42f34736b4b1134ebf5d35541fcbe789ab2928481888893ae37271c1ed91b40a

Analysis

max time kernel
136s
max time network
141s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 06:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8996aa3cd4e99a7dd1c0031a5159b62a_JaffaCakes118.html
Size

221KB
MD5

8996aa3cd4e99a7dd1c0031a5159b62a
SHA1

52faba855fa6f1d3cfe7b52b563df42c7082aa60
SHA256

42f34736b4b1134ebf5d35541fcbe789ab2928481888893ae37271c1ed91b40a
SHA512

d68ef54d06bf846b55f042c5bd89264433ea57c28c7a06299a61e87bc856c09a4286de998dffbdee531f672754327f591e2ae5abd606be35394cf6c453bfd7b1
SSDEEP

3072:SHSDA/+kjzzh3OyfkMY+BES09JXAnyrZalI+YQ:SHwctbsMYod+X3oI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 35 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423384629"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E1B06001-1FDE-11EF-8698-5E73522EB9B5} = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2804	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2804	iexplore.exe
2804	iexplore.exe
1392	IEXPLORE.EXE
1392	IEXPLORE.EXE
1392	IEXPLORE.EXE
1392	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8996aa3cd4e99a7dd1c0031a5159b62a_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2804
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2804 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1392

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4fede453ceb2e43c43ddc55313d97581

SHA1
763000e73767c42a8106fb807e6e71a5b2073dc0

SHA256
be1e87b22cf4b49777615ded27fc33392d851cc573cd8ec5b2a497c18e288262

SHA512
ff094e4a476c3a0a20f5be88423c91294b0954000197a778682ce61b3eee9a259568e5c4116f7490b992e5d95e792eeab87e510591d757d976634dcb05f0af11

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
82fa2063d43ca3618449ae8c193ff8f6

SHA1
b4655579732b3acd22148138962ca76a39fec8be

SHA256
5a72b2a7f5ed4309f216a074944e026dda2f4f7fd873326a468b9ba9beeb1c1b

SHA512
8770b84d6c482f4b1eb17541e0e2285bae7d57c220c2697c4ab6359ac8eb8f630b68e551f5b7188a19005d60b1875648848dcd0c3b22bf6a700ad1503732ac54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a9f9487e13b378a6a932e79b4590e3b0

SHA1
d8dc5801e78b25b19950edbcf8504b180153638a

SHA256
0204ea62516c9b2d48b61b6418126de56a8ba62afa704953e298f0dd25d52b83

SHA512
cbe341c93d1529453e9ebe6132adfa593e76f5d739714746e8c633ece85d1da795b8d106bb188a99a885846f1e59cbb0dc2fccc1003bfcd3cea66004ebebfb05

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8c9568e6b669bff243d4867bb5a980a8

SHA1
802d3c713c39a01723df189671be396a7620b60c

SHA256
be4b69857947a64b3522f87d3d0f4276549bbfa8f77116f7c76c9c5912d6589a

SHA512
92c963c0eb81433937d5d237dfdedf4c76697d0d6278730e2a028d63623de9d308745d81b84e781dd94cdcbe6036854c33bacbe01906a5525555397aba874826

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
96ce654d305fa208ab054e5e14203a4f

SHA1
3c42f9eeace469ef94e82a0c7c884d05fc0bb5a1

SHA256
9c3f12d4f1a3969bda6057a75670aac68bdbe879065f705ba2acf14df2cbe7f4

SHA512
38bea7aff9d4bf6eb7b7c4fc05c313d1778087447972cd4fef868794a06c3eef862c1558d75402a345ee1d0c6eb3f19989828c98fe231044845623461262c557

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c5612d3af4003a74021e61bbfe237230

SHA1
c340a4162154e86cb3c443c8a3528292264b11a7

SHA256
5cec2dbfbc88e45b83f62b259f406c315abcf5bda76f01aafe2731c60a763215

SHA512
812782de43f63b1fac6f586c99d1fd742d85a70b532e600de8650dfa1bf66780e056f2244f6d5b041abee3c9ae0513395eb86d5c15cb778f05e917b49b25a4c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e3c2603a969cefbd452eb187e214ccd4

SHA1
757059e83ccf67bcdefe474feb3139169d96255f

SHA256
ac5cce99d108157a31ae04cb9b84e7151be8b58b2d9022d3403b59f2872e549f

SHA512
10a6f03745ecca30d694cf8aa5ebb89b056a098e37b29c7a71fb9cec582a6cd3e3e8874dcb387bca93748c76d70f776d5a788bdf75cc6011593342d7411a3b03

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3d68c50d8bf15244fb95826ab2782c0e

SHA1
db8b4f034b57223b20fea989bd52f99fec750c7a

SHA256
42945c5d518f44b1e199f0e5295b7252561b0029390e12f0cbe5a34d2f0ba95a

SHA512
bc74cc9e5fe9ef2abec8d7912d68f5ae64061d6420f10e86501355dc8376195424644ccf133498a217bae2d77e72165cacc7a5e5621be5dba301c89903efbf97

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
64bdf035c9bf56cfc02d24b7b005a4f1

SHA1
06e8c6061e39acfdcc4c053fc8e3b2cdc9e2b9fc

SHA256
6ec4c8546b6334d8a23053a13cd567680bae0052b3759e93e74a66ee27f18e76

SHA512
74ac96b27c7d9cc6f565060b32c09dc06fab378fe04ec60ecaca865dcc6a71a3535f5efc92ae66fb1090ff5d73f562138800324578acbcbdb071b47a4660fe88

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f33f81f375087709c76fbe1b789f4d0f

SHA1
270a18e97ade74d77151c3e17a9776982e58d75e

SHA256
33cb6db75a1b44adeb44c056f124b88741b52ac60ea285b3ec34115a165b43ba

SHA512
4b1e7a0e8a9f4127b0024ed3f89172a42023b0ce12b0b6a52ae08f91312a86a2201feba68489fa0a41794c9e85e935ec07cfdf5ddf599204c6fad242cb575d45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d5c19c3a0f40b924795c9ccaabfeb36c

SHA1
5c56a342aadcc4d0542d46f3ebf61d5cc967b629

SHA256
372f7dbac20e84ee8949a48b75878aac79a353d72011e2467490d20cac70ee3e

SHA512
28477cafce01dcdcc03259c0716f2ea40f80149cdddc06bcd3001a2f4dca04a81e4ceaf5511574dfda9d8dd0992fcbfc84a717d62d0e2b46b35189e5c3881750

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f9dafad90d455e474fa17e8e1b8d4795

SHA1
44926c9aff6adf226493fce2d8647cac16fb7497

SHA256
28a6dccd9544ba45fdf9c338f69259742904980da438ee73fcbe15eeeebcb064

SHA512
6b002ed0a66055cf4639f3155764278344cc834b111fc3948a5772a55fbd73fb5dca2148ec2065eead36338e8706018645cddb863f426b1741d91e01402b0670

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8bcd4df52f39e8385425b50c4c196d98

SHA1
9c7dc46cd5bbd22538bd04e24c0c1bec47760470

SHA256
ae8157df9a31445ebba90efbded544f2b4ed4824e8ff61edeb09aa4877174c86

SHA512
5d12e675d81b66d8203f9ef0bb5de5d6a1c1273dc85db7630f9e39e2bc3264880d0c0899a8388416b71f4446fcc0d1310f27320afb1e8de7e8f24801d9b725a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1c285f3b30f071f2c071fe893ed63842

SHA1
03bb2d785863e970d77ff67bf2747f9b6ce06f02

SHA256
f0ccbb0010da5b3c0f862d6fe20909432626ea95447d311ff1a30f1052765cda

SHA512
a67671dcbb44c8fbe36010f1d58586b23c8d9388132eb69a3e3925f3462a6a31d684bfa69e953bd2df084fa0b34bd17b14111da7a095ddab76cc29dda763e5b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2ec2e4be60d9ac4f8bb5d2908b2392be

SHA1
d5001ea3b2625fed4f859084279ef00f979838d6

SHA256
950c296ab12be3c4ff84991e40ceeb6b14069db7edd8f0e1eb34c67d2010a0d7

SHA512
5799fec59998d4694f55061a7e6a664434b33f4f0c81e756bf381a8d43478b777bdaa6494934756eeb775953129a163cba17eaa73159485af53ff27231a4416e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a1e847aa4d6e2a6364075c5a572e6fa5

SHA1
01b2616754e39dedb047293be2d797d90d096c35

SHA256
6cc6fa05f049cc1f031342e3f9466b6ae4242468b2aae4880ad4b1d8c1740cd0

SHA512
03cb63dc9cbe237adb70873c188ce5298db26b0eec45e50f47ede6cd8053ae3607b38194c044ff8ce927d231e54a82335314b99d2b197ad3801ebe7a838ac773

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ea66f28fa4f06a9f1dbf9e19e010c9ce

SHA1
1f542438bc450ee68086a65e278e8fd731d5dd23

SHA256
c42bee29294297c8144b6f242d01983bfbb5cc18ed1a80866e7971208632db8e

SHA512
f0e578a2ae3fa3dcc8b479887e8cafc14bde3a993ca29a9af8b13cd9d3e9c8978541e0b7c63adf5b8e4bcb0b9b7c987ed50656bf25532974b6e047e543e96045

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
90eed9d981b538a2cd1c8cf8324fce61

SHA1
abedfb15bebf9cb1f1db60095343242426d819cb

SHA256
1fe3dbbd4dd2e7233bc10a97c3c259dae39d20d85c2d447ff059aa3149803d2d

SHA512
9f865abc28ae3d5598080e228c9386e968b9192b257fdbef96ef7f786a0c3f1293d81796b4740c8ff1bf30e47a99785bb3315ceca07dd3ce8150dd63370691be

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a0a848d4e232df28e5c89dc60757f3dc

SHA1
62119fd272619afa51d391fbebe3b66ff652b66e

SHA256
1ec9928e3f556a66b576f5c13528d90f9217fdb625323db3ae975573fa598012

SHA512
5d146d1b6fe20cb3550162fa717d22914fa3514e61513297f95679884fdf72fca07ca75fd5fb2463b5dde4ee19069c130f558e1d4b952620061e89b42cfaa1db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
163ec55b445fcc5b16f6bda74490b085

SHA1
26f66d3134048a05919145e672d06be65c360d37

SHA256
b6984f99a414c9c6c92cfa4a2749d7b883cc5c204593053dc57400f985d78f23

SHA512
205215e317876dcc8a292b6e646bcce271cbdee9db4713263e9f836ee594edc93f36f4aa0beae189f8d7bbb7584b4fad414c1a970c93d96f75c7cb257998c009

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab7713.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar7874.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit