d505859a165d96521a67f5b07cda9946b5712d60c47e47a2520f84be0d286a84

Analysis

max time kernel
136s
max time network
133s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 13:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5c2d6573a072b849f073ac7950888c01_JaffaCakes118.html
Size

3KB
MD5

5c2d6573a072b849f073ac7950888c01
SHA1

8059ec4b8f026d7ffdd326a1046707bb17333647
SHA256

d505859a165d96521a67f5b07cda9946b5712d60c47e47a2520f84be0d286a84
SHA512

a6b7d168e429b35bd84e1ab45aaf33b65fe9ecaaced87b20cb9f3a3d427b3371e0d4d04a415e31497d533921890fca1a8bae49780fad3d84daa64e3de5cf5f6b

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8EDC72D1-45D4-11EF-880F-D61F2295B977} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30b9ca63e1d9da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000da4c8a72b2b53faab1b2232eeb6d48873000070f28071ae456c26589dcd6709f000000000e800000000200002000000037d0338ba39f936cb1c192e77eb29fcfa11f2a562b816b892958366681c5332c9000000031d7014f42bcb2fdc1bfdcdb18dae9cacd46b5a6612265ee89316119332ce91e7cbc9afabad6829adeb4d9d10a8450b79584b08f15797fa24a70a54f09a863618d60d619a425bf041831c56f61548e1286b9e7072d422d72555ea77d345c7edc97f7744f72a4f5913fc1ac175f34c6f192aa80e58f5ca838672280ad0bbc6704562e516441395ae0112e279d5570e2e340000000a0dbf0871448249976e243c52fe9425863d4252a0c5daca2fd9f6156df684f6cd913c29667f94acfb7e397b2f1b4abafe34e8e093c10afc58486e0f66997085d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000a96f47359bf68cb251f6050b384b70cc37f692bd813591c6f5ea9e25b80897c9000000000e8000000002000020000000d9f72eaa5b1f5bdd6eddead6c9d528a04bbb52a068f8114bf05ce3037615629b200000009a2e0f1b478d26be2f844c1cb1aca2c2293ae251282d2d2ac3e9bd8eccdee76140000000090c5bd19fd524b6fc49c69b13a92bb933dddf81ef2dc4d0506ddf7ab4e1342bfe045db76ff24bc0c75e69c302d8f8f8c011ea91914016bf9c76bf8ead2a3398	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427558339"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1668	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1668	iexplore.exe
1668	iexplore.exe
1936	IEXPLORE.EXE
1936	IEXPLORE.EXE
1936	IEXPLORE.EXE
1936	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1668 wrote to memory of 1936	1668	iexplore.exe	30
PID 1668 wrote to memory of 1936	1668	iexplore.exe	30
PID 1668 wrote to memory of 1936	1668	iexplore.exe	30
PID 1668 wrote to memory of 1936	1668	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c2d6573a072b849f073ac7950888c01_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1668
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1668 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9ccd6a9fe02ce1e61cb23d12ac0a2615

SHA1
968e56a02149c59cbdf94ca4b267431f9b621b5f

SHA256
cdd63d587faf1de5aaf18e44b937af9d28a9dd1dc19e39658d8b0cfec149b3ef

SHA512
e84aae68c8093ce866856e96df06acccc81ea9239933a5ed53b6b63fe28da873b58a62d593ddd1f85bac9ef8637218a9bf612f24c71061c28368e99db4e1b189

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
127a22aa93d8f2c0afbc2262dd53810a

SHA1
52832269033c534837c2256bb0261cb340b6b076

SHA256
e161b49e9d97615d2534bd42e85e1562d43b5f54705e4e5ce8216928f480b17d

SHA512
22f261f8be8895200d9eae114341ebbdb61ca5d8e2ae707a8b704fc5e7ccd8824cc084cc5312ae29a69ea6de9b7ec72418316fc978b8f200c22362d1e1ba960d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
034f8552633faeb6a5eeb51c5755047b

SHA1
0cba829fc1b974fa2136605c4107428c97c15f9a

SHA256
3fab7b396db4fa29670f48986fdcc0264715f53f90b4720aa632d003bc89ef59

SHA512
fb9a47cf1e77b8addca45f9171c2c7b885107070bd247b97f14de7f098ad2fa524816220a04fa373abf1d7981e74623ec564fa29028c08151dc183d167b52ee9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4b29205dfe02a231455289007a229039

SHA1
6a55debba8d943030bed813abe5abbd693e6734f

SHA256
1e62860b2790f2477cee7f78051393f8000032653bba537d9d92eab66a67afde

SHA512
4e181edad2c71a9206f58c88b990124e62dc1910f8eddd50adb036a570ca458082e2d2eba83d21edcfad9f4f096a3a5ba852b25cffb9e6f8d8b184b5047df523

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7900feb95daf08e4c3d0290fedeb48c2

SHA1
b272f3cfc7b579e3b41fec3805e6591b4061a7ad

SHA256
f4604e92560bc27514b58620d9f5227a47e7c501f931dddb3f3daa4eeedafef5

SHA512
63115ca71c29d22e231ae58876e63c4bbbf047758053615c5972a3069c3db8f9e0c2181da3968c6209c03a58ecedf6c493e563100e4b45e7bc8a9a8ef7e057f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f325e72c52489501b4a36f17ff2388e6

SHA1
897aa8eca269224fe249251fd94bd16754355cc9

SHA256
48762940e961978755879964e70fb80a812aa138bdccbbb241a52ad70f1c8b66

SHA512
fdecbfcc9e93cb192a2456fbebf2607cc14dfa7a6363763f01e06d9fcd4aaf6e76042d0ebb584997805aafa8b7ba6eeba710c0b41d607daab279e1a84b155af7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ab89014357c7cf8451cfe257e9942056

SHA1
e0f9eda54d5d5db2f0149301690ab33cc792e62d

SHA256
5946cd28ae163731340b88862a743c098980a2fb36cdd28b76490f18ae611e03

SHA512
7453ecece1517620f20c440322ca23c147d2d19bb240b299bbe0b9738376cf26ddd3ddb1a78726c5cc139eed71d2e6eebf472873ed41cc5b3cb181fda99fa905

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9ec3e3b7acffcfcb9760e16a0b2c4131

SHA1
7a6aa2b4ebdf3b28a078627a07c9bf083a37599e

SHA256
dbfa21b4ed6b6c88cc66c966652ea467a65af070f0fdc1bb4d0beed12c2e2ae7

SHA512
02685182af2a7f47f7657fb9b0cc27b98d03ff69e3e70f1803dd870257da2ae6b21539a03fe8e56acd06432ff7c8ebaa2daf77387158bc5115d8f89c4f6d0d97

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
51f8fadda8114819449b40009a12478a

SHA1
720bdd32a42779be2b30b8a7d346976cb3f521a4

SHA256
6f2a9ef25b31aa2999ca7031e345a5cd6d88bc8ce3650d8f748c165ca7653be9

SHA512
b718bfca39a54b2480ea79d8236130dbacdf80d6052e087a2686c33ad2b0bd18bbae5e21a028f58bad7b7c24b31ab780b8749dc4632df61b82e316b17f993079

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b9ee33db58ac76a70cbede24b95b4b01

SHA1
f64c085e08199d34bb3a5e08b38f993a6fd3e340

SHA256
aac2dfd8a20f862251ae104e233ead14828ddf91be37fcc41374587e0e91b1ec

SHA512
d8099b31e97631840e6ead75e131fbae688b10acb921ed7eaab130b855d24e25a19634e354b5ed98bff59071c56950c432a7cfba82441764b9f168b26b8ab1f5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aac28c7ddd64016024a20e3467a3318f

SHA1
240d87b48d723f80c3a919ef99fdbf5e946a121d

SHA256
30f9b6ef91756f0f9537e93c8ee53e4b19a2f218b65ff6f5681af76985340e27

SHA512
8fb485f9bd6d634cd6dfea91af9d9f20251f456e560b1e91c34c40662db47ca3943bdc219ad8c1dcc4bdfabdeffb0716c1f5952f65a21161d45c877773edebff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
89b2f6ae31195c6f2dcd2fccfeb0c9b6

SHA1
9f4b7633663e99ade6f0c7459a7276f720650013

SHA256
6bacc9df25c926d82ba59a216cf72cae81adf2cd74a90b1a3c672e9d96f5bee9

SHA512
a1cdf3ebe82abf69aa269b8f66a72ce8e0fc974408444799e8ee83d7093da84dc1976406da66952da74a73c34a072b1c1972e41464bc3e5432b2d7bd92849078

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9dc1a568c84ff9516229d3599e2c14ac

SHA1
299e754afd18cd86e15c377dc8f7f8769b6933c8

SHA256
26900e80adce16dafe01971ee0fd45b65c2fc2f3860b1916e68a31135e42ed0f

SHA512
f05eae356e8a07abc09e634468ff90b08996a82898b95112c15da045b3b2aae2d9814f1576a3505c38dc97ab375ce92730ec4930d153a9bea909221ceaf2d095

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7c0b328fcd471d97ab3d6f734b9d079c

SHA1
a7e277b195038863013cc5eac7c056691bba87bc

SHA256
2a04b7dc3dbcdbebb7c675e455ff93be1e61af2b465494993d46330da96fe17e

SHA512
5333b7af2dd9e48e54a127f75def2293f16a13456e37c9e5e8c6f8c81065299596abfaa5e8470e77a33cce742cf811c33983d60980e03741f687889c2a0b8fcf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4a79b8e6981513960259c2485f4e5ed1

SHA1
b40e27e73e30b66a8039b0d43dd6960398a0dad4

SHA256
e5bf8da81f81424338c3bab44f96b3eed83d8e40cd33758686336236d11dc5ca

SHA512
83e20cd3440865417ff7978a4e98c4e6088aa356c634d15747d5fb7a18c162a6c955c71bb00a38064a0e5a4901460156a6a3bfb5e5774569b0970a0f26440e97

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
757f39ecbc9d36d39b65090c7cf6a0ac

SHA1
7dc2c6e87e942925d72a84280e4034d421e6e243

SHA256
d7c40114ff2464091ca0bfc9103475e6cfb04ea85489295936352010ceb32343

SHA512
4d42972151d3f5a66892f614c51851bb908abb36aea440954951556e09ea500363b29760d6f52136f720d7e6356d2b99a8c0f2fd14e05f2d079243126b39a969

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ed6c565cb8481688ea0fc0af67612340

SHA1
99a5b014609f912b2e73bcdbb2ff1e30f1c0d6e5

SHA256
4accad3b8b6c92963543559781701e89108484f99d0e9252269cebfd8ca33598

SHA512
d3d063fa3fcee33a2ecf52f79d1de9db9a2e59a9b07f56f9170740ce107d6def3f4e3b463078310b6de5e43b87837f7e9b9aa865bb8c73a2c8622fb2f82f797f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d109c0ab19ec7ab097572f8b557064c6

SHA1
d5c36ec31229c21076dfde0ba14148a0b53bfc7f

SHA256
fa8eb26ac2d99d21de6ce3987ab367d1c2b7d825f4bd55521b2fc8b9dfb17753

SHA512
62bc53550ecb854f04c2de4c847ecbf1491a206f25474935da1e106d19374d43b6da7d30f0f2507eb291b638b8e48501a96caa064cdcff440f15b56d94de3e4a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA45C.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA54C.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit