8e7beb3b869f8b5a0303c8467f11f9da9d65b29e7778cb1898cc58d76423c5e0

Analysis

max time kernel
139s
max time network
144s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/06/2024, 10:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9484b900d3f9cc5f3ff53ef6f18c07f9_JaffaCakes118.html
Size

67KB
MD5

9484b900d3f9cc5f3ff53ef6f18c07f9
SHA1

19f47d2d616da51c118dc224dfa37d06dc03c6e5
SHA256

8e7beb3b869f8b5a0303c8467f11f9da9d65b29e7778cb1898cc58d76423c5e0
SHA512

d65acc1bb204344701b47149953b3a286a4ebc9be7bb9ce819982763961a84ed93b7b2b649f27108f1dbf5b539b0538947e3771d5a720f4c6eb599bd2bf2f34f
SSDEEP

768:JiagcMiR3sI2PDDnX0g6rlSjhKoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVG8X:JELTzNen0tbrga94hcuNnQC

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{5FBECA01-225E-11EF-9A09-E25BC60B6402} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005933cc40d58337408aa929a0432e39dd00000000020000000000106600000001000020000000a3f720145407df95e68a02bb770c69b8e27f976a8705ef86fa856ea2c8c058f7000000000e800000000200002000000070fb538d0f100a96c4f5451a5b63935c0f55ba6b1c286899836a4f43b1ee16bd20000000ba4e51a59026f78f34a55ee1cddbef6d70fdf5964da8b07530fd46b4b52ed4f440000000e4f8845285bc69bbb0f4b247a9f402c42e467777511b86111ed4b60178e9c02915495c9ff3af06638493fbd01c626fa7165ba705fe5deda5adce5cf82e8543e8	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423659289"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 709b43356bb6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005933cc40d58337408aa929a0432e39dd00000000020000000000106600000001000020000000125caf4282fa111b5264fc18345e73c464017efcec4bb7935caf830597334f07000000000e80000000020000200000006e1b10f0068a7e41060e14113502e1d05ac2f8bf41c1b4b5dc834b15ed9e25c190000000eee5b0ddc21c20c539bd92a5bbd4c56eb99408d4a3688590cd6b38912da5025b8b971336a77c3edc999a431abc469366d9f44fe18154fe5c6ac3d34f08d077cdcc4aac6086ef2f1a02a509f8da84b866fc103c98c5ab2185d42bff11c42b7b97ec7a1cdd4abbd26ad0d5d476796514f7a4062466874593f9264520e0ec2dc57ac98950eab3b09b5cb78255724e422179400000004f21dbe01fb6d37b54f0c3d61ee2877a97ff84cd4b52a3b7946892e6be33ae87818e042ce0baced437427b2e46cdb91bf909f17e475ecbadbfdc787f64806cc0	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2884	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2884	iexplore.exe
2884	iexplore.exe
2540	IEXPLORE.EXE
2540	IEXPLORE.EXE
2540	IEXPLORE.EXE
2540	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2884 wrote to memory of 2540	2884	iexplore.exe	28
PID 2884 wrote to memory of 2540	2884	iexplore.exe	28
PID 2884 wrote to memory of 2540	2884	iexplore.exe	28
PID 2884 wrote to memory of 2540	2884	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9484b900d3f9cc5f3ff53ef6f18c07f9_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2884
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5c490113e775b8b680053723ccc9be50

SHA1
cc15dc3b97444710e28d13b82b941820512e5590

SHA256
3604d765a3393468dfbdc4ca4f8cf01d189d58a32353d68ef5041ad5bd892f04

SHA512
7fdc5184fc8b7b7c93deccef0b798031f8a22b0f5aa602b2575b2d0dd02f9c5791f1b2db0cf9405d85818b8743f7a4c3107e1da580da1c29cc4ea2f74f37c2f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1d98c073cf6c293f06ed1905d3e38a8f

SHA1
5232856fdd3ba542e5e2b95008601afed9fe9449

SHA256
26e8cd8157217652d64f8d60aca606365f6f1f413f8a9b8c06983c2d51a0d1b8

SHA512
49d1b653a72f018376f2d37c1781dd924347f67d3816bb59971d506196aa4463a17b544b7aeb679b03b032a7826e5e9f08d23b8256794f159a876c60aedcbb17

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5d882ae9802b7996ff804e101d21025e

SHA1
1c1e47f76d2077633e424ac32fbccec12bb65ec7

SHA256
1a1b66d287f883a0deb3db6b05e8132b8711cd1c5b988fb52e1d6407baff5f89

SHA512
48012e199207f8af7e4b91a6b108b2a84049a22e2f7217d885fe218e6d7f7b77b6b76195dc8ad47502bc09962376df8834b01b9bc065aa72a8007396255dd564

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
44dec6fce73a4107bdbaa9210c7cef71

SHA1
393dde26ee0e0c41d88fa46315b53fac632159bd

SHA256
040c100933a782aa3e066b0b895204a99b9c27efd274d17ad09ba11a6d0f2baf

SHA512
f64c6e827c7e92f8d94dbeb5db7922728dab1e0c82ac4329b4b073cb8bec2247f8890b19bb615813fcc729f93738ceb391fcf120f743fc4021f8a4e9ac2afb2c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fbdc4b6927349bd29cb4a4462ac8a93b

SHA1
61be27f85a60eec73a5b3cb9834ec0bbf714d2ee

SHA256
6ccfb76ec164cd3330df0bdc846a71f6a1c5e3259a2bd1f4f8a58f1f24e5c542

SHA512
c80846db9e5b5d3bb39e4073b81fa952245f93e4e0fcc9f66ff158a3c3b880b611beafcf802148a185e565b092507c166dc5c64f3208b39f88baee4382cba46d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a1905e1c6b43d152d564ea758661ab79

SHA1
77356f858ed58efb91cfa47251af2be1f256de57

SHA256
7a83fa0c0bcbd6aff17c1f1bdcd800b26260ab6ec2fe0af6286f4fc92fab1310

SHA512
9c2135291b3a036ff67eb079fcd236b8846360eb99811f933ebb722a12937a590bd21be082b8b11cb3e06d5419e030586e261569b108ace68bd6129a737c3dc0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1a6c8e1ca8f07fca62da9a5967671d7a

SHA1
e6754757056239f75fa3bf6edc17d8b76b4a8cc2

SHA256
2abb795caa5d9012c7be973c19fe31a7d7b29ad04303dc36a9c4c64357d3eb8d

SHA512
3fd63ccc7ba884091ca94eb95748b8f27b89dfe2c85a6804c158bccd04ea6ada869fdbcb32c7ee213f2a8dcc90d47ca3809d1399b2279d26ae40c99fc3493c36

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
240e835e714cdbc3eb9dbab5cf9373fa

SHA1
fe3b07ea1f11a507b47111f68f598de8c4b49dec

SHA256
5b8af46e30af5dee14cd31626be62782ac2b3f5ffa8b36a126944e0a52e20471

SHA512
d5d592560fcdafd25013df9d4d95dfe205f9c7d7f6b673192b8a7f4471ee193951d30533c6668f6e28dbc9276837e6e05c9bf86f5fbb54ff09f0f41b571c0831

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d620712a16d63ddf89896281c8169c0c

SHA1
07ac8877bb13ab832fcb9c352091e8e9d10784ab

SHA256
7ec49e6254a55ac905ee39805868a5da707e602d51b9d45ae0979e783ce50ef1

SHA512
de37aafed690d463a177d163a2e4825663d4f60797e1c3a665e2fd58ce8932981cf0cc6fe217cb1895bfd1731e33b787abb907bcd5af587e0381c9fc41985b43

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bdd6c7dc5ae23e363325af0d4fd137cb

SHA1
ed213ee17a7b13491f55bc5a39bb9bf01535aaac

SHA256
a68fff9e92bed43fc4c826b3d120355ca7092c774d94cadd09de9bfcb0193c59

SHA512
96bacb89773f48d6023f6952d83d3a21133914584c9ccc696cf813d3752d7700622179ced5a923e8900039328cb176fdb6381d6cafe51db5feeee5b854db9995

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4441c7cd64449c283da64e5b6a17e2a9

SHA1
cfd3115fd57b60bc6941251a197d73f767d0bc6e

SHA256
1b3e4e5b1c409c726442c25899b35fea0be65c42a6a68cbb59fa715e37e20b1f

SHA512
ee9aefc6a7603e84bf180b59679264e3f06efb53b4413cef1a5361f47014dd4453f760a2faedbe03107076330a9f98e7b36020a1ba67ce15971cfbe86740bb0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3740361342f8e699cdd08680003d2ffa

SHA1
0fa3072a29c21faebe1b7a1254a15af53416cdfe

SHA256
5cd784e1f5985de739c31d5cf9ac33e1d60365289196d955e6c2645589b4e5d8

SHA512
98b24f643f8e1d168fe5a95b8a864ac7b565f107651c1bee92e0682b1117f9cddfdf17d40c428a5dd474b5edc7c3c768924f04c9e01c3d20381a4a468dec09fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0735c14de0e83d21660b819d5213c9f7

SHA1
377f583972ba2acaf51072f6d7ed97f5a27275d9

SHA256
0d2e88c36bfe3b56b54dfa9c110671c0c7feff9b0e092389766d92f35221bede

SHA512
557876a6acf4b1917e1ce3d5c2fe7433aba03a8b65881361b8493cb5bc580bae1fc4381f5a88740738f2a0b5c49372b3325aeefc7133ba4c2fa61f651869947c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c88bc9fff8599e3d9d2b19197aab2b33

SHA1
8b40a3ece5f2b8425c715755a16ed52f043ab3f1

SHA256
8a217f4687c488c44dc3c8dfa0fc1f21715f5e1b3350e211be82af9b29c5312a

SHA512
e51e412ce488717b41c902cebdeb1bf2c3b132320a7f7a582fa5d08c047d8614f4c3282d597b94955e5014be2e4ddd900dc3513c9048b9bddd98a49a52b3b010

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0e604ab631864cfa02cba0e3b9317901

SHA1
ef0f5c26beb4cec160a6dbc580501ece1388dd1e

SHA256
9e36b4c083bc9013b5cc210ffbdd40d69fb40c6e833a4abd14cf28b3a9b7218b

SHA512
9db3af1ae95c77f61206d1df40d97be738fce26da361aa7ca8e3551dcf7cba74d59ab670c6e50f34b30f244839bce6ce5d341d9fa17d49f82cf5e2b4f4530daa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7432972c7fcfacb30eeedaeed858bbf2

SHA1
81df48be950aa918c2a96dee12f78145c6833bfc

SHA256
d8f038e90379f18cc9478bdc0bda2b27da57a32d9fd7e733fad551de7973b0ff

SHA512
c4c6fea781f439e653e8100d9070edea2196b0bc6dc59f12112212052225a0af8057cb63ddf74efa2105aeb3b57e3a5349d7f066f450c8b9c77d51cae59dc4b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5ebe98e0a6fa5fb4748bba4e3e382909

SHA1
8ef5a4d1bd539a0a632fecac423751f070d60ef1

SHA256
d902170d149ea909b8db8f956f4c07c4251589b2b19f0ecb605518b51df78a31

SHA512
13695e6ca72a81889d614e0f3c0738ca712213d2b323d3ed5872cd561b06b825d4a335ecc8ee1b8016aa73e57bbe415aca6b03e1ac4a4c91b877af52bd880cdf

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab984B.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab993A.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar995D.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit