ef249926d8e5bc9c1855618d444d827343becb2541dfe5dc797e65146271dd5a

Analysis

max time kernel
134s
max time network
127s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 11:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8e010faa9f536e6470d2d6de250b3a70_JaffaCakes118.html
Size

3KB
MD5

8e010faa9f536e6470d2d6de250b3a70
SHA1

568894a595e42e3f4bc52fe03a62ed5c34ed5caf
SHA256

ef249926d8e5bc9c1855618d444d827343becb2541dfe5dc797e65146271dd5a
SHA512

ce9dfd39f6835a3f63a4e9f70af17aa25e977e1842da7485d6b25b421e43eda6f57f2755d88a68df0450aadd89330c168ed175d7d76e424f457d1b7cf0d83e10

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 43 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c0083c76e4b4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A190AF31-20D7-11EF-9911-62ABD1C114F0} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d4294b90f949a0419d20a4bba0c70655000000000200000000001066000000010000200000009a747f811ff530f3553ed6cf92563010114bb2d2c02d17c9139296568899589b000000000e800000000200002000000027e8746907af3261f5ad77219b64b5ff3614abc34352e9e6679fd1b7cb9da71890000000fa75fd9a33372e8cbf371078ad6db387b24f6184d07fb5573f86bf4e8fe8de7c61cdca5a62d5daeb091e05e770162832179bd0e12c48af128ad2560726f8fcabb0412b46870c1b3aa8b0bf6922678ea49d5cfdac58e9bee4bd3063599bebd9c56e717cec6ced675cba4fb971ad1d616fb0903a52000cd7b9ba52f6444532b3bdfe0382438683a0c1ef8454ef9e9a67da400000000890b08837b1f9ef6c13f1ea0fbc05b5573e7bf00473742981d6894f34573aab34939788e7f4a6fbe912e976bd7389d0deb2301aa27e6bea169541ee9c6dc670	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d4294b90f949a0419d20a4bba0c7065500000000020000000000106600000001000020000000cd49dfee80b129350b2e17ec16ec1f6c672f5f211e079c7ca4fc045d42c969a6000000000e8000000002000020000000988ee24ba999f22f4bf3b644b2914128fb6f1a1dd6b6b1edc99f59b982ef86c72000000050712c2138902aa372f60c7fc9b9d86f419a4986eceafa2cffaa780763b1814e400000009b3f82ae3dd09c57abf7d651685c86fea92b12af4edf526a720195398c6ea8f62b43a16d0030cf52bccf997388c16fe218f1c342bcacf85161078933a9315175	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423491465"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2028	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2028	iexplore.exe
2028	iexplore.exe
2076	IEXPLORE.EXE
2076	IEXPLORE.EXE
2076	IEXPLORE.EXE
2076	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 2076	2028	iexplore.exe	28
PID 2028 wrote to memory of 2076	2028	iexplore.exe	28
PID 2028 wrote to memory of 2076	2028	iexplore.exe	28
PID 2028 wrote to memory of 2076	2028	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8e010faa9f536e6470d2d6de250b3a70_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2076

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
ed07461749a08a405e3b29999d7a8cfc

SHA1
3c33250e645a236a7f4ceaee4f072b4140b684f8

SHA256
c3eb62802523b106a1dd5b315a45d0269cd2240ba60c71c543ab0a5cdb07f7ad

SHA512
75753f7f1652123810a5ce78047ab544da37bd92658848f9d8853fc0938c0d78323c157912a7ea1fc8ba7f9affba33994f249d2c94a0abc31089ed9da9446f77

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
74eb2c73ab65bd54b02e73ef5050d452

SHA1
6f31765e61fc9cb5d057de78ab4a117b7f5ea35d

SHA256
f906bd3e7a6a0137def53faf603a39947c7f62673bc27fcf5dd682634ea89552

SHA512
2689ee22cfdd48c09dae0594b8bf4c5aea0e41f4dbcad221d18dacf6b4bc1931e2a71bbfa9fd6d58ebb57bb7a49196e9470ea57ff7b0aa1a016ff540b07da936

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
adb34bf9d19b2c805762837794fcc570

SHA1
c7e6cf248d4163245f58c18e7d4fc4d7f205afa6

SHA256
170eab3c3d94917e9221881277dd989084dbf313f6397aeb7c3169caf9a7e996

SHA512
5fb184c1fb5d136fb060b7bb6418d42a4a48f79b54f2eee35c1a6cb0af1785263fd4c3d47cd7d5a7ce35b6e8857691bd56d097ca8819866ca47427a7bb48db44

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0185e39c26732b928c4a1632dc9c64b1

SHA1
5319a8538b6446e3e5b583db27384f52bcf1c36e

SHA256
097ed5df5e2a614b5d8466ea9e64248b8404727dda431234d194671b2d1b3c62

SHA512
4190ec86e0faa6e606d3ec9b9bf69d35d0c67e16c4e412800ded8a273a9e7c1210157558f54c98f67ff87dbefe3464d4277af0654aa95fd5417af6001490e61d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
786cf4e5ddb9971ae6bb8dc5ad201c65

SHA1
5f3e4387edd25d4a656069d23f93dbdae2c3de53

SHA256
1379e7c3d27e09f86f7c5c59be51fc1d110b371e5a3507b0767388906acab0f8

SHA512
f6a389a4b37fe4ad97b1c32e2596a55b351390aa5daec04d2a82f474312d91cccd6b2e6d2f6a7d6c80b4f614e5b52b09cd0616417843ffefa925113ae3f05053

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
68480a5b22bb8945448a909e0adfff8b

SHA1
167547dc592069f8af88470934f200af3ce65e55

SHA256
780652ca6cfd6bef6d10ede0b0791c229851adb826ccd7efef99d86e8038c21c

SHA512
bea69b8d5ddad7e3d5982b24d4d824e5d6925d4c427b680730db54a24b0a25e9355c744fe3cac85bab3dce2460e56eab3cdd5c6e615be41bd83644e41e7490b2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a9d8a43bb4d8295b00e16e47f2cd21e1

SHA1
a243e54bfe00d47a5933b23e4eb1520f5af91895

SHA256
34b7f98c3006072762a1de78a4bbd4bf8dc6b03832d1b981845c30e808f22b9d

SHA512
886f970f06718bf706f0bec5221aa4fa83f40bc171359986bed16fa046144d83d70354b83eb5d3832ac94286dc030ba9a207f201febe343359ac0aca4369a8ec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6e1712b3f12ba40c595bcf9cd1d5d15b

SHA1
ce794f0cb124080f080acbde7a4fb123c134ae76

SHA256
4bffbbc874cd80482ed8b3e01135cec84eaf56a9ac6694f6c448f4c377aa53a4

SHA512
c1e40c756cdcd07553366562af85819735ff437c9651092fd8475f2b769bd77450be146d974448e0014ebecae1d7d878e1a32c0f8e20fb9f317bf6123780e994

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
834560d0c15994abba6155d2f2c338e7

SHA1
9299ed3ff63d107e475fe75f8de71c7b30039c59

SHA256
1820233aa8faf4c43d5d2f04dccf8a0ffcde3c22115b0f9ef7cab07890bb3c5d

SHA512
f2eaa22b3d005ead61b6907a0fc82cef239b4e5c953090c59912326ac59ce1e66dcb151099f037be3a92e9ce03d84fa3e21bd94a61b6808252f3e74782dac4d9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
65ffd10025c1d5aa77957ff842d8a8d0

SHA1
e90027bde040c8e68c0bc591d0c791256c87218c

SHA256
08e8eea2e404588eca66fd62646240fac09e489096305f1f155e042a58c2b065

SHA512
80bd58667da18fa3f2030affd90d45816957265393457b6f49d1313c9dd6dec3c906e1471c4497f1a48e7d0c5a9f18539b1c9308ad2852e4a4ce3dace79d8abd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9ceabcca39e6e9ddaf7ff51adb0dc9a2

SHA1
4c2e9a675d9f3227389d51b7af1e328970127def

SHA256
c07cd06dd9467fa23f0002598a1c4cbae5a9c898d2958190c176807cf0d1262a

SHA512
df0c603518a459393aab0ed042130437b8d57620e73894a4d1810d3937351170f1ceddc4f21b7d092ca77b666b0d37972348de8f0733a56b25268a273fc2bf13

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
1a97563f893371b86405a9047350842f

SHA1
6963351fbbf718fba8dbfbaf38adf82cf9d320f4

SHA256
4bea05e9495678fd01e6278a7a05bb21ba8cce022b9a336c34d3f3e84cd21af2

SHA512
3d5a4a7c15c597e8091b2b683507d4f159484ca49f814ed22da1c998573e264422151025d57c8aaa4665e0c605ff376432320a3013d55c1460f184a7b90803fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar20EF.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit