6e749ef244676ca30c04a5637ba7b048cf0e98e5d5138ffa0c7dfdb0c3ae41df

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
17-05-2024 14:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

50099cdff13d9b104671fd3ced7a414f_JaffaCakes118.html
Size

3KB
MD5

50099cdff13d9b104671fd3ced7a414f
SHA1

62d2d80ce20a2ca94d22122a91b036a8110da2b0
SHA256

6e749ef244676ca30c04a5637ba7b048cf0e98e5d5138ffa0c7dfdb0c3ae41df
SHA512

abfc170666daf55afee40b7b2428ba6375adbba1923c7e8fd3ab65efebe170383597940a7c3ca9873d9e3ce969842bd295eefe2f747ca85f5c6673a6c39ab7a4

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A02C5C81-145B-11EF-BB79-CEAF39A3A1A9} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10bf147568a8da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d10000000002000000000010660000000100002000000061b352927b9ce6e8b8afd8ac6e6c1be9841d48fc7b26a0d46748d1db8a9181a7000000000e8000000002000020000000234b665ac91a0e7ba65e1c5a079ced89aa839a90de582c88f48d1235f93ddd99900000004a9a2ebaa16126c95b252f49d5ed36b2b086201a0c3f17db296bfaab18c28110db60b8ae00a6d163a0dc43657f886cfe1f87a52f07b2e678359acaf18f1915f01de454c5ae77aaf09c5d9481b39dfa481dc1269fa551e15fe2ef6ca8777707737602b82ab9b5d37cd94ade0e89082a1d9dd411ec6aaf6221e26e7e593ec45d9280de631be43631ff94f9bf4370490eed4000000047b873b55d717e22e177a61ec5ed856e5cf7bfff51f099f59fec8df3844bbf9d1b239fc3b31901d10fafda08d8dcdb60570217ff52194c2bca75dd15ab92801b	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000007db16f8ee4f85daa60e31dcf66a4d982e727a792613128fb76cced7eb3ff91c2000000000e800000000200002000000029ca0e50b8afb64743e0461659bc9260770cfe578a0e2414f61fb38d54913da7200000001a3620128f370e42a983bccfc3f5be996e279be2cd2c829bfebee89e621afc764000000000ccf3154f6e98bff77aecbf88460def5decf85056f3a5457c6b318ce6bb69f42b6d4213744fe1e179e2cdb0cbf144358103e6559d72ca41fafeedb05bf68718	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422118791"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2164	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2164	iexplore.exe
2164	iexplore.exe
2860	IEXPLORE.EXE
2860	IEXPLORE.EXE
2860	IEXPLORE.EXE
2860	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2164 wrote to memory of 2860	2164	iexplore.exe	28
PID 2164 wrote to memory of 2860	2164	iexplore.exe	28
PID 2164 wrote to memory of 2860	2164	iexplore.exe	28
PID 2164 wrote to memory of 2860	2164	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\50099cdff13d9b104671fd3ced7a414f_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2164
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fdc0651d99a1ecf18d5fa86c0ab0ddaf

SHA1
c8dc11d4dc35511cc3cb2e0f299b3eca9265d41d

SHA256
831bd5f311c03dcd745c5cc6fa190f48a5dbd7bb3bbd402bf73a88eeb23380ea

SHA512
5cc419fe95aa406280fa5537eca0217e0c9b49250f89c430b712fc8adbbbaeca877eb80ab176cb1fc5e0cfd5cb8802d0698575d39222b3ce3eb93b5df6370dc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a330bb8d1f0d47bf833e4ff55397e770

SHA1
b2f0271e3ec502f6428337a655acfc25d952ea71

SHA256
d858530bf59306f6d7a720f7bfd906c220657f9c65790c56e9bf72a3b2dbed25

SHA512
13a636bd2dd88bc20d5fe68c4247fc1fbff4bc976fbd7fbb6a331c100abfb5b9529588d0c8f8c6346f2ec5cb754bc22aebc59dec21f0c13f6def9213f43f7999

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0b94638521bfb372186dc9bcb20a18d6

SHA1
d35a86dc7c397e3c51e2e3713a3d825602f22796

SHA256
7610967169079bf43a267f660dcd57bd6af6a3d340f7518e30aac973f1cc1b72

SHA512
933498be9bf70ba9c00308d3318ce573aa8e0f8c1f02a7793add29938a9f24cbef220760f3406085ab72d684367c0f70129cf9c9cdbc12a41c914b7ff3f8ba16

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2acfd09b3ebb0322b104c88bdf4d2627

SHA1
448935d556b9cbb4805484cac01702b0b549767f

SHA256
a4fb4451a8b4c71214f97814dac7fbb26f18454ad475bbf3e2197dbcf4bc8af6

SHA512
3cff7d0df46e60930e792802f9a5caef373cd7858f644e91ac91c6ca85489f315964148c45f8e523a75724a1ac38e25a885994aafd6e85e3c6031e430ce884a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
030b251b75448502809ab6ef979e924c

SHA1
1ac6aedbfdd4f0974781dd94cff7644c873e9fa0

SHA256
de46f2cae752d8ecc9903fd7b32eb40c50d1aca46352241492a547e11ae51541

SHA512
80b868918f32ae2823587ad097b29af2b8623da3b74c9eb6663b569b0b38223151a43cf2414bbe829e78e4bada6dbf26250717006a9f04dfbb769899961707e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7df287fe041a273cbf7e39b561f0fc91

SHA1
64b16e5585d8ba988aff78e00d24ef3f78a6cc22

SHA256
b34bab802bae0ae52000d9b2e71c50acf25bb017785ecd59b89f12a4e63d3c73

SHA512
67b68accb7ef40a77b86955fc6d104f55749adb0c3b028695e29109ea78f1d0065bd82bb025f65c6bf1b4905f622c6e7f1329fbc15ea57d67f43b43d9040efa0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e2eaee6e0ae8f045b059c2c03edd9b29

SHA1
d7d28025a57c72acb217300248a1b9ba26550e21

SHA256
635cb8d589cfb695c5b57e66724ac39c66c3f6dd882646c0a6efcb0afdb87983

SHA512
322e70d93a3249e0192b0cffb99cbc5da7ad2849579f52d7da6dcc6593c0df3f13349f54cba30f7f7b6a0472cbd42ae4cf15cd3fc992f4afacae414790afb0b8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
67c37659a6ce1a132df2b287b1a6fa18

SHA1
a2fc0b98e606ab934ba6b0957b58717107b4d023

SHA256
885f559954234c7a3c6595d725cdacb1d17b55eb806a57493a8802db0d34e879

SHA512
7f72fb5fe9bc4258183450f9fb7656ce7539b16f72376892f716e2b8ba321b23fb17b0955a0b806b9ed6d2579b5ae2b9a7c72714b21679b9dd7146672a2df9d5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
659718860c6b2deae8dd667ff1e8d902

SHA1
60e16746ec104e35b665c46855c08299fb9d4c1b

SHA256
afa587194fb49f67e8f4a55c06e600766d8d33336f421302f1a228d43c07d073

SHA512
07db45e7ea04deb8d36b86dc270165811a186f9fc6e7fd307f5dfd2ffebf2ba50b122a8cdd5c67d2b8ebf6d0238e9a7602bb498a3182b361b8b3df2998c868c2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8e622779c21c041733866d15cec3287c

SHA1
2c46194a721eb82a94ed032ee68476c912d5e271

SHA256
e008c08f9bf1641986818d65de6f862ab3497e94366ce776e62dd3737852d30e

SHA512
6715e27da90a76df5b426b06976d10cc39bc26c3aae84a3fc7ade29e2f68558d56b7218225cac5e575e647f7e511cce6a940b87359f336b501f2587578dd6d0a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
be4c5bfb362db918527784c96d415c7d

SHA1
8c9747618bfcda0cb66aee01ef20cb984585f88e

SHA256
84751ccb5fbd0920f0a2bf2247ab82038d03a0e5849108dbb57d6f93cb119fbb

SHA512
f8739a84722df2ee4e36c5e1e5d0ecfa30966e12bf41425036cdcf6c80fed4ac0a00691ce722d05acbf28873ffaccdd21ecaf554d8ba00b5a3679e99a4701278

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b48c3571b9b12e81f82d0064f2b458ca

SHA1
d96bfc71b514efd5479a0c76978d0e4257c21ae5

SHA256
80d20ce2d547fd800ed00942dd7f89becb9bebc7b08967ad271c44dfc2c021f0

SHA512
0b8cfc4b5b681ddb50d2cc35fe5eca69b8344ecd84f4eb0a0428bef8d5b0f6ee627f47623c7acf6c5bf95a127c3caccdbf9a01a356bfcceb51c2e2a77626617e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d8896463145ffeca6a486a7c8d0c8486

SHA1
0119fb2996eea4c9118c1ee86194cf25614d7d9d

SHA256
c6c93e40533bbd64c8878da976eec71240b5f045972d4394f4e08ad44b7c8e9d

SHA512
70588740265331370248ed085633292b1d6d0b3eb1fb385df8589c26635eea4c5f1fcc49b12e02d17abcafcf73c75b5fa60aa28cdbb0cb89d720e2a630b4151f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a18e13d014fcbda7417e57d2898b9963

SHA1
774d9736aee52aff1c7837dc3e18f812bc46d50c

SHA256
98fdabf3ffd6e1059ea83450e8902764ae83a79baed6c63c5090665368a4f462

SHA512
656b658c2ad92b2dc3ab51a0799c720d153722147b193f1473dbc88e6b7a96b183873fb152c473ff2ec3fc2e9835f56b73b2a3966eb976a8c123732df3368a1c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a6e27a0942879a61dc0c1b26cfe1f21d

SHA1
21d040d2785c36c6cbc49f0f0a32446a071dba1c

SHA256
ebc11f17a7b578b49583c5013620037fa519713a9d0fd41e1c4839e6eb5aadd1

SHA512
a4345fddc955b718c16d35f906601aaf35c34bb54bc22868cf05262f5cb87b8a943dab3f19c3fabdb33dea1eb6e189dbd86c5be5a0ff9563ffac652b74eea83e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc1919e3e82efc7a3c6798f6d50535be

SHA1
8107e0bfce104e0522df0636784b55afc3a0f9bf

SHA256
7f691da3fe4455aa0a30a9a712d0953e7336f8cd8ffdeb6a2495f64815756d81

SHA512
db79474a0e9644c56688bc1715923eb7f7e87deee6b91e115b42ec57b65d5b5d18690f992ce42396efef1091ae7d7c4b9df00ac43c84240959124dc40ce27e2e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5c186f1c7f35efec8a390dda90588ac5

SHA1
6c348b07897ccb29c4a55723c3bc8eb96cceae7a

SHA256
0e376d6a2488768b90ae386f628467cc4ce6ba4ceafce07bb5acfed619941f4a

SHA512
cbb06a9a7deff49cb71c2bc2389a7c1e14943ef0163a69ff7a84bfcffae7f9e0e2c456169f7ffc26b41b4c455a6ad158a9cb789aee4404faccb76f55b11ad78a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d6185e55f19e5f755cdc1efdc6c1af00

SHA1
bf3bfe9df7bd2576997b3e75bbd689debef6fa99

SHA256
fd0ba133629387dec02502ea015c7998d04ee3cc24cb7c34519d0a54e62425cb

SHA512
d0b5a58801b69e4fd7577452414ceec89dd7a22e234616f4ae1d3fa6ec1c32f3562048332c48dd35db90039ebe5c3160d8bdccdd5e8c4ebae6265be359ae7871

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab370B.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar375C.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit