fc5137f714ff1768056e07018239ec37ac06d7e64794721ee344c7decba49586

Analysis

max time kernel
136s
max time network
141s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/09/2024, 16:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d001f1491a498ae4c5feed3848ef3599_JaffaCakes118.html
Size

213KB
MD5

d001f1491a498ae4c5feed3848ef3599
SHA1

68cf1332af0624efbc35e956a560542087102e21
SHA256

fc5137f714ff1768056e07018239ec37ac06d7e64794721ee344c7decba49586
SHA512

3b425ebb5785224725bc7b2a92f2f50d8098bc02c27df8ecd71f805631708623f850a66130043e47957ca4072464109f2f98d5f333a0d82b3fba5c0245b65905
SSDEEP

3072:SmeP1w7bCwDyfkMY+BES09JXAnyrZalI+YQ:SmNNmsMYod+X3oI+YQ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 35 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CED112C1-6C70-11EF-B57C-E61828AB23DD} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "431803591"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2380	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2380	iexplore.exe
2380	iexplore.exe
2388	IEXPLORE.EXE
2388	IEXPLORE.EXE
2388	IEXPLORE.EXE
2388	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2380 wrote to memory of 2388	2380	iexplore.exe	30
PID 2380 wrote to memory of 2388	2380	iexplore.exe	30
PID 2380 wrote to memory of 2388	2380	iexplore.exe	30
PID 2380 wrote to memory of 2388	2380	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d001f1491a498ae4c5feed3848ef3599_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2380
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2380 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2388

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0785ba94411d99c207d3ab5a1b95b664

SHA1
73e0332d7e7d4925b01875931f285db031a82e5e

SHA256
b81dbf69ea192bd5ac87a83a7b28f74b5c9b550b8f79df520e5c2c6f847c9791

SHA512
0a0a9b4360a347bb9a69bfe0a1928dfa5e5e5c505ab0d4054fffa4adc16ffabd25a9052a20d330c0c6138cd0d59518bfc377adc0974af657fdb2d512f1fd3794

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
945d64cf7868c4e392e0aa6559494633

SHA1
031dc315900a9b2898afde8094065f1859affcc2

SHA256
861ab387ce18c4fceff202642af61a16d7b244cff708860008af0390b1de425a

SHA512
ea7bc25769902b995bbff955e0fe056422e28331067543c99da3b055cd80cdeaa0ec29d7feda3f46ced724faa59930f1ff43798d39598e9f5af7ce9ce81c91d4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e474053cae943613999546791f2f9c62

SHA1
9348507757b3b9dfb1059868c6da7c00fd3ae18d

SHA256
bd0d410a305752ddaf9516c433a0b7fb741cf0dbe72bc9f5f9d48678dcad4b1e

SHA512
2e7090b5f883af2f7caf8fd732d8eafd69a7b92e7b26893979c812dacbe0e22f5e47ee6e7feed88d7a74a8103e9a52579249c71527d075b9a1bab9bb4dd38c8c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
44b7199ecf513907a633af8d180e7333

SHA1
19f9714859c4205997beb8f27f5d0bf5e6728565

SHA256
77ea59d46e9503238ed147936b031e6e73b3e4b8b08e9e062440af439763188f

SHA512
e9e47a316dfd1ec91fcfee4992a75d0cdfd0a2e1fa6ecf0a8741d72c7e89d5d88c3dce5bc59d4fb8a4e96af86b8192f927912947c1a4d029427553ff8baea952

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a0e5b70046f608c3e5577f79a55d0a41

SHA1
777a80c2e85dc2a2894831edc849089dba95459f

SHA256
8c76271925ebab859a030cabe4060f3a3592278097c0dc0cab1e9e7ff3bd5772

SHA512
5b2c3535d3f018b56457d4b5d3f648c3326da55df02fd6bac4950ab7083ff6baab0e2d0b13ddbe70a4933aaab950d9db6038b6042806df1a429638a958525740

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8e8e29b0b646dc3ab0fb6a8b23435e23

SHA1
a1aaaaab9d9751fc6cda80854b42a9293f0435d9

SHA256
2e7ce974ce092b122b2ac5be4ae7d2ce89f7b55633178ece860adecff00a9dcc

SHA512
98afc4cf10dfd9e720d3ae647cd2219073cd62b04405348897b89a78698e8319d4c1bf3779f694749d93faab7632ac536929c996410af047bfd258c746d2196b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
08a651348ee6bfb7502b4b07e8bf2e27

SHA1
8537ca4df0513e3db8263e15cd37f9fc34315e41

SHA256
6d5e5aa6b22b4c1a8368b0ec444a832a8b277652aa2f580954d57b06bcad131e

SHA512
f381cffd715e77b2b4d1f07e4e7e3ed8e9feedb4ecba93272bc8e39f18338cb5eb819a5a70b5dbbfca3df5b253c6c88d52fb73688e06f1c46a360a600d49ec4d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aa34b6b8120af0b9e128bff73b8885f7

SHA1
58af36e3001b8a68d0fff27a54fcfe10a0c00188

SHA256
30f4b3c6f2cbb26e5cc654113cfecf18d80c9d5e617697ba3053d7a38e3c64ba

SHA512
e5eefe3a351dc216c89f57185d5cacf0ca60b0f3ab744d2a15710a2b1bb9dea0ce223c7399238253751dbf6e02e87618d330818da5ebbc4605b5fba886aa59f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
02ffbc11fdf4e3c4173c56c7f9bf0b80

SHA1
a8efc15c3de2f8ab6a6c3cd688f2ef6802bc6389

SHA256
468b61bd246ba615ba9c45e6e11023ac1ade6d9beeef85120664bbdfe6938ccb

SHA512
7c5e98980d8fba7fc8896c5d0446c75cf24cc289722b1d07859772fe003b733630c9712b17b0c8597f8d45681f8714a714352b5babc7bc5c030121ccc4d63875

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0797ef77debdffdb6cea02ce6d0598be

SHA1
a759d6c20878d61a6b9afb856971526f60ab172a

SHA256
2b809171f9fc67403b041899bd13902a8d47873114d1b97130dbfe5193e7a5c2

SHA512
056018e3195b622c5077cee64d2f5480cd5c4ece65b55ba5e0c475fb0bd1eb196c8c93a4056d8e9196d398b6f3df9350c85f41df3954f89c277ac1031c1e9139

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
19946612c8f30a430fbcbe88f3f18739

SHA1
77a1675702c259bcc794e8c36814bc7e04e27ab8

SHA256
135ad03bb1bad814f44554298e990ff3d574d3c61d5a63adb128744ac6cedce8

SHA512
d1b91b357b8dc7082e1ebd05d749e56ba140577c754484332b187b7adf8c56aea4c4e1314eb9f355b22b5395adc7a65a9386044482030a3a5cb9b75f5d33c214

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e73161367331aaa1c1d60d98760d8b4f

SHA1
5b76bb301f910366e89d0d5349c62e3e9c85ca0b

SHA256
a6daa646e80806650a869027179d3a2c96761783d45d203ddbf2cb98cf59c1d9

SHA512
48e1d8264cccdc7d553fb50766300f02a7f52f61a02795975b3e3442f15bab3a0a0da3ec50289a4805667df99802e4b51a7cacb9354efff216922564c905f95b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fc42a4911d0e5de71c18b72bcca95b7d

SHA1
11c749989aba316bea81dda7373ec3fc2ba73cc5

SHA256
97c039827cfb49902474c3d7c08dd7cc33d283ec59d5a1eda8d7ff06c21b8be3

SHA512
5beef4a6e4e1cdd9cfed832760842eee572857fa2c222a10b50eb00b43acc7aa447675dfc7b9467b01f4f9fc8b7e442d358c7c32130545b07e6327c28837cca7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c8e134f48f8bdad201818ab610c01c87

SHA1
655a8469ed04b2b6b764e22768b515b59d94503f

SHA256
8661d4950f816b1fd33f5a04ba7fab80cf3e58acf9143677ab4a3cd59e4e4f5c

SHA512
b8042f903a7bf7dab5add2ed7d4e9d64133a8cf2c5ec8d15c12335fe283ca730254f90669103361c36a8bbe77636bcb9c2ad07db293bb4ef920083954f4b8cd0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c7d52dbb62dacb57c0aaa691a58288fe

SHA1
5c27464bcab0263cd5e735e45a2e973af4673c89

SHA256
c4c3e9943b28d374a22c5929b93d290b15ce6351488595fa557bad269dadf16c

SHA512
cb6bfdf8a6881f79f7af16e79bfd582b39cdb68ccf22300a785979c541252fc37ad5efba7713633c47f1985d0da1a3ebd0f6e6f49579bd5c425099fcc9dc3ae7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7c6b66d65c59d3617d9143f03f765b20

SHA1
3724e4fe58afe6957f6f8c3dadb5544521eccb6b

SHA256
28667c3e2289e4862a0de31d6e333196656a597960f591d937c229cecd34b0ea

SHA512
cf7b19e33079c5e0ae8a9c143fef8eb519dfbfc13e0df1da01bcc3f3bfaaec157eb9b2a17c5fd4082fb287c82a1a029e816a3e899bca28fbe16b960727c5f711

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8e1f1de77fc20ccb40328fab1b7d1c21

SHA1
95103a2f1d708ea57f5053557af142fb02541279

SHA256
61fd0d3a7bde2da339d85898e6a80c93f18941813ef56ab5d1ae56c5b9739a17

SHA512
6cbefe11f6184148243ef1e39360dcd850092fa83e99d24b88a5fc9f7521d18d7f52b4e828ef71f110ec137d3e0bf7fd1faa4941b6d1864067ab27883615270e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d8827548d00cc93833e8a408c60cd175

SHA1
d92b8fd8ab037ef477e1ebf768d568580118f637

SHA256
eb04c86100c3f8e01e655b5acb88fa43282296c44d5f805fb8750b25026ce1d6

SHA512
52ebcb50fda6d8a230e4430037c571d53007a53aad14940a87e87947faed6b7550936c25eab2ec5faefe2ba0519c0e2d819c372a5e65b218846861334f866950

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
07276c73ee2420d4942dafc9a20092f6

SHA1
989e9fd094092d153ba81f9ac87b7ee82b6ff711

SHA256
847b7d9dc265f238a1e74bb926e9b968930298dea3793a34590d976c75b34156

SHA512
3679c43613f49c293f22a41e9bc91cd574bccea79eb5fe27eb923c54d1744d0b20e32367eaea9d31b8699352728f3f59b9ba17c68057c3f55fdaf30fa5eef1d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
25be8c54cbc11d975ede5e682d5d7af9

SHA1
fa2abd9a395f7563b341d20e2aaee685b6e42ff7

SHA256
1fab94c61a277ffeb476465ff11a6fb621ff0f5b1ffa182024ed7717dd7d5d33

SHA512
72f21c064ba1bf8dda4787ebb525e727772ef13ba4a8e8be5f0bee3a6b7e902537afd3a81940fe3992cafaa241b249a8eb4d90e591656da1e1119d615cbafb56

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabBE42.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarBEB2.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit