67c41538df261e0f58c3954cd6a5f24667e540da90a598b39923f3fe77b8856b

Analysis

max time kernel
121s
max time network
146s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 02:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6970c1897abf2008a3341d2958eb58c8_JaffaCakes118.html
Size

30KB
MD5

6970c1897abf2008a3341d2958eb58c8
SHA1

c08461d93e271190d508bd6a0ab274984ba63387
SHA256

67c41538df261e0f58c3954cd6a5f24667e540da90a598b39923f3fe77b8856b
SHA512

1546335d41c7266e68ac5291ff84283ca8ef798743705fa053e239accfb3a6b21cbe4dac473e8e592e8984150bafc08345ac45e7f0c793486b993030a135c3d4
SSDEEP

384:CNNhvuIxTNzLMhI3TItRf1fcJf5f00fxifQfoRflfc5feQ1P:CNjuIxTNzLMhGTIJ6dF8cqZ6P1P

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeIEXPLORE.EXE

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422592962"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005dab7b544b56904ea410e116e4695d1300000000020000000000106600000001000020000000452b7a024acb8a5475772a0d0bef9c703acfde897db7d373dca481dc34d377b6000000000e80000000020000200000005a0f910d089ad30a2489389deb65d42157515db80d7d358118e648317b87b7f820000000505d0f10d07b343e4777231e9f95fb99e8ad0dc85236d4f7cdfc48defeaa0d6a4000000031f6810f40ab719e22403738333239bc488b5ede0f6695367e9f2fef25b842e4d6b29f7e656789b4dc15a3a942a585cc3ba9082c42f64d854fc643ddd8576a44	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d013257eb8acda01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005dab7b544b56904ea410e116e4695d13000000000200000000001066000000010000200000003fc255165a66849c91ebfad0e01e77507462ef5aff97e34de6eef7b61c51b906000000000e8000000002000020000000ebfbe43c8a931bd049fecc94f44d46e841e44131d82a01eaf22a622702bdad339000000031afe0e4600bd1a0fcb330c39b4575e3ec9cada39d4905ab1478b815e5b4f052f9b85879208ab19c1b91bd5b7e495be7fe25fb61f99f32fd7d06ee6a988a0a1c740d535d99bf4d4743d11fb8826384c7f8e95d6cc6bf8e1a670fe883f8226bcfc7e3d2527d9122f542a9e90b54ec01566f76e722d7dc6020480d7d286922878f2bb7b3fd08fae9190cbdbf991a79507a400000009e20431c8364fabcda34652a211763e2668dc1c0d4b6c8795d18370edd3e40933122ba4b7e6637ff043439a8c45d574fc5d1ace7888972d16d49ce8853f93792	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A40EAC51-18AB-11EF-BDEB-D6E40795ECBF} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

IEXPLORE.EXE

pid process

2908 IEXPLORE.EXE
Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

iexplore.exe

pid process

2180 iexplore.exe
Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

iexplore.exeIEXPLORE.EXE

pid process

2180 iexplore.exe
2180 iexplore.exe
2908 IEXPLORE.EXE
2908 IEXPLORE.EXE
2908 IEXPLORE.EXE
2908 IEXPLORE.EXE

pid	process
2908	IEXPLORE.EXE

pid	process
2180	iexplore.exe

pid	process
2180	iexplore.exe
2180	iexplore.exe
2908	IEXPLORE.EXE
2908	IEXPLORE.EXE
2908	IEXPLORE.EXE
2908	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

iexplore.exe

description	pid	process	target process
PID 2180 wrote to memory of 2908	2180	iexplore.exe	IEXPLORE.EXE
PID 2180 wrote to memory of 2908	2180	iexplore.exe	IEXPLORE.EXE
PID 2180 wrote to memory of 2908	2180	iexplore.exe	IEXPLORE.EXE
PID 2180 wrote to memory of 2908	2180	iexplore.exe	IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6970c1897abf2008a3341d2958eb58c8_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2180

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
2⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2908

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize
252B

MD5
871e1c3672ea47275c426cf5e9bfae14

SHA1
e816a3da923c95e5defa060bbd60138b478287a5

SHA256
b7aa02ad641bb6208f3add7247b41a3df225affb4361ea07ac88d4460ed92631

SHA512
100e7a20b2078d750159e2e5cba54e4084a6624c312b2ec1ffd265c1a40473433000895fbc0bed297ac607137ac79af0f730173f57298c65af66c27d1443cb77

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
92beaf55a12fe416b322f2ec77949883

SHA1
5da7dd6b304d381b041d208eceea495f63b891a9

SHA256
7ca73e51147e4a5a2edbb8ea728d3ee272e2522fd5781176a8be3f9a709a418e

SHA512
abaac487749cc8d4ec4d9eaee3ca59f80ae9ba073c32318311cb33d18085ae60167ef528800e40f11a610ed4161e5fba941b490296174cf7b83f84b239c385cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
d9bb1929e50a84b0569b7615876f7ac0

SHA1
5385951233f611789913fde90dc54b544ddf0afe

SHA256
c1106ce7a8d8d12111e3e27efc677797cecb795ab7f3936f74a5b273b769577a

SHA512
cf4bb3955cd81d625c162a6ee0c4bf1de1a98ef5d8044af15ddd62de0a607c57950bc5fc86f87c74b141a6972336cc40b5b441f169b3f422561ca4ef1ef172b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
6787408afeb033be4f994538e4ecf97c

SHA1
ff059dd038af90240a1b4a82f846719ef01fe458

SHA256
b1798118ef766e6595b0089ade56b4c3f0d5cba390c7946e646401d0a04a44c4

SHA512
15d90f51f482432d17db99ced5e7ccc99c8589cd0741ae7240721920ad70613f41a3dcb9e0e39403722c883d41606837d23e7ec9e112348dfa0a05c2bacf630c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
7b1a5ff69ebb893e87175255efa244c5

SHA1
4ceeaa773189e8fd0cea8f94388aa6473466abcc

SHA256
7e7c749b026d72bac83c3409a2a5933f7868bda08293af3026cbd02409aadef2

SHA512
24fc4a9119e0dcfb6f22e684f200aa2604ba992963cd4064aac51d48d01d7c5ef20dfcbf49dc153495cd480e97558e8543684569aef8123d25e2201b47aaa6f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
8aa51a8661851b21bea5652de6e63637

SHA1
b9a692e0518fdba9b59e6cfe6b79894933d2395f

SHA256
03dd551f077fc21989d8e69793586079f9d72975423645bde8392210cd55eae0

SHA512
43bf635564a55d32e762ff4a5562773696f94c2b70d9216484cf566f4ce699b265a6476838920d7deb0f41c4b7c843d480451c9826e047c3b0ee3dfd72ec2b05

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
862e6ab1c1ba79486e8b1f8a4fe39cc7

SHA1
73723a205603e1c9398198714359c84755ee0266

SHA256
259d5d6af5bb2c3809d9ed72905a86d0041a5b921d6f169f41b60237944edac2

SHA512
367b2888d23edb0ab652a816a76dd5bab009894628939cf1c31b6bc9655c95dcfc76e9182ff6ea8fc428b77a83c47962bf614662a218fdbb458dab72fc9aa237

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
bcea2b9fbe2d0ebd511e762a2101f66f

SHA1
6117cb1a312280ec1b96df566f411eca31801f4a

SHA256
0c29e23f0a036c71316a99244800a3c83be5687055e7a1988edf7b8b79e03972

SHA512
76dd6bf2fabe1f0fc7f0f68b1b2e20a17d62c12d5593ca09c241f162e0f527be1e7f25f622d986666dbca8e8ded8b9f35c421fa910aeed47645e5d33346ca3c8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
79e616340cd8ec7eee3a4198ea4876fe

SHA1
cc90acfe4c6f9c9783cf24407e8e4668b18aa341

SHA256
f69baf116d69ec68ee269f45666a1ad75cf889ac1632eea30502bf77fe6f35f9

SHA512
0033355d52ecc875a517df62969113ea67a75bd8d757220b7e65fdcf2e91ebfb7470f8c6f2cd5b84a92bd0d9eaee59d2730dd2a0aceb819e80753e99433823a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
fd15e11d2276b104745aa14eb3436551

SHA1
eccf6365f0c9b15d6ebca332e50fec6c4b84c223

SHA256
e1ab116f9f41b0b7f111555c1d6effe118c511e9a6aad8ab5d53c7bb3182fd67

SHA512
b81f007f13ae0e5fa23a48a7843cd236b04d584c6d25e3f580402557e77e625dcb1ba7fd63dcb97fda9a25caef12b6d3f6ac71c00784de9833d13581d93ddbf5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
e36a88001e3da1597fe3a5126039e0e8

SHA1
5e3aca293539a258d48ead3e9fdad5c24566238e

SHA256
3004de6f2b29853f81d3e67417e6a73c7cf3aece005173866ffc8324e5cce58b

SHA512
5a47516b300ce7cd0b344e34c141414abd1a28fda89c7f7ac3ec4c42f35300efe10690dbb96160c29848c52daf87c646ae596e53a8ffa61d8ae5062b4766fb0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize
242B

MD5
e86535865a31eec3db383d39ec1fe600

SHA1
9f997fdfafaf959dcf06ad9e36fc44c87a244458

SHA256
6bc6f4c9db1ee9521e1d3af58646656817c6aeb246d3c3ad9e1264e62fdc921f

SHA512
b67d93a4225c9b80652051597c33c16f69f740cf08f9342011d81942809d13d898ffafcc7bbc1f8b0b1b0aed6e68171cbab8449f83b83b6b072ecd4e44bf2faf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar6A0F.tmp
Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit