e664faa29e9598d3ee8c8ee65ca27ebf3b36c56c8ca1272b922d31d1b675009e

Analysis

max time kernel
150s
max time network
153s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 11:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

74854df27596ba17df32815bed9c9413.html
Size

86KB
MD5

74854df27596ba17df32815bed9c9413
SHA1

10531b9498ac12ece428872dc0f46332a92a272a
SHA256

e664faa29e9598d3ee8c8ee65ca27ebf3b36c56c8ca1272b922d31d1b675009e
SHA512

bac03651a78c53935a6ae9125fc3644c232fa43814c79f893db0956244231b3ec9d9ddf4ac9a780069ce7bcef855f55c58bcf869fdb8c43b6efc1c76064a2749
SSDEEP

1536:M0fGFoHnxKd3zeHW6vXKX+MRTDE5sS/j3Gbx9f1CV:ioHn3dj38CV

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 26 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0682F3C1-BB71-11EE-9792-76B33C18F4CF} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "412342329"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1988	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1988	iexplore.exe
1988	iexplore.exe
2856	IEXPLORE.EXE
2856	IEXPLORE.EXE
2856	IEXPLORE.EXE
2856	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1988 wrote to memory of 2856	1988	iexplore.exe	28
PID 1988 wrote to memory of 2856	1988	iexplore.exe	28
PID 1988 wrote to memory of 2856	1988	iexplore.exe	28
PID 1988 wrote to memory of 2856	1988	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74854df27596ba17df32815bed9c9413.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1988
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1988 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

Filesize
1KB

MD5
819d2f6d228f94bfebac03edbfa4bc64

SHA1
257acbdf2270c5285962d10460a77f422143cc8d

SHA256
e8b016b694a9c3224b6a405cf52010c03b7bc6c8948ecc8a3d9aaa39a18f6d47

SHA512
b81c03ca94d21cdb106281fa478dccd390e07bd0a03d0077952041f3d1d41a671ac9a3d4c97d41d9c8f74b14214abfcaff696a10d0615b603a7a9b1a67adde67

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

Filesize
410B

MD5
a967c44ea97a4e11225b930966f64925

SHA1
39cdd4dcc69fdf5d393183489d2ddb166d9ca864

SHA256
59a5c9e2c2cc311ac58bf49f275283dc8fa865d600ebdfadfe89ca7b4cddc84d

SHA512
9825cfae9a2483d40f1b61f038b8c04f21059b853ed0f3b81c43078ca241e8976c006c67063945be858797ad4aaf7814ba3c36ae93f058ac70d65bd45f2101f5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

Filesize
410B

MD5
112b5d1699f8e804dbc5ebe5973d521b

SHA1
e0fa7d69a837a1282d36f16be558ccaf24af74d1

SHA256
4490a31d7c5899eaea5c527b6282baf935dcfbeec4248f5394e7e9a6840e8d32

SHA512
692f67de6d8df03a5e634afe17980d21ee926551ea609257ca04075652831491098509b3682d408d7b9ff19a1e8378990c8525d19c3434271cdbf86d071cb413

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

Filesize
410B

MD5
af669fee31bbe84a12a73e1b47c89c84

SHA1
65e9931dbd4b0ee65c61e02af7d8cef7e434841e

SHA256
b77323398faea952d5cf2ee62c035cf5ae1bdcf02d8f8bff7280743f7e9a4a48

SHA512
f890124dff63dd80bef7bceffa5b1e44f452d07f444a14e6e65c37fcf4bc7f5672e29644d7666a1ce53edc0f902f112945755fbded3cfd54ed38c15d65aae9ea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
b6fe08a50aa2107fa1c9b676d2868fad

SHA1
a40c19e60bcd5249a711a8671bf5ca8f66d9bad6

SHA256
e14e1b9599f940cb85af0875d14c25973e9379c588ed4773e53fd23f0f729a48

SHA512
ead04f0ace47faee3a61a797bb6500b634972dbf4e4e14b7c940f9781db3d2d66b196a4ccf9bf889aa81c4bd56838ef5e05758370cfe5842e62bc5a17640e873

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c07b5c51a19e91d283959302d3f22e09

SHA1
c55293b39bb66b9dade5c05020cacdffa8a7772e

SHA256
781d0629b1705614e8850402967b2bd1d55ce35c887f6e486faf6bbb504ba368

SHA512
d3c50c16c8abc217b08b2dfc977bad3606bb173b5198264c8fddd5c6dc3150dd8ae4bfae3b3259901f8a4a94a46c0c52f21988a3d965c9239e4170cf90edd66b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6663a96ff466828c172113b6770475da

SHA1
74d6d8aac463a1ee69c982099fd8c132802f0de3

SHA256
28cb6cd36bd91a05d066dda0fef029fa8e46e8cf1fbaa641819bec26fedccf8b

SHA512
e8487cb36d900ddb7253cf08b52628e428de06035cf95e4add82633e343b70027456116d519866a9ae1d0f5f4372d0c351cb0420a7f228f204f378358e1d3005

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
85350ebd71a7f24f025383fdeedd4670

SHA1
516ab16a6eed7cd662e306a75d9f500035bd3ca6

SHA256
95e66f2c795e11b81b6c5c8098308366eb061cbd5462c97c4d0b1c41f33a56da

SHA512
2e35c2c826ad7d80f97b71620fb7f92d246836e3af61b7dd0c583b37080078b0f13052c98a716b306f7784f8e94bf0c9655ce2d52e50428c26e02a4cee79d690

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c25ef0f754edef38b93e51feb511498

SHA1
9b6f991ae32e089ae9c08c21eefe8b773bba1045

SHA256
8028fa233bb5ab801c1e97f88064e19f5ddfa1ebc31cf387df725633cacfdd90

SHA512
de0ac5901fa1770d858dd00dc661e282d9e723f5372aa2660a75bab0ffa93341edcb039c0a08702248d74d24ab49874c8f8c9a012ed50b6d739379bd74cc2e30

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
155b4af249270d48fa47bc83cf5cc7e7

SHA1
4e15a461533ae547cc2724ca663f53ecbe936cfc

SHA256
282a600a2c9f8f55a623acf6bef5d195da3111088b041765053a049333dcafce

SHA512
16e0a8fa7435e5d533f99ef60a4deddf10fd8a0ca744f6d1da5f95d2deea207f7fd2dc3494061a7148fa7b5039a56ca573242fca02e5ad21074576b19b9d7e75

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d70d2a0323e58639c7f9d8b7250e971d

SHA1
4101116bac0dd96f27beb7170a16a7c1cfedbefc

SHA256
d3b8ae6019021d13b5784ecfdbaf925fd7cfadd0ec1fab06f4e7e647db9b4303

SHA512
ee9fa74df2108f164bb9ac9c54a88a64e91ac51bd9a0175bc52f81cd2f5f554317ad0296616e162082ca7f341a45646683dd5df932871148ed85ddb225156e9e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
42970d6d951f104c8d02c74bd82671a7

SHA1
d7f14218656319526840224dc688203a7685e8fd

SHA256
f2932f9c1fb1b33b3b07611dfefb6eaf5963702025e64ca4e1cc1e9fd4f63a2d

SHA512
29f2706645647f07458f9299b59c6412a7cc3dc63728f2b42ddbbaeb61e0e7da512d094ebc82e0a9e590824f6af158dcabde1d7e594eab18637e3b81f52bfef4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b21c0df9d25a66e62c175d445a6e50c6

SHA1
b364bf1269a61c010ebeb9443080469c7939b5e2

SHA256
aaf57c954087f101cb27d1a80706022fe9969243b052e09dcecb087070599c07

SHA512
ddc77a9975af0805086aa89ffc2a2d38b64b9264363ad2eba540f497240dbef3604f16a514a78e9f2842bf961c4ef8e966f4f97f19229be5b22d133d6eac1c0e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9a559ee5f9fd1ac035df8d129c1b1fdd

SHA1
eed1b9031edb33a48d66fec578fce1b385ac5c9b

SHA256
3479fc0a41b830e3008f8e5bbfcaad08c0f6fc496c4515e5f20d4594360ce413

SHA512
dbe9fd95c5bdab9b0952be7768b20d2c39186ef09a066e5f1c98375859abd8f7b1cbadd346c5006ea74488d2eb7a2535d026f669e56cee0e1595be16dbd502fa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
417a686d6e46fc6ef286fb14685f990e

SHA1
3f50e861dc7eae962202eaef6b0f2634be70b619

SHA256
ec24db484eef44d5dbad011cda9ba43bbba2c3574576e4a2c44514ef93e80e11

SHA512
a8cd79120f79b61b1131efb1aba9cfb3defb51d4d1f25818b88e8a8dd95f5cb6f20a16e79a2e7a3227de967c279a542625ef4b9c4fae0d7ab44126d5e99fb442

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0c0da8a151d83adb6aba07233dceeb98

SHA1
119fd4b3dd39dd0c7978ebb71021729be71bc2f0

SHA256
9dbf4a81070b3dc818bf84e32cf408dc73a3a52d2b4cf6a86c6aea3203c9fd56

SHA512
89abc84c1483ae6d28a7bb30af5e6d42553366e09c0bbcb8d2e78bd84d5f45d1ba96cc0feb9242001f4613dfc6eda2c471b016fdba0030ccd57cc317446311a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7f89ad61b3537df767ada6d2704bffcd

SHA1
c75020b253fdf1ffa03c7c48e586538819e6d10e

SHA256
be4ead7e6b75166dd85ea78d4d77120a5168df797e6c013a9720e1d7a77f801e

SHA512
edced2e0b0bb118f912bb8334a0d50ed8b27241d1ce40e6a5f166486069458f04ef6c7c7dc93269cdc1a49e2d7b9cb6594a117af1d393fc73e023fa5fd3457fb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5f9d9c813286af213d57c5d6b35f64dc

SHA1
001734cc332b1f52cb847ddd1c78004ab8a5e64d

SHA256
a80f9a4ca9c048085b80feb9f550ba8e16a6a3cef56baf521e2325d7367880a9

SHA512
99a8f833193812e167258b3ab2d57f2a0e979249e23ea53d2d4e21da080fe76acb97a9470364fcc8b5897aa4cff2869d42e222a699df37cdd6ee5d3027cc9077

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

Filesize
392B

MD5
d18f0829967162494d4e15a9f0b22dd3

SHA1
8d46aebd4c1c1efef61068159ae9337b18f61f33

SHA256
396d8e6d96975788cc64c6b658ab27bd3ffc3e318d8a53124a9da21a4014ffe0

SHA512
312211ebfa1a815d6c6530224e6775ad39f1e6415ad9611c035cc70e8ab7eb4e4595262a8853fc3573124fa0b817f345c9659fe85d46c6c473df3e75ac85e78f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
26b2a73c80d9ed953cffc4c13e9b1103

SHA1
d5eeddee8c5ddcc70a8c8c86890fd3eb6291300b

SHA256
1da63bd4b80658e129e7e1de6f3250b6d530eb2a4fc9e9804828604a2aad8149

SHA512
35643041d07b21542feac4104f1312c1410b5f68a7c5a040d57c50025170babb474f3057919c51d3d6d7ce12a49c91f51143b48f8f1af6810a037a99bedbca8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\main[1].htm

Filesize
5B

MD5
fda44910deb1a460be4ac5d56d61d837

SHA1
f6d0c643351580307b2eaa6a7560e76965496bc7

SHA256
933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9

SHA512
57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab59C4.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar59F6.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit