2341

    SHA512

    a8c2556c4e5f509c04030a3cdb3945b837577e31baf6864b84f8471ccd83feb301ff5dba3976f1b41289c4269abf5a9dca1b9db1c3f5f102e7db06433834b3a2

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\base_library.zip
    Filesize

    758KB

    MD5

    0b773f98808ca3d2f78ab59ee1b61b8e

    SHA1

    041d3a56f763056ce644a4de7b1f0e3130fd11ce

    SHA256

    4d1cb3263036cc0562e35272555d210878e362b76c686de57da26e6873df20ee

    SHA512

    d8a38fa98052f9974fcc0aeff4a551cf0af4d94e7e3a67d37b98efee281ab214d41a0320889f308555ef22f5897f216ac6c4e38c12988fb8a7845fa3883355bc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\libcrypto-1_1.dll
    Filesize

    3.3MB

    MD5

    4929f390f3b9132af172d38b22bd2a2b

    SHA1

    19d27dc93c402801b8cb582b3aa27b17d24403d3

    SHA256

    4c1cbe61f562459baf382d3153b4bfc8a651bfc4ab41c99b3c8c29e19de7fde0

    SHA512

    2c7f3dfaba9e2844bcfddd3b05897f97ef043cc1cd5576ec0442eb26c9740c4df69a707e28bf5c6a0796e27e8de77ea430626ec822d74e054d081d32aaae7d93

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\libffi-7.dll
    Filesize

    32KB

    MD5

    eef7981412be8ea459064d3090f4b3aa

    SHA1

    c60da4830ce27afc234b3c3014c583f7f0a5a925

    SHA256

    f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081

    SHA512

    dc9ff4202f74a13ca9949a123dff4c0223da969f49e9348feaf93da4470f7be82cfa1d392566eaaa836d77dde7193fed15a8395509f72a0e9f97c66c0a096016

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\pyexpat.pyd
    Filesize

    184KB

    MD5

    9db090f0ec76c0c5c198396104a5b983

    SHA1

    db5adfbbadef6d06383a7f031beb2784a0093d0a

    SHA256

    b3e7eeb1f863ebf2a0debe1f8cb5a830370647f5728b90fdb7c03d9f62500cd0

    SHA512

    059edf754d0dc0282205192483df2ed7a562e04f5bd0cd9695389fe8d79b9780ff325641a77eef4413bd897d804b3f4ab29ef0004db9e8d0ecf50badaa1dbe06

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\python38.dll
    Filesize

    4.0MB

    MD5

    c0ed63bf515d04803906e1b703e9cb86

    SHA1

    61f9a465d7a782aedfd5e2b1a9dc8bff6c103b5a

    SHA256

    24bfc999a733d4759ca40425610555f597b1d015f87ef5f84e15c665297247a4

    SHA512

    78384c34cefc40cb86913dffdc6a360668467731a8a3678d5f8377d8ae63d244b45506b0b6e2498825b53abe8fd84d2b75b3e9fef3703fead90183ace433e70a

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\select.pyd
    Filesize

    26KB

    MD5

    f4887f1d906dc336fe0c3f7dbb720ca3

    SHA1

    67def676ad3569029d2a357a40a138fc7570bdcc

    SHA256

    36552bc64127d4866c657c9b74c0399baad70957a5380896fd8202e3a6bb7b4f

    SHA512

    51006d164c2512adfab92d22be5fed7c093cb647821045a6cdfd2ed7a30d94e620a446b8434b3e91d5544ef737e1492f3dc6c29cadbfdfa5e41df7fb5106a301

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\tcl86t.dll
    Filesize

    1.6MB

    MD5

    c0b23815701dbae2a359cb8adb9ae730

    SHA1

    5be6736b645ed12e97b9462b77e5a43482673d90

    SHA256

    f650d6bc321bcda3fc3ac3dec3ac4e473fb0b7b68b6c948581bcfc54653e6768

    SHA512

    ed60384e95be8ea5930994db8527168f78573f8a277f8d21c089f0018cd3b9906da764ed6fcc1bd4efad009557645e206fbb4e5baef9ab4b2e3c8bb5c3b5d725

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\tcl\encoding\cp1252.enc
    Filesize

    1KB

    MD5

    5900f51fd8b5ff75e65594eb7dd50533

    SHA1

    2e21300e0bc8a847d0423671b08d3c65761ee172

    SHA256

    14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0

    SHA512

    ea0455ff4cd5c0d4afb5e79b671565c2aede2857d534e1371f0c10c299c74cb4ad113d56025f58b8ae9e88e2862f0864a4836fed236f5730360b2223fde479dc

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\_MEI34882\tk86t.dll
    Filesize

    1.4MB

    MD5

    fdc8a5d96f9576bd70aa1cadc2f21748

    SHA1

    bae145525a18ce7e5bc69c5f43c6044de7b6e004

    SHA256

    1a6d0871be2fa7153de22be008a20a5257b721657e6d4b24da8b1f940345d0d5

    SHA512

    816ada61c1fd941d10e6bb4350baa77f520e2476058249b269802be826bab294a9c18edc5d590f5ed6f8dafed502ab7ffb29db2f44292cb5bedf2f5fa609f49c

    Download Submit

  • C:\Users\Admin\Pictures\README.txt
    Filesize

    577B

    MD5

    827f7da7ad47cb8c6647c0478042301e

    SHA1

    7e45a7f3bdc0eb7e98bab2dfd020cb796efd8d84

    SHA256

    35e838bc9daeb0357da9211c4da95d3e557a9600d986cf6e74deabd1ac8db839

    SHA512

    370a5b6e2622945353ae12b5d25ae0be7baa7cf19006e4dba68e8fe629e284d062a3ba9911aa4243de837de921c97eab008524b3d2122f41f9a24401eb0a45b0

    Download Submit