d82975393d958196d92d80d0fad44347ec80b5dad28465040f8fd2465978178b

Analysis

max time kernel
139s
max time network
146s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 11:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

38e2ee8c7630eff1db419fd490d999e5_JaffaCakes118.html
Size

81KB
MD5

38e2ee8c7630eff1db419fd490d999e5
SHA1

24acc53cf2cf3172a82a33265b5e209462895190
SHA256

d82975393d958196d92d80d0fad44347ec80b5dad28465040f8fd2465978178b
SHA512

70b5c3b8e18568898ae0afc23c87ddcec4eca432f53cfe08327e0f0a81e08fc68eb81e0f737d5b74adc379f5c077d51f39e4719b7a3ccf203c93962bec79da2e
SSDEEP

1536:gQZBCCOd70IxCC4muwVi6OjD1VugTtuYAG5VymcJtQ3objQJ114YkXYO8EcaKECF:gk2x0Ix8Pd

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000930ed985b08cdd4cb38e38023150682b00000000020000000000106600000001000020000000b428dccffa94716f23caa29952b034e0905ad03538a4083842e6bcbf78eb93da000000000e8000000002000020000000b9bef3f8827b00f01323cd7cd963648d95856d7c9fe83692c079de232be4f5f7900000005ee1eca45ecc5b8f93ce4ee403f96550a8891c52fe3e5e05c04d120dc12782a620b87b884c99d0d0c8d481c517be99e28a02c69c6e9e38f7e04cd85ef0c15cde30565031aab3eb2618fb52fdd5d8792a9555e6bd6c92a2bfd68290b8717b54cdc2d8d3c667d3c05d91d98a4c8c4b4e7676f5f395428dde82e26ae61deccfa185dde99d2bed2ac1ff3d7543b228168bc640000000ac41aa00c9951da53187dcb8b2284dc0d55c6ccc4c32e25dde7e719960433e7c4ec68e950a846d5027d8392194e0600234a55772b82d7147a9370d1c67da2caf	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 7094d1dc83d3da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{05CCCA21-3F77-11EF-9143-F235D470040A} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426858457"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000930ed985b08cdd4cb38e38023150682b0000000002000000000010660000000100002000000061808c9f2d873ec07dfb4b341a64271f06fa47cbb8ecbda61f66a941e7a6cb94000000000e8000000002000020000000ab95c2da237ed8322670d2dd2d016d8cbf298615ed8666679daa18cbfd6424c2200000006b8ec65fcc1d775b3ff3af4ad48235ddd3aff32b58be72024503860aefd4510d40000000912f8e57ae05c40f6b9ce75986b004f14a0948828ba5fdfb625e967fde1eec795138f003b196a0a9790711e97b385d31619f68232e28664b9a848d8b484efab0	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2196	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2196	iexplore.exe
2196	iexplore.exe
2948	IEXPLORE.EXE
2948	IEXPLORE.EXE
2948	IEXPLORE.EXE
2948	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2196 wrote to memory of 2948	2196	iexplore.exe	30
PID 2196 wrote to memory of 2948	2196	iexplore.exe	30
PID 2196 wrote to memory of 2948	2196	iexplore.exe	30
PID 2196 wrote to memory of 2948	2196	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\38e2ee8c7630eff1db419fd490d999e5_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2196
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2196 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8e717916cdbde364e6f530bee36da7be

SHA1
89b76ec7699c8876a3c2553c9bcdece4a3b6959a

SHA256
44592957e338b2558660ecd5e86200a25a382aef65ea1edb41d9f52c75a063a2

SHA512
4ef53ee00c6780da6dbd1b2a67a3e7f70d89b799ba1d889028b9a2c76bfce4606e370af4e573470990853b0849b89b98c339d42a9620893864d3a2686555d869

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c10cf06299b0b2244f6db33428c407b0

SHA1
2677614c0e2d7d2664f9b1634955f0cd9deef6ac

SHA256
86bdc82c41220c20519abbe1532e89a0ab1fc8bc8295b1ac2f245c44d887ad69

SHA512
4e23ef7e6a78e9ee8fba9553fbb740a882808d93e5598f33317cdfb22d090796642c8bd0b4cc188a5e676b613add5db1f31b1eee141ce3840f7929b8c390b081

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ba5537e4bee1d5d8511fa442fccab0f6

SHA1
15494d362eaac863e1c9053bf97fe2002b28e595

SHA256
a43c66fc607049750cc128aa07dc0c1fdd9fa13b050beb94bee1eb40d54a12e6

SHA512
2e58f9969f2f5a4c04434caf84cbe974f31f5d7ac3f2b134cfd24feb31c1fcef1d185207a512c9a5504e12b8e54de83b21ba006f1d74226673d32b56cd411402

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
14bbdaf8d3d32ae2bdac1ec6bd89af94

SHA1
8307ef91da4d56880829cef4f9ea49f7f2bc9b70

SHA256
94f78fb86e71616ceeca0a0956eed0436bcbf2afb03d52332a593582ac6ff526

SHA512
d01c73429d9576c6a964706c687f0245b385e926ddd906ff18def76dc7ab2002ece2e8fb0ba9bec25ff56f8e952a6c69800e7fc61b80fefddb970ca9d9d7e96b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
798633df6875b3ea0b58ecdba3fa5720

SHA1
1229a3ee973fcd0f5920b5aff7b43116653c3535

SHA256
3a4707ee5d5a314eb0ce2e30f482534ada2abfbab44eec870b36bbb81d245dfb

SHA512
19e8db6b054269f7d3a7d9a338c2ac54f7679e8849be5411a8f1cce4421a72156223f7092c2af6a61239ea8e73a351af6ff020d3d873e9d40a491ae614b8dffb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3f8e037c56a35e2b768b2a6c8daa94b5

SHA1
07af49132108f4d70a8836330fb9bc754e788cd7

SHA256
4fa6ab662a43f98d1de8a42cdaf18792c54080d446193f41532ca83abc67f2a5

SHA512
33eba9d42c8af89d4213106fab6b396cda4969dc522bcb993eb0127a1889fbd264bc78abe155a9029de9b88ef0b63e0082f1c6cce3612a1cd47aeb50f9ae80ff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
99c7a9f467283d91df624804ba88ecf7

SHA1
66f52247f6710f4ab3179c79302c68c9bee27aff

SHA256
52a3d10a73a031304b3f1d6d670f287a04f89fda4269bd104de1a9c7a8ff4ebf

SHA512
5b7870253d5fd709b1136049b28a5eeee4fd95b0529ffc38ece3509b0030c79eba7800c7251afada20a9a47ae834573a433e63a82ba1c2cc4a67f699b3bf3576

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8cc51c432bfa33082e8fac1baca31bff

SHA1
2f3416610df222572f5a8010cd6893c499818eb5

SHA256
cd5f572e84947c650c47b270b957a2ba6de12a134fac169f5486f024f1030815

SHA512
f1fc90fca73a7e96d5915d3cdb6bc0cfd704413b253bfca0036f33bac75b87dd8cdc2e82f18990a2deab914a83c7518046454da5e4b5cfeb85c849b3913caa55

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e59a219ea5919ce6a8eaeb5ea80f35b0

SHA1
9a1eba83a2b6ab1643ac1e0a25e60087b62ec0f0

SHA256
0f7f00564e6947f8bab5477f094faeed203fca0c6b83f132614456d3cff2c8ae

SHA512
44ad43a9538f74c0c2dcfe2dc17e24f348b1ad2ce255b0e493cfb53024d28c8f81add7e2edf05a9bb1f6244813f08404f2d2dc2f3b2fb89f7819c848d8c122ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
40182a787f37189b9b1ac89ef45f0e1d

SHA1
7f043891211d16b32eae2fe0256fb9d84c05edf6

SHA256
e05b23c92829a563956d15edc0f316489e57e23f961fe574f2da5e26419b9370

SHA512
fb662bd2f555c224e7b119a6c8b9be8ceff00c98b56650eb35c68b6da5f87621f052a1aa55efd021748c398646f02b006728021a2245c3c690df9e5a6c969b54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
093ea7935abeec3cf1c31967f938e3ec

SHA1
74b7f847aadae4a74c8e1abb3debe549ac2686bf

SHA256
d76afe6547868959cfadd5e948dc057e676cc12430f142af9fed5106b7f62693

SHA512
c0768dca2ee6b4d9c261f6828e3ec1afe111573f4b03d35744aff04d04b74ae8120b900d963e6d9d79beb279049f05e24afa104f7f682ec50b0462b9a2021553

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7a35ad575103d7538dbe2ca2704355da

SHA1
ec72be3bcfa35709427fea9e61666b85f6fffa9e

SHA256
9122dae6cc2210810c29a312bfe8eebd1183045608ff829e18d7634ac78df170

SHA512
0650e53886275a75e614f60c5eac9fbd75db03b984fb353094454860dde3e8ba149c59f07d3214328a2b9afe77059468f66c2b2704dd3558296ce8be12d9b7bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
892f16676b4a8cacf954e98d3dd9e91b

SHA1
567630ab67be9e946cbd41febf42be7d0a79b00d

SHA256
9f69dee2bfa0469f77fd1087d46e936f9c62ca82ee7498727cb3119ceefda8d9

SHA512
253bd2d43f67913f33a7a6a2186e4169e2b51d260e6337741b79fd5932decabc4ea6a149e9d283e8733e48bd02c7797b7ab7c81b06a49e97253c16bcbfd9afcb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b03865ae2fa793e3c815c6aea28b55a1

SHA1
2ab08a2abd52a478472c1f21c05a473dad7e88a2

SHA256
4e137d8fab3342c84945a6926973457d91e0cfc9732d5bb8569c414a4ee5fbff

SHA512
3a77336a94db73d641d43d110edbbf2a17c444b17f6483b8d79ed63ad3e290bb6f66bda48187bb062839d0e82556456ffa95c4e4233811bfd08ebe2e93a2c413

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a70fce2752385015c5ebb188fd589f1f

SHA1
714f7fe9f5f2a4c39fe6d24fe42b1a4f99a01e87

SHA256
e03a639a4134b538312148501f7dddcf866ee8611f978fb62da283750b8cf9d9

SHA512
bc3298774bc03a4e2d28caf79eab4c5110542da0249a64cef9321cd81869ed1507a742b9d63c15422769de734f25c6020fed470558a26a25fb8674e2f77fa56e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1554a6ea33bad6215dc41e382b501a62

SHA1
0452f0e62ae4b83d8ca74f167ecfdbae4a3eabf2

SHA256
c8f15ed5e27685b186fa5e3daeeb7d391668265b69f6e07dfbb1241356eda17a

SHA512
8274fd50af82ee9c2229e693a795ed7e0071ae51c49c779021391de626338e1986e19a0843b5de7988702372fc2f1586b8db3f0269755695db9ffca1b3c17cd9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
03fefd7b797a24940de0e7b3266d0d0d

SHA1
4a2cfa27c8f505e6f7a072ef384ec360d9e5eca0

SHA256
2d98ce469770b4c3f9397e5e80e8791c6c34e2c16a944b4bee6ce537266cad23

SHA512
9e521b68388b515ef1b78e1cc21658290990edaa8c8f4a562e979b86124100f52db61de4a5fd32444743f2fa050a9ae85e398704695f2bbef37675c326eb7b3e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c44a00ea73c893c02a81f0a9e6997976

SHA1
9b64b2ec444e7f6df11db78e38fed9e17ab3fd94

SHA256
aef9ae464606ae91d42f72bbb7e4d6be2fb2a4117d30d0e5510dc351856cabcf

SHA512
05c77f4e06f234201b6ba35c98b9e0e456faa1fc96ab7d102f1e5a263082972bfc165f849afd16032864f7ec5fd76a40985be6a50e5a79f47f2dcde253afadbb

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabBB18.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarBB79.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit