3313f6944c18f66e28fea8540e69c36239ded494096176a5f828726856be48fd

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
14-05-2024 07:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

40bc76a5dd173afc0b3eeafca7ddc7a9_JaffaCakes118.html
Size

40KB
MD5

40bc76a5dd173afc0b3eeafca7ddc7a9
SHA1

1e0e056b604c8ecc80bb6fe06657f698517540cd
SHA256

3313f6944c18f66e28fea8540e69c36239ded494096176a5f828726856be48fd
SHA512

3aeebbb096b4cdb1911fed425f5ab4537fe1f0c1b6cf551dabdc40070789ce5a33b11bc87a3be5359fe3d24bb00868b68b92e1bd91e32c875d229d05172bd565
SSDEEP

384:TQ/VpxO14ZzHngtESQViIdV9qFBFNdSd1cr8XujbTb2Sx7:hQVjdV8V

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000006ee9430e418b430fd565bb088cb48216043364cc2f0ddfe98378461db2fe86ac000000000e80000000020000200000000d4549efa70a6006951b7e5224e021db699b9e72a9e65d5125b229e96e6e6d95900000002ed03993d7864148df4e71c1d1f691abde408ee0184cd58f91d8206830f35a766c64d6878d0132fd3c491632eb9e48369e15ccc759f648e63d18275e8e9908160dc1e513c8d4b2ea74ebf6e6e612e02b8b3d05cf62fa2c0478be5bc419a6d42e619c52e553acc0945487392c7780e3cb0249ccd45cfe781598141e6460653f9aeba46c85f9a88e622fee6e51dbd94afd4000000065f59a4cd321adefbddaf0e558134a0b09409c4fa30e3afcdbd5b7a7f7ee2b57e8119d158b70ebb89942324d69671de05f02c7872e22b2e610dd86b22174fe2d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421834780"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 1041f531d3a5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{5D013DF1-11C6-11EF-86BF-CE57F181EBEB} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000137302d7b89d9787ad626717ae5e5b9329334b98e6bb1b61d7661fb671fe96d3000000000e8000000002000020000000d5ca398a1e3c9c0e71f2493707c00dc342d75443cfc870092a48b79feb01a4b72000000058acc6ca0e8a631468073213dc0443fffd607ddac8fed1a50818e922e6e4aaf340000000bc27772b4c827150445b1ef92634247307f3ee6f2410cac5df0362843b389ee3063670da8d0adc66f454be8c854eb00a0dd100ef6a08217eb274946318f7d706	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2104	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2104	iexplore.exe
2104	iexplore.exe
2064	IEXPLORE.EXE
2064	IEXPLORE.EXE
2064	IEXPLORE.EXE
2064	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 2064	2104	iexplore.exe	28
PID 2104 wrote to memory of 2064	2104	iexplore.exe	28
PID 2104 wrote to memory of 2064	2104	iexplore.exe	28
PID 2104 wrote to memory of 2064	2104	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\40bc76a5dd173afc0b3eeafca7ddc7a9_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2104 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e694b14b23723bf9b020eaa3578f2239

SHA1
b395c7b4e5a7f924995022b76877468c08cff453

SHA256
b5d5c1829179bb913de839bed918e4fa2d967006674a2de1895cbed78c60f5d1

SHA512
46e91157e7c97daa7be560612678821fbd066e275e371a7b6ee098c61c1972ffd2510e6cdb41daf0816ccff554c9704bd1830a6ece4c707d2cd3ea55027a8509

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6ac75d48744d5feda64f7d914ca1f358

SHA1
82c98979f6df1c8db1a1bc8a13dff72547de22a3

SHA256
cbea1b875e23b4c2bbbc18c4d7b91915cd5ccabbd24673b48a1ea1228d6ca523

SHA512
89a31a37f205dac3c1966cb5cdb5225605b4be1f36a948ba20bdba3fe065db69e37dfd92adfc9c08f86ca79a4eb6b931baae7bb644f148b04ff54707586df204

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3323962bb9e8a040ffbf0314e261af2b

SHA1
45e707c5dc4de6cadac809221aeae6131e50a9bd

SHA256
98649bc615c7e8d63163aeec8636868bf0928c356f2a5ea5b5bd06cd66b6588d

SHA512
2c219f16768a840c503058db3cc7236ef72f3b9a6271740c1c048436c6e3d2928663a36cf771974caae63b8df104489add69479aad67b688fcce168388100473

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
48af440ea73b91ffad5a447fe2bd81e1

SHA1
548cc2078b3c839352e6dcefdc3a0202d1189ee9

SHA256
342830736277188ff25eaf7b21f219a7414b553d5b76ef7b13bb31d37ade52f1

SHA512
56c780bca72066307fe8597ebfbb4d561d7d32cf52fdb4c8f9bd1d4b353caba501367f700b987489970b5f0eeae6ae7faa02f85d1d21065a561fd8aa23dfeaca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fb57ca4933f9cbeb8874490eef03a80

SHA1
7e369a0ed79d43b727ce4af47c240772768eddd4

SHA256
33655fc0864cd96a9e8a5058af0e8fab5bcc249e274df76ff73c762d68561889

SHA512
6a86d405d511d0503e522f7cc85efbce6991181c07628199121ec0cc66f995bc681235c459eddec2049da9667fa00d32198658513b5a1320fe2f2a9570e7c2ec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1ba801d760ad9d09af7e91745deefce0

SHA1
42564b77e87a27a6602f3627d03134d72ffe7719

SHA256
45cdb2649ac5c42f54942e02ff9317f88a453aaf978d59d67f065031b217b1bd

SHA512
d86d1b76ed1751856de33d1ebd2223aa3dfd4464c255c2fb5f91be862d4660c1b6e549e12f7c99598c98f2ce5e58d1decb4a5595fa118de88c4b8079ef420a4f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
69d1b315be1740e245dd87e864beda70

SHA1
55ae431c4bbdb39578ea53fc26d3ddfa68270284

SHA256
5ad86933c3e873a317c68898f7671484f2aa8dec50dd80361951e5c637607e1b

SHA512
a6fe51b887a80680540968e0f875af4b6f654ff5253c13b9de906269ccb18286c5ca107c738b4a4b4ae2d25a47ffac152355df043e52c4a5ccd82105c4dc00a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ad562d284c050e4c1f6dba8d4cad52da

SHA1
7175c39d8d428afe9ed9a7937528554f8fcc6dce

SHA256
9871b9d132f6c73ffff1dac6b1378fe99509d2e9dd9008f0e8a9db31fda54c92

SHA512
c00b8c86d69e9670e9951e4a5b03a963306831212ea0b89c592947fbf339c2555c62f6d0395a1b8360976f2347a71f7363a065cdee7b031262cd47337835b6d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1798aaca27e03cbbf5084ce93fb36b4e

SHA1
4444a92f7ba25a1f3972f7489270760b1214cbde

SHA256
ae4eb23915a756dcaab9916f6764e7e5b9095ec8e4040dee86e39f2327bc7b02

SHA512
fecba4f6cdf7c36df4be158f474e726b3ca11c46c33850ed92a4e5d33f613041f34469a9990d08d57f92e0e8280bcccf0887c99b35965a0e6d22a69019b44a30

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7212327d67a51035ebee0c7c2a37904e

SHA1
c888a0c9118566c1bbe1aba16cf21e3cd66b6289

SHA256
211e4e7778746384d1d009d0363bda93f536ec9673d525f8cc956de0c20f1974

SHA512
6efda67e859226c708d37f4ac01553b52c1bfb3ede04fc6b743eaeb730c94ace5b1e3c4f57fa24e6707e6a1f4d42756a65653c313afbfdcbea561bc7bcb947b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
db62ff6c8e892fa33acd865f70046fde

SHA1
962c93a23df3ca9f94ae00d1c3bc470a1cea5a2d

SHA256
1ce4155263710758d37115063c2ee671c724e301a45dd291a802ba4b2e6499d0

SHA512
8347c5d68c253daabcdd9de7cfdf799abddb2d359284a2892a42bfdb1e00464d4f564ad61e71a4bfa10dd195809c6264b67d1a1cedc4e492b0df7694773bc6df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1cfaf0a87be3460be60fc2b1a38ae3b4

SHA1
81f5c3801556f642983f99d5c7c807b93ba68c68

SHA256
d39ad2fd0fb6fa20a12cf49ec2c302d47c51506ca4739dad37ebece14ec7ffcc

SHA512
cbb5fe2f9f8d8027ee9379aa1fc8b59ef9ad78a90bac5ef83b4f14d66bde670a1fb90e7a5e4a02c151d7415e35ba991acacea6463091a52ad7eecce9dd81c717

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1042e448fc65cb4ff6b6ef7c05a5fa50

SHA1
292f3431eef1918f4b3b84cedc314ebbac62c258

SHA256
e62cd4800057d4df769f0b4cf5b7f7388f0d63972e2a13d0ba40e8df0bd85848

SHA512
a1bca540efda23d29b90f5120f3a16abaf1003d5008c14f6da396465b1ff7ea8fcb8aaba651b9d8d3dff1eca8179293e3bdfa85f277456126f286eedf658e54d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a82ecd5fa867fcca05c308d0e5a7fd37

SHA1
1250f18ecec483a3a9fe5e0b5e893fdeaaea3788

SHA256
eb210eee9418536cdb52cfe52b76154a5dbb6753c228116559d7ac46547d2e6f

SHA512
7bdee03b9e48c53f3f7d0c619273025d6e563efb8b2789df88de9af352bcdedc6d68e9e5d0a449612a232ef5a1e9409d3cfaff607084563fb2c542a18928823e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
206a80cc7e0fced1d2cd08b19958f39b

SHA1
7ce73e9db2c90f3f4cca5d6a12205108f4a25c60

SHA256
eeb531e166df58a42595247788299281ff5398f0fe4acf271ad21d5f7ad42214

SHA512
0c549d43c6064dbe07e13567c518adc8f7ad4aff680c843d6feb78a938626a20b859af2175ab286137ae33c2439cd9596a0ffe5b836e1832428c8dc97f6e7c5d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
044819cc90eb7ee7840e4b24e552ebe8

SHA1
c13a49d02a031440323185a716891f870f325b76

SHA256
f95aa934d7f7465c1b78c0e17a66a154c84f4e280ff5a0a0e1a1cb5550e9908b

SHA512
3c16a7797982b112cde3c56f2d86c7b791b54568a014cc57aba678a4346cdbeb72c7d6dfb4e049f0e7cd9f1b0d6db3154cad9ab1b9633c4c8071855ee0472abd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3F16.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3F67.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit