e2cbc2a14552737eab568718742febc23dc1184d29ea374235170f2a6be240c6

Analysis

max time kernel
118s
max time network
136s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/04/2024, 10:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f3469761d734422e812ff6925f2b090f_JaffaCakes118.html
Size

6KB
MD5

f3469761d734422e812ff6925f2b090f
SHA1

8cb932658d2a8364e2c1575e95f43092a3c5f01c
SHA256

e2cbc2a14552737eab568718742febc23dc1184d29ea374235170f2a6be240c6
SHA512

187353e06a13fb79a1e23cb8d4ff309072423f864aaf46b979374762241ff9c2ad360155bccda80e89b11f44ddd01ac693810701d076ec1d404436095aecd031
SSDEEP

96:uzVs+ux7q0fLLY1k9o84d12ef7CSTUJr/6/NcEZ7ru7f:csz7q0fAYS/a4Nb76f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007823eddbcee3e149bc4db86b21295af60000000002000000000010660000000100002000000087523b46c139f462960922934fda8a343498ec620902cd11cc173f42bbd36461000000000e800000000200002000000029f18edb2caea767c6152b340ab350d4380734490d7432156bf594472491b7a2200000002219d304268943f79b1314f6d9b15093167809e27cb4f6b282465d9f58a917b740000000c33563026e7ae796c9da7f5a2bf70e06abb656da807d51d3353d813161dff638cba7332cec4e61118acbae7fe453b33a4b68df261aae7b25fb781e45ad6f4a6a	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007823eddbcee3e149bc4db86b21295af600000000020000000000106600000001000020000000d40c98f3c912584acb93fc8594681cacc9a6800b60b8e1837adae328052a00f9000000000e80000000020000200000002b5a98c9660359d6d167d078499207cec73684012da5b3a1ee3f1644ff5bef69900000009b000b7851c1deef080a222d2ecf71f5199b960d87d44fdd156b73a5f6475a3c04bd0547043f7fffef41146435bb60c6e0d29f9956147cba33e442adf57be43caa11faaf95a0ade79d2c35303efe77fc7991db044390bc03955c07d75f18cb22d98872e07309ec1ce62cf839cfef7fda9a6d17b40d6995fb29b2281b59518daf137f7db7d68aef0951343f65d66d1b4440000000ae824268efae2fea5372b0b22456e2210ed6bcd96a9593f944a2804389137d1836d14c05b9bbbb531a10ec50256e013924c546b27f3d33e56b2121e1f5ea5c10	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{46AB4D91-FBDA-11EE-9CE4-6A83D32C515E} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60bc9234e78fda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "419424410"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1720	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1720	iexplore.exe
1720	iexplore.exe
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1720 wrote to memory of 2976	1720	iexplore.exe	28
PID 1720 wrote to memory of 2976	1720	iexplore.exe	28
PID 1720 wrote to memory of 2976	1720	iexplore.exe	28
PID 1720 wrote to memory of 2976	1720	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f3469761d734422e812ff6925f2b090f_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1720
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f4319792c255bf06ce4cdd403fa75c6c

SHA1
992b5edf9717318a3e96f8d2aed1c95f9c8171ee

SHA256
3d837ec8f7bd8f5d0e31de2fe85921b60aff274cd8fd682d444cbd7a70b6bd05

SHA512
f63cb9434e3357ede4857cbad397db7ef6d964ac384bb9e3478fdb0e39ff256748e8d561766c3fcd6d6642e3f1d5cdaa432f4a9d43593c2dcfd31f4bf0becc89

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
657ea821744bf2ed27ea5c40f477f856

SHA1
f3db2648e513d5a5d159359d989f4e7b650dbbf0

SHA256
06652cf0b80a905df29c87b85658efc6306babc42fd2332e50e2f3a543c21fb5

SHA512
ba276896b58d8ce2e33282b9e4c25415cc5ccb12602e0a74cbc3df544832cb9f8fc900b259639986ff34be2803762b583b8d8e3dae6e62931836b5bb05271eb7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6c5c55f0c5579d7610f16ed790448414

SHA1
14178cc1274cf261f28e5f002f0936b4d1807a3a

SHA256
a46734a04701625d56afa0587fd398cc9e89c40393085dff5aa8e0125d7360a0

SHA512
fe7d4c4786b1fee90ae88c42af29442b426cc16a66ae5d802150b632311e1ebf9c1858aeebc5b167baf79364732cdc31bf7b936bcb4ea07945722ef25611bdc8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a802a4b3ff1a56d9fe4d39e740cd037a

SHA1
592be27a2f2ff4ffae6b0de9b91895c77c606dc5

SHA256
981e14af201d6692634962a83ac923a193979f061a4f1d430c0b85dc56cd6223

SHA512
5d9edcad0bf90b717a31064f437ffdd323c0196dd3655c291b47ded418d79eae339be8b86c0e8edc5266a878bf8f25cece6b1c1c09c4deb55f228cf581992d5d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cf1c8b3d4746dfba9b4bbea461ade183

SHA1
be9b0bf8af9233ccf6e310d24976fd1f99c90da0

SHA256
a49ac62428748fd30e75a9301057d65dfccb3dc3f608e7df9de676399a5570d8

SHA512
8e3443a029ab0e8b5916e7cb40bba32b8eebd8e1c3150f99d8eec41adb309b21e477962c6f24a077d67ff5876642bcee00869eb8bae2820be9a0a0c0d0cecd35

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e95de3ef3753a03481a9c16bc40b91ae

SHA1
619a9763d7f8124db3db304ba6126384be2b03a8

SHA256
24dcb5161333f30c1a81990c43c81c2369c6a42f2d0d40d27caa3e6fe831bad7

SHA512
2a6d37c6f18a842f750e0eefdc81e29cfc9393ef0134a8301d054cffebb1c70cde4a1a9eb328fc2f9972cf79b00f11cc43a3e9ffa61fed77d301b4dd1ccf30ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dd23d6924e071a1c40fa75f73c01874d

SHA1
7805a83a2b5312addc31965717e47e1d6a4368af

SHA256
6eac02db605b71d441f8e45f1fca9e6451a00de3c56e057e0de94d79c60fa54a

SHA512
8768207cb1da2d398a289d55d578c9fd6755157d4444715af453535803d3c9305e9d3ccff8173af1afa7c99fba736b462621df1cae3d9546f316d6f0c7bdee97

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0dcfd0da175e2cee6461897c14c12990

SHA1
184ae31caf37834c14590e70077f0891d28da275

SHA256
bc39e581b1e42a98ba7209d8dbd22eedc79879d0656c9962a12f16be8d546e4a

SHA512
941d3ce06bdbf25a7054c7c3ab4cc4a1fb93a4fa1e9c628ed770b4021e776230fb500b50574e607d51c9a661006f909d81eb005bf8161c7151ad020d09dff9b5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4d09b3bbcbe027de6095ffa218b709f3

SHA1
4ee4f608d65398331b84f6b80316d99bb23901af

SHA256
81c16f0aa46581d5b7192bc8b15f6c86d59f78e11d7d95177e9887da822a699b

SHA512
a004da8d7c19a3bbf8b74144b87a4fc63f2597a3d9267e39661deb28a60748a2aa93bf4c255b95d0a4440a6bf3b144a510d7cf6a138ce96e08d42641564e476c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f30960304259a7b8e017f4c7e18b72dd

SHA1
4e4e57a0831bbb871c8a25a18a64df3c7e3a2fad

SHA256
e64735e8a9df7ea91be2e77e9c3d8d91f4c4dbf24908c4051a8472bdc3df8195

SHA512
47e657bbcaf6cc3e43b79209c04088b285723035913fafb4fdcd6b08e89f3f9747a885a7ff4a7264262c9ed4e2bffc1958c98891ac5ca8c7e211629916569b48

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
543eca34924a167d60270d56baf43dbf

SHA1
ed7862302e283eee3d2be6a88dc4790be8260ee0

SHA256
8048e7c7f25104b157eb46337e476f1a4be83e0e6db98a803f0e9de1c5a10d38

SHA512
3ea7236f6224942a10df42139fc40eefd143abf259173196314837f08245100533147ba45d4846e5d82821f520c0b4cf0ea9398b86350cce63e17b3fd59f334f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2358ae8eb1d1cb7c1041ecb1cfb8aee9

SHA1
9c42f10fdaa3038e4f90d6c7eff21eb92c6b1c83

SHA256
bf985680efc5a0276cf0c43b3ab315eb7526ebc5d711851d596f97980e3873fc

SHA512
bbcafc2bd309ec8a16c31e08d858c52ac5d094f540280d5323c0bdd94e8e1916562dd95a4a247663c2ab72ba8acbbbb1a1fa834b622ead05b8fd485897349144

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
19a91ebb1df1ec8afa466721a09d37d9

SHA1
8420194e984ce64ffd36f3003bd5ce3da8b0c279

SHA256
dab4289d675b963d3bc204b2005b156c5e108ab43c23ecb5a84287811455b8a5

SHA512
19c938c8a9e2e9bc60e19c507b8070bac9659cce3247672947d84e3bbf9999bc5948e968f57ed593c4d715445c336829df47f102a204d15715c14be516090a58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
913dab68b838506c16d2c0102297194d

SHA1
68abb9009a7fb7e969bbb2d506ac7c3d2c8d1089

SHA256
b162514886131777e338a7c1cd3ca4b76f48c02bfb9ed7a2ff12df5a62a2b88b

SHA512
17da29e7da8e7ddd2dfa0375ff1b42fe15c458eb042ea57dc481aebbd2b92a0299d9a43292f492b3aeef6bc31dfbae714c3d8e907f795005407bb713bd350bee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d5b334a22acb49995ef24610d5656c69

SHA1
6fd564aad8e1db2e2e17d9b8b9c7785499b38bd0

SHA256
b288b0ffa96106f650ea92fa7d422306ed67e172505938f91d0af81c6309010d

SHA512
5e153b12cfc5f916775a78bbd63ee1c2137667e1c96c96435c07e6dea0fabdc35b201537b6d6b802836ebc6cd6b1a3ce3179be16e4d6b86bfa2783a932c3753e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bf9ee98fb6b9975d7459143472caef73

SHA1
1745cfc6dee910c51ca7ed0cc1b2f43fd42df39d

SHA256
864b021c4508d916901052a2954f27e613fcdc0651597b2647adc52001a787c2

SHA512
4d14b59a68e1000d8365245ce1d06546deb201f09cb50addb4527313e9bae45196229b611cd3d7dcad596f2a318d812e1f853e6183c2001e5710a7d200b85435

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c2b2bc43adbe2527d79334238ed2b6e2

SHA1
891e4f2664d5073dc8ae468dbcb981c5711d8baf

SHA256
5a98edabeaedb0077912dd1f57c47490748692cf308f41000e84db1cdee497cd

SHA512
4466e4a8792631731cf100686b22eaefd58032c8a694977eef4590616096b547c4d391a4e2cd5e9554b8de95de0003eb6c242c442f8f8ba68fbe6b91264fd600

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2AE8.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2C1A.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit