c168b40d4bd19388344c3157aa049c1a84a2bd72868c452f7fae81edacacbb48

Analysis

max time kernel
134s
max time network
135s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 15:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a65602304a99f9a0f434b7c5b231fef1_JaffaCakes118.html
Size

213KB
MD5

a65602304a99f9a0f434b7c5b231fef1
SHA1

89d9849936e8418a874162982ec2af1175486a02
SHA256

c168b40d4bd19388344c3157aa049c1a84a2bd72868c452f7fae81edacacbb48
SHA512

aa925a0d339719355fc68d09956fe4ad605f309a80150975521b56a74fdeb3090e7981596732c5ccf370bd388b1b3bbd445fe9d543c19cc3703dda90858e565a
SSDEEP

3072:S0V6ja1Wi7lyfkMY+BES09JXAnyrZalI+YQ:S0VdQsMYod+X3oI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 35 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{33D838A1-299C-11EF-9267-5267BFD3BAD1} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424455501"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2940	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2940	iexplore.exe
2940	iexplore.exe
2336	IEXPLORE.EXE
2336	IEXPLORE.EXE
2336	IEXPLORE.EXE
2336	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2940 wrote to memory of 2336	2940	iexplore.exe	28
PID 2940 wrote to memory of 2336	2940	iexplore.exe	28
PID 2940 wrote to memory of 2336	2940	iexplore.exe	28
PID 2940 wrote to memory of 2336	2940	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a65602304a99f9a0f434b7c5b231fef1_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2940
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2940 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8b95a214372d2b85f785bc39ba18f945

SHA1
20ed49f28f5f7a8c07dfba3a918dfcd7e81c8af8

SHA256
df99e4a3c6fdfda7b599d8805918400ac19a017cdb49f297e0212058d37d9aae

SHA512
8da2fd32e3662baf381d4ec1d62bfb37f0a6b301a915c856233c3eb03825d60d72b302998b27712903099f493f00ab023a189087a359868ba172461b2d8bb2d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3ac014ce2cde57ce046301dafb98a494

SHA1
8306b6fb8c4410a395af0a69c436ed3bb3d342c4

SHA256
f6475d671a7da2fa9003d6ebccf56a8ed44150b221e0bf0f60af718a2ec2b561

SHA512
83b6d49540dfb37de899a0d1dd1714d9a8cfe6f6bc3ffef9224ae493ad258d14520af02289493ab8ee95fc68039fdc2e6266c8c93bcebff7c84fa974d67ad472

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5eba2b00b9517ed8074d48543011aab3

SHA1
29f97de19866cddb8b73753ad5840420ffd96f26

SHA256
2e72cf076831cf5006fe9221052ea631890d4b65497ee5dc98d38aa1bcf5680d

SHA512
bf9b1e3f5ade3781d163344baf5093bb10878cf90d4b16a8931d92d775f426a9f060e69f670c02ab8be16e8748fca7fcfbd32190896efadfd9536f3e8d82f342

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
41d72c72c0303c32aecf183de1265713

SHA1
650832d3a9ff6d88a89c4256dd8c4b701c2b9705

SHA256
ea8c80912ffa8aef3cc11817832ba009a590bc8e5b49fc2d01edd3bd698dbb80

SHA512
a73bf49ad05020453076b469ae36afa2481daf00a562c7565c586f1f28f1113279dd942afd1b24f38e41bc4c201e5d651050b5d239951c6073995ac6de4479b5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aa832b97140dafbb0b28fa78fcc50511

SHA1
520b2105dc96ceb1a6b195998ef9112bff6d374e

SHA256
a4adecc26c4b3839466a364107552c1a2616f5f2b514da3c4930c153f45a2a38

SHA512
9ec4cf4d8f56700b8653bee66d48746d747d4435e6ea7197258463deea21391976c673359ba9144a64b29d43d25c25ac102ffaae16bca5086d5c032a292668a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8ce7b01620dc66d68be81551414bb68a

SHA1
148f4a0671830169270cd938d5efaaa3a2b4c66f

SHA256
710278594c414ca69df947f7ff2e87cb3e1106e39184f1e1572715cfbf747b28

SHA512
df7304bfa9d3e49d324f49e1d61188f29ed1f13e981b89e2f2eaac07666f233f3ccc999eacec29764aa307ef32f64c1a530db190b73279dc43ae1bc02da2c858

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c9fb94c22658706d9055691f5d24f299

SHA1
857ba7a4873c9d6c22565493e9d33330b6905234

SHA256
596033c885b2d7185d4e01e56a948acbb066b68aea8661d079dbc2f409eb653d

SHA512
bca7575c1a76bbddc327b7fe383763d33473391be23fb6821d3a27d885027f93eb260b268c7b70fd5059502e515430f5cce7ce5e70cf3932a5e5cc8db04afc3d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b7d6dec2672f441843275abb781c7a4e

SHA1
a33e7048b3439342c7d58a03fe09082778bcf090

SHA256
0c77f943f66364bb538dbb35e17e3fca1f606d4a208eb69145941936494f902f

SHA512
52672ca521c9d884620f08b6d9891cc25acaf3a77ca30b7219c4dcf0094496ddf396aec031118738b3b76484c42a7991d45c71973c1174c3d21c88315f155bf4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0027e454513200578a8debfe5046b4e8

SHA1
e1a7626ad6fc37faa324a5c4011d1a54026fbc20

SHA256
158956e922570ec6f73dd0800f956492a35f8860a7ebe7b87254a81eec263cf5

SHA512
abe21bdcc4815b08524e9cc55eeba6e35abe5831d8a18405f58cbdfed786c976a3bd9b9d5d7f1cd80efddc76164d553e442fb58e48b24513698a4e922f06a9ac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c6ed18d1d613526199e1e6d5ca5bb7cb

SHA1
091f390ca38f70715b22eb208e1f33dc6cc92dec

SHA256
047cc6e7089b56915f4ea2495ce6d6dd9ec7327e56017e8d9e40839eb1219b75

SHA512
cfe771cbf1858103afe092ed4774cba69e958fa6bd545e245acb7fee7b548063a1cd825688c3296f566d5f0342c9f70f951dc6b9995786eeaa45df194659ae41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e6601bd4cce40874d4dfd653c5ec81a9

SHA1
7b2b1a3c391a6dc70323c83438130de00cb10aeb

SHA256
6a7b79aad5fd03faf7cb90d409437a04b7cdeb35d379646d6bdf92d965ce0c87

SHA512
fec595c9b016632a62f5d3c38ef5f5c5925b027136cf49df8cc81ecbd8a0bc5ca4d58380a3d34b560e5547dc1fb1bf084b306521096df3ba8287afff2fb5c8fb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aacb33a420cc52b5c8a3174a9cec01fe

SHA1
093d351e188a94939f7b3bb4c4c643830c31f572

SHA256
f9ef7005955017b2ef0abb2ba00fa00c006d8b446228e036fb357cd93de0a398

SHA512
876c0bec6027ddd1568bcef4c82c787d7d0ec41a3b9b08a908c19615cc616b3d9a17251b75e35a193c7e73d50b96cbb9944372ac57cca9547357f33f99de010e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
35192b3e9d12afc50837948dc354d7b5

SHA1
5876884df1833ecd48436e75e6f2bbe81b8434a4

SHA256
4686c7b40d63a9e3ffd5046aa35c7ae43695415bd072f7c79700779d176ccd48

SHA512
0e58f9edc45905ed92d1d71ac1c459fa892a5441db17b70fde8b874a4d9aa3c151af748258a255858b1c33ebd2ca5133ae2998158939c340e8243b7a8505547b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e363cb1f577c1533b17788878ccefced

SHA1
e1c6d1f48fbad114205aa799cc05b76c24659742

SHA256
dc72a893b271e0b85cb0f41289e3c1c0e716274adedab09463a8e5e23c454969

SHA512
0c2b079dc6f13d472e219007af306f3cedc7498558190f9f762813b6486c2243f4047137a8e49a3076c05cea09c95a6d9300bb17c34faf44b302d940caa8a5c5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
660dc84707ae8c66eaff05c2b074fb92

SHA1
8b4a7377cee7989c44db13fe5ecfb15c7934aa48

SHA256
ba416f0570ca4e1676779d51828e299162383675e4eeb983eaf84d81cc8697fa

SHA512
33cfb12226c29d8dbe67821e476aeff77d0f21a509025a07ed900d6c7ed7ab7c5b55fa3d2e042b62e5a9a9fe218f8b1dc64ce22ba77a626b129bcf860372a87b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b17ab5feb86597b6216a60fa75a8dbcd

SHA1
f4c4e59ac7362fcefba75d07ad63f56083433cb7

SHA256
df81761fa64e661a89d4fd32ec7f0a04f8cf4a8fc9c531f3db339445be4114e6

SHA512
7b0ab4eeacf518977bd650c04dac2e6724e9d6d38abe259307db5fe2813cf6ce672d74f2271a56b69cdc4904d467676734b59120060f9944863eae620a823be8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
190187d4dad52c8b3b5c6af517ee3d35

SHA1
37ec2d5dbed0b624f08bb07cbb4289d9dd2b26b7

SHA256
0711168037c3262888f2252f9735fd7b8c38df2c9052414d8532c93f65898846

SHA512
59761c5de25c5b5314e2bf94c37b33085e84f5437fc17af013b74fc92daefb2321f3fc4c1e40969f2b5449af89aec651c4e18f00e58e2f06f062ce6abdcc253a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5963ab015b9be8d2d011a9f939faddae

SHA1
77d029ee51d78644d3e5dacf5c1517f8d6e11f2f

SHA256
377d486a30d86bf6a2dbc4b50287f8630c4e331e9a9db64accc5ca88c72e8dd2

SHA512
ba8c050e3c818f9bd8eade1c41bb1fae2717ce9ed2df115e00fbd477a5405da78baa53cb17ca171fda18830f40361ae113e835c15881ae427274d3612a51c21e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b55e47440accdd1ce4517f16b78ba139

SHA1
497c6a375c2db78a53a88efa4a35b2b574e2b4c8

SHA256
ee9b3ed92e8cbb6261e1085cc8ae5a7b46532dcbfc130520b38c6791c1bc95f3

SHA512
4fc2a3e37eb58a4187638aabf74ccc0dd648234f6aadaabb63baec78ab858527a5a98f2c9fc1980cbbf578da93c91f6cc918b1c812530d53c3523416757574bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7ea14f37372a86e8fc232469b93aec86

SHA1
d13f985c63cc74f4559393b930e1935f5c69c002

SHA256
881298b0b11e2bb8d4e74eb990fab598b66c82bf83fb712bdbf363c4623ed3f9

SHA512
944b726b40d021268b0f84642b8d6068d788f7f35789094dff022c44c7a2b9080db7aa511b64d744576d7e6c2c589ba5a1730b24868b9b7e48dea1a39c6f8860

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC41.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabD1F.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarD33.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit