5d035f345637670ad3f8ab4c888396a4700d4851ae4d4b0ed38aa5b02b7f7212

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
13/05/2024, 15:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4043b3e88f0071fe4c4fcc834ff374e1_JaffaCakes118.html
Size

784B
MD5

4043b3e88f0071fe4c4fcc834ff374e1
SHA1

1dfab59366b8d0e8fcc49ef7d9c1607d56892a79
SHA256

5d035f345637670ad3f8ab4c888396a4700d4851ae4d4b0ed38aa5b02b7f7212
SHA512

22e95dd6c68bf28d04b6f34509682989916763545b05166772943875b0106631957db63eaa9f1c6a2f9f1ead13e2b722713ff7147c41bc2354a711fd07454205

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421777696"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{744EA401-1141-11EF-BDA8-6EB0E89E4FD1} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d100000000020000000000106600000001000020000000f0239b03dbb3ad756f4d6dcdb12133c90eaa0d0955247c806d42d2a9bc60f7a6000000000e8000000002000020000000f6ff1fbc6e17a2088e53fb197b9102d76e4f2ad5522120b2cadabfa3f784a60f200000000e78daaacd83f914a7d8c5dff7eb9d1f0165b3ef0e4c44017be06bffe943df1540000000d0a23db829dcd9e0338775ecfbac388f44e1477d69ce521bb7b7708eab39f3ba2cca3c7fae1b28663b5a2e14c8e8ef789bbc09f5827576930ab50f4781c954de	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0eb9b3a4ea5da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d10000000002000000000010660000000100002000000012775c44e5eeeb57a0c636fbf880acf0aeadfe6218bd2d2081e1274397a78374000000000e8000000002000020000000f480b016b9c87b680e80c4633b6ee60209b041231b2cd808df62a654ed3d461e9000000045f49b43e947a4f64bf6a9b04dd5d30fd82f165c8245725bcab513e921d79c853205447b9fb4aff55110de514a3ad5033a73d941d7ba1dc02b55c4b00f081389ec013e506ee633ee8b9a321c3e99ea62a8141ebd9e0c19c2413228bf31fcf42ab62f2188aac371e69911fa9271e32e85fe4e0c09c66ea2b2c71334eb8e63a563305fcfc12ca0af36219b80145bf0ef3440000000c13c5fde706a2ee851d61e785fe4d2939bf40bc6b299246e58ea35a8f8f373468917c2d3d4dd24810fd83550d8b9533b31f666350b2e969e1968e290a1fc707c	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2936	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2936	iexplore.exe
2936	iexplore.exe
2968	IEXPLORE.EXE
2968	IEXPLORE.EXE
2968	IEXPLORE.EXE
2968	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2936 wrote to memory of 2968	2936	iexplore.exe	28
PID 2936 wrote to memory of 2968	2936	iexplore.exe	28
PID 2936 wrote to memory of 2968	2936	iexplore.exe	28
PID 2936 wrote to memory of 2968	2936	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4043b3e88f0071fe4c4fcc834ff374e1_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2936
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d8eacf249b25d1020e9f11c138f2d375

SHA1
99aba1e50b13343ef918d80e8d9c04f5a91bf6bc

SHA256
f9f5c4ed4e2f73c3b6a3b1eb5daf543cf09e1874ec45f050101d296425972ce5

SHA512
86a63c05e37aef84b08f0205686f4a485fda0d3d2c7a136221c5c198973ff62663a96dd3f25d250de9d5753885855908b337d3164c20ef4350476fc10acfcd84

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
115311e256055d9a4b92f4dfd92c9732

SHA1
a69f6bf931340c53a0dc4dd808387c1ff145dea5

SHA256
d1252f866aa19efaaff0b3642ca340ede45876b5dcf40d08a5deda595153b493

SHA512
7ad8acadd21e5efecb78ed727346c1b18f533bb4645cb10409b9001f8a9e4245836f4139dd2a2c7c2365a914e9ace2b515ecd149d10fcad42bb1bff797489e70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b485c4004c16bc1a9723eb352b74c1dc

SHA1
3bcb2cec41240086bc8de9fdc58a5858322f9999

SHA256
6c45fcdc982478592b3f5bcfdc576aaaca0f4261412ba6f79534f93b5f9b56d4

SHA512
ef0efd45ae9791eb3683f1cefae47d47abb95785a738b6d631e36e495be281f4998d698e32cc31cb82f890f6a1246b660e847a17df5c4c0ded4930930b48cda1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
74a5da5a020605d8a8c88ac5301c972e

SHA1
ce544c5bc663bba7f36030296ad3f1e3c8fb90c6

SHA256
888c661fbdb9e934544e3f783bbcf55a3575a8fcb35f928be9961ffb2ecf1533

SHA512
32fcf44e4f5442681cf6f2f60ddf07abb6087e94129eaadfb1df3ee1ed441adb794318b0d7722e6b4ec76b4cee059eb228c333ceab91e32bb8cb96b3afed7be1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9455972b5ce333c46c99991307116bc4

SHA1
dd72e563e5096f32f3b300389aad7242c3436f77

SHA256
883438bd1e01ce5744ceb721508043d7375f4bb202c93071c03d34e7173b03aa

SHA512
b3c1b908c4010a0ea3a9763627c95c069935a38986e32a961bc79f8cc1688ae81766974805f7d8af5faa8d095c855b12da407d9914afa32770bd6941f17c1dac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
69dd5026947dcc7456abfbbdd052b0cf

SHA1
5e1d8b59524707d3b393edc0d8e3b313f72674ab

SHA256
f89ed6f5c88f1676477eb79b747296cfe455a57b528a32c09244805ef784df45

SHA512
7a0a856768a17a49266c0bb7ea18e99db5d372cc770c0358763ad2bd61f0f7d8a903ed735124e7c58302f36a97f4f0d7026bf568218a05c6e83f017527f622f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
648bbdc0a7dd236334c6ba3a58739768

SHA1
c024fda423531c80cf03c090b5a23174e8a1e398

SHA256
0de1f8d15e7cfd2c7e75e1d575a41714b8edd1a046bd5ea92f3cef8dbd77ea49

SHA512
dcf3083d35f14d2492b6715510d5c3f01b542930a6b68f95d1ed4acedec10aeb18f7df8ad8a51cdce2aeaf14d353c9bfa5863bbcfb555df6057fe1fbe5655f75

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3e110d1c1976ef9d318cea7c068ea32e

SHA1
c7fe205afb3905d41b6c2b9b1daad13e7ffef99e

SHA256
957762712306a66e653204bf32a29ac58c720d5a73b1d32f5708fe9159cf7dac

SHA512
1be6e2d3be9409ba834a6e056362df89019867b2fe86f794e6d749f02716109b4911398ce1883b7621fe870caaab8b498ea9c6a249fdf4244ecbc43c8a078917

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d47ef0833a8eb81249e6e0993b0b70f7

SHA1
86d956b294dfeb69f830ec76c2ce3c977ada25ec

SHA256
7d0b68f557b52e252161b63010f146a782b01e2e3fa46351bae39a8a318323cd

SHA512
7c8ff9d599c129dc2668b97b5dce4a4254dc366026617f60105e925641463fc641353bfbc9b5a52d982938b9c93ab93424bfce163c020519a3e512f9ce9a8193

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e9262280caaf4e535f636e1acce4246

SHA1
22815e593f5b8ae0adb18ad1cffee0bae4a5680e

SHA256
a88544f4d63cb68ce0eb584e9a653432a3927af94162e177ac636363392c8dc4

SHA512
a4f716981a196988ac7ea77794e3c9740ba33bc5b70161f56abeb5aca64b02ae2e3243181f4d5f957a586e0a7686550a00053e0277d29986255e6819d3a1c7db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38522aeeacfc9a84b72793894e12aa4c

SHA1
ddf3ca20e5e5b974b6d14c063ac7406059b9f133

SHA256
f29e1f46f34ba51be58e42b099770bdd6a8427d6d64e20c97f6aa2cb24845fa5

SHA512
8ae11b3deecf0fe15061a51d2443b5bca1eb8ae6ab1fdeff4bb448104cd4607e864a52548b871bd2a0f26ce0c72bbf5c656ddddd6fe6c276dc4728dfb655d826

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8af33a1625f7a2964a107a94448c3de

SHA1
a0f8773086d5e41524c8a9e44284836f94165298

SHA256
0ca627c8ecfb45a808205c7cd05f8b4ddb17fe1645afe8a59ae1d8f7640b0a97

SHA512
6425e44ac031bbfac5e05a1feb3d2772ec95f5a9ca2bcc1694e4174c7251b059020e082b8e9483304a9d03c93c9faff879f09f160973e417fa599eb32507191d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c3b95fd27a82c0cbd608f64036180f0

SHA1
bd5e604cfcc92e84a56b1cb9c4b06208963f6506

SHA256
d4287819c0d48edaf72314b42ad71da90c4a67bb8eb90e7f46114d0f21c199bc

SHA512
566abee9301af2fc243c00a0ef72940cf6a0c487136e77de73c0ef572e5eb6666c0efe1e254f44e7232b77896806574a0a1920934a9f053c3f29130f745558ed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2a8e966b4e8817cca2670da8210f7335

SHA1
b6cc0eb9f41f012e7205968be7c160d9cd3d2e09

SHA256
568cb5f0a3d09733f4ebecb4e9792fac196868b9b2616da4b6ae9a4f1f966851

SHA512
1f10d9982406bb56bb292f8a50a344dfcabcfcaf534409d6e596fcccfeec1a4fee1af968488b17b677f0de2994a9c7cc78f56133a5f5b3875d3d7a022146b5ce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2c5aefe0da5f07733c5a83217f9778e5

SHA1
a20dc9ab6192727fc0420007801dafef305e9d10

SHA256
1beaec23eb880930eff2f619c992113261c5fefc08aabffc756738d53e42c7f8

SHA512
9266e9c2b9eb5a2b5f7ea5ef5d607a9d8970ac7af3e7c00fa225a6ed8c044b7d112aa0087db7df883d48650cb4781917bb5fada5d4173ad79d13618fbbffae4d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a2544a81d1a830f16601cdd430b85eeb

SHA1
df106591e75c5382631290f831f840f4a3015d0f

SHA256
e7f0f9cf5a15cda7b12341c44bc702d67d33e87506c3ccb7f22669896d7c750d

SHA512
eb6b28cd89c4c93d0fdedf75aa8d4ec90542b948b9fb1fc41bf926858421a698200435b6819abf7bd826e4d944a3755d8e69e5efc99033f3a1f31d931ca92ccf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f93380ad39bacb4c4448e5dc3723694

SHA1
4617433d648e50cc0a6822774d1d6e8850ed8335

SHA256
dd42801fc30efa70da99756a24ad750147550cb17d5c21c9d8e609bfff1aff44

SHA512
fc3c13e320632e53b564ebd0498fe568412f41d64ca350574f08d3338850d0d9cbd5ce9f97217f9868d36202d44e387247bc4f86c2ecd541f7df9fd7cda9e43b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
943131648914878d73e6aaae24979b52

SHA1
0ad34ff9572e5c36098ee3c992b521019d1a747e

SHA256
d8db2e419accfa3b2d1d41ba91b051c1ef23301a0cf93b68996cfd66c2da6375

SHA512
aba5b04d35837378c6a63622c25de3350028876b764d0d36a28d904eee630c6ea3356f252dd575bd7d307ae94482b08b541ff3a9e3d79d69f8f825e533f896f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3065.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar30D6.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit