88e88cf188debd6c3044d023d62827e30c817fb1be7d38fbc3b71616ee891266

Analysis

max time kernel
118s
max time network
131s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 12:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4626b32b50bc957565ea389c51fa74d7_JaffaCakes118.html
Size

25KB
MD5

4626b32b50bc957565ea389c51fa74d7
SHA1

af1aeab80cf9e2ee0d10862fdad712527726ca60
SHA256

88e88cf188debd6c3044d023d62827e30c817fb1be7d38fbc3b71616ee891266
SHA512

a97695e3ca1a84ca45e970afda7438e5a20702e83956b5e9194d865de334f366ad5e8daabe06d6cb75ca1ce2008ec9f8e0c82765556698de9aa8b67be0571414
SSDEEP

192:uWrOWb5nvSnQjxn5Q/unQieNNnBnQOkEnt2onQTbn9nQIYqCtAIpdEE4cwqHXMBA:NQ/XBRROA

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0948054c2a6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000a9b1c2ebf91080a66811083eaf64826001266573919238aaf7108accd41da46d000000000e800000000200002000000003b6df94b7e4a4308fed50c74a27b9712e486175b49e6c6efeedecddb002ac229000000065c6667afc03a9039b20ff6d3ac98d5f5a5bc6b4e4407e814bd94befc785ee77c23eaff16adee7e744798543064a6d9cab73dccb851a36c5cf49c3ee0424ce1742dfa3ffbf4e505e33fe895d6930873eaf4ab53d58362f3ee604852f9e8d29997679822edac0586bbf58ff208a7840022f849be6f2a2d2eda3d0cd807fa4c04daf6bcc68f263559d0db0daa725548a6840000000a30b28e4a916dbcf4473b73264ab2e5af12831c2f84882befe6ca2d90e64a259b1dd8fa04e0ada06802dda35785b590b5265fd3670af69bed441cf0aa9b80d11	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a23000000000200000000001066000000010000200000002e650d55715b98e87dcfe0d859f0737eb5eeae003771be42e11644c7d81786b8000000000e8000000002000020000000f08dc82aaad6a5501d5a4f9361b725861cea5b333461f4c04d82409a594d1a562000000097df0f8a89371e92f1041b5a5ec384cfdd97be8d9107e02d5cc6d43137d0014940000000e62bdc3820e8bb55d73fc9c428d933f24bb92f4949a7e3378f4fba4cadc5995549acb6eafbbe83e876f5a27cc326c197299dbd42f08e144663e60e81286fbe1c	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421937488"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7FCE9401-12B5-11EF-A7E9-D684AC6A5058} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1648	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1648	iexplore.exe
1648	iexplore.exe
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1648 wrote to memory of 2824	1648	iexplore.exe	28
PID 1648 wrote to memory of 2824	1648	iexplore.exe	28
PID 1648 wrote to memory of 2824	1648	iexplore.exe	28
PID 1648 wrote to memory of 2824	1648	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4626b32b50bc957565ea389c51fa74d7_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1648
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1648 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2824

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c37e98487e8d4204b8be40d48f81d4d3

SHA1
86d9e732e6cf398978d199c747e048c30760fb46

SHA256
02afe28128e02a8185d0b96edbbb89405995f123417440d0a1052cfe72e77428

SHA512
403c144ee3e88214f56ea3e54a2a4ca429541625fc22bb388183eff7e0de71cb030f38e7bd9e049bd62435f0a09c6d9ea43fd3c8cb05c84593e5bbd65b8f5d8f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
18fa7d0f9069936648156ee673d6891c

SHA1
66f0f3848a3da1ff00c266c3262f80af372f3b24

SHA256
5118aa6c8998a1f1486e74290c2c11a92f8b15270b96c2bcd7011eee75ad07de

SHA512
53e31f2c46b88ca88561a8c702be212b1b42e873188f1430b3bf6e8c296a654ff30355c280e242df177dfcb6cfe2d22244186aae77647276b29393f6f8d168d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
718054aa2c9f813b177fbf99cd5c5e77

SHA1
a47a4b048b6ea31d843e12b7cdc732313ce098b6

SHA256
2eb011a0b4400fb0215be6cd4d865cabc17fa8d24501d725219ee442b7257787

SHA512
73dfd4cbd57417639a1fdd3af4ed788efa005ebda97d20c90fe0716333dcf73dff757d70c5162c1c29ecece624997bd35cde5ed1a6be5bb32bb73cc1b6878646

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6214624e654033c446591f0b2aa68209

SHA1
953b4782f3c1782b4288e5a456fe45db756d50e5

SHA256
acfd0eedee062130b2cc8b89de1c9649f7a9b5eae227630fe52c345a416ad24a

SHA512
211fff299b8db481c5dd9ea922123d2bf917fb8de1b0ada73c2dde0e7e68484ad7305a82a4a24969f7c215529d356b8c92f37d4c6c8cb886d2d14db874243655

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1b799f7daba3fbf6428c36f7af460f2d

SHA1
4e340da913b8728dba66ea408fc35f87f0313d4c

SHA256
ea39dfa93837f4aa49118251b13ff9e7dd26ebdaa26f2fed2ffc782628a3b147

SHA512
142d8942b323a3c5b9c28d41c9766b838e65a232633dd103d19b966601897e26e1576e3de332b07b39b0da1e9f87100a39699a6568ded25d7f841e64b3fc3214

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
45e7ae300480bb5256b6717775c80f91

SHA1
2fb4be01efc4811ac68743f01301be298423868f

SHA256
40609ac54b18c4f140694fa53a5ccddc326b91a4ddcc52c7f9cfd108f7211bd2

SHA512
9b1a1441dc469a2daef77db0d4c8f159c8bee5c5c994a33429d69f3d8ae296ce13a574d199377e08025722b2e7cae61e28ab6e26f1e074449ed603f7022ff294

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cb45a784ec64aa057a54b0f941f6cf70

SHA1
9d9b0f5339d28c4dec3100596ccaae556986edcc

SHA256
fdfe3661d8111d40d9482eb33e5d1e9fa47bd45a11890ba703a19fe4d9d04b47

SHA512
ba8a5540f5e9f4881b5f8653da2a3bcce54b36a204f90c5d1802b0839e798e2a10e8aa73135fd3a05cf3cda22cc4f68c34548ecd4e17911b3246cddf3e06ced3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
404321a0991eb55750a393f4ca09cb36

SHA1
cb09085d24f29a59da1dbb57909d49d1893959b3

SHA256
1f9a5698cc9e15c1f167f3241180e8bb7033c082897b2f4bf8844c9e42fa05c0

SHA512
a15d9f947b69b10d312be0f3b655ead32a844721986e72fa6a829190633de5a2093ba77d76415fdaa41994461f4692a4e9716aa452b6528ccb04f1ce99cb83df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4d989fc6c8be0e056bd1fff3e24f8ad9

SHA1
8410bd8999a0a476d54aebb49a6029c339689777

SHA256
84fc35de2dbe10d5ccd9ba98be6bec123b7012c554581dce374a58fed501feca

SHA512
e477877c337c8f6c71cf4ef884bc1f90b73701173836beadc6baaa8262e3743d8d818a13c7bd91d15423c3024f7c807ce3f73884543dc8e1a299a15f355ec206

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a82e32971750dbcb042f33b81991c120

SHA1
e3202b5c029041c6a45a57b89d017d06a3c4caa1

SHA256
4fdfe689fe0fdf5e07e70dad3cfacbe895487fb3e493835b86fdedcdc73ea295

SHA512
2919e0e1b27e023836834c2178dfd0130bd6425b3565bc1e14454b04ded3a37dd06f2b74b0acc0725b5df629390c9005298889b21f71b9575c9d44e26347aba6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
151c41cc19a67a17faf3315e52adb1e5

SHA1
db814e7ec25c0b8072229f7ab3041143c34f6a8c

SHA256
8b5eddf8334d44a5b986d266d599679791af0df76af25d851cc398f4af2ba79e

SHA512
d70bf3f6d368c5b8fe67568304d128e3b0a8331843fe4689b9d53a71935bcc0fde7fa947895facd0765e2d98a2fe612308672ad6b5ff59149413c3397d998cc7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2eaae581913be46edad99eb193743da2

SHA1
ed01cfdf70cd0c306730e2dc949df1c92f453d2f

SHA256
2cfd1eee70fbc7e378be10c096ac27a14099ceb8dfda833ad18665058480af7f

SHA512
422a41671ede847ead7e19f916bb1571960cfeba5fea9ef728294c021d162964a7f795e83c3f69eaed6dcb65c2d7381a8c2550b6dd63e8e2171b0960acc69a29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4b81bf0cf2fcae050f3501179202ccd2

SHA1
a31c6c871b8b8cb4fdeae28aa458c111c6818b6a

SHA256
cbcf846f250e44dc1c76c1c89a9a90c3443a05820ea3ac8e7fcddec0e8a34a8c

SHA512
81da5970e92925b7bec8ce77d56b41be75b8eed898d8e3b502ea64e0f1bfd2608a975425bf52b0054203cc33b8388c7f5eb582df73745c62a589ec74b14cb7b4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d97cb2ea0aa80c2c30def44dfabd385d

SHA1
aceda5be034a0ef60a6304a8b7abf663cf0b244e

SHA256
5a053ee53696e011cc0eca391b49197da3cd7cb3befbd187b22a2df54c6c7456

SHA512
9dfcaf980a4902d47780522dc965de356fc336e42d1ba860a7bb2a4aa17850bd33c93b378a480a2b12a991838de507cfa0266d4744cae6c0b1084ad06c63f027

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
06e598959e3fcab81abe695ecdcb322b

SHA1
2585a454e4fe25357b8bf0ef1ebcbbbf06b21597

SHA256
7e86a2c6a5945fecabe609a547b74f8c6bebf5bba44f6650d5f4a80c98cad7b3

SHA512
c0c0cf82c06ba4e04f1a35714212d3ef05fabf26045ee232d9383d5533228c6e25be112db3ad6a52f7e17c3c3c7551ceb327fc437f7e2e177ad9cd472a01eb3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ce855768ef1994b13bb2335a3a65be0d

SHA1
d2d862609c9db2c8b5e868475b1c6452ec288c10

SHA256
ba298b1196d04962a075766dcefa2c32580718f46a9270a10fdad8b7aece29f3

SHA512
da9ca41e5b0f715e19811e7a191accc9a5b2ee5e262eacb45fe32a83df1c304fa340dd921c81fc19d6a83e1aff26e237b5553b83fa1c91ef2d75325b5f4a7aa9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab368E.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar36EE.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit