ec19f4e459ca0de028d6be2faad1c548b74d7bbaefc917ba9996b5f55878c7ac

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
19/05/2024, 20:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5b5166680080d12f09d871baa4f465ab_JaffaCakes118.html
Size

838B
MD5

5b5166680080d12f09d871baa4f465ab
SHA1

2594b71d1db4984fe7ad6a0e9c46ff83292ee408
SHA256

ec19f4e459ca0de028d6be2faad1c548b74d7bbaefc917ba9996b5f55878c7ac
SHA512

977989626006abf6c59ea5807fc844b47f4952dd884388ab0e7984b1e7801228699bd20c46fcbc192c1010f3c6dabedf65ce8be76a75b28ad9cf71a550464486

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e936100000000020000000000106600000001000020000000bd8ce66f72d1cbf272d0fa4dcf4e64a28cdbf8391195fc85a86d58650e43ab81000000000e80000000020000200000003fd0e82efc9cd95c6c86f5b9d980e09588b3bd9f0eec9fdd6e905fa34daee86620000000e344b31c5df031e4f730e83f3f4a64e55f2d13420ab43fec6f511235cb35c31440000000634a5e0aa300ca07d386204d899c6087c24a6347d1c67dfb06b6590fcf382b1c63f30989ca8d934c8ffe73bfd73863e63785615d4893736edbf595dfabd842e8	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422312538"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 301efda72baada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BA5C5D21-161E-11EF-B195-DEECE6B0C1A4} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e9361000000000200000000001066000000010000200000008f53584de247356afadb89d7623a7ee812a99f9fb265301d6978727469c7b324000000000e8000000002000020000000718f33a2c3e8d4543687703cc311ee027abe5592abde6fe25d59449fd235ac3e90000000f3b798e142305948b4dcdd3c81a4132d558946495be56c2c3c228a62359d36ec840f673505bdf2e63645889cfb7bc473ec3e03632f6a0bfd7119a21bc8155ece810250a458b4c14c7ce11f3fa7e66797fd193bd9e6cba762eaa342a7ce7c2816b367efa6169c6c59435deffe4d5a4989fc8d42890da5955f3474ac963e6d9f957bd9915d278af2d50e2605560f02205240000000524b3cbaecba0f8c86bf93fd334f2e64d0cbfdb27110741004b49b6314997ca9f5888722cb6078e8eeaeb707588ea5d2f207bd5d22491efbc5bc65422f3d490b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1608	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1608	iexplore.exe
1608	iexplore.exe
3056	IEXPLORE.EXE
3056	IEXPLORE.EXE
3056	IEXPLORE.EXE
3056	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1608 wrote to memory of 3056	1608	iexplore.exe	28
PID 1608 wrote to memory of 3056	1608	iexplore.exe	28
PID 1608 wrote to memory of 3056	1608	iexplore.exe	28
PID 1608 wrote to memory of 3056	1608	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b5166680080d12f09d871baa4f465ab_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1608
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1608 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c7f10d755fa24e056bfc3d5e5bb05dd7

SHA1
95edf894e5811bec1e0bffeeb2766ffb01b91e21

SHA256
e19dbe21a13615b538bab974baaa2554937083a9232cc7656221c0190742238c

SHA512
f53d489dfe243703c809d948a1238a782bf4e73a0ba5f257f6ec464b4fc3b7fc105e1e4bec2811ac0503d8f32644e9a90da1c5878165e16c9c28752c78b1b6ce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b3d17246505ff8fb62b3582305f870de

SHA1
ed745b3a403f0f08a5fee444dea9615b713e9101

SHA256
13b3fd9b2705f4500bdf405890506c6ed07a38e1a9a01458a83c681faadfdb78

SHA512
afed9e2202f856157fefef8888c51908cb93493deef6befd1980a1b64f2cfa02635406d02eedca24b6829afc85d42d2668f21d55fa603d27c98c460ad9aa9a0d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
592de28f21c075fd1c7d267b2bf9ca73

SHA1
81cc54aa376de667b278f9d9b6e0aa7bbad8011b

SHA256
2981ba446d9e8c7e44f3a5101f268f577c1f5a2ba573ebb392d240caa24614aa

SHA512
108b95dcbe2d7a15c0b639d5ebdfd2057c1c7eac8751cae262bd5be464e79044865d7feaea2f25c03b77e85b112426f9a361ca99ce9a73f52f6cd64716af9fb3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
df58d6ce3cd3e02b4202c7559cf2c97e

SHA1
009c91c46bccbad68273bf1082b66ea32a114fd4

SHA256
c126980b94ec5f6e1e2e621b921af98b654f16b837bb26a31e62be5c03033702

SHA512
600f843efe8ff0488046e249323fc726af546bcd07769395919668ec1d0491eb7039a4275633a512bd180cfaf81e27af4cc69a8171990deb76f0245a9099b082

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ed3467bf7509c125a28e1252aa551f34

SHA1
a47d56dfc62d22d4cedb27bb39de4be6ed7f9765

SHA256
ed6d551330fe0ffd0a4eabeb08774590d4e8a0653d2040c1e7772489af6e88f0

SHA512
9cecfb9f6b870127eae816775ef9c895deadbd992b2d2dca7d92e685b344aed29dce05546b728f1959aaa91bb7139c8a893409387086245cd8b8b8e72b5462c8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dca3dcbf024c6a14635f6fc9fa37b7f7

SHA1
20e19a62a3439cec64e17804e02f0245d2a736f8

SHA256
3ce0d599195e83af4dbdad8c7250feea7c58d781a3cc2c8f9af6d02aedbe5b12

SHA512
de2259a9d2879708ed71624df89b75ad28835dbda7dc88a04c2349f87e51aad36247eec96a3759c297a394787a840b40c4aa5ec99be2bfc63cc7fddc7953835b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f6e7af9950cce40371b1d0f2ce4881a4

SHA1
5e1ac24a84d01b9eefbc008316a5a21458497463

SHA256
f9a989a5023009ee0237f55d1a49ac9011054791015966e6aa91084033aa683d

SHA512
300ef87ae45c9fef64e6f21a573d0eeef53f8429f0e0880c8e19cb426cad1f1a55f6678a0376969d5b25d0ce0aaf0795a30c088fe25254d9a74006e5d03fb83f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
64fc15eb34a3a70265a619b624653513

SHA1
1a7d070920e153247e5a918e5378d2e75abf7b47

SHA256
117b2ede60f0a7e44127782bb9ecc83eb3c782af8b5deccafda262fa0d050fc0

SHA512
d644fb4b5f0f8bd3d32f1167cd279efd2437d8919c49fa5dcba46a42b65f6d2c2c02721123d6008af2017f0dc895714cb262bfcac04a3becc721da13c5026aa3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e794a021dd90579d427ecb743bd2770c

SHA1
633ca8316d8b75b91d178e591c730ed21efcc326

SHA256
14f8e4dc816a25c7190865c1fc941b8e6a61bb424ebb8fd3834632d4fb0d953f

SHA512
3805ee97bfeda4c5167e1b8e34b2016330eaed640215c05bd17e8798fd348f544dfe679457817153c0e2951d19792025041c776bb7e8f47e5ebacbc9c2b6857c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
32a69b25c840769e307588464abcb4a6

SHA1
0b1b39c39949bafc58cd32264fa637cb799892cf

SHA256
0668579cc8a0a3e14fbd2d86969b3054125ebf650d12b9e4e9cbb1f0c6f50aa1

SHA512
e92156c48b6de42f57f136601f0d7584cb2aa2acaab938eb4a0e0dd3a7ca191b3233be14b6d6351b2f94cd564ac2b25714d6b4d8fa97befdcffcd7dda2cb6b08

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0ebb5b1b6ce9bc9ce8ac50096553c91a

SHA1
b5da02f10351028c4f743735c8be9d0ed10a520b

SHA256
c5fd4ef9cd8297e74da7229c91060e7785e2d6018b069cafb23ab6ab3b87da67

SHA512
8bfbf2bda0cc0f8a07093df189de8bb63b01b87596800aed3874913a5f6a9adc4c02f1c2efc536aa1e66fec4660e5dcb452b5b5b509d05471bdf230078e6cd73

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c94a8705d6b41b7860f04f149b337674

SHA1
615e838012c72773602e2b19860a8b9532348586

SHA256
60abea961e5f3141f0cc9e258441933dbb19052b711e400b8983788b0ca4f05c

SHA512
e2a0c91ba579affcff05e46f6235a1bd36014a699c28838f216ee10d107242214d814cbb210f525b7539ff9ec13dc094e77d2c49c0304cda9b5831e7c56ca21c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3a06ecf4c8c2b2772d750a3ed668f269

SHA1
865dc84c44de804894d7e0d0095f08551b5ef559

SHA256
f44f8f2fcf211d5d5ef7f4465df14d58fde3b6c0d02e934f6b47fd3a4e4e8439

SHA512
207ae240a9eb6302b91de9586090c38b9b06a8b9882884e7a7d64c0676cd29d8867169a87cce4676383cb2d023799c5497009dd997cb323cfd2935daaa0979eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1ea5d43a76a8fa18507d7663ea3449ab

SHA1
bfab3dafacc6ad9caae599323f86287b2c101427

SHA256
348606649f5a578ceb52e70caf197674ec73ab30685a527f75a7eacfa36f3887

SHA512
886136b012507b7c5ae8dda7708f83efe172cb177fb86fbd957c400ebab937ff6a7c9e6652afb86d8db3314cf2a367f6ef1e59d497b2631a0f33cb7ae0fa3642

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e83c7110ed0706ab9f7bc63ca43ae368

SHA1
22a39ceb7ad89ab46d03b8ae98827bb02fc49d22

SHA256
34ec8a67888630c2b06071e9252cc1ed44d1963ec618eb509df494ca8e221c6f

SHA512
bd70cd87f3a1b38ebe99c7d0920e1091d0693304c0d809ac65671e0621c95ce5a276d0bb131360adb9a1a96d833e377bd4a0b16c5a5dc73043cf6b78efdcdda9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
72b437c27146e70bb2c7a0a8bbe5705c

SHA1
d82cad8edf54cfab8286186970154392849deadd

SHA256
54212e013e2afe3afb12e1dfef692a13a26cce1368cd289c37b2606495e8fca5

SHA512
fd6dcb2c34a01f2b6b0513316654a35969d149f088c48f98e45df405aab8d434302d4a3ac2ecef6bbd8f06f9e39452f299f4adc081f2f0c8f9a72f21104e8637

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cf52bec0066485fbcce88af80f2fdcc5

SHA1
078a7262310505715c280d740d302103caa4665c

SHA256
51c2c6325f7c6215c7fbc21234577bb56328ca56d589aa3a871d8327a251572f

SHA512
3161e263977cbf833e913dbe3c4905c0a81bd86769ff48333f0cf3b8bcd191d03535664433157b157a322ba429245cc07aebaed2e1fdfc7f5ae77f4ebb991492

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
518556cce5b608aba30a8c4695916485

SHA1
2be1f817c1d77fd5fea25f8ed13fb6ecb183686c

SHA256
5b186492c5fa89c74919e21303393b4428fca5a45cb5bf71068546d1ea2d19f1

SHA512
f2342e25074378732b4a001e7984070a9d88f280c5fadc62b8a69d503dd2daaeda058c7c6240eb1e58eaf74a6f4dc00e2efbf14b0643d870a4374227762e5fc0

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabDEBD.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarDF3E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit