1992cd850a09bc2ce7c694e505b0beafacadac3177b70cf4dd3f772da541c284

Analysis

max time kernel
138s
max time network
146s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 10:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

62d4023787212c3e4b12e0bf6d8dc28d_JaffaCakes118.html
Size

37KB
MD5

62d4023787212c3e4b12e0bf6d8dc28d
SHA1

1e7a45d31d3c8e584a06d4abdbe7b7e96b751b86
SHA256

1992cd850a09bc2ce7c694e505b0beafacadac3177b70cf4dd3f772da541c284
SHA512

baddfe114ad8d48de5d9d7209cf1ae7a0ee11d84af38829f8d80fc31e05e9d104845061431d9f25bb180992fea4df779c61928d7c155852ffef341283d7ea0a0
SSDEEP

384:SI6J8sMmsCyp49IjZ+CTTip2yeHip2SXr9+isU8c:S0A2gCT96Ngc

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002f8e41e3384fa749ac47329e409d990900000000020000000000106600000001000020000000bab4146724c3f9f40037866a37d0784c8116cae03fcb226e71f694bfd27d1963000000000e8000000002000020000000ef093f763700af7216f1049b36e27ef205a9a276668291470e4e4537baacaff6200000006ebf1973e2e96750c005aa17331500a5fde8394517ab0195673ecac65fc91c4e400000006fdd2d62bf498ef1dfde0f8a925d224df9d530994fb0d54330a2b2318d2ef2c14107a82b3f2d18c2966e8041349f0463c6a3f39d4ef1de35a0e5c9358e88b597	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60487dc420dcda01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002f8e41e3384fa749ac47329e409d9909000000000200000000001066000000010000200000003119fb5067848d91614e50062917b9976bee3097c9e06246ef466aa65b7e3134000000000e8000000002000020000000cbeb11eddf53b8a45aebe9b6dfd3f571ff1fc21de143dbd403f8783d74b2444f900000005cb9cc5b35a327a86d781b8fe8d7d2433b957555f0aeb8d88fd99e0b29f889bd1993bdba453a4c2ac44a48376817f5aa061c23f90569369e9561ff1724b4c4621a8102fffd5fd6d0add69c954afacb7426b8aecd1bdfa9e0e2b59e9df413f26d7893d7bbc4d403ee1ab28aca55d024efd7a30ac61a1c4ba9ede969c515bab3a1bab24995bae78bc1d58585137e0b8c514000000018ab174ba3cb1aa88e29b0b6d8c99b162a9e5cff5c7ab8c1baa09acb042d61be4ca33e67e902a160affe8d7cdbdeba0a113c70f03520fa341b9fa0671c7b3460	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D6992D21-4813-11EF-BDF0-66D8C57E4E43} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427805420"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2720	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2720	iexplore.exe
2720	iexplore.exe
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 2824	2720	iexplore.exe	30
PID 2720 wrote to memory of 2824	2720	iexplore.exe	30
PID 2720 wrote to memory of 2824	2720	iexplore.exe	30
PID 2720 wrote to memory of 2824	2720	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\62d4023787212c3e4b12e0bf6d8dc28d_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2720
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2720 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2824

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
16f391fd52029ad292bdf49cdf80b31b

SHA1
3f5c9e5c94bace6c0d1fc51dcb89125dab381fcd

SHA256
adf6c4455f73261ed4d4378d439eb352bffb98bbc97e0626979c298ebdf2b05e

SHA512
29843deffaefdd8e3b13775e189c6ea8f3ea7181d0942574563903ee1ce984426352629da7552e977a85c4a96548e3ac4d1cb59560ed1d6f3a3e5ca68dcfa7d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2c848b0cef0967cd27bd45ca9fdab133

SHA1
f80b0b762678fe542afe39ad0ac67895d0e5ae07

SHA256
fc9af274746805974a4d5b6ef93d1a4f3eef854cffaf2c134cb17bb6a992ed1c

SHA512
c183bc92084f72b3e100fe40d1c4b0b6f1f9b6918d50fc4f1a5e91f2092de479a4382bc9f5e3b6b5fd05435b0e695e6b60f6c0f25c88c620c992cb9bd3ad0914

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
335df25732d39d7e1bd41bad0e1fee6c

SHA1
82950404465089bf31a20c95e0c8bac29d7461cd

SHA256
e2ba72548cdd99c17242133d7c2e19256a1a6483064bf2fae836d15c9a50f273

SHA512
292dfb0075f1c7dacae10356b58bd81b841474be935f3832269d036eee94d738684e92a431a4306ca81b2f0720869a770a95a79ae3893ae9a27cbcbfea18daba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2daac6d7b0a28639c12ab0d6e6acdb49

SHA1
d22b849d4c33af212c2a3daf3b606806465f979e

SHA256
845476b09acaceb505e1d094bee5da322961fdf83b89f638372b2fad50ada8e1

SHA512
5f3c97c9bc9a2a756e417b982ad2ac907fafa377d539f106050b84e11b7d9a6728e09398da65561d4cc68ab6cd5024b62d144a552392f6dd14ac5cf7d98dfae1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e602b678b7c919d9ab079dc03e2e6286

SHA1
03fb1db686b124ec3f6d53170d0fb744ca32b72b

SHA256
ad5e9851906b6ddc9a3d5a5b3d723c4df274874957d16fe8664a1c323952e9c7

SHA512
c005cae23707826c8aef74df6384edaaacdda83486c653b4fc0f4b4f73d88f345f74b00c85ba6ac6a09b63ca5d0bf625d3f2990120cf6f38aa12c31b233d2e29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2c3ae419ff50fbb075ab37e51c771872

SHA1
99ec8070ae24dd17ba78675dd6592d4fe0e23d4e

SHA256
b1711c9cdeffa5210780dbce686f4481d5014f7e893cb19ba7169c8abb6a6bb6

SHA512
2f7cf9dc95927a80b76f2cae858bed60e706724e728628dbe112e6fd13ac9be6b9319ab42149df23cd03c770bde08d63592ff348794eefe4e6933537ddddb4b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6551e77a07dd294a6007b24a05f2e9fd

SHA1
39a40ebff60e6f502f788d971a45f9e59f0c3a7a

SHA256
9a63ca405b7eb56c6ff6b589fe8e406d1984a4c14b92a3de48936c609440312a

SHA512
b856a97c9328b7bf7879b25b1ea5b07d0d582ae1f78b0cf363e493c6069256f7279a261fad867df4ca44edb2cb1e823ddfadb43600d49c234042e5506da99864

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ac750f50910644a6cb2125481c49c17e

SHA1
b547b51075dfafcfbf939dcb58ad2e01a86c4674

SHA256
553ff56564aa36b2dac862f4c42720497aad49042d0829306d3ea4ef2f2e9a85

SHA512
3c05bab1e463de9cdea1c92a7667121ba675eb81b168800813e2eed1d717ca032699ad077226793ac544ba8ed9cb0d1ca6a45e9288b5d6887588d341d6e97b37

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
55ed531684494467b44f58db4f403369

SHA1
4a61e8c436e2d3b3883d5d187cc90992ea16a271

SHA256
6c5e2bf5f92d554e1cc29915c0cdca6e7010b65e417175ea0ab12d28bde14edb

SHA512
dd0a853b611bb81204bfe5e96c17cb038a8a4823843974195299c04879c40ee51d6099bd0dc377104d841eb5c3431f9b5631f48ba44436068e2b56f274e2cccd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b0b02f38d179141d2ac7717e5545c1c6

SHA1
98537192eee6212c5b25e0266c14538ba293e5a7

SHA256
5ed2aae62b920f61f583e3eb47a700b7bcd9877b69260fa2b6592beb6557a17f

SHA512
ab78816ee216f1b14ac0835120e0a454b8f2ed6fbfcf9cb3d764d0c0da3b2ba59291ff2afd46d9c8a46252d5a483ae7ccde6a1dceaae8521cea18a5326d1557a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2b5f62c9c88df7ab9d5549010091b3a8

SHA1
8c9d2158ed2682317c410a007dc125522c52326d

SHA256
3bff3cbff8fe6b64347c1c9b6016f9298935baef47658017f8c57a528b63b612

SHA512
b427ba72a3a0a9e8a6a3758c5a0ec608d9a567d5391f302a02c63ba576b58a5edcd97d47bb4db90e4cca43f856f000243e33d6ecf7282083652d43f5cb041289

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
075cc00be640b463316ba72b01ff740a

SHA1
d15e89c740107582bc7ddee644545a95af405c68

SHA256
d49a538ed3877b064efc71075abd19694bb691f3001f98c517907395d329996b

SHA512
c2471a43ca5451e89e3ae94298f8dda9a0b2099b0fefb6ca4f6b2d969ba13e4caed1d663744d9b70212dd4448b92fac08ca9eff6a020d4a96a390566c266d3f2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cd3f3513c60d27488688c069167c6939

SHA1
efcc5d366253f8f79cd3a835cda4a5c082c06577

SHA256
50dc978ce017b1399fabda1a65cf63f23cea475241e14972c8ff6dbb9f3c20c1

SHA512
3f305fc5972e130c1e7ad920243417c9a1e17aacc109712d21670dd68eed92c623ceda98506e9e55b5c811db0bc99bf1aaf0dbc25bd429d084916500faae3979

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c887216701e5f5726f0f1e7d806ec31c

SHA1
a1953920c4e2d7e8dfa350d0522a3c8df61cefd4

SHA256
a42871497c53db7e45b2dd10c0b8c3effada1488347180892fcb7fa24713806a

SHA512
972e37b55873931a54eeaeda6fe3fe5f094bc7e89fe6bd6efdff6f854fa5e8f7953cb361430fbd654388f1b56d41761818d921f972d49c0df0813976f555725f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f5f5894179a7a9e2c5b78cce176981d4

SHA1
8d722e177d291e33d906e5d898f6163b391af85b

SHA256
f0703cf3184b03bfa9107cccde091203a45644222fca6d00dec4eb076e47ba81

SHA512
98a5782a6fe1253b86586230697bda29f32caa5a7224b06aefd9ef717059d7d24e7ee9a12f869b77b3ad7b42172f413c8ae520c36836bb2c06c1acff28a89047

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
091114e6e234f876281dc04268088d94

SHA1
0dee8d4225cfb49cd7990740c3e12852d5ebae53

SHA256
5f5d4957f1c23a81e3b18e9917ccbff0dd81651d5563767ed50dfffadefa8f9f

SHA512
ae4661b1406c27c42a3d0817f90baf982c3ca2101859e248f962deb81dd3acfebfa6b877030bacf2faf8400e30301a5485711bd55eea86c33f398253016665c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
29da36d1431a7b086beb69819739e3a6

SHA1
1152195ec623a99e020f97e627a718b9f9027e56

SHA256
f8ac167ddc47e7acf0e87558b5117877e8666324975a0f037ba0d0ef415ef038

SHA512
cf2a824273db6636554ef653b4166cc51ef3b5653b2374e9650de3fbb2cb9b844549bded86bc089d31312e38e504962644785ddb7961925f4e52c4b2d6be3cc3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
74ff63eacecce0be824a8576a8660509

SHA1
d6d27276a7b83b1ba07bd1359e68dcfcfd37d411

SHA256
27f228e7d114f3e348f4ee21ff61d59437d82ac34e3a599bfe5ece3ffc355459

SHA512
7d1d8f1d221080345c4413ef08d7ccbbc8b0304ab895112619bd3ce11b153b386872fa5e2cfa7de374b1a56c7a7ea230e851f0b42d81cfb843a1751d5ccad40f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab23C8.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2449.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit