b7676caca0a350154d9fe1da514b971928ec84824835d25a6f21c068b181e8dd

Analysis

max time kernel
140s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/06/2024, 10:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9477c1ba04fdb9b5dfa740516a5a5538_JaffaCakes118.html
Size

17KB
MD5

9477c1ba04fdb9b5dfa740516a5a5538
SHA1

397eadfe60e842f6b8643fb2e6cf7b8115aef562
SHA256

b7676caca0a350154d9fe1da514b971928ec84824835d25a6f21c068b181e8dd
SHA512

622f57d1a1b9494e61a0321e22d8d0ebd0031dd8d0783d9506dab4e9f74437c4f7ce58a07f64856c15dbafc6b3db21b20596bc531ba449aef87f4f967211966a
SSDEEP

384:2yMyebhkF1cBc7WS5PwIoo+dxjvVQN9RzpGxF:xjebhnc7Wun3G7

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423658302"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003c2e98e2b10c284b88ce1d49cd96b601000000000200000000001066000000010000200000002abb9e2e3d34ebee63796e8c253b0518945c2ddbce9093563b6fc2c808e6a7db000000000e80000000020000200000008f3f81bd9cc2c673e46bde7bc8955f28c146127f2e3ccea707e75483e6a19827200000000761f3df5a1e1e0d81515ce603c1e11faea16b9b6906731875f5ed8966f17e2a4000000052fd222713af10bf3ae36f3bd399d909fc5d260338f7d6b53dd470d224606a21dd4db59c712423039f0c77e7968e8235094135f6bbeb75c45d30b799766c2f3b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60c7632869b6da01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{12E5FA21-225C-11EF-A6D5-5A791E92BC44} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003c2e98e2b10c284b88ce1d49cd96b60100000000020000000000106600000001000020000000346eeac1b655168447362356a430e702bba09197c55f4a6917463bc93476ab45000000000e8000000002000020000000224a5badda8cd96b3a29801bbb7f8fa6e2703dfcaed371c2df389bae4216654e9000000032c994c8997293f840880309d969c4ec032a5952e09bae1f1018f38ee2212b8485b65962123fc70b44615c82c08e703bcb9b01b5a26ccf95d6182d469fb7109f9e4f35196905a9be41b4e86edb167865699cb88c5328eaaa8db507c1ff78fe98744c3f3c63708145f15aad718c2e42e179661638198ed760bff10a722d991c0ee9d28a1e8bc77283896e3911b83ea6ce400000009dbe73f0192adbfd8c40169516ee18852484adda5f6204c957c1895cd5485bd2982b8f09bdb606543ec20166e3e25d1380857ceb532734b7ac972550bb447a8e	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1556	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1556	iexplore.exe
1556	iexplore.exe
2240	IEXPLORE.EXE
2240	IEXPLORE.EXE
2240	IEXPLORE.EXE
2240	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1556 wrote to memory of 2240	1556	iexplore.exe	28
PID 1556 wrote to memory of 2240	1556	iexplore.exe	28
PID 1556 wrote to memory of 2240	1556	iexplore.exe	28
PID 1556 wrote to memory of 2240	1556	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9477c1ba04fdb9b5dfa740516a5a5538_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1556
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1556 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d512fb2ee0049c1239d482e22b6ce6e4

SHA1
5b751f8b34195a35db00eb95f31a2a6c13c6b7b9

SHA256
8c5e9ec6a274308987f2972d2761b07eda45fa44eec0d058f8c02442b9d38419

SHA512
1e94e87581a77a31f7ea7bfe195ea8880db3f3ff64251678239e6a8a55cbb1e333a5a4f9c25e05cb8e5cce1d7318954b4072502eb6b3d6909fc03284521ce547

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
39e16bc417a787f71daed8b08e013531

SHA1
53885ffce4ad2b21c8916c1357673ce15399a1be

SHA256
8d741f9973e0d2edc9d946bf5f78efdd87245d1a997f122fe565ce0341106aa9

SHA512
757276cfa039aa1d3084261f28633f0c05f2579d90e931b22b5f00547db1d1fe5f98dfdbe1c848aefa786c8e1703797decf17fca4bf26074b9363780ac5f0890

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1145e4fd5fed45a0bb151f3aaba045da

SHA1
ed624efd1c6eadcb2b35523da5b880c9e16bc203

SHA256
87e6ffe21cf792e7c8fff2232449118db8cbd41141a95ea3f5d8632574168392

SHA512
71e9654aebb7f9ab6b6e6563237a0be9987869a328b7fa578364227c3ed367b55f0af9594c33a043f3d863cc96d379317af7520e1c7c5c357d3fbc010d36a4cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4e080ad5593c23c8111657855e3b215e

SHA1
837ca6484406f51c4502f2e973d9583179e6f008

SHA256
4f59ee36204bbe04c49db5326f1f86e11dae97d6cff61c7f2d6a8e25550d11bb

SHA512
3fa3a8485450246edff79d672443e9e8eef67b11f0d9ac5fa58e157d6cf4e8c7e5d156957afdecd9f13303eeb95355975296e17f9f75db7323934a2480781c33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
276d261d4e8965fbc5a48e51906bc42f

SHA1
035347654566e2b674696b134bcdb919d5ba6531

SHA256
d958a479a7a537c94d1383fda83979470987675f643d3138be1fda2afdaec2c9

SHA512
b043bc159c1cf3eff7adf8933413bb1e999a0587a50c24ef76b613e1067d26d447f4506f440274791f2767e9f471e6606790e7801ec21cab62598c86006e177d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6c13f322b6617167092d3fe65b639f17

SHA1
c83182a1163484b250c25f0499dcb6f923e4fc7a

SHA256
4a18d7ace6a1f3180e2e083a44a7f4e8a826747ddc268d445ffcb547567ba269

SHA512
1ca41a2d7219233ee0938f4bbcda49baf2a999697fb0cccd460c9a796cde4d96c3e27f1101f4c7d2e66b34a6d480a48b8fee4d49a8dfb159a34a9951abea3aa4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ef3b0acaf8af00d89ae80ccb30ab4c8f

SHA1
bf947c3e1b7a8abcfbd41a51e6ca11ab6a8a5ac7

SHA256
300c4f2c544eafe32fbaa888c496a256d8251f3d3159534a30762adaa1e1a963

SHA512
476699f48a378efb9f5628ad6b99b81db348553d43166982ef7f763247f72708fc887e8a91e4fd588e0983d71f1fa69a3e0859556fd090224b5c545a7bc3635f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
095519fdd2fb14611735db5de1c079e6

SHA1
a08087eb0db8cd808a2005847966c8e0124cc591

SHA256
a7d73226a06b2ce25ed24a93cfe31d4442dbd0fb508bb47f6b43ffd80bfb6bb6

SHA512
cbc6109db30a6d870de7736fee1873c5b716b547fd3fd246ca101446134b58de737aa3098954f4af144a43e8cb3182794f248049792936dd337110202b48987f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
04f96d44e3446beed0385dd9e288ecda

SHA1
a7ee9b5bb633886f201e41d661280b903fd84929

SHA256
9d6243f166ebda378f9d5362f92bdbbce7af14b9f2b991809302f15855363e2c

SHA512
6d90c6490473082ebc72c11a65c98d2e302bcb8b52abfdb17d5027e79b58629d0cc38d996898def6087f656e9ee8f3cb65b8fb2e5b2d83177a32ac2013026f29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5a0b67a439c727e2509ca07da830d2ea

SHA1
0cc7c163842592a68ec52254cbbe97700916ce01

SHA256
e6b81579c2b50116f61509f3b655d8f30d096ba0ed4ce8a1650451bd1aa3aae1

SHA512
ba1ccca7e76035d932ed321a303cedd786ca06bfc5c6da53d9a86d56ac0abb95e6932b81572e6a0f5b4ab6e3a2b0b7a650508f4a86b42ead1886146b29b3dce3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
11c4f9f3461c0142f76534e115b19439

SHA1
83ecaac6e1e1d8a6867acfedee127dc92799f3b7

SHA256
039553e01db302bc3787ff5f35d1a13a523df01ce5225a2b03542fdadd7c9415

SHA512
a0b8c6a3a7787f1dbce2b9da651a9d80f29fcf00bf34f094e4479075086a04122f06a3363cf4e4a82c2727299fea2109b0cea5ea6c721332d9115b3e6fc71447

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7f03a0d16e9597b3c64f3a48a5e3274c

SHA1
5a3aef7902a3d942be3947b28ead7f769b4f7ee7

SHA256
f7ace2d7a1056aae81c12366e8d4f3cca96b15e6dc38e7ccebc37ed20f68ce0c

SHA512
00c0467472e6c6b59b41970f291afa4b8167e4cf883641140a96f8a9ff5781b381cddd152fe3b3006bc77272288c13fa64745d5536839ea67d66b065c60d49a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8c8eb8615adb8326ca6fee706c829005

SHA1
bf19162c43c6e7d0bd0c4de03221ac67da1eb56a

SHA256
5499fd2291f68cb1935c6383813658e8b5fa59e470799778846e46c58ecee816

SHA512
56f21627d2048604b3ba92079e7b96140ffe537c19427870be1f743cbb77ab49f18e74f1c0b462de3f018e30cce0732e84385c0a0a6957f42e229a4fe73c6f02

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e6f73617bf4a720fc61a0261866aee68

SHA1
6a308fcd1a4c5136305ffa1e27c225aab8f6d1dc

SHA256
84ec475c0f58004011b7f22eab91e9c2882b443e2eb4115b73be121c1722d1f7

SHA512
724ce0970ec2d5972a768d24e5a7652b2551c57964df45d175d684c38404bcaa781c894f4ee369920cf1985aca1d420565ece7fb0edebbedba91670d0bab9816

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aaa49d0289318b7ef49b3362a7e6a9e1

SHA1
66e2da01741144305a0243ae8edfbc121fd13354

SHA256
e40aa7aea4349ead78cb73b05d0cd4c4c85242823e83dfb58a4a18fcf1fa7cc3

SHA512
36df591f65a77e886cb22f8db0d9b204cb3f456405bf3c265035bebf776d0be60c12371168f91ea8cf8e8e0f5bab71c56acc00c74de3f1a3f72f23016169955e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3fec012c716339311d200ed57fb346e1

SHA1
db5bc784ee9d45aee7a5d2d735174826113c865e

SHA256
b08a931816259ea927aa224b9e80d6e97fc14ffe0ab57671747495d7e40e6fa5

SHA512
bafadf5eed5022c6c8912808419abf57df5a385fcd17d2fcce70aff119eb094e4e753f84ce30f7a68b92f79c3fabd042f6a761f1b1b98da350de7caad8f877b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e71c517a0e436fd65df9a09c1dc5704f

SHA1
0dce1be6368fe79747fa82e6933d190f3e8f1f12

SHA256
b62ce8cf20862fc83aca9ede3119eabcaf1532102a38822083e8da00fb0abcd5

SHA512
09c13afce7cbec13f9796ea46148c0ea2d1c095ece12c8d472e86655b96351969457d252f57bb3b425d528fc994ba5c9e8f6d0acad752eb86ea5a0cf9fa1183a

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA8CE.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarAB56.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit