c8af262d0cd345354430d09501ba283cf5a4028da598659b6ad3998b3f880e7a

Analysis

max time kernel
142s
max time network
142s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22/05/2024, 04:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

661317b49c3511e018f054b107094681_JaffaCakes118.html
Size

39KB
MD5

661317b49c3511e018f054b107094681
SHA1

37dcf2897b61ed7be05319e3dd036906dda9caff
SHA256

c8af262d0cd345354430d09501ba283cf5a4028da598659b6ad3998b3f880e7a
SHA512

82d9e7a08b00685344e22df90cecfa56c0e0a0b5fbe493072ffe8f3d48f0de3a150769bf788107f13cd58e01b01e0ed660522c185b33376745b3fc919efe2889
SSDEEP

384:kYhJITEu11IwXk5Q1KCaGYNaNKJLH9QUOxIP/3RJw4O9eCLeo0kp7oPrtNfb764M:9hJITEvTO2ocXoLP7WmP

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000002b550363e7c74e68a23eab577f2706b71979c7055f53043dd947abb203c99d3f000000000e8000000002000020000000dfbd7cae5a37f60e363e4b56efe243ba96c9c8475fe5b0c1fb09f4f3618b853f900000002b86d1de9e74bde66a8ae6c1a8c8b778adb7f1dcfd285d47a1f8e9ceef22770c6a7b0e91e3b1af075ed45b3f3bbd542203cac8395bb71d75af82c0dcfe94279b6450031f5f109d780c12f71bf264ad8c9af0c2885ca1150c97688eaaad9415ffe9bb7e275b1bdd49a540b5e72d427ceac771adf81dd1c635b81e60ad0ac7e0821863ca75af91df8f46d15430be4ab9a740000000303406444066f3f4eef3ce8d67f0e29b165242f7797af9163676eba497b7f2f5b4febf6ae8c04779dc6f10e4a3099e9658d99e3787c65b9c373890a90e7c0056	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422515726"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000004a4a7185db5e28cee82e99c5ff371e4c6e232f47628d22341855709e6357e03e000000000e8000000002000020000000d079b841527de4a959e6be223638137ac9a597c56395eeeff689863e8d38d678200000002b2159155438254cbbd0f2da6be5ee0910cb5864f73507343d4251a3727d9b0d40000000de45d2fc799caa0f22c59364b5404df68395b06e06bb34ea5ba3c04dec8a2854f72a605f301520679f72b96f010fd9ed946feb755e556ac9189308da2a9bff16	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0c60ba504acda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D0707A81-17F7-11EF-AD96-EAF6CDD7B231} = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3040	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3040	iexplore.exe
3040	iexplore.exe
2728	IEXPLORE.EXE
2728	IEXPLORE.EXE
2728	IEXPLORE.EXE
2728	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 2728	3040	iexplore.exe	28
PID 3040 wrote to memory of 2728	3040	iexplore.exe	28
PID 3040 wrote to memory of 2728	3040	iexplore.exe	28
PID 3040 wrote to memory of 2728	3040	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\661317b49c3511e018f054b107094681_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b6e028b01f1cb34d8a98e481065a460e

SHA1
2b4d772682d67a9d56c3dbff4081ec1ac8f722f9

SHA256
db36ee0fa5eec13efc12a889e8a659a73b5b60720fb8bec090f4f3389b2a91e3

SHA512
daaf558efab52c233cd5b30d350d0b9c598d8dac83e093ead35dc57691b4920b4584de674537d8bbb50b0ea7ad5756e1cf4576e023dfb9b3e6bddff5068d561b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
74443797166856105584ae5d36e57a02

SHA1
cfd69d1050736e29baf62a56c3f87d3eb335da41

SHA256
2a7f94f85c3bf32e4434ec54a31b10199a859e7cfc7433d14a85f1ae5523dcf7

SHA512
d2386181ef3fc37cf120b5141922170431558557da1c3ffa56ad8d98b883dd3098beb5b8565f2ad4ebde97b15577beccb8b2f708b34b6cfb14b3b691a6b08dfd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f9a49660e1d79cbd3a409da76232a9f4

SHA1
d1c870106f5d73600034cca1c205868e24bc88de

SHA256
fbd2e5ce8c4ba5b561a3161224c08e5401c3364100eb6471d6a79abfb39b7738

SHA512
8af1cc51f4404064d514b5b3b85ad3a05333e091586f17d84002ddc425bbd6baab8ab4c9c0c62cc4cf4726148d93a095dc9177a60a81a8d458062b899b68814b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8ec075777dfc40a902d42dc7fa2aaf6e

SHA1
98d8882cdb35e0a3ac5c38b0a162c3ceb09b4821

SHA256
296d0c59b325b02bab559cb2f4657a6959f4d63af4a2e62fc150fbe0bc727ae9

SHA512
b32f0d2256b1b99986a7c85271588517106940b1cca85dd26e313d3d2f3996328fcc58aaee9ba270e89733385a3b56b3b6c1b3c5e5fe562a048ed5957df7950c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
32d343f4691045c47c7aa272784c06c8

SHA1
965d4d2bf41054461403655fd57d0a14bac2c4e5

SHA256
eefc7f2b6d7073785261c9080f6a4cbe4a8029e7e711c29849c6b637649b512d

SHA512
1d41f92247a2b9ccf7ed368036058fddca96a3c5b1ba44adddd157d43a46dae2a2745f0e973ebab4e9b5bd5b64aaf6d8ba8f96228aad092736618e1acd0d2719

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3fa98542c8c6de83609da82a99fa18c5

SHA1
1e5b89e7ae17ff9f334523b3669caeb64b4c91e0

SHA256
1bb3a13295c5dacdda100b2b9dba38febf06b5de49f03aa3f11f41208b9f3c49

SHA512
b7af94467c4b42cf2c8b5f2c87d0bcbc6d37e102ead3ab98902559b9eaf886331002ce4a07c52cdc926919c0c5441f3c4ac1c0c62be5b8265690e3f60994ff7a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b972c3eb89d3ced224b5476236193476

SHA1
a6a9a5dc53b895c62d6501f6805bf0b0b888e5f3

SHA256
6a9967f16ff10b0cf63507bbe6b1fc26c3bc582ed9a5b02b0bd882992ba426dc

SHA512
61c78f2d265bc3efe768174192ed247a429f9afd2ecab9e1c28038e2813f2a223a074f51d396dc06bcd1f7644fe1be29c1654697e18e3b5b3526fc95cb9772b0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ac9d4414ebe826b35f30a60bbb34ec3a

SHA1
c1bb5d70660e36fd059124d775a9af832522e268

SHA256
3fced273937de222c0d89ab04b8bdb6c6b79f442b4b624f626758027b725fbdb

SHA512
56eaf8cbeb35b9cddf5a4a62086203897fa80df4b4c79c317968ea34561166bf3505b588b26f478e960eb2d58bc6c706f5dc4e5776a0671569908e4034f299ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a4b9c93bebd64457ad218ad6c0c8e54f

SHA1
24bd00a7ebde32f60e909dcf8662f1e8baab6f34

SHA256
a08090b71d7477459e6225dfd48700455c17e62a1d4a306b0c9414a6f8bc300b

SHA512
999f023e5085a7b5ff8e7a2db822a2a21c952f1326656f3aacce49f544062b72f3f28d323f4e1db5d144733956b3ec555ddc73ecaf2059f6d76f74c4b5a0dbc0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
acae3f15a31e6912e59f006f44e7fbd1

SHA1
4518f08c7345c862752d20927da9adcfaaca4dff

SHA256
86e300fc59f90834d532497858a4e5709e831322231301b466bdaf2438e1c2e9

SHA512
ade7c05f9478bb93f515c613f3d7dc9aed3cd8daa5af1c1e4f82e7497fd1af788ac9ec263febea3f43c3f3a9da1d7f571c4ca57141855fb275def1ba32abea73

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
caf7c38405c4164135f1e2aea1b26f9a

SHA1
8bfc398efd82b58f9ef18d8e2f5c86dbbc3f80ed

SHA256
9ad15841c8b629ddc1b1de4c0293cb78a073c84c52e64d9be929a8899ca966a5

SHA512
ebc6f2e08dbb6db0d3bdab85ee297850ec725eb037fa26f7bdeee90e07b32095a6200f33de869e4b171fa085836f6aced07c5edf629c5eb23808c29d8de80d43

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5202ef961868d40fd4c8f243e3bd1b2c

SHA1
0f8ec6a57082babaf510227ebe2497c77b9d6b15

SHA256
8fa6d7b6d87305af8bc7c80996bb000dddf9fad5121a6e3c5e094742aa57cdb5

SHA512
4a72b72503acb28ca5c4493c80dd29c72763ddfe99db43d7f0ef5eb73174d8e4e650722ad7fc94ebc9bb4975989d626d54fcc86b298a6dca9cc46d08ca69a00f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
04848902fc24307f81e6fce34c0b8e46

SHA1
0757d5e5759c15be7eaf1699bdc755bd8ab05459

SHA256
98f5823be32eda0a1f43a888d122e681694cc88109bdb431e1b3ee5e5874f35e

SHA512
e91ba231c389f31f5c1fa8035c671220c6a7e91ba411a397fd531c4e8b8f64ccc686fc046987340d6e5e5304597b6b12350ea70c43ebf4de4a22a2b4f4c9ac2e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e044e468cffc08aec66dfaf7901a871

SHA1
b06724575f3580720d1739133e074341105b4410

SHA256
635c999136948c06d64c2b3dfe4c20bd3186b3aeb51873174a6fb5783888db28

SHA512
9285d36e48614cf70bca7da637bba47eb5035dafe052b3bd0a1dab333c0cffcaa6ea66094ebc5d4aae5cf9cc3cb0bd65a09767dbb2b25310fd545519d1539c0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e18e68cf9e019f18fb6d096365319dea

SHA1
851a45bc80ca8d73dd81403cecfb2dd11da1b69b

SHA256
09f7a51e9747649fc809877b699bd661dcf0c33bf42c6c84c90f7eadbee2d828

SHA512
80f62651b6e8d494de7954cf467dd36d9f6236273abda9cbe85e59195c9d22bd11eaac0288bd0c3e89d4920930d7b6b34c83005381ed442ca92e90c517ccef5a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f98aa2c8e14de558013488f68c18485d

SHA1
f6b4719d511dca914cdf404033519e5571fe64be

SHA256
51bb357629690ac53cb6530ffc6e8fb549a7832fe3487c54b55841d090af6838

SHA512
d2fe3dae605629fe52ce332cef5e955b9eb67746052b92d22b27c582793b861945b3c560b0ca28f3aab1b032018a59749b23cfdfac7dd97cc33042e7b6262960

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4de05c846208b132f2903b39020bbff7

SHA1
504922933a85e22f8dd57a6e7e215913e8e19a30

SHA256
75342cd31e1c6aab2635203d62d6efa5fbea7242e9380d30b46ac69b4a41d8b9

SHA512
82178f69b03fab1ff25b44c34b0ef17f69f246f3a92893fec323f36b4bd853c94ca0c347381c9cc89865a736cfdabd3ccdd1c7cc900e95c67ea8c2bbc698a743

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
065b0dccebd9a6fb95428d12e9369b7e

SHA1
b9667ce5c89027f69d0128095d91e8d596f77ad7

SHA256
a135e0c92d6bd2b1e327361a679eed19ad3641204a907089702db9433bdb7881

SHA512
ec45ad14dd047b85758d708e0db0183062ef7a590b95f71fd2f3a7c3497a95226c88ce5c4828e8f186b7b44b24d2da33bcb2f6ca719a2e87f782c5bb0c55ffb0

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3575.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar35C6.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit