868ca4744f56f8070534580cc1cd219ba183167895bee7426e48b73fef1f3c28

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
28-04-2024 06:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0497c902f0bf2e37a63c5073d81de66b_JaffaCakes118.html
Size

460KB
MD5

0497c902f0bf2e37a63c5073d81de66b
SHA1

2b3502e87d10c5eb3d80fc10d0711130a87d87b9
SHA256

868ca4744f56f8070534580cc1cd219ba183167895bee7426e48b73fef1f3c28
SHA512

149a0fe9e7f14fc44c1d655367d7297bb82a6026b752d7b37c5e6bfd29994b94c37296032b0f1545e1a0369480140b7ec1ad2f7703188a28b1720b98ffd376ce
SSDEEP

6144:SWsMYod+X3oI+YTsMYod+X3oI+YrsMYod+X3oI+YLsMYod+X3oI+YQ:v5d+X3R5d+X3l5d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0f7e6393799da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420448372"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc23300000000020000000000106600000001000020000000b5fce9357ef868eb308897f6586f4fad33791d7e728eaeade98b937002a31290000000000e800000000200002000000056d4f68eb3a9c773218086ece03ccf6a6588b94b060296e63195a8146b04972490000000c8ec9dfafe10c4df34c4c1bccf53e99e5ae07542ac303b1751fe01b260b2676fabdad43fd27803edeba5493850d1a7161dea9b7d12f2a4b535e8febf75179e407cf281f1aabcb7dc99a992b73f688bbfa8f204ba0eec5d590b4d2cfa227135435651dab36425fd79300f83bb71bbb7010b8d52d849c0e99ca2303b9416e6ca10603c17103f8136ca4ab63a76e1a36f75400000006ac8148b7071217c066cf85d63bc4c345012556d3ccff70b76472abb95ae52523af273881f48d85836f71b0fb3bb1bcccea5d7e16de7a9478a785d19f6102bdc	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{61677C41-052A-11EF-8B56-EE69C2CE6029} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc23300000000020000000000106600000001000020000000dbb858573713b804000535d1cc35b0fc47499d5faee2a1edf44b0b96bb11432b000000000e8000000002000020000000578dc1428f9b6ba6711c79cc354581b3f1f63c420c253f36164284bd1fce6d24200000005fc7f7279284602b14557ce3081e8483bf6ee28d9598cc21d6a9ec00c0bef61840000000b2503940856dc921d2e9d0ed0662c098dcaa710f14edaf15cb80968fd8cb7f28dc70fef9c20b5350e16277b17eb10639961a0ad8eb8b76816cfcfb1bf85aaa1d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1620	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1620	iexplore.exe
1620	iexplore.exe
2488	IEXPLORE.EXE
2488	IEXPLORE.EXE
2488	IEXPLORE.EXE
2488	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1620 wrote to memory of 2488	1620	iexplore.exe	28
PID 1620 wrote to memory of 2488	1620	iexplore.exe	28
PID 1620 wrote to memory of 2488	1620	iexplore.exe	28
PID 1620 wrote to memory of 2488	1620	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0497c902f0bf2e37a63c5073d81de66b_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1620
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1620 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2488

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
674ad5ff4cf8d0443278ac74f77c31ec

SHA1
8ea77c2895df52fdb21df07ac2fe29f7857ed088

SHA256
fe8ac71a448450a944d65e19b6a73432b56f3ca5b1f9a305b54e69795b67de55

SHA512
cb21eaefe095e951374b0cb47531ee9a7c63538276a69278b3af4a443080bf83db23d87aba771f4b62573cb7f894dbe07e26697ba55040ee148c89b44ee0c935

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
5c76fa23d96f14d264efdb5f041c6c11

SHA1
7e975b81efa5af07214d705803ac92dd70dd4740

SHA256
6ad044d4f8cf51855fb7caffc39be988b67f1feb8d140fff39369854e8fa0c0a

SHA512
cd648cdd8aaec08c1b91a58b77ceb1939a0003769291ae5eafe4ad035b2d5ac452eb529f66a4a14df31126bd552a3675e870532d7b0c4d77b9a84a99390056a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
1ea874aa49f4b82248bae41610f9fc2f

SHA1
51a1eded963f158ac8ee481916252a3523c19ab5

SHA256
95e1230edab9a65dc0f34f5da7f342e491e36ac38785a9876c8aa7f305e2a71d

SHA512
846c545a6d9d14d2d2c47560c1b7ad1e113baa36bdb717e9cf743a1dc3665f03020a1d643b4ec045e79c50cf862969626111021eb6ec47dd844d315da9d3ee46

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
5a84269fac4483bed90071273fabb055

SHA1
dd7b48e375539f731f1b7740674b29f73243077e

SHA256
1ddbcfda98f71aab54c62f4ff55e2cf9ef240950c5b9b74a00fa7cf209f3619e

SHA512
efdbe4ff02e017900592e0b7bbb140a3dd5733e01f02c0ee512c7365e8f96044c0dfd6d6e64bd60cbad4169b7d8f374a59d3d1d2517595b16efdd3306732d298

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
c6a82705a7cdd739d0a31951dab70f10

SHA1
16f7c72ad787aac81b64c14be415913256067cbd

SHA256
d94368f38465c1e51303e735f5abf3ad885f603594d4dff5715d50d2ad7d6fbb

SHA512
142c09669dcf1261526d4548cb0ae48173926694b93bb7d3a0603593901f273f61cefc3c4bdbf97a5201ca17eecac38a581887819f541d5ce2318fb7f5dad8a1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
fa6b0103748a79aa887feb0399283753

SHA1
eb80e6d04c5226f53ed95a1529be08819ad65248

SHA256
66250081b91f68f14eb35d5738f1a2c47e1f80a185b77cc5a3384d8a3ba7043c

SHA512
03aff04f365a19b8faaedfc07b1df4e425d481b44dd7aa198a7db1e20c3501418c4020013472f62b97035f56701f931fd89e30addd12b9f388f4b2128d2aae80

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
c14fb04ff15c1cc47765f80b942ffa67

SHA1
b96b77f3d4c3654ddc5b0f9f3b2270b23a46ce4d

SHA256
235be3f8b89d34d223bd7ad13a2fa277e7cf6ef6e04572b7bc2b45d3a627c5af

SHA512
ce7cedce0005fbc5bb75a66cd31ab2fe47e358d58571bdab056df8ddd550388a3ac9a9063359265092cb166caff89e63671dd6ae6f3767fe1e4e8a0ced4790c7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
8b52a3e36396513ec118d3456d49e9a5

SHA1
dff41569c6c2ee86572d9b14b01452367ad25770

SHA256
49a726603a2b347d5e4928d2845697e2e82a9d52a0a5dc2751ec915ca55a695f

SHA512
547d03c6034a9c09899c1902b0875093dc29fad0b18b92317bc3da0768e934bbf9ab3df9ac1f4c63c52229c20912315cba7d365458471418c68a33e5b98f8652

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e3b26e63b14ecbe85099ce45bbc17de7

SHA1
e0009100d58770dc9e18b5433d0c994781dfd6c6

SHA256
dc8a64eb192afe1c6884d2960f83e03bf1256b7457c19804cdceb210607fdb7c

SHA512
eb593d85762ec9c5d6255443be37b7f7515391e2d24a3660b8ff1b6a87571c24ffe1244894127e027f0c6c7845f6c22f31e9563f54acd0a9083e8b43980febe3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
657c347321f4814b4edab97837fe996b

SHA1
e9c83c4c2f80aeb17166b073ac5cc532a7885d1d

SHA256
01562971559e69fd83e0e1f5056f6b032f936a29130ed5ed3375fc180b4d49c3

SHA512
4e8ae24b560c47629903e800c4d9ca58c7dcaf2153a5b46b114b7bb35a122b84fb558d6b198a81ce2f8c9cf49356ee7f3a6e6225238bebbfac72bd917cd9e880

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
8920218611c7c80e6f2567887bde6e23

SHA1
af875398f8a45ddb2049daa9808ae45f9b87e812

SHA256
df7b89974e0eda7322328440cdcd0206905dc4a91ac4bccd32d4da197340e453

SHA512
fb56ad6bd95f9748bcc5fdfb97d9fb1425493ff0688cbbab4c729cba2d2dd696091c319dd72cbc2587e51646b5bb021288c851be0ca0d260cd24cb9938f83a96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e9aa524fa190060fc5c3c9536664608e

SHA1
3aa7f032eebba3f8be0f241b887696941b212b88

SHA256
bcb09098ad8db1d27ea0f41bd16cc306829adde1faa65b894f6a63afc2721e35

SHA512
6c272fbc2073f717d4ccd5db0ae1d18b00e0fbb254a53e0c9635ed30b3cb7ab7d59f8d7812aaf0b7ba35305fbc8d993ed5cad0d6455cd93b39e011c69b2e00dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
6cfb9fd955d53be6662b402231ae4908

SHA1
0d669e272e56799706ca6e3754d7aefbe0277989

SHA256
511e40f2144e155018a9761ff438bcc4cd154b89dd02c00093dd5c55d739dc93

SHA512
2433ed16f813bd6b1b9929850238aead6c07327626ab66a5e636b06117df411ee130f3bffb867e6944431063d34bff8390f9698dc36613207c59d824eaf230a4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
2efe256e0a407e220005a942014cb0d0

SHA1
ccf2e3a5bc05f5734763d1fb448fa47ca2d52f28

SHA256
7c61b4546a7ba3104cdff3c67e60454462094c19e7b68d19d484536a68e0856e

SHA512
46b9289374291579b9e7715d7952ff96ab4fffd8a5ffe333c3038a1db4780acef20e6f8c2b8f1235fd231ea4f772252fa386982f058ef40b75ea731dda586cef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
b50ce782f6b1b4061392d5591e236473

SHA1
6d853e8ed597991597788ab3311c92af1abcc3bc

SHA256
4baaf6a9670cb71d459c6128755f15b189783574d09dd5fd7312f853fa131d15

SHA512
52271e540fbff7eb88c492d2c998dd89e4a97cae29c823eed27308f5966f29e94c0db23d5ba8a350eb3ca6210edefb17e5b2545dd5ffcb2096da1a3758e6e393

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
6b4e2fde993b14e3547323fd8faff512

SHA1
5dca8492af1fd339609957b6f46915942e1be222

SHA256
4d229461bc240fc27376e62dd31883526d7bc468f026a53e81e1d1b5513b0c96

SHA512
e216942e575e964569b70e2c531246e90bb58465ea55a7e59212cc5631109ab0eaf4696042bed5dd0b3b43159937211fa8c953061c280d22b437ed865c9b029e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
7e07a0ac06fedbf441d92e5cd6850ce5

SHA1
d27be366f7f966d9a64dacb206706b9a5b3882dd

SHA256
1fcc6a4f406ff6b51f873607f7a2d1fe9a02853477db4d59858e118b6ea19311

SHA512
7a784a6d355d9bc84aecebcec7af2438c90dfab3b27a96868b952339da71fbb77e0bd8d2b4f9c6b9555be9504fa1cca1a665818463b2cd2e333b781ef680c2e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3E89.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3F5B.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit