e82d2174f90245dbd5a1b99b3db99937fbb0f33021e194c695e67e09491c709f

Analysis

max time kernel
120s
max time network
134s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09-04-2024 15:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ea4551ed0a9c098971bb678e8ae30b57_JaffaCakes118.html
Size

6KB
MD5

ea4551ed0a9c098971bb678e8ae30b57
SHA1

76ba0fa3b88d01a7051f001d9af247abee275c70
SHA256

e82d2174f90245dbd5a1b99b3db99937fbb0f33021e194c695e67e09491c709f
SHA512

cccc9280b9c675751089c51eefdf785ceea9b256300ea728320d7e45d6619659155427c6533a3d23fc2cdc270e58860f772c3ec4bdcb8f548acb9e78165a777e
SSDEEP

96:uzVs+ux7dbLLY1k9o84d12ef7CSTU8B/6/NcEZ7ru7f:csz7dbAYS/f4Nb76f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2ABC9A01-F683-11EE-9A09-E25BC60B6402} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000006368aee7d0d36229bf44638d7c12bb41bb64c7c1abf9246c0826d1c66297e6cf000000000e8000000002000020000000413e17d6f6b12f86dc72b1fc7781051dab29b686b534c3f3822e84df9b96286c90000000a24108c3f594400875991f895ffdafebd30126c288a54cb8c7c508398248bc00744e8d959c45c5e78ecfafa85d214efe2cf737526d632afd5ef6d3e80ff378513399918c3c1a9671f74a85a03d68065cd0944410c59ae3dd9e58b9d8d3d75acfa0bbf310be439cea4aa282316b6cc1482698ddeb845cb6eef1ecabcd36c42a690d1e0389185a096387d185783e6cdcd7400000009ec254c7054ba0390c68114e0e73a057d5e5f92d43e7a760254b37346e889c57e3cac06caef85ee8ddf8c8072ad99b43e03dc9086267b16647c55af0d92c9b49	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000566c1736463e2c7600086c3509d6c1c8b1d0d8adfa6f7770fd0e4b5f50152446000000000e8000000002000020000000e2648fb69df0e25fc74faee2482d1d7ed0a2ae97702e4ba0e2a26c141aa370c72000000066a2036e10fe33f3bb72c2b532ef1209b972a53e6b2e06623d84ed48ff2df6b3400000000169b97342378d023cc0abdebbcf3ba8db9d96bfc8d41f0fcb4f075a30f4232b642e4b6ec25f12b609c169d29dcf314b5f44cbafbab22110b98f2b36b25f7aea	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "418837241"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9000b518908ada01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2656	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2656	iexplore.exe
2656	iexplore.exe
2908	IEXPLORE.EXE
2908	IEXPLORE.EXE
2908	IEXPLORE.EXE
2908	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2656 wrote to memory of 2908	2656	iexplore.exe	28
PID 2656 wrote to memory of 2908	2656	iexplore.exe	28
PID 2656 wrote to memory of 2908	2656	iexplore.exe	28
PID 2656 wrote to memory of 2908	2656	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ea4551ed0a9c098971bb678e8ae30b57_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2656
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2656 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c42a364502fab040251f54388eaee3a1

SHA1
1f93c39c1635052c267cb7606b80a0bfa9c1aab6

SHA256
c5bcd9adf19d804972b07a8b8caeead48a13985dd9f61478abf3604511167fbb

SHA512
479a4cde49c54e61a38927eb78355a76411b08721c2b5e8a1d8f84f6e933afb3a0f71ee0db7a454e6e671321352e4527ca50d0892cd5e7434553f0b976a92641

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
db25e34f0f98fcf6b8c9979958c785be

SHA1
c766611b71eb2b8aa1062b7563c6eeea2f9f3176

SHA256
ea5e11a883ecce5dfee23af0cb258d67f732e28867d68d82d9068f11a5d331b9

SHA512
ee96f5c295fd740430d2c2c194d9e207b9726c3923a914e54e714c64ccab8d1f241ca1be8efc6bdcb520adc400a9ca0ed215a1d2873240779d9a9a4c52903b01

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
82c82ac2dd67e3458e6518b73920645e

SHA1
941ae75a4fb790e55f3b31125ce696f619db10fc

SHA256
11a191dcbbeeda5bb80e5e73badccb3bef87761608f5d2fc09af57e99f2d5648

SHA512
9ec789e9a69dd767caf71b9f8a04a96949635632c45b16d0c0887b2a66c2f76afb6c4e9833b73768b40a273ae50f7cde7e2c0fbffdaa5f6d8b9eb1fa9d736e2d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f57c0178076d1c9a41120cbfdaa056e

SHA1
643c2bd7cb6f6c79d96ba96622ed15b39c4f60dd

SHA256
0d50e1c17f340d144c14ba6e9ee771e5b8622f3e7d1d219ff81c5723b83964aa

SHA512
fc6058bb2a72d1f1fe0eabd50775610a574b026e714c835de282c094edf1dc0ac7bbadc9d18ab88f7700e459484ee29e9b47cfa24289da1f0463c797ed548d0f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
418e11c8d2ac3509dc8f1117402a7c1f

SHA1
43d8c56b1b1392347b2e3fb67a4c491dfa54c305

SHA256
d3f6901a310b36050379a18b1bc6c8eee6be1d11971ddc666697dfd2a18a751c

SHA512
682280ee2d7cfbbb2ec9469400f5f79d93630088e03ee6d8333b8dcf4bbd02a68556d82727a5d37c2c46d7b15b380701d938b2ed62d2926251246713540eeaab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9acc2d5c0d1d8948c71e1e1d8a340d4c

SHA1
3fdeb80f0aa7804bea51705ada49feb3eaddbd8a

SHA256
5772e3119e0bfa4f1bfe855d2872539582f19234a175f82e543e4aaf0f1ac5cf

SHA512
acd4cb1bc02467785cec507914e97dd004430e826428a49a10e895f16a46cb55407757d574b1a0a5527841df8f452471ea91c39786ccc2130851b539ebac56cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cf985df73c8a3eadf724cfcef77346bb

SHA1
af64912636d637d9d2f9a3a67eb68ecb421e52bc

SHA256
35552e537d25e9427fc0850735fa942e259c998e00e668ba35551b732d6d1790

SHA512
1143e22a9c0529a12496992c8bec74a0d0901c12b3cddc89dba55d65fcd08484a1bb738ea3c0c274a50ca87fb2f894a72501acf389da027d3a7776abda75b42a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7997faf578f056fd0509c5ea2d03029e

SHA1
032786ecabe936e514643a0f379eb9ce2deba10c

SHA256
9db04fafad59b14915ba5892a9418157c24767ba53a9eda7356a73a64fa2314a

SHA512
b307aef1fce05d98e98eafc247bddae9c658616f452c8b1616c94ce7791be5838a1cc94d9b1a09cab5e31fb1da9d74274b768a1dfead66a153db467c9def619b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aeb103ff55db8fbe99bd9096df28262e

SHA1
edddf768f52ee655a683611b88f04bd1f42abe1a

SHA256
ad15db51c03c8f073a2aba9e5b88a3a609f8113f5967027e7b68532c83fda171

SHA512
bb47453dbbb8b87bb556da16a448fb2634599f2fd228b117fa422d2a278b9342f084145f06efce62d3968e0464d52fc1841cf63ba0626764fdfafa90b50c92c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7b2324b7696725f8a4793741895c0ae2

SHA1
a2faa1c74ee5a0a45336ed9687cba8e51d128ac4

SHA256
449660dbf2005b46e1d8032881cb11886a6cb955e127222ea999c582cfd9e345

SHA512
cf7848d20b9c32b420e9d6b6cb7bf902086f864c3f09fb0b67f95c4df3973b13f3ba4e403297ede17767d7a0964a008f4b4470cf59f287cfbc958114b6449236

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
11f9a4aa44c5ff9e313eaa8188f75b4d

SHA1
e3a4073b6f13191e41ba2ff99e804e775bde21b3

SHA256
a3b8e75fed5e661876d0ec3dc890fdb92c873a506857819534fc23504a51c2e3

SHA512
7e404bc35f9133e2923de6ebcf6c57b179405ccbd29948d3e4d49a4ecd8222b2c99e8b09bf3f0948caceb26cd649343fb0ef8836cf84ac4b88c2a2ef09b08da8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e97b31080fb2420d3961efdd45e0b484

SHA1
e9ebd5a466fc2caaa5724da1717c0534c67f0673

SHA256
ec1dcc46297bd1bd35a46ca3784414cefeda62e958cc9b5e73d4d00f80ad46d2

SHA512
4936d9d99fbacf67da8df0bbaf415563ca28873496faa6ac1ad13385926f21b0fd62b6aeb2959d4a4b1ada561e4a1778296a28193eb6dac802cc9c2a860374b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ee79496f020f5e797eabce8ce2d8cb00

SHA1
79e87567c42a4c03abef3bcee5e2811899732cef

SHA256
9459ac983033979d24dc3356dac0f4613e1137e5928e2e8142f588d64e6e3112

SHA512
352171c24d7894ad96b97b582fb8cc9f95ba2e637de46008980aa838ee3e8818284df4e0fb0ca1db56ea2f9073eb4d795c0b222200a81a523c09872804138351

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c22c06914de25aa66a030e6917ff66e5

SHA1
b30a0cabb639c936a3934ed9b01e3ae7724f1fb0

SHA256
5bd0497161c9232796ee8f3b4be6da23e6e1ed3ec77531a9ffa30b237fb2fa22

SHA512
47c2f2f2d6ea8b895db59767663de08f7313da4ada300d61b90e59284c9ee321bd0bc7dd9f974bab15b0ba2df79ba0d5e5b3ff0fa95ba026f41fe1fc433929a5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
58e0b947f8c0cf03a274789b7e7ec4dd

SHA1
107c386b1321c1e1d7e99d165ad79ef9d01d8a97

SHA256
a9c8023f9f8c7e930cd5785e3fd5a303b1f3c395d6e07f7efb50a893a24b9d76

SHA512
e27df5983504655c21cd396de33ca4a5a1bb73689c7bf64a6f57655cc5b0dbd50ef159f1c70095358b7339b4f8a13964f7c4ec594e5b9c3fbdd90e98eca50d90

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
361fe5732839ce8f82382ee2c3879bfc

SHA1
8637b92007bdb08321e1c90ed8d28ee689c364d8

SHA256
1b8db4154eec827814f900c7c16435162bd135abcbcbaa7d1d5d39b5b886ce51

SHA512
caa5ece6ca90fc5ffb5a426e403bf670f51f0590953de868a70fe1e3162a0db3a0586474d4f868ef98ec8ac21198ff48ba13940c197970da9d421795286ecdee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
877b6d0680a0990bfb5a1257826325d5

SHA1
282e8bb5033f42c40df51e010fb9190f3b67d451

SHA256
a1c11889774a43353a139ad700e7dec54274c0628c1dce26563e26460b4809be

SHA512
0cd788b2f69752819ae8309092b2556045617fc4fdc7a36acd01d7d440c936b57aaecb269ae07973d821f28dcc7dc2c1274a9ec4864c2209e74bb274609cf641

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab395B.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3A86.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3AAA.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit