8dea5b2b297f6ceec19a94efadd1f278e2e7cf0851758937696294bf44cd2244

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
20/05/2024, 02:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5cc570d1c70461dce7daeab9978c530d_JaffaCakes118.html
Size

3KB
MD5

5cc570d1c70461dce7daeab9978c530d
SHA1

d28b13583561ba99e5e22c2178cc19a627e52c81
SHA256

8dea5b2b297f6ceec19a94efadd1f278e2e7cf0851758937696294bf44cd2244
SHA512

1ccf805b0fe7c1cbd7e94edb32f1c9dd3325026edaf2d47a8c056e845e09e145c48d7de20242626ae064629b95728388b34d265511ca688335836f05176ed585

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 409816675faada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{92808401-1652-11EF-A4F7-5A451966104F} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000009a8d22e31d155cc9fc2783f6c4720d6d707f30590a0f53dc663867cd54d44113000000000e80000000020000200000002a2b8e18b6f48356beafa55f420791dfedabb63f55ed915871e81a3bffa63b33200000004ff806e1bf28236b205ba1e080b2f787c8b121959f305c8575a94f27dbc3fccc40000000fdad77ab1012a7d1bc9584c4692eeef7eabe69229acdab85fbf1c424eadedbd6a78a0a885c32f0c6811edfeea4bae27af5df0420b6a24edad01d7540b9b64cda	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000c41e8b4360aab5ce731457bbce47f7b0c08a071118e10bab2dd054b1fadae4a3000000000e8000000002000020000000662079f0e1b7e882c47c8dec59ce855fed69527fe74b41a37733eae30fde6bed900000003d1e35fd0831cea82f5af3b707cbf5a880497a51ce36865bd4a502fc787cd6dfd51699a48fb1dda64cd6139b2bf0bffebdfc4438aff85f4c821100fe825aeec592b285af342476e9d5eb9e6f43b9df8c227443fc47df21cbbfcf31faad7f9eb17d545d41c625c2bfbd4b23a47d8772dfba54a21262fbacae05a757e38024c3e9169ec9e2d7040fbf93543d4c7d94f0c640000000ea5545efa5a9b1d1a2043a1684a3aec211d18650afcf0ffe3607f03ebf0cade2e45c42d5761b9e2addafb67cab69519ed801879e2628f749581ffc0d6c1719f6	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422334804"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2244	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2244	iexplore.exe
2244	iexplore.exe
2836	IEXPLORE.EXE
2836	IEXPLORE.EXE
2836	IEXPLORE.EXE
2836	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 2836	2244	iexplore.exe	28
PID 2244 wrote to memory of 2836	2244	iexplore.exe	28
PID 2244 wrote to memory of 2836	2244	iexplore.exe	28
PID 2244 wrote to memory of 2836	2244	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5cc570d1c70461dce7daeab9978c530d_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e82b168b30b48f04a331e528fd2af89a

SHA1
d03833513faed4f4eb35f9e97248e42315a7fe0a

SHA256
6bb906a27cc354ba342cc5664792f86feecc98395ae1d50117717263a2bf0e24

SHA512
439124005f88eca31af088c685331fd76d5b435790693bd59c4af2938f82241b4db8d3c62ab69f96de429f24b85cdae7a518cd813e5e5d13b288df024d075eda

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ef6d9a96f85918db75069bad216d8b31

SHA1
10432ea861495dffaea2568f5a764f43b8dfb2a8

SHA256
88d57348a372108172a8e510ff507b325d75bb0d7a3cd6c1cce5c9f0a4aef2d3

SHA512
aa6ef9aaa189c921e63bbf434758d70eacf0d7bb882f1288ba8ed91014cc16f8d9a47ec5a7be2735f7c561534ee6f439336dc9ed3a045c25658309b5bf16e1ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
36482b1a9f774abaff4db41842dcafc3

SHA1
73a8f2d39d2785fbca2955592da6ef0ba525dd1d

SHA256
136a317d558671fa6e3ce5a6604ff4c5dee188a777ec72cb5fe3fe3ee07f67c5

SHA512
7f54d2c04c8aeb14058496de540d4e765bcf826ca380006187c50e35c89e59bf661c2fe402dbfea56335e36337862985af8fcc4b50adbd2cb500aac92fa2be80

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33a9310fab68e9756c1f0791a75cc025

SHA1
451687b0fa6a6e2d338b35cd63901000b78837bc

SHA256
77bc8e1d03e96bffd3bcdbd544e976b1955119ad975f3e7a03456a9941bbc82a

SHA512
83e5810edae5dc7a7e195e19c3be3f7580409f571e7fc9ffcae7197d6162b3c9cf36f6ac9ae8599f22e7832333c17777eeeb95746420978c2735779e7645bd2b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e5d913e7b29c6b906a1c9e338430002b

SHA1
8752b1037ce4467bc8eb248593bc5aedfc129fe0

SHA256
60cdbb8500297c336d8eb4a3f4f17408bd51cec54d53e8957333d7e23474c833

SHA512
fda1f9ba0e73411d71dc295a29e09c470a0040433ca0db59267009a7109c6602337b560f78f37c66b59628a49867a84d5f45e8ee23cb985b820359819303876c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c8f316433cc038d0e53d9d1c7a239b09

SHA1
d79588212309fedf42e5f98989142c76f30970c3

SHA256
5c1035a2be3e2276c57ebb925f8125a798af1f6b68602b72949fd23216a74563

SHA512
e776ff7d61a70660b07a502cb5c08165e246c2667b72b697c5bd88b4430cb9dc7f4d92dd007579f093655b8d7be81cfc3a1c7ecc6ef752a28779cf2e0f475dc9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
024465a4ed30a940cb1ed2a781e4e5bf

SHA1
30d44f27fb2037f49ee1de7ece8667d428c19dc9

SHA256
20998ef2d142f4fa8dd6bfec907d086bfc30af830bea74b69dba715dc21dd8b5

SHA512
784bd2bc521de7b6230907e64cf9a2c5286471dca24cc59d4adebb10c7c5e860ddc34d8f45b69405024708d8b90fb5dac28b100368c85dcb4ab5e639fcc3d204

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
230bd472a819f2ff35e947d041368a69

SHA1
ca87c5a3069c89ed7afc4a43cc3d4c1cf516195a

SHA256
391e60afb2d98491eff0ed5eac285301384e625163accbb17f81220fbab0d8ce

SHA512
00506d29de9d007200723b80d8ad833416f31a4729dd2a1b9feca28069a9dbb08b1cf3f751f5f9ce8897687b9b4cf52306d7e32faf8beb24a37572f2e788b9ed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
002f46b5c9306307c8d9a2fdc59a8919

SHA1
6974fc1ae9d1c8b40633f60469232ba06b8cf710

SHA256
c51c8540258de261ac4f57c9d591659a2083bf639c934f4b545f2572531732ca

SHA512
1fa1051e4ecf46ea24b9cc1ea0364b61147be4efc08253df58dc39490e15278028ba5e3b49c1175445e22becd4b1c9cc2610e16f4c6da20de6e9df5ab729dbf9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6574e8fa0660c913da8a0b8b75c28d92

SHA1
ef4a507b39f4cc894063e5f714e2e52b5fd90b6e

SHA256
fc5b3a82ba46d970264fa6316ff6182aab5e2ed3f1ea2d7720d6e7ecd22c6cc7

SHA512
3a060230e960c7e081a6dc86d63874f75ef1796e12e7cdde58fcbf3391ba206caa17cd1ed134bd18e19eb96df96594284c0be2f13bef62779c4d1e11fa94786e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
84149cc62c86a985bad298388bdda973

SHA1
c93672e226cb4787a07dd639e83358ba74d6cec5

SHA256
f5d504bb1935373dbd5a4a70ae84ce18e2bada499047237b314044598db3d090

SHA512
90dc7c9e72ee6775a047826bc5df46dce4279c616ec1b40f7db9415a22e9646a6ef1e3646eea5bfcffed0eda89c2f72c9fa5b9e67915f39158914e45591f1da2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
06577827ae68a4ce9220aba5c245578b

SHA1
f631e63ba83bca16b7852bbcce375f7deecef756

SHA256
ccaa948444191d664b363ac265767e576fa21ac4ee37aef828b2e822a883a9a1

SHA512
979a1c86382a57b88bec2189486ac2469e9b360a8951262bfba8e71cd06206e36b0931658e023a000c86dee9fc53a55604e5677af5a0f24c74e841ebe58c8e0d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8d812994272d710b7b832375c1d52bde

SHA1
13a2e461d0ed7fca4152a383fc619dc91d65cb0a

SHA256
4cdefa28bda30d6daed546eaae5df6c04d8c21b58a2ed84df674362d83e98d38

SHA512
ff43d34ec5db687e6ca7860548c5c3e37ce42cb8777a7c3f594bb25fdda4eea8b243baf4323a4851834ddc1ccb8f3be4a574d5d3537530ca0dd1184fb52e71e8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fd16869dce73caec3ea4f1ca19fc0e9f

SHA1
4b15594a77220c3067f0163bb2d04cade0ab04ce

SHA256
f8877db4a8d6c3be14b145e59f8d866737068ca3aa2ee6881cdd3741218caaa4

SHA512
45490fb06fbbfd38f2f7dfc1ea977e6dacdd3ded919502d222d12dca4657c4534826e33dedc2673443061ae9a63d1d64a806224cbb9fa3748b5162a462569e10

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e3ac89f2d26218a69d59e1db76f28e5b

SHA1
2b19216f7727995c9b4e313b6b66e24a26dba512

SHA256
50e23968d6d6e0e3a3bd6e8833fd859fd3a56f651f617e24e543ca8c40573f3d

SHA512
8c45472c7630b02d65f5939cd0bf528f92b2c8b68c028b8841116e57537f343eee5481f0a04a9922719d57ff9b7e460434fe7f079c46a30c7ba29c2d0c0dab1f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0f1eb22e86a882996a7c5f77c8b618bc

SHA1
afb068ec2f40acdf2b7a675aed0e593c2e78c741

SHA256
63ee0b7df3afee5a2d0a04186138e019d88f9c3d376769b7dad3c98386b2d0b9

SHA512
2b9203915b349759494f1224e95102e460f70c819fe8e048541a24243e84a3d023bd75dc8d909eebc888987cf1db4fcf2f6e0afa11f222a79966557f59e35142

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4a15249ba4118c81ae6bdfcc26b90b38

SHA1
36a6cc2eabd7484ef1374c3e3f209c7b22006538

SHA256
f3947c21a8fd0440669723cac07efd3edb2638db93285c29e8c6bf5f6d8af972

SHA512
cdc2289534409f735ab2dd74cb2a3ea0a34f7b8bec038508e3fdd07a71da6d79abbd06de98b1c6d876d03eee29309314909e411a31bae5d4f575704a3cf2a687

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa221ab8d1007a410935f4fc5030cea6

SHA1
7488f01ff7090c9c6140a5a14a3c02798dfc684c

SHA256
3a319594778609c89dd91b60166f25863c986a6dc861c1baa3fc47b13b8ca465

SHA512
b7f11cbf9011d4ec1da6f916021087fdcb20a18e8e5e366dc278d1f6fd60b88a1c08430b64113704367e1a1415e913906300ee6098d13befa3d44d3cb6006f7f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab34A9.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar34FB.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit