9d614d3184e162824fcaf8cbaa201308a70a8e365568b733e2275a6a85fa367d

Analysis

max time kernel
117s
max time network
128s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/05/2024, 11:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

79113d02c1544dfcd5409e71bedf4955_JaffaCakes118.html
Size

122KB
MD5

79113d02c1544dfcd5409e71bedf4955
SHA1

e6cd8111c64297eeb4ce49b822f5f364b94acd8b
SHA256

9d614d3184e162824fcaf8cbaa201308a70a8e365568b733e2275a6a85fa367d
SHA512

da9e79c2108fedfebada2550aded08b531ec33944180cd62c189e97177bbc811454e6ab0e40d8e0be665983b5255aec31096614d049befc498561ea27be20d91
SSDEEP

1536:Ajq5+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:Ajq5+yfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422972724"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D7E9A441-1C1F-11EF-B8F6-D6B84878A518} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a23000000000200000000001066000000010000200000004ce7ff81b9bf2ac413dfb41662d9436c8f4c7e081e0b4c1b233ceb585ae6738f000000000e8000000002000020000000cf25f1b7bec62c9a3cd52a747af8b14b394bc41d0131e8405942c9717ae504da90000000abea7aed9b8418f68d4aa24a462f7c14a011166123d68c079036e40e97c7db2f72a8272291dba59c9c89dbf6ee02dae67e94f0a64de56edd3340706f456b43a69ac81aa795923fd03e73ceab304133d20a600d57f9ea6744668b4afc2238efcbb3f1c625d1fb344db1c3c8bf48245213f9c564327161421b2f793908322efcc515d25adff0bd6bf2a2756af87a1bb48b400000008dda1208dbfe98b18b27ea3809005087290c4f21fe59c6dfce75b19f4aa69a1a68c9aa3ad6767dafdfa3df4d8320c0e1f4c3d7b672f4065fefae6c06e65ca32b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a230000000002000000000010660000000100002000000053124d507a7386ebefe2184c5dd1f0605ffc3e47c623e7d179498c160219b1d2000000000e80000000020000200000006ea44c513647cb51a58dca6272f0817ab1c9004aafebbec216d8ac27a47fbd5320000000993de7ffee3615f014ff8f0a1c52f7c06898408b92368246c6ad1a4ec7da42d540000000e30c9c15563e0d574327076680d7306754242a1f25ae7dfe284f1d01887934c55dbc4b45fc7667b1af8e0772f0406452976fc785035c49c6f690f80d4737205c	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a01ee0c52cb0da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2984	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2984	iexplore.exe
2984	iexplore.exe
2812	IEXPLORE.EXE
2812	IEXPLORE.EXE
2812	IEXPLORE.EXE
2812	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2984 wrote to memory of 2812	2984	iexplore.exe	28
PID 2984 wrote to memory of 2812	2984	iexplore.exe	28
PID 2984 wrote to memory of 2812	2984	iexplore.exe	28
PID 2984 wrote to memory of 2812	2984	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\79113d02c1544dfcd5409e71bedf4955_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2984
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2984 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2812

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dfefde06686bf2db83f095e48c3e95a5

SHA1
e901103f177edd109d89fbbd3f4782c439dd3bba

SHA256
71540b18c004efa0d9a92ddf25c97532be765c7b9a08038c99f75bc886a738ef

SHA512
b5238bedf26dce13543beb2759c942a9a8ce45370689d6f257e680a67a43f6e13ffb330bd992b325195a21fecc785899bcb904457da10d4792ec98392e4203fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa57306744c1f46bfa9a2722ecb58b1f

SHA1
41d08646704a9d3b53f7b6b6b150d5b76001b503

SHA256
4c47fa49f82d195918ce035f7fdc9dff53fd4656ba3b3f0836186d97ea70b6b8

SHA512
0bf774c91a20fdab23d0da63564403f8fef35fd2f87e035a71a01ca323d43bfa3f41766154c5309db7c9aa3b10a3e0e4c1c14ce33e92b097fb16a4d8955c6452

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1c00a5d7789f7705190563b3b0e59825

SHA1
49447d84ca1cc1a90c7bed84a0281ea52c451eed

SHA256
5134e5b3abac7ff54091a1f4ffe9aedfb4657bb85a6a0eb68d83fd27e989969d

SHA512
ae349ee733bb5e8b8e383056f5332d5a9b7e8e986eadd83749c96c579cad9d1d2bcb98693c5a72eb9005bd09f0c261a612fdd35a073743b484d8ea3cf8d984dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7779e07987906a69884bc91ade350bdb

SHA1
657bab0ea5a48361fddafee0e074924564e68bbb

SHA256
d0a4df464cc8113b76fbd6587a754c05fa934492af8eb6a0bf66e73858df2ea1

SHA512
48e59895b4d5ff7ace537093d4d217c23d76e8c211c8d04183017881d4ce1628efd75cc7131fc38f2e348f763aa296e02982edce645564af1635d32b829026cd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a319364febb97a629bd3e104098b3a95

SHA1
be899f527734c375ab2ca60de21bd9f4022fef04

SHA256
4f2f6689b2cfac30d4b84901467d368fbe909999f77deb7815ac4a1908dee2ce

SHA512
c7447581b5f1f1aeea37496b05227a88493587b01afa3fe791a55f2399fee84c74ec54302f7e6f8839cac812c466211ccc20025251ce07eee3d42590f04831cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3061736c751420a9fb898a837013dad6

SHA1
2274adc9207ca3e896fcad0e0ea0f5dc7ff66bb5

SHA256
9b717424e28638bbfa66893be0247632a3f0fc0c731578c47678dec911c2de00

SHA512
dbcc0eaa8178c70d2712f3d8b7dd44a7fc5c39265be6c4fe7d6e1e90f3be7cdf3ae278f1dae321b7b2dee115ec036dd9282750a6a239ed4e9579c7f9537fc8fb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3057c3f1d1fd1ea2f37c280cdf668c60

SHA1
343ed1f7d45e7c204bdbfa98250053a99457d189

SHA256
7d1439916b02cde09c7c0bcb50e020ac60c564d3a57aa124c080a09a3c5be5bf

SHA512
77c18c4c0d1e0d2a99629bdd64970b8196d8eef37cdfa9d5e3a09f7f0c5e1fac373886f6ef5f61b0db2c8902b7392088ab6c1cdef89d2643636d6f20184e2caa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
682caa0f54f5aac6ef859e571bc37faa

SHA1
81633fbbb54952b09e8f9c660f97ad532bf56aec

SHA256
6dfcf1eb56959855328161f4dcec99217b9e975e4346f7a9b16ac6556819bf66

SHA512
7d3aa75a54b26e4ac69c93cd297be74fcb495d81e3aeabf181d443e8ecaba85901de743e7e05b544f8841a9df26e31339021a7cbe347400826fb316a95b49254

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0143a7921fcc3b36bba457bb204cd883

SHA1
fef311a8258f927f793fd153b49a0f8ed1084950

SHA256
18df5483281add2e1d1db4922322e7a3042608753b5607304a8e665d1ee6cfd4

SHA512
6d74781afc315ab2b1c42a214ddf7dff70ff0d720fd31d7124685a4168cf70716b402060fd6006d6ce103688065c10267b51280a7fb38ea1cf35832132490429

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5cd6cf1ce0112c2091cf73b86cd972b6

SHA1
6f0df1803d992ce89a0793996a72ad02b4904adf

SHA256
79402132c80b3350d5adade4c00b542526847b6c4ebe46b716198025ea2a894a

SHA512
67cdfa3e2a90f5affc9f76c685aff9abf3e1f63db7d166627db85ea9d8fbd6c831762e7d393267006f983d92534adbab5688cf08818022e402925ceca47926bb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7d7c5c49c1f903ebc14d1261a6777775

SHA1
4a65283bda400b9c476585416b2d8c53fb35256e

SHA256
501703124c3e7e29a82171fb4425111ebd72182c72ebbecfd9e33691e82c66e1

SHA512
04f0022c31a9a5fa129daf43a14206638443e71d50308a658e1ebc7aa578e839992fb01ea0790bd7e93b498cfd2a5bd13498239a98b5dc99b7c3a65a178fb068

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
be0f4fdce24631cec4e9db9624ad5156

SHA1
1269a7c93416af335bedee9c3a23504a3ea5e4b5

SHA256
e7b9f9ca25ed936f7c641d06986c4daaa4bb5a5da754079d770f869b17d0982e

SHA512
7afc497329c13c6e806453822d0d2dd23995771bdc22bb82bf9c064f9eaf4437a68c6398b6efe6466c0a1502ae267f30bb6a8329b7f413442fab4cb95c4313a5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
49079f05db2ad2836acb66d9c7e4087c

SHA1
de809c10c656c02f4f4ec0e50f9570b138ba991e

SHA256
9569aba1f686628b7d13f9657b8b30e3d68fea432a4ac1904c45da55c24aaf5d

SHA512
2970350281a8ed37a3a1dfa8400e283fe50a23814c63ee9cb679106168ca51cc4987dba7abf78926c330a2d57307a4d4273be5698964ea15f015e6fb83970852

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4eb7dd7dc8a8e9bc4cda90c723f4727c

SHA1
3b1b471e810562887540d83675c35c6a49eac708

SHA256
d4f4c99fe6569ddd0b413fb3614e800e204bf044a07471a316a86f008e15a795

SHA512
930a57852566149eacecc2ea9d44c23bf7ca3deb480839db774bc3a6bb5c76da4e0e7c7bba50c2e5939d7c1ccaa04267ab5e886aaa46530f0cf8a357c11ef4b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c17383f8249bb379a279a2144c201c6d

SHA1
4b35c0fb33a95c1a16c7f803f01062d7cdc71b9c

SHA256
3459f6b64cf1d52b05096b876a02abfd2e841847fb00dec5b208a97abcc39b3a

SHA512
28229d9a5b9f8a53d78787a9288df5d06fb557bb7e08da092f7a7a37eb345abe151b9775f631abfde783ce67f65d2ffc2c24442912a5fc7744ca0db01732a2f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cffe812cbfdc64bfb2a787011675156d

SHA1
6fc051065b259f9aca391d483bd981fd4bb5d0fd

SHA256
b5ac5aeca02ef17aa41208534e342b77c73f24ffd0ff17a5faff09e588dab857

SHA512
6574bd4b29e8a51a5c34d8080ab1260430c19494345ba4dfa9cd19bb812cc051a39e2c850a179bb4e896b6c1583300326e2a1bfc9826446054cdbb7267e8f210

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabDAB8.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarDB19.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit