c1635f029ceec8ba11bf8a84182089017ef3cb03c3dcbba053b3e06f58308404

Analysis

max time kernel
133s
max time network
134s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 03:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

22fba7b85b400a4511c6b1b00bf7929b_JaffaCakes118.html
Size

220KB
MD5

22fba7b85b400a4511c6b1b00bf7929b
SHA1

d8ad3f6eb364771603a7cdba460a8ca8594747b2
SHA256

c1635f029ceec8ba11bf8a84182089017ef3cb03c3dcbba053b3e06f58308404
SHA512

0b80a892869e517b6b6025818858d106023dfcbb5476fcd79bedae82952b0100c32b1c5b0c0f9015908082ae583c7501ac6d5c6aa38a41a087e0fee0cb17277f
SSDEEP

3072:SF/7x1aRJr+O6kyfkMY+BES09JXAnyrZalI+YQ:SFjOr5WsMYod+X3oI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 35 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421300407"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2DDEBF61-0CEA-11EF-B5B3-EE05037B2B23} = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2300	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2300	iexplore.exe
2300	iexplore.exe
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22fba7b85b400a4511c6b1b00bf7929b_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9ea2bc0ec9da59ae1b380716ef09c1b5

SHA1
bdfc116b55a6027464b8d1e6241687724547ca90

SHA256
910ece3b9df1d8583b042f0f52762c4809ac8bb1ccb1df5b4058b7eb858364ae

SHA512
978bb8e4fea2568befd87acdbab2707b9cdb533cf54c485d6d7a000306acc9465a070936b4b76e66dca95d4efa4876b285d2ffcb182f95fa58d93d887e323bb8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
651da956f81a4de56c5ba8661ccbd46e

SHA1
ce1b683f369cbbda432bcff8ced9f5b9d62d565a

SHA256
1b6ddaa86fb67067d6b2c338bfee1753e30a8efdd74775e688ddcadb8099610d

SHA512
f634667db41ed0ab64aac878969ad2a8a4dab479c37ba80291c40366f06704054c50e66e8dc8f8218d019de244a75b72782c9ee5f42d422846a3a4508d1c8783

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
810934fe22ee48927ecbe2b458afbc06

SHA1
f1bbaac4a5699ffa4d5ddedb68725e6540528485

SHA256
5d8e4f01f8cef82dccb648e6de7722e0ee8fbe93b0b222778d3912b662c77b2e

SHA512
8a2991c539a96fb546daa968f94e499e01fc5ff9aa64f4544913f1009d20b651bd5815c9869f6500f991b9088436b752a17c057d3d415ea2a2d87e442133bc0d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9e7762a68b26e17bb8f1147c5d0cf430

SHA1
7d1f875351e38cea035fa0e7c644a8bc3257580c

SHA256
8c183883ac0daa215a398733278262a158a2e4489efaccc66c7010232ba3cab0

SHA512
11da0298f3e2aab5fdd9c476c06a4f13d5a86c577aec77435e9edda08872bd331b98010e336ce74cee3b6606c83930394b28e85b48a69351120b7ad19569d6ea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7d50e2d2c747a4c206f0209a7d661e8c

SHA1
624bde7ee877584d751202e8040cf14562f22b11

SHA256
223288d687b0dc46e1a741007d2973f3eb85bb254cc7d0d050fef0d1e09a40d1

SHA512
9db79bbf003baaa53d5425b183e64d03250b07397b4f1a0f40c41f8c3b9a9f28bb18cd3924fdf847b0cd47aaa44f7016c1636c184f011818dadefcafab8c70b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e615f6693ad99078aacf0663ef90a50e

SHA1
9ed480bf2d8dc04ed44dbf018fa4d8d9c7e51049

SHA256
f468f791584807a6f80f20249c97636b5c56b7ddb5a38e7ef0c0f4e675abeaa5

SHA512
f9131b1e92b88f18e41d8c7cb3f7984a696610358d849d87f9ef232d0f535def33d7a40f1fa1dceb8a6daad6e48cb7e966174fd603782e7ffeaa02d024fc121e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
08241b62174c3837705d0cb2e1a6e634

SHA1
bee435250d2b0e820989ab4d140141ee9c5a9d58

SHA256
326bf9eede8382e9b0b84a6f6e06714ff24d60547085355a59fa61be07370545

SHA512
06359bd6c3411b15f3f491851247b16981a8843e742edde80186080f0dd698f96a401eac4060861a9df83ab96e45e2a633c2c8f16d0bd95a0f579eed168835aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b49638540e4681e794a6e1c7032d04a0

SHA1
36db7c86977bfbf4153dcc0c961acfc9a2faddc1

SHA256
d9de13430d05bd3f3158e10f56927f92d23f4e61692a91d51ad2cbd8784c9b90

SHA512
ca05349a96f788170af863a911fe087e65346439bc9c9234785a8bb162debad820c8b9af1319686d26333859fdabdbca133b8ab5d46d2cc3d78b751378e1d719

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
911fef176bb8aede648bdb831b7bbf12

SHA1
f54ddb0fa3a5afa26b463089102477987f1dfee8

SHA256
da75f4458d10af0745057faedfaa04562222591ed195c9bb2d19023bda3082c2

SHA512
ef73e831983a657145f3ad4049dce707df8fba5e802b650f516309cd7e18e95a7ab749112da41a96ec2121651dcffd5260c6249096190e53b766091fab9a047c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b371ec2bdc8baf7b5d341abcfed965f4

SHA1
9a0245bc3bd1da054d9b7b81d534084dc8959ec9

SHA256
8035c567c86d28d03564fe15bab04cc0ff64a107746f6e188bed82653188cb1b

SHA512
7ff2d895a13dc439054bbda0251ed928f261d3b848d2e915b4cd47699cb02256cd7114915a069f57455c825a58d037f5d4cae45e49c08e0b497e6907d40afe18

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0d79b7f921420256a163d756947b558b

SHA1
12212a83e64de3f0c305ae38c7e823fef957c1dd

SHA256
d025c1af866de5265897d079777d418ca4bb8de0bd7cc977d4a3a9bbf0010002

SHA512
92df6d1695b94daf80485b61f32fe999c3114be53d79436ded0eb914a4277b8b5d590165f3a26f1e500de932726d5d1e86efd03b3c2187191bb69fb4e1d9b49f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c27fa22f3e222f159ea0f4fa44ab00e

SHA1
1cd00000425cce0892993a3a0787e2d83951945f

SHA256
4b4d11bf37b8f489be1703daea391f6f232701906c91a0f60824a49d037fc78b

SHA512
2bf3bddd33c658a94fa0854c8c5ce48b436a3c1f1423c80327b343a08ec45bc2b79d8157b26f46d3ab7cf541360e0511916a1f133419c482dbb4df7b6f68c873

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8d82bd1aa3447a323217cd871e2e9710

SHA1
b82f04a096d22588283230ba32c25c12a0d8540e

SHA256
b82b71bb8adfe4e8215701b8f63539b393d8cddba78d019aae9d468864633562

SHA512
2eb02d7a5a2d261f1a1fb247b797f6286e24421eaa3f24302852c1f3446f2d1afee7f75970b9590b4712d736747f4c8e30a52e6b5c554d481e9b227d9dd48a38

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3127516387faf6c7e425aaae1e0205fa

SHA1
52ee1cc2257eee10a486d7297429bd6ceceb8643

SHA256
666134477422984a84a804636d9662af1bd2383341ea9462f781d30a705b9abc

SHA512
b6f26c91c5f30a5cf349ad20a5c6e9ae5a466e87d15d026077a3be6b5975a559c66380db455b428d2fda582c5335f20ff0012f22a9f36907020bcdd460727db5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9bebd6ba941eeaffd2d426421b069183

SHA1
b715b75f6eb58039d54e31706fd50474750d2984

SHA256
df2aa6bae6826cac7d6f1af6f19a5b257de27481a0a5b2c3f3dd80bd8bca8dc6

SHA512
1daf96a39a4d228e6359af645b5a781a9100704795f80b621bf0aa67fd3c7cade783d569e5b63e076ef95c48e6f5f7f2f6be9917e633e21bd671a250962bb128

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f97cf8802254fb1d2f5b17a6b0b74416

SHA1
968952cbfaebc43b06e43b92f03909f9604b751b

SHA256
2806e16cb02ebaf16f925a31ba7bd71025f3c1020ebbc11afcc6174777b73397

SHA512
22d1e444f1bd5581bf246d42e81acee0a6a7821fb84a90dd11512dc120650382d319d02e2cb5c76ccc603dac85687bf6edb289ebdb6f4d1a19514c818f39dd3d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
abc9fb696a4949f3b4ee1aff4851a543

SHA1
90d421588f2be553a3fe36d77a1ffddefdb2cf33

SHA256
cd23a37fa631f6858bbb2ec97acdd9799044d98e0c451e0206b7a8608ecea13a

SHA512
b69ce1808da38fc4ab49698cbf83e40c9267ab4740b8b3d1c36711c341be1887486b19300bab67f9e832bc6b51ef916af1eac25180c521b4a989d2613643f754

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
608f80a763fb03aa4fab953ca103a4c2

SHA1
c65d6304dee2d35cc55174bdeb3107790d3f4d56

SHA256
925fc054697b9e4b9e0dfaab3c180ede1f5ac3b1fd406096444f0e960fbae8a8

SHA512
97d2d45924904b9487fa1829ef57eb620f87cf51994f677e9ec9403c62e71995ce34a8a0fe176b35c9189faa80f368010a6c110f8ffa68fe8d07c1a9b1408eed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f24e02a1146268a660b5c6f00eea3947

SHA1
c399b6819a1dbb50e03b728d9eb1439e1c38ca3a

SHA256
45c2fe820715ed60b3c2e3c156ecd7975cf38e1818f42e4dac8708103b1cb1a3

SHA512
46ce540630818d06373cb45166126c12b49ef97a3216ca22b11d8a0277752c51cb2cc9a6f7f18ec073ba2be5c9464c9f1b812102ecbd82396f757b8669135666

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
44eef15d47e95366f8025477f165e042

SHA1
ac2d4563c73e964b730bd0c82a5057132b1e1c91

SHA256
d90bdee04cc3e5b06ed86411395e02510b54acbfa6cff2ede33a64d4157472e4

SHA512
2e6fd8304fdbc400accc80d3eee5733f31542263003d0efd25b8334a2d74a67fb7cf81a33659a7aee70312ec6e7a51d33477345a86a1aab6f848ee4b7ff6d93a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b088a9efd889bbe9bafa03080dca8b64

SHA1
c022b9527de61e3f36bc17b9860763cabb3bfa73

SHA256
43ee95800b4e3e450ee628cceb736406ba1edaaf672a045c5621e34215280e24

SHA512
355fc36e1b8cf2c0b6cae8d68c94114c4b1369733ed0281f807a136c73ee768ee8af7a5cd94f2697212bbce44d10ca9da02497d41a224175bd2b9194365009f7

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab1AE2.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1B45.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit