0ae9c11f925bec5d0ff7f8510fad716eded8fd7f1d215a587c6ddd9c33699a81

Analysis

max time kernel
119s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 23:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8fdfdf4633ebf223375a7afeccc3e592_JaffaCakes118.html
Size

4KB
MD5

8fdfdf4633ebf223375a7afeccc3e592
SHA1

bd7aa99532d7d2cd7a9a202d870deec336a06bf3
SHA256

0ae9c11f925bec5d0ff7f8510fad716eded8fd7f1d215a587c6ddd9c33699a81
SHA512

06bf3001770bf178d8e4077d23851c0edec7d0aff54677e8153d00b72685681e65053e38abd8bb2fff78bcf25c0b5144784d8b672db13f175e7988728d459a99
SSDEEP

96:ziE/ZmV4MSEPBDvV0n47ej/hgOKiljSR1QnyneqhV2+wC5b:ziOwV4GD8/h/KiZwQn/qy+z5b

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000016cec27701dd44d8fb155ac5aca1a1400000000020000000000106600000001000020000000aeea2c0b2df264edec091e4e804e8ff98d974429cfd17f7d014c7f3ee90a84a3000000000e80000000020000200000005ca04c0486a6607137b701350faf6cc6b6906f94bb19821502e75dc607674d0720000000684308a1cacf2b07f9c15192621f01d0320b9d9266a37806a7308c5bee52a81a400000001dc1291e7e3ef2d8994013505a176809dfb18c081ac2854306968a248db008a163edd7df55100edd58f649855ecf15dc3e2ffb48bd75cc668f892db90e9d1f0b	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000016cec27701dd44d8fb155ac5aca1a1400000000020000000000106600000001000020000000da7b55eb6f210278dd009166dd9d4aa902c894ff9cb74ec7be82ca91f1a978b7000000000e800000000200002000000093134ccf27ccecd0530fd5b060fbf9f8e804d7a87b4257ab282dc5bf8eaf309790000000ffc2c675065094118a5be69c42280b9c0a29bbe1fe94b688def0d8a4350bd5b44300e59af3d4e026d841d05d9e4011934d573ad7d90a81cecef143c4e91e4724d2188afcaace951257bc96e98f1d8606c224655ae756b2643f056ad8b6c6fe7b90aee83fd2b13588e521308d2b255d2b71c4522d9b240d192ea0b04f373c9b5f39e70708fe5b81d5c9eb4393ed9b15bf400000002b453e44eb0c6065b56c307200b71723245208a8781648282763772c42492cc2af7e963ed1c350831730f8dc2b90a0b725f86cb1bb0586053739d245b5c96c6c	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423534403"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9A0E1D11-213B-11EF-A7EB-E60682B688C9} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80666e5d48b5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2304	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2304	iexplore.exe
2304	iexplore.exe
1936	IEXPLORE.EXE
1936	IEXPLORE.EXE
1936	IEXPLORE.EXE
1936	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 1936	2304	iexplore.exe	28
PID 2304 wrote to memory of 1936	2304	iexplore.exe	28
PID 2304 wrote to memory of 1936	2304	iexplore.exe	28
PID 2304 wrote to memory of 1936	2304	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8fdfdf4633ebf223375a7afeccc3e592_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2304 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
79333d8bae04e79d09e730be294dadcc

SHA1
56cd58d77af539a70bc89333532717879f31cf23

SHA256
bd65fdcc61f5da2e7eb99102bb87e4c9c3d38343e2d53707644508b64e52c4d0

SHA512
5c0536dd42e86d936998f04274494ce8eb299353a5dd100ead3bf6d09b3a5a7a17a28a454246666e15535c47326294178efcd09e8613615d2f556c6e76f045c8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
673bdce6bc095b7a336ef4ed568741dd

SHA1
cb1eeb856f4acc80cbb97bc8783ecf15b74e3247

SHA256
80179e92bcb2347324252e35d1a2457e38523fc84280cac2e4ee5caf01722a84

SHA512
c27bbea457ffef260968add25eeaf33dc78100587cad3db6d039ff6eae865711287aa91357ed4aa92baeae8109a920c345ee758a34fa201b0b90377f008e744e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d3c79042033267de266f44da524eb38f

SHA1
0b3d45ef191b00f7f0abe9180531d68d5f7553cf

SHA256
c864c2c4844881fbf6c9da0af87a33eff5e4b62b78e00ddda32a58fdbdfea07d

SHA512
db8e620146d917dfee2a782c20a38ff494a582cbc9f04728b25137105558f24fab45e5a268e7be5b256d5b839d1ca4ed194be060b1e429e60da55b6d2372b9e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2a505689b706abe853bccef4e4daaf7f

SHA1
d1ac84aa0194f2b50ad8f49149bea418fb03b834

SHA256
319aebe9fce5451b8b789f847d4d4475c16001d8944dc800dde92613e6ced020

SHA512
33e187c74130b187720d29ef6b2ba61ec019979b181ee1b0b1907307959541f6191af1c093496aa9f0c8b66914c3669b40e60c7b75aaa07a2fb90b36619f70df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fc2800290a34ebba0f98252c58f789fd

SHA1
0400328c3ff782103a68b593511f93e6a1444406

SHA256
1c816320052f6e34d1936b48366016b7fa2c143b76694776c011ecf1e5ada1f1

SHA512
a813bbf367d967da053c26ca8e1f01b8834d5b57a59145f37c86d880bc43937dd7f5d7f770b09d0e836fb07eb08b8e5d34f4781adf1dd6c7c4cbf70ee5b6e8e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e2647a2eaf20d9700e96cfd949a33336

SHA1
a97a511153ca384482b0292759f98ed8ce7612bc

SHA256
7069f6e43406de1a3a65960b932560fc790af4c49b62575c89f20ac946c23bf6

SHA512
2965b15e088664400c2ff21a7f3d42ea65bcffaf744c7fe22146f1fdf1699e6786ed57c512a54bcc827d02f23239dbd8f409f12f315e58a8e8d87959af90becb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dd7de6dfdcdb6783b853f0fc1c556cfe

SHA1
189300f419dab36415d1302c3e11aeeac8f50de3

SHA256
5c2349ae835f895abed391da81fbae82857fe30a9ffe5e31243fdfae622c4295

SHA512
b8ef7d2f90a14a5a775137d1c3ca83d1dc6011a6f1f1a638aa44dd6ae4ef85b56c2dee8f8906f284077c518849a794710e8404947ece0f562f1a6ebc10ff8efd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f21cd75d82538c348f009b8d0e45f7e5

SHA1
d8a164d3097130d7e41643100978795ab03d64fc

SHA256
b79949a82025ea6a03b451417954f0de0e9badbc05360e5cd5643e3bf82b9113

SHA512
333d242490e261c8b11fa99fac2dc2a2eba8e5baee6bd59e63f52eda450c590ab470c1d604c7d53d53a94841dd5c54d240cd6a8580b0dfdc05e62af422d2091d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fda2c9b9d5635b5755f665d62bd33d91

SHA1
ad6c2f3ec9d470f6ef08a0886e09c47ad585c007

SHA256
cff4312d9d5a6ccdd9190e276aafcd126158b7c776f571384b7e32cfc33bbcd9

SHA512
0b85633371ca960622148cedc9b230a4877578542c4568c80fff594fb363aba6b04a0b09426c6856986d25fed04f1cc3918ddbb95c80db1625992da7ea1f4621

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0221fd27822b381d846b0d44fe1ea2c2

SHA1
1f443c0cf6ac19ee0723000c0e9b915e047a9931

SHA256
434fe9431a74b54b0989778134df2c4abd360318508e8608082882018fe41f5e

SHA512
52fda08e9c4e318cb69bb106120f1c27a2c1ce2514833b2eb0be34bf4a64267d55a43aef27a06b09289b4a2f37485f07a9f18c8574c8ee823c34334e5c844e3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4bca0e60f844548696f89e05ad132292

SHA1
fab39a553f53201cbdbc995791c687d1c0fe85aa

SHA256
1235199c9850605bc9f15b79e5cd67af798a02b17926230f64355e9239c35872

SHA512
ed8c37ed234e6e1f1c7ced3077d8f67c794e19e5fe8abdbba8dd915f75ad222424c94cf0f5da12a5d36f1d0e8ddbb884912a6ee0c1ebf900c70f2b9a155bedca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
196fa1b4d4694969aa868a4125e8eca8

SHA1
bfcda37318a2c36984a3064df2a138c6318fd734

SHA256
1b8130e39d6c8e29cee363d01548f1e68c7067a31055b8a14d04c425ca2dce60

SHA512
d5a6d0458b99bd55d5113dc58adf8243bd28ccb7452e468a600650ec8357905be45cad4bedbe0db420ed5160eb81f980ac810b421f44ef10d7edc88623085e7e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ff01b7df4fe6bab256cb9786301e83c5

SHA1
6517ddc87361939de591014039bdd7fe1b7c0ef3

SHA256
99dce071d97b03cec86ebff257c29a2c4f12343b20d410961c75e289bd0e4c50

SHA512
2f0dfa9cd90e32612dc6ca041238c29fb13e495fab889342c8f541b35ef183e31389afa79056d29e80aca60eaf7eb015d6141ae93ec4aa6d5dd77b796eb281cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1e500e890b24bf3e1aa7958434a98408

SHA1
ce584b97ca59b7d249c0c37aa23f6e56540f6f53

SHA256
a78428ab0cc7d8ad0ea8386fb0a9c188928e29a479076e07da785bf9a37856af

SHA512
55516c5cd3994c61a1ac7806bfa84189dbec91609f493620d136da7da8c7ee06f1c96012605be6a633ca381fc30d8ad60bf6f81fc00cc4990ef2fa0d2c6832e5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a1572395cdfff442189c6173b5eeb109

SHA1
d969897cc1e21c2c96fd53363833da941793bf55

SHA256
aa54ac16d373ad8041620686febe98feee71b21b29b2416403a5662650824c65

SHA512
a1c81f4fc85b7e920867023406a32d1bc1e8c8d1b96a1416defac49cd7e1a65732b2af8bf81347dee22b5aaa6b4e49cfa76fa475f68d64dff547f3defc6aaff8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3f06156cee3fda145e999948c82d787

SHA1
f0f950d24e148902403889b681a3c60ab9820839

SHA256
d00681cddf070e53da4e8409c7c7640c7025640d164edb0932c0ea184fbd98ef

SHA512
657cf11c5813eeaed158d37e2296dfff1f33074bef7e5c616529a3492eeba2ab53c4aa0ea8fff8cc8825f0d99ba1f0531ef6af81f1c18ab98af36b02963b040d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0ce9ef9b6ed933b4ec0bfa3896c2b850

SHA1
2aa8391cab5d8922bb608cf563141a271f1c874e

SHA256
13150d5e8b770aa146bcf54434208cca0003859d16fda25dfa0e1c26523c5c9d

SHA512
81ef2e47faf6412ba96c9cef6913539d2a731209fe7a38b44a40f5906dfff55d811332dfd86c3d9eed097708bac27bec08e2c2dee24e6b2980d2c229a128361b

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA822.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA915.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit