64fd1e079f21f00ade7320aec0530e0c9866e1acac19bd626381082cde53ffce

Analysis

max time kernel
136s
max time network
133s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
30/08/2023, 14:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fyb_static_endcard_tmpl.html
Size

3KB
MD5

d18fb1787ce0e84567496b8564e452aa
SHA1

007033d0824685600611af6992060577e127dd23
SHA256

2ae5e0576febb1a1cd63b10bf71644f99fcfd0fe7fb1f2d19525594165294e51
SHA512

ba5225a80941e3ee4ff18401b910968a6cab47634914ecb68213599b96fd4b39c8722e82bf2883faf355d9416a6f2acaa36151a5d8969079cfcd4c6795f6003b

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9066dd944edbd901	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000015e49348610e2a42ac63317e6e4271ae00000000020000000000106600000001000020000000f0192e0e06e1b6d39a162313e7959f6add966bfd7c1991148550b4e9fc07384f000000000e80000000020000200000006fba75640ec7e46748aa0c118cfbfa04344f6e4dbde230a9f563939baf02137c20000000da4700240bb2015bd133c95e9f8a0445d0d9b8dce7edef378034fc70534bd90040000000f1ae7644344f8a8884929e3fd0fc628b82c3c039acfd18302571ca3df9f1b1e3c73f14d43e8d506fb79ee6a9050805f7f43545ac89158c195c807f6258d9f409	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "399567690"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BFFA8A11-4741-11EE-A348-EA84BFBCA582} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000015e49348610e2a42ac63317e6e4271ae00000000020000000000106600000001000020000000895eeb2fd26c1a44daeb2de6bb1868954b341a2b222db0fea6261d7efb271d85000000000e80000000020000200000007046b4e8d1de110857a65059333759c52534e1b4f3c9bd7466e812c0c9b5a7f09000000090239fc4546ba9439afcf590d67d84ae5ba7f9fe8ad5890c55c1071cda36c33def5ade48ecb9ab8f004fd769a83e35a31682e2f891f29be2446b25f98b68b0a4024da6b39a476264b47e26a16d8f7eac96cd2db9e5511b7a914fd7f8b41e282931140a9dc2f9fc18ccd5c9b189c7af18841dd23c60c78176f34fd534c471617611fa01a856a03489ded13ab0f514f0224000000020e4966a30c43e855788982eb7a99a25fc7e55dd556f257879214df20362a6d6178194b89ee13f460fef03f887a645c94480c286750c1eca1d9499a1851d08fb	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2969888527-3102471180-2307688834-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2444	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2444	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2444	iexplore.exe
2444	iexplore.exe
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE
2436	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2444 wrote to memory of 2436	2444	iexplore.exe	28
PID 2444 wrote to memory of 2436	2444	iexplore.exe	28
PID 2444 wrote to memory of 2436	2444	iexplore.exe	28
PID 2444 wrote to memory of 2436	2444	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fyb_static_endcard_tmpl.html
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2444
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2444 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a5e791e5c4d9cad722f133bbe0f6e82a

SHA1
9288e59131e646159f5e2aed863e1ce3d0a4e673

SHA256
4bd93d08febfefe5afd8e367293754b14058065f74e7a4dc96b4307dcd1864a6

SHA512
cbef4b936c1009da150b5d44f75eddbd490073eeb78ad34a952e6fe269b6177c60681fc3776eb869ea7a57dbf6d47aa4a0c9833d52856119e450f09f58f2d1f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6549eb196ac8f0978e79037e20bc05d8

SHA1
91ba3f119a5898550b5e082f176abd57feac25ee

SHA256
5acfe0f5ee7edd9d0c74d5fae462533bb81e6e4910b7e9ffe0f07436425eeb3b

SHA512
1dbbd75bbccd52a6c6e2f78e4a0d073905852975e230e05e842afb84946d2fc6c5a1e2baa08616950f4afccfecae05fe9bf25cad45c6d011598bb622fbe45819

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e87ad910eb7534a05a95d6164ebf02bb

SHA1
de8eb3c05f619edac9035cfe60361e22aecaf2d8

SHA256
1a594ea85a4d616e89b834038487ad9acc94bbd0bbfa2b05291b0bd9c301e95a

SHA512
206e0e62dfd37a4be956a4e2cdc1a80b46b2860b63d055fc7066b5f4046f63205fb7ee7e338e596d6209edbab2b7e800bc1ac4b225c364ddf1dd0d755dc5fbf0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e318efa3eed08c61a7a0180e8bc89345

SHA1
e349c7557ef5d80042d6fb088e5130cbaa21b071

SHA256
4fec1941db37f7a2c49b04aa8159e3aff1635104a677147c53d3a15bcb9e72e9

SHA512
fbbc7d4a62d2c1994d251faaf9a22be83d75e584e5e6a6e0c6442df6f0907701ba13a32856d324894e0aa9ace612b5067b3f7ca103ee76f285b1997952c177fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2795e61958cae1263cd64d8bc5033c00

SHA1
676a4f7b0f84acf08f675607dfd3b261344ab2b4

SHA256
1b03f453f9067c3e91b608da19b3d2aa21cc113d5d286a20474aa2897577d499

SHA512
df78555f3e70383a1d26ff2b4ee6a411db80c8323b1f05ffe61e26a6e9fb677716b15f3572113b8dec5f95396a5e085d99438dbfb88d24a33fd9566b7c39253f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
edd86ab3c61777d95e713013a54a75f7

SHA1
3ffcb9878ad5986dbf5c594780f121a1c2982cad

SHA256
1fee1e9baceda7234cbea7d0cab8c6b2db5cb31264cfb15382ecdf61b9a0bcb6

SHA512
20e22e581c0cb4517efda80ce899a12f9ad87c081bc90cd89b8d39dfd2ad647641d9f7cfea52c4e295716b03f6bbc1275c709db1dde99feda9e9deee99d60f29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c2cddea5286e2741f64950bebfc1fcee

SHA1
73b030e9270c85aebf46dd01a182dc71d54e8ea4

SHA256
0214d1c38896c1a9b52c7153db1090333d76f70cbe3acae9c8cc92bcca25e5a3

SHA512
3111cf8f22db79a23a3d20b7d73d9d8f2218601f1c9bcf293dcf1f53bda43faf47e92a4d0356a55e033fdab94fcd2cca688f2e5f5e831a0308e8e83c213d0819

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4695ec1068d036a3c965b53da9707afb

SHA1
c0f7bebb8f5af2d59e3b9a4a51a7de71d2ad3dc8

SHA256
fc31a6f6a3fe6ea13062b6b01909a2b81cc6692e7e242a416696d411cb35a73d

SHA512
29b76930b627aed6f22b1dc948066415ecc75daebc43edcd6f887a57c7f79eb42a11bb79dec396049b6e9f04add105bb470494485f6c679cd9b83691bece9e2d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a9525976dfdbaf74c34d1a5f4c149306

SHA1
3d455be5904d24cfbe0a3ba9d7c4de95bdce5794

SHA256
1ed1c1209da54e2f6005d5414acbc30689e0d349cd1385bf2dceeeb83fee50bc

SHA512
543c0f12e00f50910b7c38d18fdb702cee070df12f602f21cd0b6df593085e891449acd31eed99f81fb3845f6a928bd1fe845a562772c7873e3f23bd92823f64

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
12ed768d630d82ced3a2477e40b6c2e3

SHA1
e3d1c7043c3c4c8d29e07a15d83e868fa9b11ca8

SHA256
6156fdaab49c9520c4c1161b694cf144c70fca813ae416d8781a7df1d0b3733b

SHA512
8aac55afff7f46d0fd594d65c6f748a4f6fe09a4c671c1077695c9e51f7bf909db42c4f0ba03d0b8ca3e210b539628f5cb4f05fa9ba7b60afb75ee3c9255ef3e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
17a4fa790f3be2347f15556545ca4a37

SHA1
9f350706498e91502984156a8e4de2ac15596eec

SHA256
0be692f64c013ba42fffe3e748e34bf571f54201b0baac3f0cea7641a41f8f87

SHA512
35ea0c917cbe0653970cf5b0f735f81ccd644c5097fa7404780e8e80b0025008ed70166e427a2290516422cd67ff01ef3035285443e46c55482895a96ba02c3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d266520bb470187d0a9e64d8620063ad

SHA1
dbb9f023521ee7c1c761d6ecf6c423b90ffbcf5c

SHA256
da1194b0bbcf4773073e84af1755f02ba754b14e981abb8cda05938ce6460b12

SHA512
f3d5e9f73cfde39b2dcb9350bbe5ccf04d825502036965dbc635e04fcb8ceb57defd71076c0984c3a540c5432695dfd31c4c34bc5a9aec7d01415a937e571911

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c28608f4e6dedd18dc89a77a5b78d2c1

SHA1
250980eceb1399ad247a66463074bba9cd16015b

SHA256
5348bf56538f55e87221038ffd7d1cd5e7e4934f2c48525c5a845c4469522b0b

SHA512
e39e8cebd5b15ccedf71e7707c4dd6c1a9d48669f2ac306a25084c584525fb12df7d39f8445df2f4680cbf833a3c25acb383633f7a5a4e37a46022bc273d2cd5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bdfeafc2b35eea76f6176f14b8e99470

SHA1
ef42385b8d8c3a9b664c54bdb6708d1215117256

SHA256
4d11a79fa5244b0b8a6bbec4a83f7ecd011932ebe2899795f7ea4e459a426cf2

SHA512
f3197477868f6d7eb061830e08c3c35b90b4a153b7caa2d8d8a405d387082d94052ed5b7605f61d48f4156f26d08e2426d9bae2cd68908353a521cf1d9550da4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
243329e0d3dab7a18286262134ec3d93

SHA1
9cc64d7caf890aef7162892889968af219681a6d

SHA256
e6f6f068f1172a8adc01e798e2e52178685cc9aa1df373cda07b3d0e23cb5030

SHA512
7fde5b7c373700287707344952fc16b6d5ed3be5ddd1a57d5c4dd165c470c96630db942bc6cf537086bbdeecc15640b56ea5739e60dc0866a9b54a55bb98e3bb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9205a9a70cb7efc6f24672a1406bcbf9

SHA1
ff869cbd0f11d2f85c7976af23a6add649c74e63

SHA256
8635641313796057897b04045057c1976401ec02f2b45805c88f9bdcbc796ba6

SHA512
fd75469af397ea007bb6436ec215a13742fe8ff2aa779f4fdb60c1db00c1a755742d46861b42c8d039c9f8c9269c53f0b688bb1b58c7866a5c82c3838253cc4d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9578615b527fa0471a3248cf740235dd

SHA1
28c9996717e4353b9fd4dfe023d56178420d5676

SHA256
02f7a15d2709fa0f63b9048159cd481ccb1640bd58b302e137bc5e0f5dfda43c

SHA512
b87c7c282f9c773ac1aa7463995293474a6c4532c5d211d26046085043d8cf91b26eefeaeeec9501eb5940bc5cd97660f3a0f2df9e361d88fb9d4a17cfe1f69c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab8930.tmp

Filesize
62KB

MD5
3ac860860707baaf32469fa7cc7c0192

SHA1
c33c2acdaba0e6fa41fd2f00f186804722477639

SHA256
d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

SHA512
d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar8A7E.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit